$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: G9eP4vVTWFApljT1ttb18ZZJM8SzwkrpnuzpYPYzOLw= Subject key identifier: 0B:BB:31:04:0C:C6:71:DE:8D:36:FF:49:30:33:3B:B4:D3:38:5E:F0 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 021C Signing time: Sat 23 Nov 2024 01:33:40 +0000 Manifest this update: Sat 23 Nov 2024 01:33:40 +0000 Manifest next update: Sat 30 Nov 2024 01:33:40 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: GXfBAyIsrvlPwAmmyU5mxfyMDz47tHD6rrj4mwJdqUU=) 2: AA57748A148611EFA50CB960C4F9AE02.roa (hash: 6adV3OtWsaL6gxsXDWx0iJzz9wizXBVgUANNsM2WlTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Nov 23 01:33:40 2024 GMT Not After : Nov 30 01:33:40 2024 GMT Subject: CN=674130f4-a604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:27:cc:b0:28:65:3e:26:78:47:d1:53:ae:df: c1:75:26:75:14:34:2d:24:11:bf:47:f4:ff:ac:ae: 2d:96:90:7f:e3:77:5b:30:e4:c8:26:d6:fc:d6:74: 8f:21:00:8d:31:26:04:a5:5f:c7:97:23:51:a5:3d: 19:22:e7:b2:21:df:e1:b1:c4:8c:d9:1a:0a:f6:3c: 2f:99:1e:60:52:ca:39:87:8d:83:d8:d2:a4:d0:a7: e3:3d:14:33:ff:98:b0:a5:bd:05:93:1f:b1:ac:1c: e2:61:64:34:be:80:20:70:c5:1b:5a:78:4c:85:82: 64:64:13:fe:18:35:77:f4:16:85:69:c2:b6:8d:06: c2:75:63:f7:4b:c9:9f:1f:dc:4c:ca:3d:e0:14:55: bb:b6:cf:ff:5d:51:a1:f5:45:a8:5f:d3:7a:ca:e6: 47:19:84:eb:7e:1b:d5:8d:3d:d2:cd:03:e2:a0:5a: 24:a1:cb:49:54:d2:3a:5e:61:dc:75:4e:74:f1:01: 30:06:3d:19:96:ff:56:97:f0:ba:b2:7e:db:bc:2a: 77:7c:51:01:5f:84:c1:d9:d3:c5:ff:06:fb:c9:41: 00:2a:38:0c:91:a0:63:27:78:b6:b5:f5:47:2f:46: 02:95:49:27:dd:9c:e5:e7:d7:8b:e1:bd:d4:59:26: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:31:04:0C:C6:71:DE:8D:36:FF:49:30:33:3B:B4:D3:38:5E:F0 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a1:e2:09:45:25:53:19:98:29:fa:a0:e8:98:3e:e2:81:49: 4a:ea:af:da:f4:20:34:56:61:80:d7:b8:9b:c2:98:db:34:0b: 14:01:a8:63:16:de:ab:d7:8b:c5:c9:6c:3b:48:ee:11:fd:47: b2:f7:6e:46:55:fb:4d:a7:31:de:5c:6a:fb:5b:6c:88:7a:85: 45:2b:04:a1:be:06:ab:e9:bc:0f:69:96:26:b6:b3:33:ad:5b: da:8b:bf:a9:e3:b7:34:8c:1c:5d:12:ed:cd:9a:07:6c:e3:56: d7:63:75:6c:21:98:48:03:3e:09:76:a7:f5:12:60:0b:99:a2: 4d:29:9b:69:20:1e:74:a0:c6:09:59:47:6a:36:e0:8f:ca:60: cf:de:56:8b:f3:d4:77:5f:ba:75:ed:d6:0c:b0:f3:8b:16:5d: 62:a6:2a:af:39:7f:d1:4a:0c:e2:65:6c:25:fc:ac:2f:2a:cc: 64:03:90:a3:be:60:82:ac:5c:5a:54:ae:ea:95:dd:31:3d:14: a0:82:95:a4:16:c7:59:c0:a5:c1:19:73:7b:f8:35:b6:a1:c6: 10:99:2c:78:5a:19:b0:27:a8:6e:f2:ef:86:68:54:bc:1e:bb: cc:5d:2c:6d:9b:fc:79:ad:17:d1:a7:c9:9c:60:1c:96:8f:ff: e2:3b:7d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjQxMTIzMDEzMzQwWhcNMjQxMTMwMDEzMzQwWjAYMRYwFAYD VQQDEw02NzQxMzBmNC1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CfMsChlPiZ4R9FTrt/BdSZ1FDQtJBG/R/T/rK4tlpB/43dbMOTIJtb81nSP IQCNMSYEpV/HlyNRpT0ZIueyId/hscSM2RoK9jwvmR5gUso5h42D2NKk0KfjPRQz /5iwpb0Fkx+xrBziYWQ0voAgcMUbWnhMhYJkZBP+GDV39BaFacK2jQbCdWP3S8mf H9xMyj3gFFW7ts//XVGh9UWoX9N6yuZHGYTrfhvVjT3SzQPioFokoctJVNI6XmHc dU508QEwBj0Zlv9Wl/C6sn7bvCp3fFEBX4TB2dPF/wb7yUEAKjgMkaBjJ3i2tfVH L0YClUkn3Zzl59eL4b3UWSZKsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu7MQQM xnHejTb/STAzO7TTOF7wMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7oeIJRSVTGZgp+qDomD7igUlK6q/a9CA0VmGA17ibwpjbNAsUAahj Ft6r14vFyWw7SO4R/Uey925GVftNpzHeXGr7W2yIeoVFKwShvgar6bwPaZYmtrMz rVvai7+p47c0jBxdEu3Nmgds41bXY3VsIZhIAz4Jdqf1EmALmaJNKZtpIB50oMYJ WUdqNuCPymDP3laL89R3X7p17dYMsPOLFl1ipiqvOX/RSgziZWwl/KwvKsxkA5Cj vmCCrFxaVK7qld0xPRSggpWkFsdZwKXBGXN7+DW2ocYQmSx4WhmwJ6hu8u+GaFS8 HrvMXSxtm/x5rRfRp8mcYByWj//iO30N -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org