$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json) Hash identifier: MBVfaXTgzH3aqxmc+7oOPc/rcnZ1SOTr2c2LgIywct0= Subject key identifier: A3:AF:7A:8B:0F:06:61:0A:F8:84:EA:1F:21:AF:60:81:FD:26:C2:AA Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Certificate serial: 2688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft Manifest number: 267A Signing time: Sun 24 Nov 2024 15:36:14 +0000 Manifest this update: Sun 24 Nov 2024 15:36:13 +0000 Manifest next update: Sun 01 Dec 2024 15:36:13 +0000 Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: MOiw6UELh1pCUfuV9xjnm5E7ShbZ8G5D7Rgdnoxw2UM=) 2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: 1wZ4BUMqSGIpPQInAvFZ5C1MTpzSxqt8OmY62bfaN3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9864 (0x2688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Validity Not Before: Nov 24 15:36:13 2024 GMT Not After : Dec 1 15:36:13 2024 GMT Subject: CN=674347ee-abac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:cc:e7:d6:46:20:54:cf:35:44:c7:49:a0: 3c:ce:4f:39:74:d5:5a:25:bc:03:de:0c:ea:bb:35: 34:f7:23:d5:9b:60:05:f6:9b:08:0b:43:1a:19:c1: c3:36:93:3c:30:b1:52:09:17:22:73:70:53:1d:85: 10:b3:03:25:fc:d3:28:49:57:50:d7:e7:56:20:d6: e0:e9:fb:a7:50:1c:9f:44:8f:73:9c:8f:14:85:11: 5b:54:b8:5e:be:e1:58:53:84:8a:6a:c4:c0:2c:9c: 50:2d:ed:48:4e:ae:ca:21:83:5b:5d:e1:47:80:55: e6:da:a2:d1:9a:14:76:11:2e:a3:dd:f5:45:09:d3: 32:45:e4:6d:a3:66:06:bf:b6:37:98:e8:8b:16:1d: bd:f3:a6:bd:34:70:75:06:6c:5e:3e:eb:60:bc:91: b6:17:db:0e:49:04:00:b5:de:4b:53:31:88:52:a8: 2a:e6:54:76:1a:d0:3f:77:f2:4f:7e:b2:22:cd:d4: b2:92:ad:79:81:f2:0d:44:04:87:be:ef:c3:69:4c: fc:88:ba:fc:82:e6:d5:29:7e:cb:58:36:51:40:38: 44:55:d2:e9:fe:0d:7f:ba:32:c4:6b:0d:95:e5:25: 04:72:ad:5c:c8:cd:b0:27:59:7c:e2:c3:8e:59:1b: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AF:7A:8B:0F:06:61:0A:F8:84:EA:1F:21:AF:60:81:FD:26:C2:AA X509v3 Authority Key Identifier: keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1a:0b:c7:8c:48:b1:c2:bf:87:27:6c:00:91:91:fe:6e:10: 41:50:89:9d:23:7a:63:75:c9:6d:6e:d5:ad:33:d8:43:9f:c9: ee:4e:81:5a:af:53:e9:4b:cd:ab:37:92:4b:8e:f8:c4:7f:7c: 28:a2:b5:27:ae:a2:cc:4c:87:c0:d4:cb:7c:81:8a:44:16:cc: 0b:b0:25:0a:f9:9c:5f:d6:b2:9b:12:02:6c:70:ce:1a:2e:f8: df:1b:2c:a8:14:96:04:ea:9c:bf:17:37:ab:25:2b:86:89:ae: 73:6c:4d:4c:fe:c5:fd:8f:09:3a:ad:fa:89:c4:93:06:18:0b: a3:a9:e7:69:40:fd:87:75:d7:a8:47:26:e8:7a:e9:d6:05:15: d0:ca:13:2c:c5:fb:ed:16:f4:c3:1b:e2:ea:5e:28:63:45:9a: 89:97:72:34:af:60:fa:e7:59:63:20:12:93:ac:04:7b:02:1e: 74:9d:fb:b4:59:92:c0:c9:26:13:4f:0a:12:1b:43:64:aa:2f: f5:1e:68:a2:d0:bd:ad:af:5c:be:dc:02:16:f8:e3:67:df:70: 93:8b:18:18:31:d3:02:f9:9e:1c:ce:6d:c4:1f:fc:89:0a:6f: f8:25:4f:44:32:48:e6:f6:3b:6d:5e:62:92:9a:11:8a:66:a8: ef:af:e5:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1 NjFFQzUyRjUwHhcNMjQxMTI0MTUzNjEzWhcNMjQxMjAxMTUzNjEzWjAYMRYwFAYD VQQDEw02NzQzNDdlZS1hYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+LM59ZGIFTPNUTHSaA8zk85dNVaJbwD3gzquzU09yPVm2AF9psIC0MaGcHD NpM8MLFSCRcic3BTHYUQswMl/NMoSVdQ1+dWINbg6funUByfRI9znI8UhRFbVLhe vuFYU4SKasTALJxQLe1ITq7KIYNbXeFHgFXm2qLRmhR2ES6j3fVFCdMyReRto2YG v7Y3mOiLFh2986a9NHB1BmxePutgvJG2F9sOSQQAtd5LUzGIUqgq5lR2GtA/d/JP frIizdSykq15gfINRASHvu/DaUz8iLr8gubVKX7LWDZRQDhEVdLp/g1/ujLEaw2V 5SUEcq1cyM2wJ1l84sOOWRuC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOveosP BmEK+ITqHyGvYIH9JsKqMB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeGgvHjEixwr+HJ2wAkZH+bhBBUImdI3pjdcltbtWtM9hDn8nuToFa r1PpS82rN5JLjvjEf3woorUnrqLMTIfA1Mt8gYpEFswLsCUK+Zxf1rKbEgJscM4a LvjfGyyoFJYE6py/FzerJSuGia5zbE1M/sX9jwk6rfqJxJMGGAujqedpQP2Hddeo RyboeunWBRXQyhMsxfvtFvTDG+LqXihjRZqJl3I0r2D651ljIBKTrAR7Ah50nfu0 WZLAySYTTwoSG0Nkqi/1Hmii0L2tr1y+3AIW+ONn33CTixgYMdMC+Z4czm3EH/yJ Cm/4JU9EMkjm9jttXmKSmhGKZqjvr+XJ -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:04 2024 by rpki-client on console-fra.rpki-client.org