$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: seHEDJftBjg7CoP5fuXaPYcYc4Im41sql8zJ1BTZtxg= Subject key identifier: CF:C9:C4:B2:F9:AA:F0:9E:EE:B9:5D:9F:1B:8A:6F:D1:DF:B6:B3:9C Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: E3 Signing time: Sat 23 Nov 2024 03:33:04 +0000 Manifest this update: Sat 23 Nov 2024 03:33:03 +0000 Manifest next update: Sat 30 Nov 2024 03:33:03 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 3eXdxBKc4w3W1XL7Xuv4wYmI8y+6mP3Nl+HM49rVAv8=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Nov 23 03:33:03 2024 GMT Not After : Nov 30 03:33:03 2024 GMT Subject: CN=67414cef-f6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ae:03:dc:2e:0d:4d:8b:9b:70:90:d2:76:75: 4c:0c:db:d7:17:13:20:f3:4d:e7:39:22:45:ef:89: 72:ae:f4:de:52:4a:22:7a:eb:25:67:54:08:83:0c: fb:38:bf:94:51:03:5e:f3:3d:76:c7:35:dc:b2:cb: 04:66:41:92:0b:b7:b4:fd:77:02:0a:3a:6b:59:df: 8e:ac:85:5b:4d:64:63:b8:d4:1f:fd:56:e0:c8:97: cc:39:a6:4d:9d:3a:45:70:21:88:78:fa:69:ff:38: f1:08:88:de:d5:97:67:24:a6:87:55:76:24:6e:1d: 68:06:06:49:e1:09:a0:d4:7d:21:b2:7e:00:7b:0c: b0:08:78:b1:93:80:61:6e:bb:ee:ae:13:7d:fd:63: 85:0f:71:c0:ee:10:32:59:01:f9:76:8d:75:36:0a: b5:35:fd:3e:d8:d0:7a:64:b2:b7:ca:c4:04:96:ac: 33:81:62:61:96:ed:98:a2:b2:81:e6:06:62:bb:a9: b1:75:aa:52:cc:69:e5:4c:10:a5:32:d6:ee:d2:c3: 6c:09:28:f0:2e:3b:e2:96:5c:75:6a:c0:8b:40:bc: 46:f4:57:bb:84:c4:e4:6a:fc:8a:e1:2b:29:79:29: 7e:fa:d1:f6:54:3f:6a:61:82:d6:48:8a:98:9d:39: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C9:C4:B2:F9:AA:F0:9E:EE:B9:5D:9F:1B:8A:6F:D1:DF:B6:B3:9C X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:66:8c:01:9e:d5:98:85:73:de:87:9f:c9:35:2d:75:bc:f5: 7c:a5:20:82:b5:17:38:2c:8d:3f:62:c1:69:e7:fd:e9:35:54: 19:a6:d0:43:23:c7:e4:89:51:12:b5:ae:dc:bc:e6:96:c3:6a: 06:b7:1c:c5:18:11:e8:91:91:37:38:15:ad:5a:f0:f9:5c:e5: 4b:03:b0:87:42:af:d5:3a:14:93:9e:9d:2c:4a:33:cb:b7:8f: 06:80:69:ee:fc:8f:8e:e3:06:27:40:ee:be:a4:2f:35:52:26: df:79:7e:ef:12:09:28:5f:2c:1f:60:05:70:ee:0a:30:92:91: 87:a6:72:4a:72:58:26:0a:1c:ca:ca:97:fe:68:c9:6e:e4:4b: da:84:29:cd:29:60:58:48:48:72:43:da:4d:b0:02:62:52:1e: ed:89:0c:5f:bd:da:55:63:66:be:d6:3d:1b:ad:8e:0d:81:07: 6a:32:b0:ca:96:65:11:3d:7f:30:20:a7:62:4d:d5:5a:45:be: 58:fe:45:7e:52:3c:b0:c1:06:ea:16:2d:ee:8b:5c:1f:db:2a: 25:dd:1f:7d:9d:53:bc:37:86:ca:89:9e:84:2b:89:b5:6a:e7: b3:35:62:66:48:42:f5:0d:a5:12:f1:4e:b9:87:70:1e:e3:5e: d0:23:73:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjQxMTIzMDMzMzAzWhcNMjQxMTMwMDMzMzAzWjAYMRYwFAYD VQQDEw02NzQxNGNlZi1mNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8K4D3C4NTYubcJDSdnVMDNvXFxMg803nOSJF74lyrvTeUkoieuslZ1QIgwz7 OL+UUQNe8z12xzXcsssEZkGSC7e0/XcCCjprWd+OrIVbTWRjuNQf/VbgyJfMOaZN nTpFcCGIePpp/zjxCIje1ZdnJKaHVXYkbh1oBgZJ4Qmg1H0hsn4AewywCHixk4Bh brvurhN9/WOFD3HA7hAyWQH5do11Ngq1Nf0+2NB6ZLK3ysQElqwzgWJhlu2YorKB 5gZiu6mxdapSzGnlTBClMtbu0sNsCSjwLjvillx1asCLQLxG9Fe7hMTkavyK4Ssp eSl++tH2VD9qYYLWSIqYnTnDDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/JxLL5 qvCe7rldnxuKb9HftrOcMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBZowBntWYhXPeh5/JNS11vPV8pSCCtRc4LI0/YsFp5/3pNVQZptBD I8fkiVESta7cvOaWw2oGtxzFGBHokZE3OBWtWvD5XOVLA7CHQq/VOhSTnp0sSjPL t48GgGnu/I+O4wYnQO6+pC81UibfeX7vEgkoXywfYAVw7gowkpGHpnJKclgmChzK ypf+aMlu5EvahCnNKWBYSEhyQ9pNsAJiUh7tiQxfvdpVY2a+1j0brY4NgQdqMrDK lmURPX8wIKdiTdVaRb5Y/kV+UjywwQbqFi3ui1wf2yol3R99nVO8N4bKiZ6EK4m1 auezNWJmSEL1DaUS8U65h3Ae417QI3No -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org