$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: soGg31zP7U75xfzBGGs/iBVSxpUK0RVKDohkhFsR4Oo= Subject key identifier: BC:85:FD:49:0B:73:64:00:4C:2C:F6:64:7B:CB:BA:E1:4A:3F:EF:4A Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 1514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 150B Signing time: Sun 24 Nov 2024 16:42:07 +0000 Manifest this update: Sun 24 Nov 2024 16:42:06 +0000 Manifest next update: Sun 01 Dec 2024 16:42:06 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: nYo//wqCveJ8rvawd7UKKMMTvFaYADBai0q1ubwUX/c=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: gEvklT75Gk6RX/nO8dPcZCY87nihSKVb8/0u+SUGEUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5396 (0x1514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: Nov 24 16:42:06 2024 GMT Not After : Dec 1 16:42:06 2024 GMT Subject: CN=6743575f-5c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:87:2c:4a:48:fd:96:31:74:fc:f7:d6:df: 27:5d:72:fa:f2:9f:0b:97:4a:e9:71:25:aa:e5:b0: de:fd:3b:e5:6c:ab:3d:a8:56:64:b5:01:08:43:1d: 46:c4:9f:e8:d6:b5:8b:5c:fc:af:cd:9c:fd:ec:40: 21:82:e0:0c:9c:ba:17:07:29:7a:78:be:f6:c0:5b: f0:f8:6b:dc:55:32:d6:ed:df:1a:a9:d5:41:52:c4: 2f:87:d8:37:1c:a5:b0:c4:e8:1d:ff:50:ce:6e:45: a9:da:9a:0a:4f:b5:f0:bb:45:45:55:69:9b:02:57: b4:ab:65:30:f6:0a:7b:5d:a7:ea:d8:fa:56:7d:49: 61:91:8a:16:8d:fa:9f:b3:17:43:72:53:69:f3:62: af:e1:8c:79:83:96:ae:ba:28:5d:b7:59:43:73:de: 12:f8:f1:4c:bc:ab:6b:78:e0:3e:20:20:ef:b0:12: 9c:7b:96:b9:49:d0:db:85:5f:7f:47:42:61:24:32: 15:47:8b:f0:81:66:bb:3b:02:84:f9:4b:e2:8a:d5: ad:d3:5b:22:1e:e4:87:77:0d:da:10:10:f6:73:62: d8:53:38:1a:92:43:2d:2c:b7:6d:dc:61:03:3f:b3: 78:c4:5f:17:d0:29:84:74:e6:69:c5:e8:bb:e1:dd: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:FD:49:0B:73:64:00:4C:2C:F6:64:7B:CB:BA:E1:4A:3F:EF:4A X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:15:be:f4:6f:de:ba:c6:cb:b2:89:9c:2f:26:df:90:87:0a: cf:7d:4f:9f:c8:06:e1:2e:fb:8f:dc:8f:47:96:78:1e:3a:2b: 05:b4:c2:6f:83:9a:b4:ea:bb:84:64:86:f4:0f:df:5d:29:5d: b0:94:d9:0c:9b:1d:33:aa:1f:1b:9e:cb:ac:c2:76:ec:5c:fb: 25:c0:c7:5c:b7:3c:e6:51:9c:a5:80:59:57:4d:1c:45:50:9a: 30:48:bd:93:28:3c:ba:d7:d6:e6:c0:82:ee:0a:0e:5a:fe:cd: 7e:87:9b:36:38:87:a8:cc:fd:86:4e:29:14:c2:80:cd:d3:d9: 1b:80:71:6e:ff:46:53:9a:f0:a1:1b:da:87:85:0d:2b:fd:ec: eb:56:63:b9:8d:d4:3d:cc:e0:bf:09:28:c6:36:4b:d1:f3:b7: d7:7c:23:80:93:e9:1f:93:50:4c:d4:68:39:74:35:f5:77:7e: 72:76:cd:0c:6d:7d:ba:f8:a3:d6:bb:a9:00:f2:33:ce:26:2c: 09:94:2b:67:59:4c:ca:f6:b4:4d:5c:20:cd:96:25:1a:2a:15: 05:de:6e:e4:29:4d:1c:0f:e5:99:61:02:30:ee:8f:41:f4:6a: 99:b5:d4:3c:11:95:b6:db:30:58:1e:5f:a3:70:0e:2c:0c:f4: dc:5a:25:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjQxMTI0MTY0MjA2WhcNMjQxMjAxMTY0MjA2WjAYMRYwFAYD VQQDEw02NzQzNTc1Zi01YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VqHLEpI/ZYxdPz31t8nXXL68p8Ll0rpcSWq5bDe/TvlbKs9qFZktQEIQx1G xJ/o1rWLXPyvzZz97EAhguAMnLoXByl6eL72wFvw+GvcVTLW7d8aqdVBUsQvh9g3 HKWwxOgd/1DObkWp2poKT7Xwu0VFVWmbAle0q2Uw9gp7Xafq2PpWfUlhkYoWjfqf sxdDclNp82Kv4Yx5g5auuihdt1lDc94S+PFMvKtreOA+ICDvsBKce5a5SdDbhV9/ R0JhJDIVR4vwgWa7OwKE+UviitWt01siHuSHdw3aEBD2c2LYUzgakkMtLLdt3GED P7N4xF8X0CmEdOZpxei74d1CuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyF/UkL c2QATCz2ZHvLuuFKP+9KMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaFb70b966xsuyiZwvJt+QhwrPfU+fyAbhLvuP3I9HlngeOisFtMJv g5q06ruEZIb0D99dKV2wlNkMmx0zqh8bnsuswnbsXPslwMdctzzmUZylgFlXTRxF UJowSL2TKDy619bmwILuCg5a/s1+h5s2OIeozP2GTikUwoDN09kbgHFu/0ZTmvCh G9qHhQ0r/ezrVmO5jdQ9zOC/CSjGNkvR87fXfCOAk+kfk1BM1Gg5dDX1d35yds0M bX26+KPWu6kA8jPOJiwJlCtnWUzK9rRNXCDNliUaKhUF3m7kKU0cD+WZYQIw7o9B 9GqZtdQ8EZW22zBYHl+jcA4sDPTcWiUx -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org