$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: NwX8ySLomJC5392+8C7KdeBy7YK8QXF76/TEYAj4lyk= Subject key identifier: 7A:79:D5:FA:CC:09:68:E4:B6:0E:CF:80:79:FD:31:56:13:00:49:13 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 342F Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 342F Signing time: Sun 24 Nov 2024 14:21:55 +0000 Manifest this update: Sun 24 Nov 2024 14:21:54 +0000 Manifest next update: Sun 01 Dec 2024 14:21:54 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 2fDG19/ccOv6fdaZ3F0RO6V3/b9J77eD1CXbsVVjhy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13359 (0x342f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Nov 24 14:21:54 2024 GMT Not After : Dec 1 14:21:54 2024 GMT Subject: CN=67433683-79fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:7a:7d:96:97:0e:a5:7e:f3:85:cc:8b:a2: ab:e6:4b:8c:15:09:44:90:3d:de:15:65:c2:54:4e: 34:99:46:bf:a1:d3:bb:b1:c3:0e:0f:89:e8:16:96: d3:e8:fe:66:69:27:85:21:d4:4c:2c:e1:14:a3:97: 38:33:d1:ea:16:4f:29:ba:88:c1:5e:5a:ed:9b:b8: 26:f6:7c:fc:fc:ef:9e:57:16:d6:9b:65:7c:31:4f: fc:ca:dd:32:d4:82:5e:21:8a:95:c9:ff:32:69:3d: 41:70:77:a5:7b:5b:35:2f:de:c5:ef:bc:f2:15:3c: 81:f7:99:25:92:c6:ad:99:41:03:a9:43:ce:99:0b: 86:0e:2e:80:e4:e2:40:d5:91:bd:f0:64:f6:36:42: 19:a2:b7:92:55:6f:e8:1b:b0:8b:5e:27:65:9a:dd: 63:35:f2:49:c6:5c:cb:02:e2:3e:6b:a0:06:35:fa: 28:06:16:1b:29:c9:1d:c9:2c:15:ad:bc:de:f0:ac: bd:d9:61:a5:a2:2f:58:98:50:56:0a:63:bb:e1:be: 71:86:02:5a:47:f9:63:88:09:de:d3:0c:c0:66:00: 7b:6e:b2:d5:8d:76:30:fb:34:d5:2d:72:dd:aa:85: 86:03:0e:86:a0:37:e1:67:ea:11:33:f7:cb:d3:aa: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:79:D5:FA:CC:09:68:E4:B6:0E:CF:80:79:FD:31:56:13:00:49:13 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ac:07:12:26:06:1e:85:0b:ce:29:0b:2e:af:ba:7d:03:65: 5e:0a:13:d8:03:83:75:7b:18:34:05:76:b2:ca:f7:3a:86:3c: 22:ea:7e:33:54:48:20:4e:26:a1:56:e2:fc:d8:f1:1f:44:bb: 66:3b:10:9e:f6:b4:ce:69:37:0f:69:63:a3:24:d1:85:4c:7f: 3a:4e:ae:f5:6b:0d:af:ae:1a:a1:4c:cd:d8:7a:98:b4:14:d5: 63:43:22:ab:4e:bc:8c:59:95:fe:a7:be:95:04:d7:22:48:71: b7:e6:cf:d6:36:20:b4:99:a4:0e:64:71:8b:da:fa:73:bf:47: ce:f8:67:04:20:9c:b2:ca:67:ad:74:3a:38:dd:c2:83:d1:ea: 35:a2:34:2f:f9:27:27:cd:5d:84:bd:1f:c4:03:fd:9d:21:af: e5:4a:fc:94:11:a9:3b:71:c8:45:20:45:12:55:20:b9:a8:e0: 0e:ec:38:ce:51:cf:da:31:e8:6f:57:43:bb:0f:cb:32:a7:a0: fd:98:09:cb:c6:31:8a:9a:69:6c:08:d4:96:d8:c2:15:a9:fc: df:94:dc:c4:e4:af:a9:da:c7:15:61:eb:ae:30:83:db:e8:5e: 47:06:55:b2:51:d0:a6:97:67:52:34:c2:db:5a:47:70:cb:0b: a9:24:54:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjQxMTI0MTQyMTU0WhcNMjQxMjAxMTQyMTU0WjAYMRYwFAYD VQQDEw02NzQzMzY4My03OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9t6fZaXDqV+84XMi6Kr5kuMFQlEkD3eFWXCVE40mUa/odO7scMOD4noFpbT 6P5maSeFIdRMLOEUo5c4M9HqFk8puojBXlrtm7gm9nz8/O+eVxbWm2V8MU/8yt0y 1IJeIYqVyf8yaT1BcHele1s1L97F77zyFTyB95klksatmUEDqUPOmQuGDi6A5OJA 1ZG98GT2NkIZoreSVW/oG7CLXidlmt1jNfJJxlzLAuI+a6AGNfooBhYbKckdySwV rbze8Ky92WGloi9YmFBWCmO74b5xhgJaR/ljiAne0wzAZgB7brLVjXYw+zTVLXLd qoWGAw6GoDfhZ+oRM/fL06pb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp51frM CWjktg7PgHn9MVYTAEkTMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjrAcSJgYehQvOKQsur7p9A2VeChPYA4N1exg0BXayyvc6hjwi6n4z VEggTiahVuL82PEfRLtmOxCe9rTOaTcPaWOjJNGFTH86Tq71aw2vrhqhTM3Yepi0 FNVjQyKrTryMWZX+p76VBNciSHG35s/WNiC0maQOZHGL2vpzv0fO+GcEIJyyymet dDo43cKD0eo1ojQv+ScnzV2EvR/EA/2dIa/lSvyUEak7cchFIEUSVSC5qOAO7DjO Uc/aMehvV0O7D8syp6D9mAnLxjGKmmlsCNSW2MIVqfzflNzE5K+p2scVYeuuMIPb 6F5HBlWyUdCml2dSNMLbWkdwywupJFRN -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:02 2024 by rpki-client on console-fra.rpki-client.org