$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: 5JoL7jt2UfOTYCkGigC3IAR6JtoHKrHov0QDDnV7cqs= Subject key identifier: 68:A8:09:3F:14:97:61:61:D4:8B:13:A5:F4:40:F3:69:E0:C8:8B:C4 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 01D5 Signing time: Sat 23 Nov 2024 01:44:08 +0000 Manifest this update: Sat 23 Nov 2024 01:44:08 +0000 Manifest next update: Sat 30 Nov 2024 01:44:08 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: 12zYky2fGfN6iRZ6VPDM5ptN0ijd0WXftKbBLDm6ijU=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Nov 23 01:44:08 2024 GMT Not After : Nov 30 01:44:08 2024 GMT Subject: CN=67413368-a942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:48:a7:93:d4:6f:bb:be:d0:9b:3d:a6:20: cf:c4:12:a7:ac:95:e2:ee:11:4f:13:11:43:a6:56: fa:74:97:24:e2:87:b0:f3:3b:91:53:46:e4:92:97: b8:25:e2:4b:fc:8e:cb:af:0c:6c:17:8e:db:0d:b7: 71:e1:99:4a:1d:bc:45:7d:29:25:19:7e:d0:44:6f: 4a:88:33:37:88:97:94:44:de:a2:1d:16:67:c7:1e: ab:35:6a:52:d3:31:d8:7c:7b:46:b2:c2:17:33:22: bd:fd:6b:1f:05:ab:ac:3c:7a:7a:1f:b7:6e:4a:f3: 1d:cb:c3:25:72:c2:ce:07:c7:b9:ae:ac:db:52:62: 81:e1:55:79:50:52:e4:cf:b6:22:da:6e:8b:08:39: 5d:85:8b:0d:6f:b0:36:2c:26:cf:b1:90:1d:4f:42: a8:c9:21:79:17:1f:66:63:0c:33:7e:a1:ba:85:7d: 9d:1b:0a:a8:56:37:7b:70:30:72:ac:59:58:08:5e: 8c:ec:7f:60:dc:e0:48:d6:96:7e:ea:10:a9:32:45: ec:27:97:ab:c6:3e:00:96:b3:4b:be:a4:4a:bb:c2: b3:39:43:a2:8a:9a:75:46:51:30:c1:6c:37:d3:c8: d5:d9:7d:14:11:ef:8e:84:90:41:fb:57:9e:09:b3: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A8:09:3F:14:97:61:61:D4:8B:13:A5:F4:40:F3:69:E0:C8:8B:C4 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3e:4c:15:2f:63:2a:2c:a8:46:fb:6c:f5:bd:df:2f:19:c3: 9b:c1:f2:59:41:c6:7c:70:a7:f6:fa:40:1d:fa:9b:72:2f:56: 1d:63:f4:35:c5:e4:69:4b:a7:51:cd:96:01:fb:79:e0:ee:19: 8f:b6:f0:9e:da:cf:e3:75:33:15:e1:c4:fa:bf:b3:6b:e7:d3: 75:db:08:3e:36:89:10:a6:58:c3:8d:2e:d9:c5:fa:d9:19:02: 19:75:0f:cf:c8:e3:cb:67:70:c4:95:07:01:c9:a0:bd:13:96: 94:6e:be:b0:2e:a3:1a:86:25:c5:08:7a:a1:31:a7:03:b0:dd: 3d:58:f2:4b:49:c3:0b:4d:32:4d:6d:f2:9a:97:c6:d7:a8:0f: 34:87:ba:35:b7:be:33:98:21:0b:6b:59:22:6b:ea:64:8d:6a: 69:b4:3d:9b:b3:36:20:bc:c0:a5:db:85:19:10:da:d6:00:25: 34:83:94:11:69:5c:be:af:3f:aa:35:1e:f0:ae:e9:b5:00:63: c3:ca:31:39:41:6f:49:e6:b2:9e:ac:81:52:37:fd:eb:cf:05: a4:18:e6:4c:1d:2e:48:6b:40:23:e8:fb:86:e4:a5:46:03:18: dc:00:10:03:ba:89:31:df:fd:83:2e:73:86:3c:47:4c:c4:5e: e7:82:b2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjQxMTIzMDE0NDA4WhcNMjQxMTMwMDE0NDA4WjAYMRYwFAYD VQQDEw02NzQxMzM2OC1hOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFJIp5PUb7u+0Js9piDPxBKnrJXi7hFPExFDplb6dJck4oew8zuRU0bkkpe4 JeJL/I7LrwxsF47bDbdx4ZlKHbxFfSklGX7QRG9KiDM3iJeURN6iHRZnxx6rNWpS 0zHYfHtGssIXMyK9/WsfBausPHp6H7duSvMdy8MlcsLOB8e5rqzbUmKB4VV5UFLk z7Yi2m6LCDldhYsNb7A2LCbPsZAdT0KoySF5Fx9mYwwzfqG6hX2dGwqoVjd7cDBy rFlYCF6M7H9g3OBI1pZ+6hCpMkXsJ5erxj4AlrNLvqRKu8KzOUOiipp1RlEwwWw3 08jV2X0UEe+OhJBB+1eeCbNWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGioCT8U l2Fh1IsTpfRA82ngyIvEMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwPkwVL2MqLKhG+2z1vd8vGcObwfJZQcZ8cKf2+kAd+ptyL1YdY/Q1 xeRpS6dRzZYB+3ng7hmPtvCe2s/jdTMV4cT6v7Nr59N12wg+NokQpljDjS7ZxfrZ GQIZdQ/PyOPLZ3DElQcByaC9E5aUbr6wLqMahiXFCHqhMacDsN09WPJLScMLTTJN bfKal8bXqA80h7o1t74zmCELa1kia+pkjWpptD2bszYgvMCl24UZENrWACU0g5QR aVy+rz+qNR7wrum1AGPDyjE5QW9J5rKerIFSN/3rzwWkGOZMHS5Ia0Aj6PuG5KVG AxjcABADuokx3/2DLnOGPEdMxF7ngrLi -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org