$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: QOLvWzJEZraZBCmR3PllM4WxdHcWvCTSor7SluqbTKQ= Subject key identifier: 77:44:6A:8B:F0:4D:1E:41:98:33:60:63:E6:93:2E:5D:4F:0A:FF:AE Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 073B Signing time: Fri 22 Nov 2024 21:10:52 +0000 Manifest this update: Fri 22 Nov 2024 21:10:52 +0000 Manifest next update: Fri 29 Nov 2024 21:10:52 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: XIb3Z1MVaI4JItO+HGRVNF8mKKXk0muWS1Y+L1jVJ3A=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Nov 22 21:10:52 2024 GMT Not After : Nov 29 21:10:52 2024 GMT Subject: CN=6740f35c-e349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:a1:a9:d5:99:eb:dd:12:4a:08:f0:4e:32: a6:cb:d0:fb:12:d3:f5:1d:13:de:59:b1:91:52:45: 33:28:5d:f8:d0:45:af:8f:94:a2:4a:14:75:6b:c0: f0:59:f5:0b:57:e1:90:35:7c:a1:1c:1a:55:09:5b: df:fb:8a:c0:ff:fa:f8:e8:17:c2:f6:15:16:a4:15: 32:40:85:41:ca:ba:71:67:98:9c:06:4d:6b:55:ac: e8:e9:b7:a9:0f:b1:47:7c:e3:a5:79:45:9d:46:a4: 37:7b:09:6b:cd:99:5d:3d:13:d0:6e:a2:03:2f:45: 24:0d:bd:c6:09:d0:68:05:76:45:fe:38:c2:3d:19: 09:fa:18:77:e9:41:9d:dd:55:1c:75:22:5c:b3:ee: f3:46:10:33:f7:19:09:6d:ef:38:f0:3f:fb:65:5c: 9c:d4:d8:eb:56:5c:ac:72:61:7d:00:b1:9e:51:8b: 42:c9:7c:6e:50:15:d9:1c:a4:72:14:ca:e8:7d:27: 88:5f:38:55:63:da:cf:2c:a6:df:22:f9:00:e3:25: 54:82:37:9a:d8:38:37:46:42:49:ab:68:ca:8e:69: e2:99:de:47:83:23:e9:58:3c:3b:b2:1d:e8:c0:fc: 4f:96:40:62:df:9c:52:83:8c:05:d4:14:6a:81:4d: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:6A:8B:F0:4D:1E:41:98:33:60:63:E6:93:2E:5D:4F:0A:FF:AE X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:ac:fc:c3:2b:14:fe:8a:c6:50:3e:12:21:c7:cf:02:67: 0c:71:33:34:a4:c0:b6:11:d7:65:77:95:8b:39:6b:5b:9c:d7: 45:6e:49:8a:54:cf:bb:ec:2d:8e:9e:59:84:ae:be:8b:d3:e9: 06:31:cf:b4:a9:41:5a:76:61:5d:4a:1b:50:a5:38:a4:15:a1: 6b:69:aa:e7:83:23:a2:cd:31:e7:41:e4:d5:ed:68:21:05:35: b2:3d:b6:19:5a:99:b2:5d:ea:a9:c6:c9:8d:18:eb:dd:b2:a7: b7:45:b1:8d:38:44:13:27:0d:4d:68:ab:10:96:c8:44:bf:a9: 76:89:f8:44:ee:9b:09:fb:b5:66:e0:7f:b3:80:d2:94:19:14: 83:96:45:48:e5:2a:bd:42:42:88:4c:43:e0:94:1f:97:5c:bf: de:f9:3f:74:7b:ac:5c:73:46:90:ff:dd:2d:ee:b3:92:8a:40: 81:82:81:2a:0f:78:ef:09:29:21:e0:fd:45:20:f3:e8:f1:f6: bc:8d:be:04:1f:b7:74:ec:c2:93:b8:7d:32:e1:12:7f:1d:b3: 00:4b:ea:bc:d0:0c:37:2a:43:aa:fa:e1:3e:16:fa:bc:ed:47: 9b:70:da:5b:50:b9:55:94:1f:03:18:08:f1:32:0e:20:42:2f: 86:bd:a1:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjQxMTIyMjExMDUyWhcNMjQxMTI5MjExMDUyWjAYMRYwFAYD VQQDEw02NzQwZjM1Yy1lMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6mhqdWZ690SSgjwTjKmy9D7EtP1HRPeWbGRUkUzKF340EWvj5SiShR1a8Dw WfULV+GQNXyhHBpVCVvf+4rA//r46BfC9hUWpBUyQIVByrpxZ5icBk1rVazo6bep D7FHfOOleUWdRqQ3ewlrzZldPRPQbqIDL0UkDb3GCdBoBXZF/jjCPRkJ+hh36UGd 3VUcdSJcs+7zRhAz9xkJbe848D/7ZVyc1NjrVlyscmF9ALGeUYtCyXxuUBXZHKRy FMrofSeIXzhVY9rPLKbfIvkA4yVUgjea2Dg3RkJJq2jKjmnimd5HgyPpWDw7sh3o wPxPlkBi35xSg4wF1BRqgU3JZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdEaovw TR5BmDNgY+aTLl1PCv+uMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABY6z8wysU/orGUD4SIcfPAmcMcTM0pMC2Eddld5WLOWtbnNdFbkmK VM+77C2OnlmErr6L0+kGMc+0qUFadmFdShtQpTikFaFraarngyOizTHnQeTV7Wgh BTWyPbYZWpmyXeqpxsmNGOvdsqe3RbGNOEQTJw1NaKsQlshEv6l2ifhE7psJ+7Vm 4H+zgNKUGRSDlkVI5Sq9QkKITEPglB+XXL/e+T90e6xcc0aQ/90t7rOSikCBgoEq D3jvCSkh4P1FIPPo8fa8jb4EH7d07MKTuH0y4RJ/HbMAS+q80Aw3KkOq+uE+Fvq8 7UebcNpbULlVlB8DGAjxMg4gQi+GvaGr -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:32 2024 by rpki-client on console-ams.rpki-client.org