$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: OxcU1oq78vmzN7u4c1KcgYU9DzYILZaDKFE8tgCH2PU= Subject key identifier: E0:67:58:74:98:BD:BF:EA:33:EB:17:FA:F7:FA:9A:82:6A:AE:21:31 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 07D3 Signing time: Fri 22 Nov 2024 20:41:30 +0000 Manifest this update: Fri 22 Nov 2024 20:41:29 +0000 Manifest next update: Fri 29 Nov 2024 20:41:29 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: 9dLTLzIjDdHz/v34uxiAj+a5U8vbaFKNmUWvEMoxAw4=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: PcHtSCFs8CsjGHDk4jEQixDxTi7zJioN2cF2ayYmLLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Nov 22 20:41:29 2024 GMT Not After : Nov 29 20:41:29 2024 GMT Subject: CN=6740ec79-7c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:5e:90:35:e3:1b:3d:16:0a:8a:88:d7:c6: 90:c2:84:16:af:87:8d:f5:9c:90:b5:fe:48:be:fa: 64:bb:1a:82:cb:a1:c5:33:d3:4c:8d:90:f5:5d:c3: be:53:ca:9b:ec:e3:08:65:2f:f8:64:cb:3c:d0:88: c5:4c:15:07:24:2e:ba:14:c7:4d:17:f6:80:96:72: 77:57:2e:1f:97:28:02:a6:b0:a6:ab:a5:f5:1f:62: 93:dc:96:9c:79:27:d0:21:a6:68:18:38:e7:d4:32: f6:67:c2:1d:b1:6b:0c:36:b5:ae:b6:8a:f3:b8:84: 54:29:44:71:36:ad:fc:11:fc:0a:fa:94:d3:8a:c9: db:a1:34:64:e6:95:4e:4c:c8:32:54:bb:b2:8f:f0: db:64:75:f1:1c:de:bb:b6:51:24:c0:16:0b:3d:68: 91:24:89:e7:58:d6:e1:03:99:b3:e7:ec:1b:71:0d: bf:8f:37:e6:7e:27:f8:78:f0:49:a8:33:2d:95:3e: e9:64:ce:44:be:59:0e:4a:02:1c:99:62:73:de:cd: 7c:3d:ca:ba:1d:eb:1d:1a:09:3a:df:e8:89:0f:86: 2e:9d:6c:11:a3:31:af:f7:9a:ee:3a:88:72:a5:79: 01:2a:ed:f8:73:6e:1f:d8:c0:0a:b0:e1:78:c2:c8: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:67:58:74:98:BD:BF:EA:33:EB:17:FA:F7:FA:9A:82:6A:AE:21:31 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d0:a9:5b:7f:dc:1a:e9:c9:5b:4e:99:17:85:83:e8:72:5a: 99:e5:c5:ed:dd:8b:25:05:b7:f5:18:e3:0f:e2:22:03:9e:3e: fb:4f:87:30:d0:59:fe:86:d0:57:52:0e:26:b3:56:1e:5e:46: 7e:18:1c:e5:73:0b:e4:c3:9e:35:11:3e:e9:32:e7:73:81:0e: a2:70:9f:db:7d:21:8b:b9:a5:54:c2:6b:43:c5:35:d6:f8:7f: 47:42:6d:b9:57:c0:96:6f:88:4b:5a:c9:4a:ad:8d:89:3b:28: 68:dc:d6:fb:c3:4b:cf:9f:60:f9:6a:c0:1a:95:60:bd:c0:68: ab:10:d3:37:eb:1d:05:03:01:a3:72:ad:8a:d8:f4:09:d3:c0: da:26:f2:af:1e:d8:82:2d:00:ae:eb:44:14:0c:24:a0:44:5c: e7:5d:fa:4b:74:d4:26:45:c5:06:93:de:55:f4:b8:3a:32:3b: 58:05:3d:9b:78:98:e6:ec:6c:68:ec:27:01:10:1d:f3:c9:d9: 92:b0:1d:1d:b6:d4:2a:19:3d:17:ee:49:71:2a:e2:0a:21:6a: 1c:be:2d:76:7a:30:a9:3e:1a:71:da:27:28:73:71:08:32:e2: 96:9e:23:68:79:ac:b4:d6:0d:53:0c:29:ed:96:7d:d4:ee:cc: e2:36:2a:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjQxMTIyMjA0MTI5WhcNMjQxMTI5MjA0MTI5WjAYMRYwFAYD VQQDEw02NzQwZWM3OS03YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuexekDXjGz0WCoqI18aQwoQWr4eN9ZyQtf5IvvpkuxqCy6HFM9NMjZD1XcO+ U8qb7OMIZS/4ZMs80IjFTBUHJC66FMdNF/aAlnJ3Vy4flygCprCmq6X1H2KT3Jac eSfQIaZoGDjn1DL2Z8IdsWsMNrWutorzuIRUKURxNq38EfwK+pTTisnboTRk5pVO TMgyVLuyj/DbZHXxHN67tlEkwBYLPWiRJInnWNbhA5mz5+wbcQ2/jzfmfif4ePBJ qDMtlT7pZM5EvlkOSgIcmWJz3s18Pcq6HesdGgk63+iJD4YunWwRozGv95ruOohy pXkBKu34c24f2MAKsOF4wsjqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBnWHSY vb/qM+sX+vf6moJqriExMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS0Klbf9wa6clbTpkXhYPoclqZ5cXt3YslBbf1GOMP4iIDnj77T4cw 0Fn+htBXUg4ms1YeXkZ+GBzlcwvkw541ET7pMudzgQ6icJ/bfSGLuaVUwmtDxTXW +H9HQm25V8CWb4hLWslKrY2JOyho3Nb7w0vPn2D5asAalWC9wGirENM36x0FAwGj cq2K2PQJ08DaJvKvHtiCLQCu60QUDCSgRFznXfpLdNQmRcUGk95V9Lg6MjtYBT2b eJjm7Gxo7CcBEB3zydmSsB0dttQqGT0X7klxKuIKIWocvi12ejCpPhpx2icoc3EI MuKWniNoeay01g1TDCntln3U7sziNir7 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org