$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json) Hash identifier: pk2HDke38XfpmHIoqddIsPsz9dVsJOoXnfe2+WK/2xI= Subject key identifier: 42:00:96:9D:4E:42:B9:88:63:D9:F8:D4:E9:A3:2C:18:A3:E1:A3:06 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft Manifest number: 0DD6 Signing time: Fri 22 Nov 2024 17:49:10 +0000 Manifest this update: Fri 22 Nov 2024 17:49:10 +0000 Manifest next update: Fri 29 Nov 2024 17:49:10 +0000 Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: SL/MkndGczJgvSdh4rj+t6+40COYufKYmwLn5JNBEoE=) 2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: CT18OIINBeCDMFBp7n4N+HeNhsnS3K8XZSLl17zRvqs=) 3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: xWLJsIOACYVl3HGPv+BGgFGrPw1FmHr3Q1PpP41xefE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Nov 22 17:49:10 2024 GMT Not After : Nov 29 17:49:10 2024 GMT Subject: CN=6740c416-4efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:08:9c:86:61:11:7c:ef:fd:56:c5:17:66: 70:bb:aa:ba:88:a2:86:12:99:e1:3c:ef:1b:96:13: 53:40:71:e8:b8:fc:f7:86:f2:54:6b:db:fe:a9:22: 2f:60:8e:7b:15:20:f7:a7:28:ca:0c:e5:ce:7b:bb: 9c:fb:da:84:cc:7c:db:0f:25:33:34:bd:65:79:2f: b9:16:dc:60:75:00:89:94:d2:58:71:3d:c9:15:4a: c5:fc:98:91:ee:17:08:ac:24:97:3d:b5:ce:82:97: c8:2a:1d:3f:47:7c:c6:38:e8:71:3b:0a:9b:61:41: 15:ef:59:82:a3:e9:0a:27:53:a9:88:e5:23:9d:35: f3:87:53:09:ce:9c:54:d5:98:5a:b0:38:40:67:d4: 20:10:9a:6c:5c:27:eb:9b:08:bb:7d:0e:e9:1c:6f: 04:d2:2c:3f:9e:dc:54:52:10:86:26:c7:d5:af:1b: 96:b6:dd:a6:2f:06:34:21:15:43:31:8c:3d:25:0d: 50:64:2f:9b:5e:0e:e3:6d:99:8c:ad:1e:95:51:16: f5:52:72:9c:4f:63:93:c0:db:76:0e:c8:d4:81:f0: 88:45:01:60:6e:44:ca:f0:3d:48:4d:03:0e:ee:06: 25:da:db:b0:1d:dd:bb:05:8d:62:1a:19:f2:79:23: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:96:9D:4E:42:B9:88:63:D9:F8:D4:E9:A3:2C:18:A3:E1:A3:06 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:6a:34:04:93:c3:49:a7:8c:fd:f2:1b:56:f4:97:b6:f4: 07:36:bc:b3:83:7e:a3:be:69:9c:03:9b:be:d7:2d:f1:64:ef: 58:65:a6:f1:30:c7:83:d9:48:b0:93:2d:0f:b8:70:86:53:91: cd:46:fb:e2:b8:97:1a:fb:52:61:ed:52:bd:5a:bf:fe:e6:07: 65:7f:66:45:2f:37:8a:85:67:11:69:6d:27:23:d5:d6:cc:7d: 3e:ab:8f:a6:2f:2e:3e:2a:b6:24:34:50:09:cf:a7:65:e9:2c: 12:f3:33:4e:9c:a0:79:65:32:5f:47:c4:f4:d1:76:24:32:75: b1:89:05:81:71:ef:ba:0f:46:74:6c:2a:62:be:be:21:f2:bf: 42:17:e7:c4:0e:23:8b:e5:d1:ef:e0:1b:c8:00:8d:b7:77:5c: 4b:34:51:f8:ea:f7:0e:88:e7:f6:ab:1b:d4:9f:a0:00:07:4e: 4c:14:a0:4b:f7:e0:f0:d1:ef:ea:f8:ad:56:13:3e:93:53:c6: d2:73:66:ef:95:91:e1:f9:c3:95:24:7d:50:7a:ae:f5:d2:97: 30:a7:aa:29:22:f2:59:2c:99:ed:f6:17:c9:41:d0:8b:ac:87: 5c:7a:d2:b5:57:ab:f3:49:2b:86:46:30:8c:83:b1:d7:81:6e: ef:f2:63:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjQxMTIyMTc0OTEwWhcNMjQxMTI5MTc0OTEwWjAYMRYwFAYD VQQDEw02NzQwYzQxNi00ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0gInIZhEXzv/VbFF2Zwu6q6iKKGEpnhPO8blhNTQHHouPz3hvJUa9v+qSIv YI57FSD3pyjKDOXOe7uc+9qEzHzbDyUzNL1leS+5FtxgdQCJlNJYcT3JFUrF/JiR 7hcIrCSXPbXOgpfIKh0/R3zGOOhxOwqbYUEV71mCo+kKJ1OpiOUjnTXzh1MJzpxU 1ZhasDhAZ9QgEJpsXCfrmwi7fQ7pHG8E0iw/ntxUUhCGJsfVrxuWtt2mLwY0IRVD MYw9JQ1QZC+bXg7jbZmMrR6VURb1UnKcT2OTwNt2DsjUgfCIRQFgbkTK8D1ITQMO 7gYl2tuwHd27BY1iGhnyeSOzsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIAlp1O QrmIY9n41OmjLBij4aMGMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rWo0BJPDSaeM/fIbVvSXtvQHNryzg36jvmmcA5u+1y3xZO9YZabx MMeD2Uiwky0PuHCGU5HNRvviuJca+1Jh7VK9Wr/+5gdlf2ZFLzeKhWcRaW0nI9XW zH0+q4+mLy4+KrYkNFAJz6dl6SwS8zNOnKB5ZTJfR8T00XYkMnWxiQWBce+6D0Z0 bCpivr4h8r9CF+fEDiOL5dHv4BvIAI23d1xLNFH46vcOiOf2qxvUn6AAB05MFKBL 9+Dw0e/q+K1WEz6TU8bSc2bvlZHh+cOVJH1Qeq710pcwp6opIvJZLJnt9hfJQdCL rIdcetK1V6vzSSuGRjCMg7HXgW7v8mME -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org