$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json) Hash identifier: MAzHn/JNXseUEJ0v3foYgBr0QhAzI31+T/EU2vt69aE= Subject key identifier: 8D:37:69:86:7F:CA:63:38:E2:A5:68:4C:08:1A:9C:7C:D4:F4:67:36 Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft Manifest number: 0899 Signing time: Fri 22 Nov 2024 20:18:53 +0000 Manifest this update: Fri 22 Nov 2024 20:18:52 +0000 Manifest next update: Fri 29 Nov 2024 20:18:52 +0000 Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: XFtOW1NPMpnbEZhMw/+yIr3jGnVYr46x1FbGrR5FoPs=) 2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: AhV20TOfrv9vpaINNSPFdetVn3yi8Rq+Sxx63x5SsR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Nov 22 20:18:52 2024 GMT Not After : Nov 29 20:18:52 2024 GMT Subject: CN=6740e72c-c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:c0:e2:ac:4b:f9:91:6e:d2:bd:76:1e:45: fd:bd:33:e8:b9:93:1c:cc:85:72:1c:99:4f:45:c8: c5:74:94:aa:e2:80:33:cf:97:a6:17:fe:df:ba:1a: 23:ec:45:ed:34:25:df:0c:09:52:ab:48:f6:d2:36: 9f:b6:0c:4d:76:f7:a4:0f:79:5e:66:77:2f:ab:be: ee:44:3c:80:d9:d1:90:30:92:f2:8c:56:f1:c0:48: 0a:02:3c:d8:dc:ad:f7:f0:fd:e4:66:2b:4b:a4:58: e9:a5:d1:5d:54:d0:fc:a6:b2:6e:24:66:c1:59:fb: 6e:4a:21:be:7e:3f:ae:7f:6a:ee:83:85:1f:3c:f9: de:94:32:af:15:0a:4f:02:64:56:e6:3a:8c:33:23: 8f:c6:38:7d:14:8c:63:9f:e3:0b:7b:41:df:e4:da: c2:cf:f7:0a:32:58:ae:92:f4:88:b6:4a:31:63:bc: ed:49:78:98:fa:15:25:64:00:1b:1a:83:ed:71:43: 92:04:af:37:b6:ca:64:35:b4:3c:51:0e:e7:06:72: c8:a7:0c:c7:f7:13:7a:a4:fd:98:fc:a7:0a:a0:49: 1d:35:ce:7f:eb:28:39:c9:68:e5:4c:72:a2:ae:e2: 0e:ab:a4:0c:dc:52:17:28:9f:d5:97:e5:05:e8:27: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:69:86:7F:CA:63:38:E2:A5:68:4C:08:1A:9C:7C:D4:F4:67:36 X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:35:2e:10:e0:ff:42:56:d3:7a:95:7e:a3:4f:85:be:52: 0e:00:4f:70:43:f4:68:c2:44:6c:03:69:33:8c:82:d7:46:8e: 77:77:db:e6:bc:4f:3a:c9:b4:d7:83:d0:8e:52:01:a3:8d:a4: 76:a9:38:bb:e2:51:b7:85:34:5b:32:91:3a:d0:6a:3f:66:e2: e6:47:5e:58:83:98:80:de:06:6f:de:03:20:a1:7f:15:ea:0c: 6a:fd:c1:57:b1:14:f5:78:92:cd:13:d8:57:3d:77:0e:1f:38: 89:8c:0a:2b:fb:5d:05:1b:47:8a:d0:ef:f4:ac:9e:61:d7:5f: 21:07:b4:83:ab:14:61:29:b2:09:15:1f:56:61:47:5f:39:86: 28:43:6c:24:19:d7:97:72:61:9a:18:ac:bf:07:91:d3:4b:96: 36:31:5c:b7:34:af:3c:f7:58:b8:cf:99:34:c1:68:07:a1:08: db:4e:95:d2:f7:7f:1d:82:8a:33:67:d1:07:8b:9a:ca:64:50: 7c:30:31:5d:ac:57:e1:fe:22:a8:81:d4:02:a9:07:1c:de:ce: 9f:55:a4:43:24:0c:f8:bd:c9:eb:0c:35:3b:72:87:f7:d8:ff: a3:92:6d:e8:4e:e4:8f:26:d8:0a:9e:6e:18:4a:d6:da:11:ca: 2d:90:76:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjQxMTIyMjAxODUyWhcNMjQxMTI5MjAxODUyWjAYMRYwFAYD VQQDEw02NzQwZTcyYy1jMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsubA4qxL+ZFu0r12HkX9vTPouZMczIVyHJlPRcjFdJSq4oAzz5emF/7fuhoj 7EXtNCXfDAlSq0j20jaftgxNdvekD3leZncvq77uRDyA2dGQMJLyjFbxwEgKAjzY 3K338P3kZitLpFjppdFdVND8prJuJGbBWftuSiG+fj+uf2rug4UfPPnelDKvFQpP AmRW5jqMMyOPxjh9FIxjn+MLe0Hf5NrCz/cKMliukvSItkoxY7ztSXiY+hUlZAAb GoPtcUOSBK83tspkNbQ8UQ7nBnLIpwzH9xN6pP2Y/KcKoEkdNc5/6yg5yWjlTHKi ruIOq6QM3FIXKJ/Vl+UF6CceOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI03aYZ/ ymM44qVoTAganHzU9Gc2MB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzAwNS84Q0E2ODI3NkFBRTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9N ZjZmWHE1bUoyaU5EM3RMQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpXjUuEOD/QlbTepV+o0+FvlIOAE9wQ/RowkRsA2kzjILXRo53d9vm vE86ybTXg9COUgGjjaR2qTi74lG3hTRbMpE60Go/ZuLmR15Yg5iA3gZv3gMgoX8V 6gxq/cFXsRT1eJLNE9hXPXcOHziJjAor+10FG0eK0O/0rJ5h118hB7SDqxRhKbIJ FR9WYUdfOYYoQ2wkGdeXcmGaGKy/B5HTS5Y2MVy3NK8891i4z5k0wWgHoQjbTpXS 938dgoozZ9EHi5rKZFB8MDFdrFfh/iKogdQCqQcc3s6fVaRDJAz4vcnrDDU7cof3 2P+jkm3oTuSPJtgKnm4YStbaEcotkHas -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org