$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: JKBYyvG+5pbi/zfKgvHl7DUvsYbzssnHcynk6h5uUqM= Subject key identifier: 2D:9C:B2:4D:FD:94:A2:19:36:7D:15:11:C9:A2:FC:A1:FD:6F:68:FB Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: 70 Signing time: Sat 23 Nov 2024 04:51:18 +0000 Manifest this update: Sat 23 Nov 2024 04:51:18 +0000 Manifest next update: Sat 30 Nov 2024 04:51:18 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: 2zbk5vwpAFeB54icASbMR9cXRXF+UlFVkzrEapbG/yo=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Nov 23 04:51:18 2024 GMT Not After : Nov 30 04:51:18 2024 GMT Subject: CN=67415f46-e7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:96:03:d3:19:33:c9:5e:3c:2d:6a:eb:02: 23:b9:06:3d:0d:49:37:b0:e2:28:62:cd:57:f8:e6: a8:0d:da:bf:b2:54:a3:b3:51:61:3d:0c:f4:b0:0f: d4:c9:ee:3a:9d:1d:2d:d4:07:85:1c:4b:07:f0:f1: 68:7e:03:fe:33:1a:83:f4:58:07:99:12:ed:77:9b: fc:6a:e0:d4:cd:e0:a8:04:b6:c7:bf:41:26:1c:3f: 8c:17:21:80:26:b1:b6:67:fe:10:f3:d5:6d:71:81: 7f:12:77:b3:73:90:d6:59:a7:1b:73:b7:98:2f:23: bb:ee:7e:ff:ba:34:08:0a:88:68:c9:8f:27:05:53: 79:ea:01:95:d3:9c:b5:7f:48:7f:56:c2:83:a3:62: a2:e9:13:2b:e9:b8:53:03:16:9b:df:b2:8e:7e:f2: 65:c6:de:d4:f6:84:64:67:0c:09:03:f7:cf:9e:6a: f1:0c:48:45:84:11:a2:e2:f6:18:7f:cf:40:eb:dd: c4:d0:31:81:ca:91:d6:4e:98:59:4a:db:80:03:92: 69:33:b2:02:8c:00:29:3e:1d:5a:cf:5d:30:3c:af: c2:80:56:de:a9:16:8a:09:37:e0:9f:aa:6c:47:c8: 7e:19:b3:62:fa:4a:8d:66:f1:1e:39:1a:c4:5e:f1: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9C:B2:4D:FD:94:A2:19:36:7D:15:11:C9:A2:FC:A1:FD:6F:68:FB X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:53:a6:22:3f:8a:b4:06:91:e7:1c:ab:88:a2:61:49:3f:7d: a5:b2:b6:54:13:67:ca:cc:55:75:c1:a3:98:4b:b6:e5:dc:5e: fc:65:08:30:71:64:02:58:70:a7:27:b0:e3:76:5c:c1:26:ba: db:1e:59:21:12:9a:de:1f:6c:52:50:41:27:0b:6a:ff:d5:2d: 44:90:69:1f:1b:5f:e2:9f:ea:ea:94:fd:bf:65:d7:f5:46:c1: 09:71:9d:bf:4a:28:88:1e:3c:04:fa:01:68:7c:19:e3:f2:58: 4a:7f:98:e6:bc:55:83:65:c2:af:28:d8:cc:24:3e:49:bd:b5: 98:a2:ad:79:a6:4a:bf:0f:25:e8:f0:fe:cc:ea:85:bb:6f:3f: 80:4a:da:54:17:e0:cd:9c:51:96:4b:a5:a2:90:b5:24:aa:56: ad:22:72:fd:6c:04:9d:d5:07:6c:ef:2c:5a:5a:ce:fd:88:cc: 6c:38:9c:dc:2e:39:39:f8:b2:3f:da:d7:b8:6e:33:7a:6f:d0: 0d:10:6b:f9:37:d6:c5:f8:59:11:ba:98:44:2b:7e:0d:c8:15: 21:17:f0:22:fe:60:9f:06:79:d0:e0:a2:70:fc:dc:19:f0:6c: ad:6e:13:93:ce:e3:e4:1c:b0:fa:c6:ad:09:0f:59:3a:b9:5f: 75:f7:a6:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkE0ODExMC8GA1UEBRMoMTk3OTRGM0NBQTM3NTUyN0JBMEZEMzM0NDgwQzdFMDMz OEU3OUUyQTAeFw0yNDExMjMwNDUxMThaFw0yNDExMzAwNDUxMThaMBgxFjAUBgNV BAMTDTY3NDE1ZjQ2LWU3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDemZYD0xkzyV48LWrrAiO5Bj0NSTew4ihizVf45qgN2r+yVKOzUWE9DPSwD9TJ 7jqdHS3UB4UcSwfw8Wh+A/4zGoP0WAeZEu13m/xq4NTN4KgEtse/QSYcP4wXIYAm sbZn/hDz1W1xgX8Sd7NzkNZZpxtzt5gvI7vufv+6NAgKiGjJjycFU3nqAZXTnLV/ SH9WwoOjYqLpEyvpuFMDFpvfso5+8mXG3tT2hGRnDAkD98+eavEMSEWEEaLi9hh/ z0Dr3cTQMYHKkdZOmFlK24ADkmkzsgKMACk+HVrPXTA8r8KAVt6pFooJN+CfqmxH yH4Zs2L6So1m8R45GsRe8b59AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULZyyTf2U ohk2fRURyaL8of1vaPswHwYDVR0jBBgwFoAUGXlPPKo3VSe6D9M0SAx+Azjnniow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTQ4L0I5RTJBQ0EwRkU1 NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5p by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1hsUFBLbzNWU2U2RDlNMFNBeC1BempubmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG QTQ4L0I5RTJBQ0EwRkU1NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNl NkQ5TTBTQXgtQXpqbm5pby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKBTpiI/irQGkeccq4iiYUk/faWytlQTZ8rMVXXBo5hLtuXcXvxlCDBx ZAJYcKcnsON2XMEmutseWSESmt4fbFJQQScLav/VLUSQaR8bX+Kf6uqU/b9l1/VG wQlxnb9KKIgePAT6AWh8GePyWEp/mOa8VYNlwq8o2MwkPkm9tZiirXmmSr8PJejw /szqhbtvP4BK2lQX4M2cUZZLpaKQtSSqVq0icv1sBJ3VB2zvLFpazv2IzGw4nNwu OTn4sj/a17huM3pv0A0Qa/k31sX4WRG6mEQrfg3IFSEX8CL+YJ8GedDgonD83Bnw bK1uE5PO4+QcsPrGrQkPWTq5X3X3pqg= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org