$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: 8gpUsbLPCjZ9g+c8GYoECjrTy7oAujhSkO5Nsl60qGQ= Subject key identifier: 86:AF:0C:4A:64:54:F7:D7:86:A4:0F:91:4B:D6:FB:35:18:D4:CA:33 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 17F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 17DD Signing time: Fri 22 Nov 2024 16:32:32 +0000 Manifest this update: Fri 22 Nov 2024 16:32:31 +0000 Manifest next update: Fri 29 Nov 2024 16:32:31 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: xSoRUOgmizPBOrRIOCShSBoTqmC2qEdf9qnt9lqfPss=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: UPE4ONUYiB9IUbFVoX9t6zmAjIxAIbTylnVeyGAVzwA=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: ZHOFogEh1vpLTCZhDm8iBsCQdlJRg0r2JfS1aS+eOH8=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: iYePZzkNGjjPL+JbYS9SYTvdUeMFDphoW+4L0Y9Rl8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 22 16:32:31 2024 GMT Not After : Nov 29 16:32:31 2024 GMT Subject: CN=6740b220-e7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:94:cc:2c:8e:94:6a:eb:71:6e:ce:1d:c1: 8c:8d:4e:02:d5:99:91:f5:18:c3:ed:bc:b8:dd:34: be:a3:ae:5c:5a:81:0f:5e:98:2f:d9:22:9d:13:7a: 6b:f0:93:ed:03:03:02:b6:8f:61:ef:88:46:3b:b6: fc:08:18:17:a1:62:54:ec:33:cc:2e:65:f5:d7:88: 92:8e:d7:83:99:01:17:2e:1d:35:55:33:04:1b:a7: ae:8f:8c:ba:32:cb:d1:be:73:72:7b:e5:75:d8:89: c1:6a:c1:f0:df:8e:98:48:4f:02:e2:5e:73:e9:2b: dc:18:9f:26:b1:80:44:9f:27:2f:07:e7:a1:01:1f: 8a:76:2a:91:9b:06:04:2f:6d:ad:33:59:a2:58:7f: 85:ba:05:24:53:0b:73:cf:66:7d:45:81:6a:ea:db: 8e:d2:3f:6a:81:2d:c6:a2:0f:30:26:0d:6e:6b:57: 21:13:f0:14:4c:69:cc:f4:1c:a7:d7:29:fe:c6:ef: bf:a8:4c:8a:b0:f6:81:c8:c0:40:3a:0e:f7:81:85: 75:e0:21:87:6d:f9:05:2a:1f:0f:83:0a:7c:b8:23: e2:4e:6d:1b:de:a6:b2:90:ba:72:b9:2e:7c:87:1f: 8b:3e:d6:0c:43:1e:03:c2:32:6e:fd:5e:34:a2:87: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:0C:4A:64:54:F7:D7:86:A4:0F:91:4B:D6:FB:35:18:D4:CA:33 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8c:3f:00:a1:3b:ba:5b:61:54:80:cb:63:ac:bb:ac:df:22: 30:9b:7d:2c:9e:91:dd:d2:1e:42:39:b0:a2:94:b8:8f:dc:4d: 8e:c7:12:81:d1:03:9c:58:12:7e:f0:04:4d:b6:ad:ba:4c:1a: 49:0f:14:f8:01:f8:20:b8:df:7b:32:a8:b2:6c:52:da:a9:55: be:3d:54:54:72:c9:c1:c7:99:69:5e:c5:1f:fb:3f:17:2c:df: e8:a8:9e:f0:2d:51:75:af:6c:01:02:df:eb:e4:b0:c9:21:d9: a8:e1:97:ea:8e:c0:3a:0f:10:69:21:9c:1f:ff:08:2e:68:ab: 73:93:d6:36:3e:ff:94:d5:3b:75:a1:33:3f:92:fb:9e:0d:0c: a9:3c:f3:b0:f8:22:29:b2:f4:72:33:37:0a:6c:7f:56:2f:37: da:e2:0b:83:4d:19:0a:60:42:c7:87:d6:73:50:25:e7:f9:d0: a5:27:4e:5f:a7:3d:b0:08:dd:fb:0e:8e:c7:ed:74:2b:c8:8b: 74:ed:09:3e:6c:98:33:e7:71:0c:9b:2b:f7:31:45:57:b4:05: 09:4a:7c:a8:e5:ab:b1:5a:09:10:5a:2d:ea:18:0f:97:96:43: 7a:fd:9e:da:07:77:12:b9:8e:37:2e:42:f6:2a:28:c6:ab:a1: d5:79:58:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjQxMTIyMTYzMjMxWhcNMjQxMTI5MTYzMjMxWjAYMRYwFAYD VQQDEw02NzQwYjIyMC1lN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgGUzCyOlGrrcW7OHcGMjU4C1ZmR9RjD7by43TS+o65cWoEPXpgv2SKdE3pr 8JPtAwMCto9h74hGO7b8CBgXoWJU7DPMLmX114iSjteDmQEXLh01VTMEG6euj4y6 MsvRvnNye+V12InBasHw346YSE8C4l5z6SvcGJ8msYBEnycvB+ehAR+KdiqRmwYE L22tM1miWH+FugUkUwtzz2Z9RYFq6tuO0j9qgS3Gog8wJg1ua1chE/AUTGnM9Byn 1yn+xu+/qEyKsPaByMBAOg73gYV14CGHbfkFKh8Pgwp8uCPiTm0b3qaykLpyuS58 hx+LPtYMQx4DwjJu/V40oocsawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIavDEpk VPfXhqQPkUvW+zUY1MozMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHjD8AoTu6W2FUgMtjrLus3yIwm30snpHd0h5CObCilLiP3E2OxxKB 0QOcWBJ+8ARNtq26TBpJDxT4AfgguN97MqiybFLaqVW+PVRUcsnBx5lpXsUf+z8X LN/oqJ7wLVF1r2wBAt/r5LDJIdmo4ZfqjsA6DxBpIZwf/wguaKtzk9Y2Pv+U1Tt1 oTM/kvueDQypPPOw+CIpsvRyMzcKbH9WLzfa4guDTRkKYELHh9ZzUCXn+dClJ05f pz2wCN37Do7H7XQryIt07Qk+bJgz53EMmyv3MUVXtAUJSnyo5auxWgkQWi3qGA+X lkN6/Z7aB3cSuY43LkL2KijGq6HVeVgu -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org