$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: uqv0i3uUIS8hbf1B5ecUb8eAAv00UUMwoRIRxlIQ/uk= Subject key identifier: 13:AF:96:56:EB:EB:90:25:5E:29:52:67:06:45:55:36:74:49:F1:5C Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: D3 Signing time: Thu 21 Nov 2024 03:50:02 +0000 Manifest this update: Thu 21 Nov 2024 03:50:01 +0000 Manifest next update: Thu 28 Nov 2024 03:50:01 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: acgMVeLrHzH/NSnwOXeY1bG/xMTJbz0ofBwo4FNIxUQ=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: GQbESOYUtUaZ94Yc1FDzYQHcOOIJVDWv/UCKcDQ3h8E=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: C6IOSqMBs7kTWp1we70WGZOOA4Xdc736nWfod1Q0yd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Nov 21 03:50:01 2024 GMT Not After : Nov 28 03:50:01 2024 GMT Subject: CN=673eadea-3dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:63:c4:31:bc:db:e8:8e:5c:51:44:94:e2: ab:d1:54:d6:03:be:fc:b3:5b:1a:6f:41:76:e6:4f: 30:cc:0f:3b:c7:05:0b:d5:fa:b9:22:18:42:c3:a0: 9c:45:76:a2:58:be:bd:2a:6f:1e:cd:9a:2a:c7:ac: ae:d9:13:0e:57:88:aa:a1:9b:3a:f5:ff:3a:68:39: c2:3f:e1:fa:4e:f1:f9:af:f4:ba:27:31:1d:f0:37: 2a:f4:43:4c:bf:94:24:c8:2d:4b:4b:32:75:83:9b: 7d:80:ac:03:cc:3b:c8:88:f3:b3:0a:b0:14:b0:36: 67:a5:f9:4c:b2:d7:54:79:7b:f0:d0:10:15:b0:ed: 11:e3:09:f2:d7:d9:71:a2:30:a3:8f:15:ea:35:73: c4:dc:60:4f:ab:d4:ef:0c:04:2e:ce:7c:18:51:c7: 77:00:b1:99:c3:f6:34:34:08:d3:06:6e:0f:2b:17: 22:ad:13:b1:36:5d:c0:85:cb:4f:a2:ea:c3:bc:5c: 77:31:b7:9f:a3:2f:13:8b:81:b7:ad:d9:8a:fa:12: a5:cf:ef:5f:63:93:75:44:06:d0:32:3b:ea:cd:a0: a9:28:74:85:2a:8a:16:ce:31:7e:fb:cd:d2:15:a1: 39:e1:4f:4b:34:ed:99:e2:44:b4:7a:f3:9d:1a:8f: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:96:56:EB:EB:90:25:5E:29:52:67:06:45:55:36:74:49:F1:5C X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cd:64:75:e4:c4:91:07:1a:9e:1a:ad:5f:c0:e9:70:57:4c: 14:bb:1f:08:51:70:ec:9d:5b:8e:b3:c4:68:cf:64:ad:d5:46: f4:44:04:86:34:2a:f4:49:39:76:58:27:63:a8:0a:ab:d5:8d: 6c:ea:86:3a:30:be:08:43:4e:95:c3:97:c1:10:5e:4c:9e:8a: f4:24:80:96:b6:47:4f:95:93:38:b2:93:11:c8:51:7a:6c:ab: b3:7f:d6:ae:75:21:02:ec:22:8a:39:2a:78:ef:52:de:9c:77: 9f:ea:ae:28:f8:26:1c:4a:ea:e6:f1:05:91:f2:a4:bf:76:8e: ad:d7:db:c4:8f:63:11:98:71:a1:87:86:06:67:46:dd:2e:8a: 37:bf:49:d8:16:c5:41:e5:25:fc:88:01:69:f4:a6:de:8f:b1: 27:26:82:4a:e2:9a:0d:67:5c:40:74:d3:63:a4:7e:f0:67:65: 31:a2:f0:78:e9:06:50:6b:32:f3:60:26:d2:b5:08:89:2e:da: ba:2a:4d:d2:92:03:45:f1:b8:ed:8f:fb:ff:a4:64:1e:64:00: cc:71:9d:49:ca:b1:4e:05:c3:2a:c2:0f:9f:1a:0f:41:35:a2: 9b:41:9a:4d:e3:4b:ad:29:7b:6b:a1:36:94:a5:4f:46:ac:ad: 95:46:40:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjQxMTIxMDM1MDAxWhcNMjQxMTI4MDM1MDAxWjAYMRYwFAYD VQQDEw02NzNlYWRlYS0zZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAljxDG82+iOXFFElOKr0VTWA778s1sab0F25k8wzA87xwUL1fq5IhhCw6Cc RXaiWL69Km8ezZoqx6yu2RMOV4iqoZs69f86aDnCP+H6TvH5r/S6JzEd8Dcq9ENM v5QkyC1LSzJ1g5t9gKwDzDvIiPOzCrAUsDZnpflMstdUeXvw0BAVsO0R4wny19lx ojCjjxXqNXPE3GBPq9TvDAQuznwYUcd3ALGZw/Y0NAjTBm4PKxcirROxNl3AhctP ourDvFx3Mbefoy8Ti4G3rdmK+hKlz+9fY5N1RAbQMjvqzaCpKHSFKooWzjF++83S FaE54U9LNO2Z4kS0evOdGo/M7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOvllbr 65AlXilSZwZFVTZ0SfFcMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrzWR15MSRBxqeGq1fwOlwV0wUux8IUXDsnVuOs8Roz2St1Ub0RASG NCr0STl2WCdjqAqr1Y1s6oY6ML4IQ06Vw5fBEF5Mnor0JICWtkdPlZM4spMRyFF6 bKuzf9audSEC7CKKOSp471LenHef6q4o+CYcSurm8QWR8qS/do6t19vEj2MRmHGh h4YGZ0bdLoo3v0nYFsVB5SX8iAFp9Kbej7EnJoJK4poNZ1xAdNNjpH7wZ2UxovB4 6QZQazLzYCbStQiJLtq6Kk3SkgNF8bjtj/v/pGQeZADMcZ1JyrFOBcMqwg+fGg9B NaKbQZpN40utKXtroTaUpU9GrK2VRkAU -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:04 2024 by rpki-client on console-ams.rpki-client.org