$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: 2Ifd1PHzH3DOpkDhE4ZXrV3Rsr3GoPIOkM1BAcj/DEE= Subject key identifier: 49:AF:14:F1:5F:16:DB:BB:BC:6E:1E:11:9E:66:7A:39:B0:C1:7F:94 Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 05A9 Signing time: Wed 20 Nov 2024 22:30:49 +0000 Manifest this update: Wed 20 Nov 2024 22:30:49 +0000 Manifest next update: Wed 27 Nov 2024 22:30:49 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: toxd8jsV9Y7QE+bXWpbQv7hZNsn9SuEhC7Y4bVlARPM=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: AG/I9mH1UyZkq9/E12LEwMXOooWRDNpPF8GK9+IXR2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: Nov 20 22:30:49 2024 GMT Not After : Nov 27 22:30:49 2024 GMT Subject: CN=673e6319-9863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f7:1f:eb:a9:dd:d3:05:bf:a4:7d:2d:90:b1: 93:7a:f8:1e:59:ee:7c:45:0a:ce:0e:94:d1:c3:1b: 1a:e5:c1:b0:e2:ff:f8:f3:00:c6:72:11:43:99:1b: e6:ec:84:5b:13:8d:7d:86:6b:2b:8b:7b:34:86:07: cd:90:8a:7a:72:e7:5c:11:6f:d5:5e:08:e7:60:64: 8d:da:23:6d:d2:f2:a1:c0:03:a8:45:86:96:40:22: 1f:8e:4e:67:d0:69:4e:45:eb:c3:22:4c:c6:de:f8: ca:d2:9d:60:0c:87:d7:61:d4:4f:28:f8:c6:2a:35: f1:a4:44:d4:84:22:c5:83:73:f8:56:1b:6e:d5:28: 43:87:d0:9b:21:03:38:2a:ca:40:de:ba:37:37:1f: ed:76:df:3b:c3:d3:84:7b:62:80:7b:4b:59:a1:a8: 25:5e:58:97:b6:db:28:ac:87:a0:7b:7b:8e:02:42: d4:7d:ed:27:a7:a0:06:17:0a:c4:a2:3d:4f:49:d6: 27:40:a1:87:ed:df:b2:a7:0b:f6:4c:3c:ca:15:35: 1b:88:46:a7:ca:ec:22:b7:39:9a:6a:73:06:86:f5: 40:68:10:a1:d9:0d:5d:12:38:92:c1:69:68:17:70: 84:92:11:a6:74:8f:b1:73:1f:74:f7:70:8b:0a:01: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:14:F1:5F:16:DB:BB:BC:6E:1E:11:9E:66:7A:39:B0:C1:7F:94 X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:1b:73:a6:8b:9b:8f:87:24:0a:92:c0:3c:3e:83:c8:5b:d6: 98:30:04:2f:07:1d:c3:df:cd:6a:25:09:1d:e1:a5:bf:47:e6: ee:10:a1:43:f9:ff:e2:5d:26:9c:d0:2c:14:3c:1a:60:59:60: 9e:0e:1e:e2:5d:10:08:ac:21:3b:27:33:f3:38:8e:d8:63:84: 21:c5:e6:6d:cd:14:a4:e3:b4:aa:d3:7d:8b:2b:39:3e:17:35: ca:7a:3d:68:40:fd:46:12:20:58:f3:0f:02:93:ef:a7:ff:86: d5:95:30:e6:71:fe:49:39:26:66:1a:2e:c7:9a:30:ff:08:5f: e6:07:0b:66:e0:45:74:fd:b1:41:68:f3:a5:13:22:df:ce:86: 0e:9f:c4:46:78:1c:75:34:7a:e7:b9:c5:5e:35:4b:69:1b:63: 18:3f:29:76:69:d5:fe:35:1c:eb:04:88:f4:1f:fe:8f:70:9b: 55:45:56:0d:2a:43:74:ee:5c:55:44:7f:3c:58:25:a3:fa:ff: d1:6f:33:35:5c:75:aa:2a:ba:2b:54:8f:98:3c:ec:35:b4:44: 2d:14:9d:eb:41:b2:e0:3b:92:f0:be:18:6a:92:0b:82:9e:a9: c5:3d:0f:42:cc:33:46:68:05:ff:ea:cf:59:2c:37:e2:52:5b: 5b:b0:33:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjQxMTIwMjIzMDQ5WhcNMjQxMTI3MjIzMDQ5WjAYMRYwFAYD VQQDEw02NzNlNjMxOS05ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vcf66nd0wW/pH0tkLGTevgeWe58RQrODpTRwxsa5cGw4v/48wDGchFDmRvm 7IRbE419hmsri3s0hgfNkIp6cudcEW/VXgjnYGSN2iNt0vKhwAOoRYaWQCIfjk5n 0GlORevDIkzG3vjK0p1gDIfXYdRPKPjGKjXxpETUhCLFg3P4Vhtu1ShDh9CbIQM4 KspA3ro3Nx/tdt87w9OEe2KAe0tZoaglXliXttsorIege3uOAkLUfe0np6AGFwrE oj1PSdYnQKGH7d+ypwv2TDzKFTUbiEanyuwitzmaanMGhvVAaBCh2Q1dEjiSwWlo F3CEkhGmdI+xcx9093CLCgG+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmvFPFf Ftu7vG4eEZ5mejmwwX+UMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9G3Omi5uPhyQKksA8PoPIW9aYMAQvBx3D381qJQkd4aW/R+buEKFD +f/iXSac0CwUPBpgWWCeDh7iXRAIrCE7JzPzOI7YY4QhxeZtzRSk47Sq032LKzk+ FzXKej1oQP1GEiBY8w8Ck++n/4bVlTDmcf5JOSZmGi7HmjD/CF/mBwtm4EV0/bFB aPOlEyLfzoYOn8RGeBx1NHrnucVeNUtpG2MYPyl2adX+NRzrBIj0H/6PcJtVRVYN KkN07lxVRH88WCWj+v/RbzM1XHWqKrorVI+YPOw1tEQtFJ3rQbLgO5LwvhhqkguC nqnFPQ9CzDNGaAX/6s9ZLDfiUltbsDN0 -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:40 2024 by rpki-client on console-ams.rpki-client.org