$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: 5hEGrkn1TQ6aKtLQ4vDpO5jHK9mffjiHi/HqLrxFnJs= Subject key identifier: DE:91:BC:BC:1F:D4:C8:EE:E5:F4:9C:A0:C4:F2:7E:16:AA:9F:57:AA Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0B63 Signing time: Fri 22 Nov 2024 18:53:01 +0000 Manifest this update: Fri 22 Nov 2024 18:53:00 +0000 Manifest next update: Fri 29 Nov 2024 18:53:00 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: Gh1xr6SZsnqxZ6QwghkYYtf02KpBFwnnak2aYMnMwXk=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: I8psl3OpDxbo3n9gZh/juhyAlsyW/dePCQ3DhqauDwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: Nov 22 18:53:00 2024 GMT Not After : Nov 29 18:53:00 2024 GMT Subject: CN=6740d30d-38c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:de:63:98:c0:58:17:b8:fa:10:68:ae:dd: ac:00:60:33:94:4e:14:58:11:2b:c5:2e:67:4c:63: 9a:91:57:8a:bf:77:43:d2:bf:ab:b1:3d:ff:09:cd: 05:e5:eb:dc:15:df:2d:7f:2b:30:b7:82:ab:48:b2: 61:6e:f2:8d:dc:df:9d:47:62:fe:a3:9f:74:59:18: bc:06:d6:0f:9e:6b:04:bc:06:85:f3:73:e8:c3:0f: 1a:04:df:61:23:07:f5:2b:00:8c:65:09:12:4d:5e: 26:9f:88:6f:0e:63:a1:1e:a3:a0:c5:ad:0d:8a:ac: 26:68:11:dd:1d:dc:6f:f9:97:0e:a6:36:1f:8c:fe: 62:6b:6f:9f:ff:92:1b:fd:d8:b1:ef:39:ac:12:fc: b0:6b:ae:d6:f9:fc:15:8b:66:ce:ac:27:c8:2a:85: 48:d0:d8:b9:f7:95:94:51:4e:19:94:2d:0f:6c:7a: 37:25:f8:71:04:e0:7c:0a:f0:42:e6:85:25:7a:11: 1f:1d:56:e8:78:12:fe:ee:82:31:37:2c:26:2c:71: 7e:6e:3b:23:25:ea:91:f6:10:b4:54:eb:23:ae:bf: 4c:ab:5d:6a:e9:8e:e2:05:4b:b8:f5:ec:c0:64:2c: 41:6c:b0:d6:67:2c:a4:7b:d9:f4:e5:04:09:df:f5: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:BC:BC:1F:D4:C8:EE:E5:F4:9C:A0:C4:F2:7E:16:AA:9F:57:AA X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:20:b1:a0:35:ea:95:f7:4e:cc:cd:13:fa:54:4d:a4:18:4b: 6a:75:09:cf:ff:0b:5e:10:ac:cf:55:72:48:fd:20:39:9a:8b: f1:7f:5a:c5:9e:2f:2f:4c:3d:60:51:e9:1d:c9:04:a6:7a:96: e5:30:a3:e5:69:05:21:73:85:3f:df:d3:03:95:46:f7:55:18: ed:df:8a:c6:fb:d0:71:57:a7:f8:06:69:72:cf:17:ff:bf:c4: bb:e4:c4:40:60:fa:d2:05:73:48:ee:a8:31:ea:0e:8f:85:00: 13:fb:d4:4a:7b:2d:c3:9d:3c:62:fa:19:31:25:be:d6:81:18: d4:7d:94:67:d0:34:71:30:fd:66:83:c3:b5:99:1b:89:38:d3: d8:14:2a:70:7a:87:4a:1b:5d:87:52:78:f3:e8:6b:ba:00:15: af:82:c9:c0:54:19:25:07:63:4a:de:0a:cf:bb:dd:14:1f:04: df:54:71:ba:5b:7d:4f:85:b8:8f:6b:e3:3f:fd:25:75:a0:8c: 6e:b7:ec:f7:d1:02:bf:a2:76:b1:b0:c4:59:a6:44:70:e6:c4: 5e:aa:2a:eb:e0:5a:d7:9f:70:0a:32:98:b5:a8:9a:3d:ae:e4: 79:57:68:90:66:75:a7:c2:9f:72:61:89:08:65:3b:64:c6:26: 76:7a:6a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjQxMTIyMTg1MzAwWhcNMjQxMTI5MTg1MzAwWjAYMRYwFAYD VQQDEw02NzQwZDMwZC0zOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVfeY5jAWBe4+hBort2sAGAzlE4UWBErxS5nTGOakVeKv3dD0r+rsT3/Cc0F 5evcFd8tfyswt4KrSLJhbvKN3N+dR2L+o590WRi8BtYPnmsEvAaF83Poww8aBN9h Iwf1KwCMZQkSTV4mn4hvDmOhHqOgxa0NiqwmaBHdHdxv+ZcOpjYfjP5ia2+f/5Ib /dix7zmsEvywa67W+fwVi2bOrCfIKoVI0Ni595WUUU4ZlC0PbHo3JfhxBOB8CvBC 5oUlehEfHVboeBL+7oIxNywmLHF+bjsjJeqR9hC0VOsjrr9Mq11q6Y7iBUu49ezA ZCxBbLDWZyyke9n05QQJ3/VJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6RvLwf 1Mju5fScoMTyfhaqn1eqMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQILGgNeqV907MzRP6VE2kGEtqdQnP/wteEKzPVXJI/SA5movxf1rF ni8vTD1gUekdyQSmepblMKPlaQUhc4U/39MDlUb3VRjt34rG+9BxV6f4Bmlyzxf/ v8S75MRAYPrSBXNI7qgx6g6PhQAT+9RKey3DnTxi+hkxJb7WgRjUfZRn0DRxMP1m g8O1mRuJONPYFCpweodKG12HUnjz6Gu6ABWvgsnAVBklB2NK3grPu90UHwTfVHG6 W31PhbiPa+M//SV1oIxut+z30QK/onaxsMRZpkRw5sReqirr4FrXn3AKMpi1qJo9 ruR5V2iQZnWnwp9yYYkIZTtkxiZ2emo1 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org