$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: EXihE/1YCNGJVhrhYKCMucA0bSnfQ/7TnP0kMb3Zdws= Subject key identifier: 2B:85:82:F2:90:E4:AE:E8:9F:07:99:39:BD:1B:D9:6B:46:F0:A6:EE Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 7A Signing time: Sat 23 Nov 2024 04:46:57 +0000 Manifest this update: Sat 23 Nov 2024 04:46:56 +0000 Manifest next update: Sat 30 Nov 2024 04:46:56 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: dWQL4ZRlPE8cKFT5DMkaEtNpYacsctxdTlegNveBKgE=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: LnyEnapgR4NWJ58uRDjQWaBGFO6rX2ZjgINHA+tVi+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Nov 23 04:46:56 2024 GMT Not After : Nov 30 04:46:56 2024 GMT Subject: CN=67415e41-50fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:49:bd:9c:f9:11:9c:97:54:f8:f3:19:a5:a9: 98:ed:2e:67:52:64:73:ff:82:3d:1a:a6:01:17:d3: f2:fa:d8:9b:71:03:9d:e0:79:51:17:d6:3a:2b:35: e6:7b:71:d2:b5:9c:e4:57:d1:fc:df:4e:ab:b2:91: e6:15:e5:1e:49:e3:f8:5c:6a:5f:33:bf:01:ad:83: 8c:af:78:33:52:2e:f5:64:6d:79:2e:73:10:d4:c2: 05:a8:04:1a:9b:45:df:1b:3d:97:d2:e4:40:2d:2c: b6:20:02:53:8e:ad:ec:66:2b:6d:29:70:dd:a2:a2: 9b:7a:da:79:bc:80:19:af:7a:52:d7:4f:be:da:d7: 3a:1c:fb:56:10:58:60:5d:1a:a8:83:29:31:9e:e7: bb:60:6c:8c:c4:c3:a2:0f:fe:e0:53:41:f1:73:dd: 41:20:b6:1c:76:5d:b2:00:bb:87:bb:72:cf:cd:50: 63:f0:ef:b7:44:6c:e8:74:f2:6e:52:25:ee:7b:ec: 3f:c7:17:1a:62:68:80:18:6d:dc:67:1f:32:64:83: 3a:cb:f2:56:7e:76:95:6a:c0:7b:78:c9:15:43:14: df:7c:2e:00:c5:7f:99:66:d0:41:86:35:a7:5d:ba: f1:c6:02:93:cf:00:1d:8f:d6:78:b6:60:e3:06:28: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:85:82:F2:90:E4:AE:E8:9F:07:99:39:BD:1B:D9:6B:46:F0:A6:EE X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:92:f0:2c:50:ec:cd:69:ff:c8:37:70:04:a0:51:13:19: 47:e6:4a:10:82:31:0a:43:28:57:bd:e1:4e:b5:e2:04:a7:68: 04:9d:80:96:9b:5d:43:46:78:b9:5d:dd:02:a7:14:71:df:87: 7a:25:23:ac:3c:bd:49:7f:7c:4d:b1:db:47:d4:6f:b4:43:63: fb:a3:43:0d:12:c9:a0:81:ce:eb:89:06:d1:33:0a:73:8f:ef: b1:54:2e:47:c5:83:62:7d:8e:26:09:b2:c6:55:b7:f0:fe:6a: 28:99:1a:5a:c9:b9:94:96:d2:dc:b5:33:70:a0:98:36:4a:5e: 22:9e:09:8c:8f:01:3f:f1:d1:03:90:5f:6e:0f:6b:98:32:da: 6f:eb:e2:41:25:1e:91:02:c7:c6:89:0c:d9:af:b5:57:1b:aa: 77:74:df:e4:b9:70:77:de:bc:5f:1e:4e:9b:34:7e:b2:80:35: bf:48:df:36:28:e2:79:2b:72:f0:b1:dc:62:ea:28:d1:83:43: ee:91:3c:10:eb:b8:b6:e0:1e:87:b9:26:4e:86:15:13:1c:31: 35:da:d3:20:f0:11:5a:26:b1:0d:e8:1d:1f:75:c7:56:fb:df: 77:ba:56:17:15:34:d4:67:b0:0b:3d:ff:d9:06:41:24:2c:04: b6:f7:c3:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTJCMTExMC8GA1UEBRMoMUE0NTI0N0IzQTFCMDI2OTI3MUQ3NDZDNUE1RkFDMDE0 NUZGMzMyMjAeFw0yNDExMjMwNDQ2NTZaFw0yNDExMzAwNDQ2NTZaMBgxFjAUBgNV BAMTDTY3NDE1ZTQxLTUwZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpSb2c+RGcl1T48xmlqZjtLmdSZHP/gj0apgEX0/L62JtxA53geVEX1jorNeZ7 cdK1nORX0fzfTquykeYV5R5J4/hcal8zvwGtg4yveDNSLvVkbXkucxDUwgWoBBqb Rd8bPZfS5EAtLLYgAlOOrexmK20pcN2iopt62nm8gBmvelLXT77a1zoc+1YQWGBd GqiDKTGe57tgbIzEw6IP/uBTQfFz3UEgthx2XbIAu4e7cs/NUGPw77dEbOh08m5S Je577D/HFxpiaIAYbdxnHzJkgzrL8lZ+dpVqwHt4yRVDFN98LgDFf5lm0EGGNadd uvHGApPPAB2P1ni2YOMGKC8dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK4WC8pDk ruifB5k5vRvZa0bwpu4wHwYDVR0jBBgwFoAUGkUkezobAmknHXRsWl+sAUX/MyIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMkIxLzE5QTgyRjY2RjNC NTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2tVa2V6b2JBbWtuSFhSc1dsLXNBVVhfTXlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MkIxLzE5QTgyRjY2RjNCNTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1r bkhYUnNXbC1zQVVYX015SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzDkvAsUOzNaf/IN3AEoFETGUfmShCCMQpDKFe94U614gSnaASdgJab XUNGeLld3QKnFHHfh3olI6w8vUl/fE2x20fUb7RDY/ujQw0SyaCBzuuJBtEzCnOP 77FULkfFg2J9jiYJssZVt/D+aiiZGlrJuZSW0ty1M3CgmDZKXiKeCYyPAT/x0QOQ X24Pa5gy2m/r4kElHpECx8aJDNmvtVcbqnd03+S5cHfevF8eTps0frKANb9I3zYo 4nkrcvCx3GLqKNGDQ+6RPBDruLbgHoe5Jk6GFRMcMTXa0yDwEVomsQ3oHR91x1b7 33e6VhcVNNRnsAs9/9kGQSQsBLb3wyc= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org