$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: mas+toEtv9Xjpq/RqiNCPQcN/R/5Fcuoxu7JxmmX+lg= Subject key identifier: 9C:EB:5E:F9:51:C6:8E:89:3C:38:3A:18:D5:37:D8:EB:26:7A:7B:71 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 034D Signing time: Sat 23 Nov 2024 00:33:33 +0000 Manifest this update: Sat 23 Nov 2024 00:33:31 +0000 Manifest next update: Sat 30 Nov 2024 00:33:31 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: 9pV6PL+jj7hxdsvzRoSUixY8LQkO+Nghp8hPVxPRTcg=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: lfHIywQz4YgqCkW/d8PSzpBeHa1aTAqSamGmUbb/c3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Nov 23 00:33:31 2024 GMT Not After : Nov 30 00:33:31 2024 GMT Subject: CN=674122dc-d47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:40:fa:c3:01:b0:81:fb:52:69:19:28:b6: f7:1a:df:aa:d4:80:1e:90:10:5a:fa:ef:95:4e:20: 4f:55:d6:16:5c:3a:1b:a8:84:0a:ad:d6:86:a4:ef: d4:46:50:54:c9:e4:25:d2:94:6d:63:75:99:d0:c5: ff:4a:7a:48:3c:f9:74:30:f8:e5:8c:33:53:73:c0: d8:d5:06:e8:c6:2a:4c:cc:ef:72:b8:fe:08:b8:21: 9c:1a:08:7d:55:dd:6f:c7:2a:72:3c:26:ed:22:38: 4e:af:78:d7:36:5e:7e:26:77:17:a6:85:da:ec:34: 63:7e:be:b0:df:e4:55:2a:ca:83:77:28:e6:81:40: 50:9d:f2:bd:5d:aa:fc:0c:4f:99:bf:48:f8:ed:ec: 5f:a6:99:ce:af:ad:06:ec:f8:62:ae:ce:3b:5e:31: 8e:5b:0f:83:fb:ad:6c:ac:b5:cd:7f:34:05:93:8f: 38:05:6f:8d:c9:f3:45:75:19:23:68:97:49:55:9c: 75:6c:0a:54:e2:00:ff:55:73:76:f9:78:e4:d3:86: b2:a7:fd:19:68:9c:d6:0f:9b:f5:cd:f8:c1:a2:88: 5c:7c:92:e4:38:36:84:b5:10:29:3d:88:a2:1d:24: e4:9a:13:9e:1f:89:56:80:7b:69:90:10:c3:f9:82: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:5E:F9:51:C6:8E:89:3C:38:3A:18:D5:37:D8:EB:26:7A:7B:71 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5a:ca:b0:82:47:6e:69:35:ba:35:38:bd:a8:aa:cd:ad:c0: 2d:e2:60:37:dd:4a:c8:62:67:31:02:7d:e2:14:bf:c5:48:65: 8f:60:c1:d0:b8:38:de:90:ad:a1:6e:4c:a8:1e:1e:95:7a:65: e7:2b:7d:b9:bf:d4:64:71:64:df:64:5c:59:4b:8a:8d:70:05: f7:d8:2e:c6:c6:f2:65:fb:a3:4b:5d:2d:60:ab:d0:e3:0f:c5: e9:b6:64:b9:99:90:75:05:98:24:68:59:70:e7:e6:e7:ae:34: 61:02:c3:3e:71:81:07:5e:d6:32:93:a7:4e:41:86:ca:ea:a4: 08:1c:38:a8:3c:6f:6c:11:8f:0d:67:5d:6c:41:31:c8:e3:f4: fa:ca:f0:1f:51:8a:03:b4:41:e1:15:8f:9d:0d:be:12:23:80: d9:80:b4:1c:35:c0:d7:6c:67:f5:fa:4c:ef:22:63:97:a6:ae: c3:bb:6a:b0:28:1f:b0:97:47:9b:4b:0b:c1:23:db:ec:8a:21: ec:c2:16:3f:ec:9f:56:fd:0c:97:7b:c0:8c:d0:f5:84:fa:2b: f0:85:9f:58:77:06:d4:b8:ad:2f:b3:fb:57:11:24:45:94:e4: c1:28:a5:a2:6d:1e:15:0b:21:4f:13:21:93:81:08:a1:74:cd: 27:c8:96:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjQxMTIzMDAzMzMxWhcNMjQxMTMwMDAzMzMxWjAYMRYwFAYD VQQDEw02NzQxMjJkYy1kNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOBA+sMBsIH7UmkZKLb3Gt+q1IAekBBa+u+VTiBPVdYWXDobqIQKrdaGpO/U RlBUyeQl0pRtY3WZ0MX/SnpIPPl0MPjljDNTc8DY1QboxipMzO9yuP4IuCGcGgh9 Vd1vxypyPCbtIjhOr3jXNl5+JncXpoXa7DRjfr6w3+RVKsqDdyjmgUBQnfK9Xar8 DE+Zv0j47exfppnOr60G7Phirs47XjGOWw+D+61srLXNfzQFk484BW+NyfNFdRkj aJdJVZx1bApU4gD/VXN2+Xjk04ayp/0ZaJzWD5v1zfjBoohcfJLkODaEtRApPYii HSTkmhOeH4lWgHtpkBDD+YJa/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzrXvlR xo6JPDg6GNU32OsmentxMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZWsqwgkduaTW6NTi9qKrNrcAt4mA33UrIYmcxAn3iFL/FSGWPYMHQ uDjekK2hbkyoHh6VemXnK325v9RkcWTfZFxZS4qNcAX32C7GxvJl+6NLXS1gq9Dj D8XptmS5mZB1BZgkaFlw5+bnrjRhAsM+cYEHXtYyk6dOQYbK6qQIHDioPG9sEY8N Z11sQTHI4/T6yvAfUYoDtEHhFY+dDb4SI4DZgLQcNcDXbGf1+kzvImOXpq7Du2qw KB+wl0ebSwvBI9vsiiHswhY/7J9W/QyXe8CM0PWE+ivwhZ9YdwbUuK0vs/tXESRF lOTBKKWibR4VCyFPEyGTgQihdM0nyJZg -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org