$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: TTWo8zIAM/SJiZLcW1eWwLwIGYhDTFK3ENLQ4+WujQU= Subject key identifier: 88:06:F3:42:78:2C:70:D4:58:28:12:4A:B0:8C:6D:F2:F0:84:15:C4 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 0628 Signing time: Fri 22 Nov 2024 22:06:34 +0000 Manifest this update: Fri 22 Nov 2024 22:06:34 +0000 Manifest next update: Fri 29 Nov 2024 22:06:34 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: yUuBnA7zjFgvEOpt4SLyhynje9DIILEN6s0lAlHVa+8=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Nov 22 22:06:34 2024 GMT Not After : Nov 29 22:06:34 2024 GMT Subject: CN=6741006a-7c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:61:d0:ae:0e:77:6a:b5:97:ca:dc:a3:b3: 5d:00:41:bb:73:2d:a7:e6:dc:41:8a:a4:98:d1:27: a1:b3:8d:84:b4:33:37:4f:34:11:15:dd:23:92:de: 2b:3c:f4:4f:fc:ed:60:99:1b:e2:29:3d:06:5e:3d: c5:70:d8:4b:46:73:c1:42:c6:f5:f2:0a:52:1c:0d: d5:13:82:21:aa:04:d2:f7:fe:bb:cb:59:51:9d:59: 8a:e9:30:9a:6e:aa:a7:aa:2e:c5:c5:50:6c:75:41: 76:ae:b5:17:4d:a1:55:56:6c:87:16:42:be:21:2e: 51:a0:f2:8e:35:2a:71:cd:91:ae:a7:de:13:37:87: 8e:99:da:02:9e:09:8d:cb:3d:30:34:55:46:d9:25: 76:f2:8e:d7:4e:cb:67:89:3d:d8:2e:e3:9a:83:e5: b6:4b:d1:f5:6b:01:f7:b4:6d:24:0c:57:98:43:7b: 2f:10:fe:71:fa:b3:71:f8:8e:38:09:df:eb:3b:a6: 3e:78:d2:0a:23:e0:bb:38:aa:41:63:30:6e:b3:c2: ac:fe:26:d2:4a:cb:e5:01:94:a2:b8:a8:90:6d:45: ec:44:9a:b6:99:e0:c0:2a:3b:98:bd:f5:4b:98:8b: 02:f0:b8:d6:00:1a:a1:d8:d8:48:e0:be:e6:df:9c: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:F3:42:78:2C:70:D4:58:28:12:4A:B0:8C:6D:F2:F0:84:15:C4 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:39:99:8a:6b:03:b1:eb:7d:dd:1d:75:6b:d6:24:92:16:23: 3e:ec:90:97:22:f0:92:99:d6:a9:79:9f:8f:7e:64:be:46:e5: b1:4d:bc:83:ee:66:d9:2c:e2:dd:11:a9:31:7f:73:4b:0e:72: ec:97:5d:fc:66:6f:fb:a8:c6:aa:47:66:0d:cd:85:ec:99:c4: e2:b1:62:75:1b:24:f6:ee:4f:7e:ec:b6:e9:3a:74:a8:85:cc: dd:b6:4d:53:02:00:75:f9:9f:47:a4:aa:e7:86:7a:f6:f8:d5: 99:47:1e:1c:f0:4e:9c:6b:f8:5c:2d:b0:3c:55:3c:35:fe:cf: fc:08:7d:2a:e8:50:cf:07:5c:41:bb:11:1f:fe:11:b4:42:bc: 7a:a0:ef:12:92:84:fd:ed:bf:14:cc:ca:4e:0d:13:71:88:8b: c3:a9:40:6b:30:ad:f0:5a:2a:01:39:f4:5c:d6:6f:00:b0:4a: 21:12:d5:e5:c9:de:99:f7:8f:44:6b:99:5e:c9:0a:37:3f:ff: 42:ea:0b:20:be:4d:3c:fc:7e:e3:61:c5:7f:d2:00:d1:15:e1: 31:eb:b6:59:fe:2c:00:36:81:59:6c:c4:12:81:69:83:28:2e: cc:10:ac:26:d6:9a:05:75:f7:ae:30:4a:00:09:59:43:cb:b3: de:ab:44:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjQxMTIyMjIwNjM0WhcNMjQxMTI5MjIwNjM0WjAYMRYwFAYD VQQDEw02NzQxMDA2YS03YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bRh0K4Od2q1l8rco7NdAEG7cy2n5txBiqSY0Sehs42EtDM3TzQRFd0jkt4r PPRP/O1gmRviKT0GXj3FcNhLRnPBQsb18gpSHA3VE4IhqgTS9/67y1lRnVmK6TCa bqqnqi7FxVBsdUF2rrUXTaFVVmyHFkK+IS5RoPKONSpxzZGup94TN4eOmdoCngmN yz0wNFVG2SV28o7XTstniT3YLuOag+W2S9H1awH3tG0kDFeYQ3svEP5x+rNx+I44 Cd/rO6Y+eNIKI+C7OKpBYzBus8Ks/ibSSsvlAZSiuKiQbUXsRJq2meDAKjuYvfVL mIsC8LjWABqh2NhI4L7m35zpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgG80J4 LHDUWCgSSrCMbfLwhBXEMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEOZmKawOx633dHXVr1iSSFiM+7JCXIvCSmdapeZ+PfmS+RuWxTbyD 7mbZLOLdEakxf3NLDnLsl138Zm/7qMaqR2YNzYXsmcTisWJ1GyT27k9+7LbpOnSo hczdtk1TAgB1+Z9HpKrnhnr2+NWZRx4c8E6ca/hcLbA8VTw1/s/8CH0q6FDPB1xB uxEf/hG0Qrx6oO8SkoT97b8UzMpODRNxiIvDqUBrMK3wWioBOfRc1m8AsEohEtXl yd6Z949Ea5leyQo3P/9C6gsgvk08/H7jYcV/0gDRFeEx67ZZ/iwANoFZbMQSgWmD KC7MEKwm1poFdfeuMEoACVlDy7Peq0Qx -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org