$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: mRJUS9UkwJHYsc1yS6Fi3bwk0n14owrf0daqxFLgAYQ= Subject key identifier: 39:B0:61:4C:40:96:BB:49:F9:FA:E4:D1:E1:80:BC:9D:E9:78:29:B2 Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 034D Signing time: Sat 23 Nov 2024 00:33:54 +0000 Manifest this update: Sat 23 Nov 2024 00:33:53 +0000 Manifest next update: Sat 30 Nov 2024 00:33:53 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: 8RxehpAh5LAL21DjwVId2uu1rx0sp94J2R8cw+KAMQM=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: H28aH7kF2uwm9MmumzSnfWUQDIbBrIR34W+ffok6mmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Validity Not Before: Nov 23 00:33:53 2024 GMT Not After : Nov 30 00:33:53 2024 GMT Subject: CN=674122f1-7ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:b0:6d:0e:9f:84:ac:f4:6d:65:03:99:ae: bd:98:dc:9c:61:5e:5f:55:b1:aa:fb:e1:d1:a3:0c: 1e:b0:02:45:d6:38:ef:c2:15:0e:8e:36:49:a5:17: a0:7b:bc:21:d7:f1:db:96:b2:99:51:16:3a:9f:f2: e5:6e:d4:a5:e3:fb:c3:b8:0d:c1:fb:cc:b7:a5:a4: fa:e3:ae:d3:de:ca:dd:e0:56:d9:58:9b:d4:e8:7b: 90:a7:c4:30:d2:14:c3:00:e5:75:52:1a:4e:95:9b: 8a:36:9e:5e:86:c8:fe:b6:a0:39:20:04:16:20:a9: 4e:95:fd:5f:ca:47:ac:03:59:5e:06:c7:51:0e:e1: 5c:2d:69:90:d4:1a:c8:6f:cb:cf:17:77:be:0b:bc: d5:1e:45:92:8d:c5:de:3c:46:e4:fd:af:84:97:21: 15:45:59:f3:8a:4d:13:48:8b:5b:b7:44:06:3c:36: 1e:41:0b:25:8a:76:fd:cf:46:bf:72:6d:9c:35:8b: c7:7d:e9:b9:07:be:e4:9a:22:bb:b2:90:32:f3:0e: 5d:5f:93:47:a7:f8:e1:d6:4d:6e:f1:fd:63:68:73: d4:07:6f:2f:44:1c:8a:b1:0d:16:65:28:35:58:12: b5:69:56:f6:9a:2f:4a:f6:5e:06:c4:da:45:d6:3d: 80:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B0:61:4C:40:96:BB:49:F9:FA:E4:D1:E1:80:BC:9D:E9:78:29:B2 X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:af:fe:bc:45:5c:7e:ab:51:31:31:6f:65:7e:e3:92:f6: 89:78:12:cf:8e:9f:f3:77:c6:8d:30:57:3d:8d:31:4c:68:60: 9b:36:a3:1d:0c:2d:67:56:1e:82:cc:4a:5f:76:17:4a:ed:99: d6:58:45:b4:4d:df:6e:53:e3:64:8c:8f:ce:04:84:e4:5c:f4: 17:9b:4a:f3:f6:4d:7f:cf:4f:b9:e0:25:f0:c5:d9:be:33:77: 5f:33:47:6d:2f:9a:60:5e:e6:17:0c:ca:94:0c:be:50:4f:dc: e6:50:81:c1:e5:a0:81:54:70:da:f5:b5:2f:ab:5f:c6:1c:82: f1:f8:86:71:b2:cc:a0:bd:59:5d:8c:4b:25:ae:a2:73:71:a1: 5f:f8:46:46:95:97:4c:67:98:4e:64:a5:28:b9:21:ae:fc:87: af:53:71:f1:b2:ca:57:68:d1:a8:8b:2d:ae:51:fd:4a:76:05: 84:e7:a9:2e:97:77:3b:53:1f:67:17:c5:d0:f4:01:53:2a:5f: 93:12:d8:8c:0f:c3:81:3e:72:e1:78:c0:08:1a:54:74:57:00: 33:75:04:75:72:23:84:aa:36:f0:26:28:59:be:81:ff:e9:12: 86:6e:6f:c5:54:46:22:37:c7:ae:75:23:ce:06:d0:cc:ea:46: c3:f3:11:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjQxMTIzMDAzMzUzWhcNMjQxMTMwMDAzMzUzWjAYMRYwFAYD VQQDEw02NzQxMjJmMS03Y2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCSwbQ6fhKz0bWUDma69mNycYV5fVbGq++HRowwesAJF1jjvwhUOjjZJpReg e7wh1/HblrKZURY6n/LlbtSl4/vDuA3B+8y3paT6467T3srd4FbZWJvU6HuQp8Qw 0hTDAOV1UhpOlZuKNp5ehsj+tqA5IAQWIKlOlf1fykesA1leBsdRDuFcLWmQ1BrI b8vPF3e+C7zVHkWSjcXePEbk/a+ElyEVRVnzik0TSItbt0QGPDYeQQslinb9z0a/ cm2cNYvHfem5B77kmiK7spAy8w5dX5NHp/jh1k1u8f1jaHPUB28vRByKsQ0WZSg1 WBK1aVb2mi9K9l4GxNpF1j2A9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmwYUxA lrtJ+frk0eGAvJ3peCmyMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA26K/+vEVcfqtRMTFvZX7jkvaJeBLPjp/zd8aNMFc9jTFMaGCbNqMd DC1nVh6CzEpfdhdK7ZnWWEW0Td9uU+NkjI/OBITkXPQXm0rz9k1/z0+54CXwxdm+ M3dfM0dtL5pgXuYXDMqUDL5QT9zmUIHB5aCBVHDa9bUvq1/GHILx+IZxssygvVld jEslrqJzcaFf+EZGlZdMZ5hOZKUouSGu/IevU3HxsspXaNGoiy2uUf1KdgWE56ku l3c7Ux9nF8XQ9AFTKl+TEtiMD8OBPnLheMAIGlR0VwAzdQR1ciOEqjbwJihZvoH/ 6RKGbm/FVEYiN8eudSPOBtDM6kbD8xHn -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org