$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft File: G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json) Hash identifier: N0/PoF+Tu8b54bZA90dWzjuQipcOOF3undpjmXkXIeA= Subject key identifier: 37:65:F5:5A:D0:61:E3:37:1C:52:72:A2:9B:F1:37:D9:5E:4A:4D:A8 Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 Certificate issuer: /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft Manifest number: 137C Signing time: Fri 22 Nov 2024 18:36:08 +0000 Manifest this update: Fri 22 Nov 2024 18:36:08 +0000 Manifest next update: Fri 29 Nov 2024 18:36:08 +0000 Files and hashes: 1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: oF8el8taXh7ncH+Tih8BMLO2VMmkADmgtYkHeFhyZz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Validity Not Before: Nov 22 18:36:08 2024 GMT Not After : Nov 29 18:36:08 2024 GMT Subject: CN=6740cf18-2160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:af:64:c0:9a:51:9f:ce:28:1c:82:49:04: b5:47:e7:15:2a:17:df:11:3a:28:69:92:6c:ee:17: 9f:16:d3:74:d0:00:3e:b6:22:4b:4d:60:f9:37:e9: 0f:3d:5c:6f:bb:0f:77:65:07:72:1f:3d:9b:d3:a9: b3:e0:9b:9c:1a:d9:1d:10:88:26:6d:47:51:d2:dd: 35:9d:09:1d:42:ca:06:0e:00:dd:68:13:e9:aa:4c: 61:b1:23:9c:41:ae:37:01:41:6b:fa:48:50:f0:85: 9a:84:82:d9:b3:3b:89:24:9a:f5:b4:72:22:00:bb: ec:2a:07:0b:45:e3:f4:c6:c1:92:b9:f7:71:fb:14: 29:99:65:b1:20:23:93:d0:44:67:ce:e3:22:37:16: c2:7e:53:2f:70:c2:08:9b:71:53:f6:30:c0:f0:5c: 48:6f:80:95:15:fa:ac:74:ad:0d:51:04:de:84:e7: a0:37:e1:0f:84:c2:a3:2a:7d:89:5b:b7:c9:2f:92: be:07:ef:bb:1e:a3:ef:be:73:69:b3:4a:4b:c9:3b: 0b:4e:09:05:5d:d2:38:94:53:57:f0:e1:a6:7e:02: d9:f6:ac:dc:f7:90:95:b3:96:42:b4:9c:60:c1:6a: 04:59:49:2d:85:81:ad:c8:7e:75:86:0a:ee:65:a8: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:F5:5A:D0:61:E3:37:1C:52:72:A2:9B:F1:37:D9:5E:4A:4D:A8 X509v3 Authority Key Identifier: keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3b:27:2f:56:d3:d9:96:c2:64:6d:a2:55:77:90:19:4f:03: 40:85:76:c6:89:81:c0:32:fa:92:18:3e:9c:25:c0:48:f6:c8: 54:4a:b9:22:9f:8a:4a:10:7b:68:cf:1a:e8:da:7f:40:9d:d1: f6:bc:57:2f:0e:51:c7:18:78:30:8c:06:65:f6:2f:9c:e6:f5: 7e:f6:98:52:b5:ac:1a:46:0a:61:96:d2:ee:59:c0:d7:01:86: cd:71:56:4f:71:45:6c:12:22:b2:a1:47:b7:ba:f9:21:7b:e1: e7:eb:34:04:b8:18:dc:d4:2b:e8:33:d6:14:b3:ff:d4:c8:b0: be:6d:58:79:7e:39:47:f5:ce:0d:5b:a4:d0:06:a3:98:e1:d6: 97:e3:70:64:59:0f:24:db:cf:42:55:34:67:6f:b9:6b:47:48: c7:a0:42:13:00:ff:63:06:15:a8:19:01:df:4b:4b:a0:ed:32: 14:57:cc:a6:6d:86:f6:bd:29:4d:76:8e:ac:79:12:cf:a5:f6: 6b:ca:51:fa:56:fe:cb:03:e0:f8:26:e1:26:11:a0:c8:a9:38: fc:4c:a5:e7:89:03:d9:cb:f5:c0:80:ea:d1:b3:88:da:2d:b1: bf:cc:f3:93:a7:a0:ed:56:8b:02:96:24:0b:3d:eb:fb:51:1c: e5:a3:64:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND RjZBMDFBMzAwHhcNMjQxMTIyMTgzNjA4WhcNMjQxMTI5MTgzNjA4WjAYMRYwFAYD VQQDEw02NzQwY2YxOC0yMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHGvZMCaUZ/OKByCSQS1R+cVKhffETooaZJs7hefFtN00AA+tiJLTWD5N+kP PVxvuw93ZQdyHz2b06mz4JucGtkdEIgmbUdR0t01nQkdQsoGDgDdaBPpqkxhsSOc Qa43AUFr+khQ8IWahILZszuJJJr1tHIiALvsKgcLReP0xsGSufdx+xQpmWWxICOT 0ERnzuMiNxbCflMvcMIIm3FT9jDA8FxIb4CVFfqsdK0NUQTehOegN+EPhMKjKn2J W7fJL5K+B++7HqPvvnNps0pLyTsLTgkFXdI4lFNX8OGmfgLZ9qzc95CVs5ZCtJxg wWoEWUkthYGtyH51hgruZaiqKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdl9VrQ YeM3HFJyopvxN9leSk2oMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNOycvVtPZlsJkbaJVd5AZTwNAhXbGiYHAMvqSGD6cJcBI9shUSrki n4pKEHtozxro2n9AndH2vFcvDlHHGHgwjAZl9i+c5vV+9phStawaRgphltLuWcDX AYbNcVZPcUVsEiKyoUe3uvkhe+Hn6zQEuBjc1CvoM9YUs//UyLC+bVh5fjlH9c4N W6TQBqOY4daX43BkWQ8k289CVTRnb7lrR0jHoEITAP9jBhWoGQHfS0ug7TIUV8ym bYb2vSlNdo6seRLPpfZrylH6Vv7LA+D4JuEmEaDIqTj8TKXniQPZy/XAgOrRs4ja LbG/zPOTp6DtVosCliQLPev7URzlo2Ql -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org