$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: ZwzCb+OocXDYMwRf1cRwXC2aTQC4iyJUoQ3jp9NE1Vw= Subject key identifier: C3:80:E4:45:18:AA:A0:B4:7C:FC:65:15:2E:B2:0D:C2:DC:CB:78:1A Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 06F0 Signing time: Fri 22 Nov 2024 21:32:15 +0000 Manifest this update: Fri 22 Nov 2024 21:32:15 +0000 Manifest next update: Fri 29 Nov 2024 21:32:15 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: 7oyu1j462m3SZje7YAH6Bvcaq9r8DPRS4hzTPUwfPPc=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: RF8Kiol9Bl+cT8NMkiixB2yHl7PyCHbWNwT/OTtymFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Nov 22 21:32:15 2024 GMT Not After : Nov 29 21:32:15 2024 GMT Subject: CN=6740f85f-bac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:59:d7:89:64:c7:d4:16:5c:6d:d1:0d:44: bb:17:c0:3f:2e:04:43:3d:d2:9f:54:bb:30:7f:69: ba:15:31:d8:7a:92:da:b6:45:3a:94:03:db:50:b7: aa:6e:15:ed:d7:d5:fa:57:77:87:e8:74:31:8c:9c: ed:ca:1c:bb:7f:99:dc:f0:e5:73:2c:d3:dc:3a:b7: c3:b8:dc:50:26:28:89:f4:1c:72:e5:fd:74:2a:88: 33:49:65:ec:5b:ef:62:ad:d2:5f:3d:e1:9b:82:75: 10:d5:a0:0e:bb:48:80:50:57:39:91:80:cf:5e:cd: 31:4f:78:fc:94:8d:a0:80:8c:eb:a6:f2:1e:ac:df: d5:9f:b7:57:86:80:9f:99:18:c8:50:7c:66:c5:77: 5f:79:6f:b8:5b:cd:ac:45:3b:2f:ed:50:8a:87:30: eb:fc:3b:58:8c:24:8f:22:ed:33:29:8e:97:d9:57: e1:10:70:46:da:bb:6d:51:97:58:c7:be:5e:9d:fd: 1c:11:b2:46:e1:71:b4:9b:f5:e3:a1:da:a5:49:9a: 53:24:32:22:c4:96:b0:d8:9e:b9:fe:a3:65:ef:bf: 78:78:bb:69:33:b4:0c:66:81:8a:e5:20:ce:81:0d: af:c5:cb:f1:3f:2f:70:28:23:3c:8a:5a:35:78:27: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:E4:45:18:AA:A0:B4:7C:FC:65:15:2E:B2:0D:C2:DC:CB:78:1A X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b3:ae:f9:ea:88:20:a1:cd:68:e8:e1:4e:5c:4a:19:71:27: cc:81:45:9e:35:60:64:3b:84:e3:b8:67:20:14:0c:84:b0:6f: 09:c7:ea:71:b9:3b:33:c3:8f:e9:55:30:50:58:0a:a7:13:4d: c0:cf:b8:bb:9c:7d:8b:da:04:35:ff:5f:7f:ac:c0:f5:42:20: 93:eb:3f:9b:ff:96:db:2b:53:fd:d0:16:ca:4f:c1:2a:f5:88: d9:5b:c9:c8:4b:03:60:7a:84:df:30:e8:a8:32:24:f5:ef:78: a2:b9:0e:d2:cc:01:52:b3:e9:7e:ef:97:2a:ed:3e:17:d4:a0: 2f:a0:0a:a4:c4:f5:84:c8:19:8b:3a:7c:a3:5c:f7:5a:70:f0: 52:24:3e:ca:82:8e:33:11:2d:7c:56:dc:e1:a9:5b:62:0c:67: 6a:89:2e:0f:4f:1b:45:a0:87:60:ef:4c:fc:ea:16:7c:7b:f6: f5:39:44:b9:e4:ce:e1:67:9e:a3:8e:b4:cc:7a:aa:c1:9b:97: 00:bb:10:7c:ae:63:4b:b6:d7:10:56:ad:c3:1c:c5:b7:73:61: 50:b2:1b:15:e0:87:db:d8:04:08:f3:12:13:68:32:c6:42:22: 9e:56:f1:c7:23:24:5e:e5:ac:25:73:33:77:5d:d3:40:6e:49: 72:5a:ed:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjQxMTIyMjEzMjE1WhcNMjQxMTI5MjEzMjE1WjAYMRYwFAYD VQQDEw02NzQwZjg1Zi1iYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgBZ14lkx9QWXG3RDUS7F8A/LgRDPdKfVLswf2m6FTHYepLatkU6lAPbULeq bhXt19X6V3eH6HQxjJztyhy7f5nc8OVzLNPcOrfDuNxQJiiJ9Bxy5f10KogzSWXs W+9irdJfPeGbgnUQ1aAOu0iAUFc5kYDPXs0xT3j8lI2ggIzrpvIerN/Vn7dXhoCf mRjIUHxmxXdfeW+4W82sRTsv7VCKhzDr/DtYjCSPIu0zKY6X2VfhEHBG2rttUZdY x75enf0cEbJG4XG0m/XjodqlSZpTJDIixJaw2J65/qNl7794eLtpM7QMZoGK5SDO gQ2vxcvxPy9wKCM8ilo1eCdFGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOA5EUY qqC0fPxlFS6yDcLcy3gaMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBs6756oggoc1o6OFOXEoZcSfMgUWeNWBkO4TjuGcgFAyEsG8Jx+px uTszw4/pVTBQWAqnE03Az7i7nH2L2gQ1/19/rMD1QiCT6z+b/5bbK1P90BbKT8Eq 9YjZW8nISwNgeoTfMOioMiT173iiuQ7SzAFSs+l+75cq7T4X1KAvoAqkxPWEyBmL OnyjXPdacPBSJD7Kgo4zES18VtzhqVtiDGdqiS4PTxtFoIdg70z86hZ8e/b1OUS5 5M7hZ56jjrTMeqrBm5cAuxB8rmNLttcQVq3DHMW3c2FQshsV4Ifb2AQI8xITaDLG QiKeVvHHIyRe5awlczN3XdNAbklyWu3p -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org