$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: x7x/sQq6s6nqSPrOM+mQQn4T5sVqlfp9hy2phu0KYkw= Subject key identifier: E0:1A:3F:34:C5:10:ED:D4:6B:41:29:6D:84:06:D9:D7:D2:EC:5B:83 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 341E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 341E Signing time: Fri 22 Nov 2024 15:20:28 +0000 Manifest this update: Fri 22 Nov 2024 15:20:27 +0000 Manifest next update: Fri 29 Nov 2024 15:20:27 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: ctFNymgW0gN2IhimVl84sKQ7877kt1kHTBtHB0ptai0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13342 (0x341e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: Nov 22 15:20:27 2024 GMT Not After : Nov 29 15:20:27 2024 GMT Subject: CN=6740a13c-cdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:71:6a:6b:1b:ac:5c:60:cb:25:18:92:fe: 25:d9:0a:d5:bb:c5:01:3c:a0:f9:b5:c5:64:d1:74: 35:31:f5:64:53:28:2b:d4:2a:b1:5f:62:30:23:58: 08:11:71:d9:b5:55:c7:53:a1:41:a6:98:0f:bf:e2: d9:d7:e7:56:9e:dd:29:c3:0b:96:2a:fe:78:32:08: 35:55:1c:7f:f3:b6:f0:a1:1e:dc:1f:a8:68:4a:0c: 4f:5c:d5:d8:7a:2f:f2:3c:f5:c9:cd:be:07:07:96: 8f:15:8f:96:fb:d1:e4:4c:e2:03:e2:51:2d:9a:7c: c1:e1:c1:7f:03:5b:b9:e5:41:56:75:6c:aa:a2:8d: a8:26:8d:c2:ec:c6:89:20:4f:0d:20:73:04:98:b5: 1d:f2:de:d4:97:90:e3:bb:a6:37:d8:26:63:31:ed: 22:2b:95:d4:dc:ea:e4:cb:21:04:e3:fa:2c:25:1e: 23:f5:b5:d5:15:e9:4c:b9:fc:79:a6:8e:f4:78:ff: d2:3a:35:34:02:df:e1:d6:d4:16:b9:bf:b4:f3:02: 7e:c9:91:3e:e2:5b:b5:7b:1b:51:cb:8c:6f:02:f5: 7e:c9:09:fc:ab:72:90:bd:47:99:5a:89:ef:1e:36: a5:64:9c:c6:2b:eb:e4:85:9f:f7:2f:d6:05:a4:58: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1A:3F:34:C5:10:ED:D4:6B:41:29:6D:84:06:D9:D7:D2:EC:5B:83 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:96:5a:27:e0:a6:d1:83:09:ae:e9:7f:91:69:6d:cd:bd:3d: 39:07:fc:f6:2f:36:8c:e7:b7:24:55:b7:b0:ce:a1:23:27:31: 8c:ab:fd:02:ec:4e:0b:b3:27:5c:48:ad:59:86:b1:af:08:89: 05:d2:42:f1:33:09:7e:52:6b:7c:a1:4a:24:90:eb:b2:15:28: f8:83:83:37:f2:2b:94:e7:c3:fc:38:63:4d:fe:ed:e4:23:b8: 3b:3b:ea:2b:b7:17:d1:98:e8:d3:66:56:13:b9:8d:92:cb:1d: af:64:79:83:bc:71:5b:d9:aa:33:6b:cc:1c:71:cf:5a:15:2c: 7a:34:d4:94:eb:85:39:09:68:96:00:25:72:92:ee:a6:fb:05: 0c:4f:f4:78:78:0f:8d:8a:92:17:5b:d1:02:9a:af:94:7c:ce: 41:3b:8e:56:87:3f:0c:c4:1f:b1:9e:65:bf:e1:ca:cb:b1:c1: df:36:e2:bf:4a:64:97:cc:cf:ee:2f:1f:4e:03:27:e7:5c:05: 05:3b:e0:9a:96:08:60:98:b9:71:5d:07:de:c1:a9:18:41:ba: da:1c:10:04:e8:4c:f3:de:84:45:26:b3:94:4d:3d:f5:a4:39: 0b:7e:85:20:7d:3d:2d:73:7b:83:fe:d2:e3:9d:d4:91:b7:3e: 02:b6:0f:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjQxMTIyMTUyMDI3WhcNMjQxMTI5MTUyMDI3WjAYMRYwFAYD VQQDEw02NzQwYTEzYy1jZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuxxamsbrFxgyyUYkv4l2QrVu8UBPKD5tcVk0XQ1MfVkUygr1CqxX2IwI1gI EXHZtVXHU6FBppgPv+LZ1+dWnt0pwwuWKv54Mgg1VRx/87bwoR7cH6hoSgxPXNXY ei/yPPXJzb4HB5aPFY+W+9HkTOID4lEtmnzB4cF/A1u55UFWdWyqoo2oJo3C7MaJ IE8NIHMEmLUd8t7Ul5Dju6Y32CZjMe0iK5XU3OrkyyEE4/osJR4j9bXVFelMufx5 po70eP/SOjU0At/h1tQWub+08wJ+yZE+4lu1extRy4xvAvV+yQn8q3KQvUeZWonv HjalZJzGK+vkhZ/3L9YFpFgSnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAaPzTF EO3Ua0EpbYQG2dfS7FuDMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2llon4KbRgwmu6X+RaW3NvT05B/z2LzaM57ckVbewzqEjJzGMq/0C 7E4LsydcSK1ZhrGvCIkF0kLxMwl+Umt8oUokkOuyFSj4g4M38iuU58P8OGNN/u3k I7g7O+ortxfRmOjTZlYTuY2Syx2vZHmDvHFb2aoza8wccc9aFSx6NNSU64U5CWiW ACVyku6m+wUMT/R4eA+NipIXW9ECmq+UfM5BO45Whz8MxB+xnmW/4crLscHfNuK/ SmSXzM/uLx9OAyfnXAUFO+CalghgmLlxXQfewakYQbraHBAE6Ezz3oRFJrOUTT31 pDkLfoUgfT0tc3uD/tLjndSRtz4Ctg8p -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:13 2024 by rpki-client on console-ams.rpki-client.org