$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: +C9p9QYM4GjHwkBRxicY0InmW/g+cGcQm8ZBm2y9Qjo= Subject key identifier: 71:5E:96:F3:A3:9B:59:B3:88:FA:23:93:BE:D8:DC:84:46:4E:F5:F7 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0CA8 Signing time: Sun 24 Nov 2024 17:55:53 +0000 Manifest this update: Sun 24 Nov 2024 17:55:52 +0000 Manifest next update: Sun 01 Dec 2024 17:55:52 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: ODi2rZaTAOxr+F0uqx0N0aOCi3XfODBJIDCuIRUjU2Q=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: A3euC+JMbFaWVx5aIIYMhJy2o8x3eQCdnzPijIO/OPI=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: /lCYyr/ggNz4m2hSHph8iFrUwvAmVOifZgcsV4MIeXY=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: dYlMryTZgDYlMwbzeqzaAmjgFNBL4klqki3/QbfzqsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Nov 24 17:55:52 2024 GMT Not After : Dec 1 17:55:52 2024 GMT Subject: CN=674368a8-46df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:9f:48:16:5a:8c:fb:16:9c:21:9b:c8:06: 51:08:59:7c:ea:16:0d:f3:40:d8:7b:61:1f:0a:fa: 28:0a:61:68:fe:d5:7f:ae:fe:7c:ac:ef:12:de:d7: 14:81:59:ae:7f:9b:ca:59:ef:d3:db:e1:a5:e0:c0: cd:b8:ea:da:de:ba:8e:22:e0:85:f6:ef:f8:2c:93: da:c0:fc:5f:ee:62:b0:b7:35:9d:5b:6d:20:1b:98: eb:6e:24:35:fd:c1:48:94:e5:5f:fe:ca:38:a1:b0: 93:da:68:e0:4d:43:a6:cc:14:e4:08:0b:39:ae:a5: 1d:c2:21:f7:c2:ef:bd:51:ca:59:62:f2:bf:63:c1: 86:7a:8f:da:51:a2:b7:9a:d7:f7:7b:35:82:19:c4: 2c:90:d9:c0:f1:63:ab:c3:d7:ef:aa:f6:64:b3:25: 99:40:21:7e:58:2f:31:8e:fd:06:39:c3:e5:3b:2e: ec:c6:5a:20:bc:20:52:0a:b9:34:03:60:a1:8d:1e: 8f:84:28:0b:d0:d4:ee:5c:7d:85:ac:b2:b7:1e:f0: c3:a4:1a:d5:67:00:28:eb:e2:1e:65:79:ad:64:1c: 51:4a:be:48:8e:0c:d1:b2:43:04:12:26:73:58:c0: 53:da:a8:72:e7:d1:33:e7:7a:ab:84:06:cd:ed:8e: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:96:F3:A3:9B:59:B3:88:FA:23:93:BE:D8:DC:84:46:4E:F5:F7 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8a:48:71:10:52:66:60:54:95:a6:73:ac:ff:38:e3:96:85: 11:99:dd:01:b6:cd:95:88:bc:97:2a:62:e7:22:07:2c:db:be: 11:88:1c:6d:98:1a:3d:54:2b:21:c6:c5:42:c3:15:72:2d:98: 10:0c:32:92:e8:0c:ed:c1:9e:52:d5:cc:05:ac:10:d2:e0:18: 90:87:ab:9b:ea:48:ed:91:8b:9c:5a:e8:ef:b7:6e:50:03:c0: 14:99:4c:c1:14:05:0d:8b:ea:eb:05:a4:a9:a3:dd:91:d3:67: 57:a3:c3:4d:39:d7:e5:72:5a:ce:b0:5d:e0:cb:15:40:b3:63: 53:af:33:5f:d8:78:ee:10:39:f1:ad:4f:c8:25:28:16:5d:84: 24:29:24:61:5f:16:14:da:8c:5f:4a:08:af:66:96:ba:29:db: bb:68:07:3b:1f:3e:cc:af:ad:c2:90:45:c0:99:6b:7b:a5:3a: 04:2f:3a:a4:ba:f8:35:b8:a3:6b:16:96:ca:48:a1:b3:8a:35: ab:60:f2:26:eb:86:b3:ef:5d:39:e7:30:c6:31:04:11:2d:24: 09:6d:77:1e:bb:ed:30:42:2f:ee:1f:24:d9:42:fb:e1:23:7e: cb:9e:38:8b:a3:dd:e1:c8:38:05:54:af:95:51:a3:ba:f3:75: 77:8f:3d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjQxMTI0MTc1NTUyWhcNMjQxMjAxMTc1NTUyWjAYMRYwFAYD VQQDEw02NzQzNjhhOC00NmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4afSBZajPsWnCGbyAZRCFl86hYN80DYe2EfCvooCmFo/tV/rv58rO8S3tcU gVmuf5vKWe/T2+Gl4MDNuOra3rqOIuCF9u/4LJPawPxf7mKwtzWdW20gG5jrbiQ1 /cFIlOVf/so4obCT2mjgTUOmzBTkCAs5rqUdwiH3wu+9UcpZYvK/Y8GGeo/aUaK3 mtf3ezWCGcQskNnA8WOrw9fvqvZksyWZQCF+WC8xjv0GOcPlOy7sxlogvCBSCrk0 A2ChjR6PhCgL0NTuXH2FrLK3HvDDpBrVZwAo6+IeZXmtZBxRSr5IjgzRskMEEiZz WMBT2qhy59Ez53qrhAbN7Y7RQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFelvOj m1mziPojk77Y3IRGTvX3MB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuikhxEFJmYFSVpnOs/zjjloURmd0Bts2ViLyXKmLnIgcs274RiBxt mBo9VCshxsVCwxVyLZgQDDKS6AztwZ5S1cwFrBDS4BiQh6ub6kjtkYucWujvt25Q A8AUmUzBFAUNi+rrBaSpo92R02dXo8NNOdflclrOsF3gyxVAs2NTrzNf2HjuEDnx rU/IJSgWXYQkKSRhXxYU2oxfSgivZpa6Kdu7aAc7Hz7Mr63CkEXAmWt7pToELzqk uvg1uKNrFpbKSKGzijWrYPIm64az71055zDGMQQRLSQJbXceu+0wQi/uHyTZQvvh I37LnjiLo93hyDgFVK+VUaO683V3jz1b -----END CERTIFICATE-----Generated at Sun Nov 24 20:09:42 2024 by rpki-client on console-ams.rpki-client.org