$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: mBK0jjtUmXbjozhwkJKLghhc54ex7Pbmr2gefvRIIBQ= Subject key identifier: 95:B0:69:02:B2:9B:66:4E:31:B0:CC:EC:6F:31:93:0A:7D:6C:31:00 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 1251 Signing time: Fri 22 Nov 2024 17:06:50 +0000 Manifest this update: Fri 22 Nov 2024 17:06:50 +0000 Manifest next update: Fri 29 Nov 2024 17:06:50 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: cvzibaxS6DtJYo5IWE8HO5qxvUUoAWNSTIUN/v6E2Fg=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: uCzrcOZ6wMggtTT6lyh83cBZPMtDpVknNnh01V6TMIg=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: k8xb8lrujgkG8RL08aJsFU4NdjV1eIzGYv9lZHgCcyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Nov 22 17:06:50 2024 GMT Not After : Nov 29 17:06:50 2024 GMT Subject: CN=6740ba2a-2010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:52:ae:94:94:71:93:5b:05:75:9e:d4:14: 35:29:1b:b1:9a:24:d2:8b:d1:37:7e:ea:eb:45:32: ee:8b:e7:0c:1c:b3:e9:be:94:4d:a4:0d:cb:af:f6: 70:96:d1:9a:7d:b5:e7:9a:59:df:52:da:1e:1a:07: b3:5e:24:46:98:32:f8:84:06:d1:57:2e:11:8e:99: b7:1a:2c:09:d8:a2:a5:ff:97:5b:c4:cc:27:5c:68: b5:30:71:87:24:43:9b:1c:87:b1:0c:de:f6:27:bd: 56:7a:a6:da:d6:b1:61:37:31:23:43:c2:1f:41:89: 39:65:da:b2:0d:6a:13:80:f2:31:06:5b:8b:b4:df: 5d:f3:4b:6c:9f:01:6c:bb:33:39:b9:ba:06:d5:06: 0e:be:da:f8:d0:2a:6f:92:72:b7:a6:96:45:dc:09: ff:95:46:8c:5d:60:32:cf:0a:03:d9:0f:4c:ee:8a: af:e5:e5:3b:c4:7e:4f:91:23:8e:08:4a:4a:10:c7: eb:59:da:c3:96:64:ed:eb:a6:12:12:80:22:bf:87: e2:d6:53:48:e0:80:55:82:2e:c1:68:2c:1d:ac:42: 92:3b:2e:5f:40:cb:6d:d1:c1:e8:41:81:9d:c5:f6: 04:e8:20:f0:1f:49:4f:42:92:f8:f3:a2:7e:1d:dd: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:69:02:B2:9B:66:4E:31:B0:CC:EC:6F:31:93:0A:7D:6C:31:00 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:07:87:07:17:2f:e2:75:cd:2c:09:f7:29:89:fe:8a:17:fa: da:24:0a:a5:a6:54:47:57:3d:dd:e4:f6:3e:63:48:9f:6c:bd: e5:48:8b:6b:a7:92:2e:ff:ca:de:e2:58:95:5f:5d:53:fe:52: 82:8a:78:4c:96:16:eb:bd:f0:e2:ff:75:90:ab:a2:af:a9:b0: 60:7f:04:68:08:78:31:69:3f:8d:77:9b:86:22:5a:5e:be:a6: 28:c5:2b:a7:68:75:f4:20:91:a9:a0:7b:78:37:c7:72:6f:d7: 5f:89:70:26:e5:19:fe:56:2c:6b:0d:69:56:72:4f:5e:8a:e9: 1c:78:07:89:93:fd:e2:87:5f:9f:12:b3:d7:27:50:de:9c:b5: 05:ee:fa:c6:1f:69:0a:48:9c:65:9f:6b:c7:1c:74:65:37:ae: 2b:b3:9d:f3:c7:8c:81:ff:74:89:f9:a9:0f:ed:eb:a5:7f:8d: 4a:5c:f5:a4:6b:85:71:3b:c2:09:58:74:60:5b:38:45:5f:1a: c2:90:9f:3e:14:c5:e7:f4:16:e7:39:3c:bb:12:ee:54:ce:f5: 7a:44:d8:75:82:91:ac:cb:02:31:2e:c8:e6:fb:8a:be:7f:75: 2b:9d:2f:aa:1f:0c:51:57:a6:21:58:f9:15:21:dc:2e:d5:b5: 8c:dc:50:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjQxMTIyMTcwNjUwWhcNMjQxMTI5MTcwNjUwWjAYMRYwFAYD VQQDEw02NzQwYmEyYS0yMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmZSrpSUcZNbBXWe1BQ1KRuxmiTSi9E3furrRTLui+cMHLPpvpRNpA3Lr/Zw ltGafbXnmlnfUtoeGgezXiRGmDL4hAbRVy4Rjpm3GiwJ2KKl/5dbxMwnXGi1MHGH JEObHIexDN72J71Weqba1rFhNzEjQ8IfQYk5ZdqyDWoTgPIxBluLtN9d80tsnwFs uzM5uboG1QYOvtr40CpvknK3ppZF3An/lUaMXWAyzwoD2Q9M7oqv5eU7xH5PkSOO CEpKEMfrWdrDlmTt66YSEoAiv4fi1lNI4IBVgi7BaCwdrEKSOy5fQMtt0cHoQYGd xfYE6CDwH0lPQpL486J+Hd1XhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWwaQKy m2ZOMbDM7G8xkwp9bDEAMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdB4cHFy/idc0sCfcpif6KF/raJAqlplRHVz3d5PY+Y0ifbL3lSItr p5Iu/8re4liVX11T/lKCinhMlhbrvfDi/3WQq6KvqbBgfwRoCHgxaT+Nd5uGIlpe vqYoxSunaHX0IJGpoHt4N8dyb9dfiXAm5Rn+VixrDWlWck9eiukceAeJk/3ih1+f ErPXJ1DenLUF7vrGH2kKSJxln2vHHHRlN64rs53zx4yB/3SJ+akP7eulf41KXPWk a4VxO8IJWHRgWzhFXxrCkJ8+FMXn9BbnOTy7Eu5UzvV6RNh1gpGsywIxLsjm+4q+ f3UrnS+qHwxRV6YhWPkVIdwu1bWM3FBW -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org