$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: s4rEVQDSGyJZ+NbnBYGzvdBSBufSGMVR3a+tua6CKzk= Subject key identifier: AF:15:AC:BE:B4:23:79:8E:28:C9:51:DB:DB:B0:7E:49:EA:AB:83:0D Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 03CE Signing time: Sat 23 Nov 2024 00:13:17 +0000 Manifest this update: Sat 23 Nov 2024 00:13:17 +0000 Manifest next update: Sat 30 Nov 2024 00:13:17 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: dXPUi+Aiy5Dt+IYvYt0sxVtu3NKdsVaeAYq2omUfEMo=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Nov 23 00:13:17 2024 GMT Not After : Nov 30 00:13:17 2024 GMT Subject: CN=67411e1d-4d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:c9:fe:a0:2e:65:5a:2c:3d:7a:de:86:25: 02:35:a4:00:91:fc:8d:7a:5a:23:1d:0c:aa:e2:98: 66:2c:cb:5d:80:3d:5a:64:22:45:11:32:cb:6b:0e: 79:72:49:39:7c:d5:52:b0:d9:88:d0:63:e8:fe:77: d8:95:57:dd:54:e4:87:81:39:55:26:1c:25:d6:fd: cb:59:3e:b0:fd:fd:d1:4e:99:dc:ab:4b:a8:16:a1: a0:89:56:32:b6:95:24:25:aa:d1:8e:a4:7e:84:fb: 71:20:ca:e2:12:07:38:e7:6e:82:40:ec:66:b8:e3: bc:0c:fb:6b:38:d7:49:7f:0d:e7:c9:ba:c1:f2:32: e3:fd:69:0d:f5:14:0c:ce:e5:f9:15:21:e9:60:85: f4:aa:c8:3e:de:d9:14:e8:d6:5c:ca:0e:58:17:86: 57:5b:52:d6:73:52:af:5d:87:ab:e1:5f:5d:6a:34: b2:a2:44:ad:d5:fc:0b:61:4e:2e:57:36:85:e5:fa: 06:85:cf:07:ef:3b:55:b1:ff:22:b0:75:c8:ce:ab: 50:b2:9f:db:f5:b3:67:eb:17:ad:27:3b:cc:1a:0d: 05:50:5c:ce:48:83:12:c9:fe:ba:ea:8a:20:56:a8: 17:32:36:2d:ce:7f:ae:5d:be:79:04:14:b3:8d:1b: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:AC:BE:B4:23:79:8E:28:C9:51:DB:DB:B0:7E:49:EA:AB:83:0D X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fd:cb:d2:ff:5e:41:7d:47:3b:da:83:c2:ac:74:fb:bd:18: 4e:be:d7:24:8d:88:4d:01:e6:31:71:c2:04:91:1b:2e:c6:1b: c8:f0:bc:f2:fb:e8:1b:37:4d:cc:6e:db:a8:91:1b:ce:bb:0c: b4:5e:9d:75:7b:0e:2e:cb:2c:64:47:46:fa:cb:ea:fd:6f:91: dd:dd:4f:77:ca:73:9b:ba:fe:7e:02:ad:0b:72:8d:f5:3f:f5: cd:db:26:d4:43:ef:a3:ef:75:b5:99:c8:8a:c1:3c:c7:90:d6: 10:45:f6:a4:ca:6c:39:69:fd:88:5b:b4:bd:a0:0a:c0:c2:ed: cb:dc:74:cf:90:68:02:f5:99:b4:c1:0a:be:54:65:50:06:d9: 00:a0:dd:36:8a:f2:c1:88:d8:0d:e4:06:f9:42:82:dd:c0:69: be:b7:98:5a:76:fa:e3:e1:36:44:7e:c1:9e:94:e6:89:14:42: 7d:57:7b:72:43:19:5a:e1:95:b1:79:7a:bd:92:65:5c:91:5b: 35:90:a8:40:04:0e:7e:0e:3e:94:53:9f:07:44:86:41:20:be: 03:81:c6:ca:0a:ec:9d:d8:f0:46:1e:d4:09:7d:b8:74:ba:27: 54:f7:85:54:d2:61:55:c8:c0:c2:72:3f:08:da:0a:23:e8:9b: a3:23:7f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjQxMTIzMDAxMzE3WhcNMjQxMTMwMDAxMzE3WjAYMRYwFAYD VQQDEw02NzQxMWUxZC00ZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNnJ/qAuZVosPXrehiUCNaQAkfyNelojHQyq4phmLMtdgD1aZCJFETLLaw55 ckk5fNVSsNmI0GPo/nfYlVfdVOSHgTlVJhwl1v3LWT6w/f3RTpncq0uoFqGgiVYy tpUkJarRjqR+hPtxIMriEgc4526CQOxmuOO8DPtrONdJfw3nybrB8jLj/WkN9RQM zuX5FSHpYIX0qsg+3tkU6NZcyg5YF4ZXW1LWc1KvXYer4V9dajSyokSt1fwLYU4u VzaF5foGhc8H7ztVsf8isHXIzqtQsp/b9bNn6xetJzvMGg0FUFzOSIMSyf666oog VqgXMjYtzn+uXb55BBSzjRvTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8VrL60 I3mOKMlR29uwfknqq4MNMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn/cvS/15BfUc72oPCrHT7vRhOvtckjYhNAeYxccIEkRsuxhvI8Lzy ++gbN03MbtuokRvOuwy0Xp11ew4uyyxkR0b6y+r9b5Hd3U93ynObuv5+Aq0Lco31 P/XN2ybUQ++j73W1mciKwTzHkNYQRfakymw5af2IW7S9oArAwu3L3HTPkGgC9Zm0 wQq+VGVQBtkAoN02ivLBiNgN5Ab5QoLdwGm+t5hadvrj4TZEfsGelOaJFEJ9V3ty Qxla4ZWxeXq9kmVckVs1kKhABA5+Dj6UU58HRIZBIL4DgcbKCuyd2PBGHtQJfbh0 uidU94VU0mFVyMDCcj8I2goj6JujI382 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org