$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft File: GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json) Hash identifier: xz3L8U7V4TxZ31LTe2l6JcvqhUMJEeikZY3fgepo/pg= Subject key identifier: 4E:93:C1:1B:49:71:A2:FF:46:18:CC:21:6A:49:50:CF:93:15:46:F7 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft Manifest number: 060C Signing time: Wed 20 Nov 2024 22:16:51 +0000 Manifest this update: Wed 20 Nov 2024 22:16:50 +0000 Manifest next update: Wed 27 Nov 2024 22:16:50 +0000 Files and hashes: 1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: GQBxrkXKEYaQc1xN/BliXq3EsXjnRrXRVXB2lfF+/6g=) 2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Nov 20 22:16:50 2024 GMT Not After : Nov 27 22:16:50 2024 GMT Subject: CN=673e5fd3-165f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:92:b7:14:49:b8:8c:85:6a:5d:a7:7e:bf: d0:28:a1:d9:ad:3a:e0:0b:20:3a:56:95:3b:fc:4e: 9c:45:26:32:2c:4f:ee:5f:e6:f8:d6:4d:14:92:dd: d1:eb:b2:60:ca:a6:57:10:44:cc:a4:4d:c6:04:59: 4f:44:20:42:de:88:b1:73:51:b8:bb:8f:a1:28:e7: 90:72:44:d0:8a:4b:66:67:a4:ab:e8:f6:8c:6d:7f: 97:f4:6f:50:5e:b6:2d:f1:c5:ef:1f:df:8c:97:8d: f6:48:5b:6c:19:9d:5c:ad:62:0e:db:81:62:8f:26: d9:fc:d8:bb:4a:37:f9:97:f1:1b:70:b0:4e:02:cb: 5a:9c:9f:96:42:01:04:0c:00:e3:c5:74:7f:0e:ab: 5f:8b:9f:72:f0:65:a2:cc:d9:a1:37:a5:e7:2c:8b: 6c:6a:b4:51:7c:b1:f3:2f:81:e4:a8:7c:09:ba:cf: f3:70:da:d3:59:fc:b4:da:4e:97:e2:f1:4e:b9:6f: a1:a7:ad:3c:e7:5d:76:29:2d:a3:0f:13:b7:28:10: 3f:70:e1:9d:e5:6a:20:68:31:f5:3d:e5:80:52:d5: 24:90:4f:1a:0d:c6:23:0b:75:be:9d:00:64:59:96: 3b:68:3c:e5:db:d0:33:3f:7b:ba:74:76:6d:7d:05: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:C1:1B:49:71:A2:FF:46:18:CC:21:6A:49:50:CF:93:15:46:F7 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3c:e1:ce:c0:b9:ec:dc:f9:ea:c7:d7:de:40:0c:7e:e0:ba: 82:ec:2b:e6:cf:79:7f:7b:94:46:8f:6a:e9:cf:44:ec:cd:a2: 6d:ee:50:58:d6:fa:7c:35:65:28:a2:78:07:93:a8:9c:bd:2c: 13:ce:af:a0:84:b2:71:9b:6d:29:40:7f:e7:31:a9:a7:cd:af: 6c:9d:ba:16:a0:63:fc:21:2b:7d:da:3d:25:da:e1:15:c3:68: 70:f4:81:0e:f5:c8:22:8b:cf:6d:4f:ef:30:c2:bd:12:af:1b: 6d:e3:80:0a:9b:ba:3c:f8:61:bc:f0:6b:77:41:85:e7:18:09: b8:ad:53:e3:7d:2d:64:6d:f2:44:33:6b:60:4a:05:70:7c:24: c8:1b:0b:39:25:02:4a:7d:8e:e9:25:2f:52:49:6d:ed:7e:36: 6f:57:ca:b6:9a:a9:bc:76:cc:67:f2:93:e0:c9:4a:25:ee:15: ad:c0:4a:48:0c:dc:28:dd:e6:1e:51:3d:dd:75:5c:6a:e5:99: 5a:3a:30:cf:50:0b:9e:dd:89:0b:08:73:c6:37:1c:ee:9a:c1: 9f:17:cb:35:75:bf:88:28:34:1b:ba:82:47:d3:68:df:30:7f: d1:64:54:4c:7d:88:96:96:fa:b9:59:74:f5:83:32:ea:81:ac: 01:13:c8:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjQxMTIwMjIxNjUwWhcNMjQxMTI3MjIxNjUwWjAYMRYwFAYD VQQDEw02NzNlNWZkMy0xNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA2StxRJuIyFal2nfr/QKKHZrTrgCyA6VpU7/E6cRSYyLE/uX+b41k0Ukt3R 67JgyqZXEETMpE3GBFlPRCBC3oixc1G4u4+hKOeQckTQiktmZ6Sr6PaMbX+X9G9Q XrYt8cXvH9+Ml432SFtsGZ1crWIO24FijybZ/Ni7Sjf5l/EbcLBOAstanJ+WQgEE DADjxXR/Dqtfi59y8GWizNmhN6XnLItsarRRfLHzL4HkqHwJus/zcNrTWfy02k6X 4vFOuW+hp6085112KS2jDxO3KBA/cOGd5WogaDH1PeWAUtUkkE8aDcYjC3W+nQBk WZY7aDzl29AzP3u6dHZtfQW1KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6TwRtJ caL/RhjMIWpJUM+TFUb3MB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl SWJ2OFVzem9rSlFSUEdfS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyPOHOwLns3Pnqx9feQAx+4LqC7Cvmz3l/e5RGj2rpz0TszaJt7lBY 1vp8NWUoongHk6icvSwTzq+ghLJxm20pQH/nMamnza9snboWoGP8ISt92j0l2uEV w2hw9IEO9cgii89tT+8wwr0Srxtt44AKm7o8+GG88Gt3QYXnGAm4rVPjfS1kbfJE M2tgSgVwfCTIGws5JQJKfY7pJS9SSW3tfjZvV8q2mqm8dsxn8pPgyUol7hWtwEpI DNwo3eYeUT3ddVxq5ZlaOjDPUAue3YkLCHPGNxzumsGfF8s1db+IKDQbuoJH02jf MH/RZFRMfYiWlvq5WXT1gzLqgawBE8g0 -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:37 2024 by rpki-client on console-ams.rpki-client.org