$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: Dt9NawEpfViX0+tj3Xgy9C1x61mJ2V6yxqh9x1ypYII= Subject key identifier: 6E:70:16:3D:3E:D3:AE:9B:42:DA:66:19:EA:E4:FD:33:8D:FC:16:91 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0400 Signing time: Sat 23 Nov 2024 00:00:45 +0000 Manifest this update: Sat 23 Nov 2024 00:00:44 +0000 Manifest next update: Sat 30 Nov 2024 00:00:44 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: P1vzqjC3UbzmAzxFJtmpowQXf394sAxye7WLhHT36w0=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: yZv8Ndkb/Ixz4agZ0ioEAuVc17idALkIoBsSVXC4ewU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Nov 23 00:00:44 2024 GMT Not After : Nov 30 00:00:44 2024 GMT Subject: CN=67411b2d-8bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:d2:7f:7b:6f:2f:b6:51:3d:25:c3:a7:ab: 44:39:93:cd:3a:e4:32:7f:b1:5a:45:8f:53:fe:d6: 11:a2:4e:a7:56:0f:01:6d:66:b6:ea:be:23:39:8f: f8:1b:56:8f:33:ed:c3:d1:bd:f1:47:19:8c:47:45: b6:e0:e9:1d:52:b4:5a:44:64:76:42:ec:2e:3c:2e: 23:37:39:e0:40:0d:c2:5f:f0:36:10:7e:cd:4c:5b: e6:11:35:6e:88:b8:4d:28:18:86:96:d5:e2:2b:e3: 2e:6b:7d:d1:6f:9f:df:cc:f0:07:5d:cf:5b:a5:4b: 2f:26:a0:a5:4d:9e:fa:29:e2:9b:81:20:ae:12:14: b8:51:02:8b:fc:a6:ca:7a:7a:b3:39:a7:eb:bd:07: f4:aa:3f:52:f6:c8:44:56:3a:d9:5b:c3:1a:c4:be: e9:28:5c:87:2b:a0:5c:7e:99:5c:28:8c:de:e4:1a: d4:cf:2a:30:02:01:4d:7d:94:1c:91:f9:80:5a:a5: 6e:c8:79:51:dd:d0:f9:3e:06:19:1b:87:32:ce:3f: f4:e8:93:5b:cc:93:21:22:51:0b:6f:ba:0b:da:43: 94:f5:97:0e:78:3f:3c:f3:06:8d:1f:f6:5f:d4:fe: 98:6c:68:23:95:4c:79:25:c4:f8:cb:ed:85:1c:7e: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:16:3D:3E:D3:AE:9B:42:DA:66:19:EA:E4:FD:33:8D:FC:16:91 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dc:e7:70:76:9d:c9:71:f2:0e:ee:69:a1:2d:4c:19:ce:b3: 15:93:18:57:ff:95:8c:47:4c:6a:8b:59:7f:a8:2a:50:b1:59: aa:16:cf:7a:ad:f2:d4:94:a8:cb:5d:32:fb:bf:3b:6f:8e:03: 38:d3:0d:f2:b8:c9:59:a4:b1:e1:92:0e:1e:48:97:c9:bd:16: 62:bb:a4:0f:e5:c5:21:28:f9:37:9a:8b:60:20:c9:b1:39:f9: 2c:95:60:39:44:91:86:22:17:94:c6:28:e2:ee:e9:0b:68:44: f8:d6:f1:8d:11:73:30:09:0e:4d:9f:95:25:3b:54:8f:e9:e8: 8d:85:f4:54:05:6a:b9:16:50:4c:98:53:46:e2:e6:14:a6:29: 62:75:ca:6b:24:e9:63:62:38:6e:08:7b:f2:90:62:86:74:6f: 23:5c:1b:35:bf:71:b8:f4:74:df:1e:9e:e7:f5:82:c9:ff:3e: af:a4:69:bb:7a:75:e7:27:84:e4:00:50:ad:ad:11:ae:d4:32: 7f:a4:aa:24:b4:d3:b4:85:d2:3f:fe:b0:49:8b:34:9c:30:8a: 73:84:02:a9:26:90:ce:85:c4:84:55:99:c4:83:cc:5d:ba:77: fe:46:7c:95:85:ee:ee:df:81:04:b6:c1:3a:14:d1:dd:e7:ff: fb:33:ea:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjQxMTIzMDAwMDQ0WhcNMjQxMTMwMDAwMDQ0WjAYMRYwFAYD VQQDEw02NzQxMWIyZC04YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZrSf3tvL7ZRPSXDp6tEOZPNOuQyf7FaRY9T/tYRok6nVg8BbWa26r4jOY/4 G1aPM+3D0b3xRxmMR0W24OkdUrRaRGR2QuwuPC4jNzngQA3CX/A2EH7NTFvmETVu iLhNKBiGltXiK+Mua33Rb5/fzPAHXc9bpUsvJqClTZ76KeKbgSCuEhS4UQKL/KbK enqzOafrvQf0qj9S9shEVjrZW8MaxL7pKFyHK6BcfplcKIze5BrUzyowAgFNfZQc kfmAWqVuyHlR3dD5PgYZG4cyzj/06JNbzJMhIlELb7oL2kOU9ZcOeD888waNH/Zf 1P6YbGgjlUx5JcT4y+2FHH7j5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5wFj0+ 066bQtpmGerk/TON/BaRMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr3Odwdp3JcfIO7mmhLUwZzrMVkxhX/5WMR0xqi1l/qCpQsVmqFs96 rfLUlKjLXTL7vztvjgM40w3yuMlZpLHhkg4eSJfJvRZiu6QP5cUhKPk3motgIMmx OfkslWA5RJGGIheUxiji7ukLaET41vGNEXMwCQ5Nn5UlO1SP6eiNhfRUBWq5FlBM mFNG4uYUpilidcprJOljYjhuCHvykGKGdG8jXBs1v3G49HTfHp7n9YLJ/z6vpGm7 enXnJ4TkAFCtrRGu1DJ/pKoktNO0hdI//rBJizScMIpzhAKpJpDOhcSEVZnEg8xd unf+RnyVhe7u34EEtsE6FNHd5//7M+qv -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org