$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: zf/3ej2ewRRKnmi8Ni5m6mnYAcmqIdjDP13DIhjw5tY= Subject key identifier: 41:5B:F0:D9:89:D9:36:1D:78:BA:20:BA:3D:67:8A:DD:ED:E1:97:26 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 018C Signing time: Sat 23 Nov 2024 01:55:07 +0000 Manifest this update: Sat 23 Nov 2024 01:55:07 +0000 Manifest next update: Sat 30 Nov 2024 01:55:07 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: diiEC2ygesK2MTtZ/LTXtTRzMsxbyVZ88VJRyVqKkNQ=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Nov 23 01:55:07 2024 GMT Not After : Nov 30 01:55:07 2024 GMT Subject: CN=674135fb-2d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a3:d3:24:38:0c:32:f3:28:32:4f:f3:d2:09: 15:7d:88:99:34:f9:54:3b:6f:98:8d:39:4c:2f:22: 73:83:15:43:43:2a:a6:27:7a:65:32:27:3a:38:00: f6:15:2e:63:4c:a6:c3:02:0f:64:62:16:ca:0d:70: b7:89:c7:91:2a:ff:d1:bf:0a:64:a9:3b:2c:6e:5e: 25:38:3b:8c:6c:9b:08:a6:20:c2:8f:68:56:0a:a9: 22:28:1f:ec:f8:6b:d5:b2:7f:ec:55:1a:e0:e6:e0: fc:e9:b7:a7:f6:c2:a0:0c:05:78:7a:09:db:de:9e: a2:51:ce:d7:71:f4:cf:10:39:55:d1:61:9e:4b:ab: f3:1b:2d:e8:a6:04:ef:af:e9:27:bd:40:3a:43:f2: d5:b4:eb:92:83:02:c4:f8:56:0f:23:91:e3:bf:bf: f2:44:ca:6d:94:e4:cd:7f:a1:88:12:fb:04:21:e8: 87:ce:fc:f9:5c:ee:62:88:e7:b8:4b:62:2a:2b:97: ed:63:ce:3a:bd:2b:92:bb:0a:f7:23:2e:5e:10:6e: 00:17:e9:db:3f:e7:81:3f:3a:f2:32:71:88:71:f2: 39:11:83:99:da:0e:dd:dd:95:42:a7:00:09:fb:47: ae:99:ba:f8:cb:b5:9a:51:31:1a:b9:09:b8:a5:58: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5B:F0:D9:89:D9:36:1D:78:BA:20:BA:3D:67:8A:DD:ED:E1:97:26 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1e:77:2d:64:06:13:50:e8:f1:e7:33:45:04:67:c9:54:89: a3:af:16:3e:6f:b7:cd:05:9a:51:76:73:ff:14:7c:ca:f9:99: 0e:5d:49:36:c2:7a:db:dc:88:db:aa:ba:db:8e:8c:b8:b3:f8: 23:79:b7:f0:30:e8:5e:b3:a7:13:90:b2:40:ac:c6:d8:c0:8c: ea:41:7e:92:fa:eb:a1:f2:6a:c8:ad:22:ef:11:0c:b5:2c:55: eb:77:33:17:20:eb:92:5d:e3:09:97:36:40:a8:b4:93:9a:b5: 7d:0a:f8:31:20:b0:98:06:ad:34:1d:e9:83:29:de:51:df:f9: ac:10:bc:85:e3:ce:b2:42:7b:d0:1b:29:cc:f4:c9:61:a2:75: 6e:7d:53:18:77:9d:82:21:f8:eb:4e:c5:2f:cd:6a:73:ba:b1: 50:44:a4:04:39:f7:82:59:8c:ac:58:16:0f:16:91:08:2b:5f: ae:f7:2d:18:fd:98:53:41:fa:79:3d:d8:38:43:66:dd:95:46: 53:b7:08:69:b4:aa:67:ce:fc:87:75:e7:64:a0:02:53:5c:34: 3a:aa:ee:30:e4:25:5f:e4:a7:66:c2:d1:d4:0d:31:64:cc:15: 87:cb:d1:32:91:4f:5d:15:7e:0f:c6:74:28:7f:7a:06:59:83: e6:e9:fd:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjQxMTIzMDE1NTA3WhcNMjQxMTMwMDE1NTA3WjAYMRYwFAYD VQQDEw02NzQxMzVmYi0yZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8aPTJDgMMvMoMk/z0gkVfYiZNPlUO2+YjTlMLyJzgxVDQyqmJ3plMic6OAD2 FS5jTKbDAg9kYhbKDXC3iceRKv/RvwpkqTssbl4lODuMbJsIpiDCj2hWCqkiKB/s +GvVsn/sVRrg5uD86ben9sKgDAV4egnb3p6iUc7XcfTPEDlV0WGeS6vzGy3opgTv r+knvUA6Q/LVtOuSgwLE+FYPI5Hjv7/yRMptlOTNf6GIEvsEIeiHzvz5XO5iiOe4 S2IqK5ftY846vSuSuwr3Iy5eEG4AF+nbP+eBPzryMnGIcfI5EYOZ2g7d3ZVCpwAJ +0eumbr4y7WaUTEauQm4pVjnXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFb8NmJ 2TYdeLoguj1nit3t4ZcmMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHnctZAYTUOjx5zNFBGfJVImjrxY+b7fNBZpRdnP/FHzK+ZkOXUk2 wnrb3Ijbqrrbjoy4s/gjebfwMOhes6cTkLJArMbYwIzqQX6S+uuh8mrIrSLvEQy1 LFXrdzMXIOuSXeMJlzZAqLSTmrV9CvgxILCYBq00HemDKd5R3/msELyF486yQnvQ GynM9MlhonVufVMYd52CIfjrTsUvzWpzurFQRKQEOfeCWYysWBYPFpEIK1+u9y0Y /ZhTQfp5Pdg4Q2bdlUZTtwhptKpnzvyHdedkoAJTXDQ6qu4w5CVf5KdmwtHUDTFk zBWHy9EykU9dFX4PxnQof3oGWYPm6f1F -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org