$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: IfG1g8Qv3/eNoZ0l5imDCZmoIq4AIWKz8rDn1yOWpjs= Subject key identifier: 61:60:C9:81:1E:07:97:F7:D3:91:77:05:46:F5:FE:28:21:AF:D9:CB Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 2208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 2202 Signing time: Wed 20 Nov 2024 15:51:49 +0000 Manifest this update: Wed 20 Nov 2024 15:51:49 +0000 Manifest next update: Wed 27 Nov 2024 15:51:49 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: Uh5ZaOturWODo394zUZSVN5DuVI58M6Kxlgzc9NRbF8=) 2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: SCC+LlqUGZZ5e5Up7ILU6KBASITzSZyiIG/XRTaFScA=) 3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: eW5x88RkAs+yN5DT0e+m9t8O70zdNnvvoJ96Je/x9Os=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: Sx0Axir5QVqEiOp6QnF0SJ0OaMXP209IGbEBkaZmJ4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8712 (0x2208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Nov 20 15:51:49 2024 GMT Not After : Nov 27 15:51:49 2024 GMT Subject: CN=673e0595-d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:d9:ba:f5:3b:0f:dc:13:47:d5:e7:ef:13: 1f:39:07:c5:6c:11:f0:9a:91:d9:de:65:64:ad:cf: c5:c6:99:a4:51:eb:a1:9a:f8:22:68:39:6e:4f:a1: 54:c5:10:92:eb:c7:50:83:ed:a5:05:27:59:df:cb: df:ca:b5:98:3b:42:11:2e:04:70:7e:0b:72:cd:70: 87:42:c3:43:1b:fc:97:cb:7f:ee:b6:53:2c:25:fd: 77:ab:c5:23:7b:fb:a3:f2:4e:69:af:2f:ce:25:3f: 2d:99:72:05:40:3c:ef:4e:89:0b:cb:7b:c3:25:20: 9f:53:6a:44:7a:55:a3:7c:56:ce:9e:f7:ad:3b:bf: 6c:45:31:4b:4c:99:68:ee:66:d2:a0:5c:b4:45:d2: e2:3b:1f:b1:38:7e:30:37:89:1f:94:c1:70:ee:48: 41:e7:12:d4:d2:f9:32:96:ba:86:aa:f6:8f:bd:ad: 58:9e:a8:7a:62:70:48:71:fc:3e:a8:77:41:dd:fc: ef:4e:d3:30:fd:3d:85:80:8d:67:8e:bf:df:61:74: 97:9b:5b:f0:e4:39:43:26:3e:4a:e1:4b:dd:bd:f7: f1:9e:83:42:01:aa:6d:27:24:9d:a7:14:29:59:46: a8:42:bf:eb:44:8f:30:1e:f3:b5:a5:27:33:69:b4: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:60:C9:81:1E:07:97:F7:D3:91:77:05:46:F5:FE:28:21:AF:D9:CB X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c4:1f:4d:37:6c:ad:b0:b7:5e:fc:2a:26:a7:c2:6c:7e:f8: ca:74:e9:65:b6:0d:da:32:8d:92:c8:fc:33:90:c2:8a:94:53: a0:1c:54:f9:40:74:b3:59:22:3b:9e:f2:22:3c:0e:0b:0b:9d: 0e:00:95:31:27:72:f6:26:6f:e7:d9:c6:44:ec:32:1f:fb:b3: 8c:96:65:8e:09:a8:1b:8e:59:1b:82:b3:f2:db:9e:70:1a:1c: 53:cf:70:72:da:ad:c9:02:6c:c3:ae:ec:86:2e:16:66:cd:7c: 78:fb:1c:80:d2:b6:e2:97:e8:54:0a:6b:37:f7:3e:ea:24:dd: ab:8b:ff:ed:db:43:27:17:06:09:08:6b:90:f8:07:b7:6a:1a: 0d:b3:34:2d:cc:ae:1d:04:c5:28:05:a4:aa:56:89:27:b2:9c: 4f:48:66:0c:ed:16:d4:16:3a:d7:49:02:f6:df:05:f5:46:1e: 2e:c8:02:95:1a:1e:e6:02:d4:3d:60:23:9d:ec:46:b5:e7:c9: bd:4e:d4:a5:53:b5:31:df:2d:54:07:11:c6:49:1b:49:7f:20: 3d:66:16:89:cf:d6:22:5e:80:4f:8b:e8:21:a7:73:9a:b2:b5: 97:cc:cf:48:a0:ce:74:12:8f:21:ce:b8:c5:1d:44:18:21:f2: 6f:f5:bc:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjQxMTIwMTU1MTQ5WhcNMjQxMTI3MTU1MTQ5WjAYMRYwFAYD VQQDEw02NzNlMDU5NS1kMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRTZuvU7D9wTR9Xn7xMfOQfFbBHwmpHZ3mVkrc/FxpmkUeuhmvgiaDluT6FU xRCS68dQg+2lBSdZ38vfyrWYO0IRLgRwfgtyzXCHQsNDG/yXy3/utlMsJf13q8Uj e/uj8k5pry/OJT8tmXIFQDzvTokLy3vDJSCfU2pEelWjfFbOnvetO79sRTFLTJlo 7mbSoFy0RdLiOx+xOH4wN4kflMFw7khB5xLU0vkylrqGqvaPva1Ynqh6YnBIcfw+ qHdB3fzvTtMw/T2FgI1njr/fYXSXm1vw5DlDJj5K4UvdvffxnoNCAaptJySdpxQp WUaoQr/rRI8wHvO1pSczabR6bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFgyYEe B5f305F3BUb1/ighr9nLMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxB9NN2ytsLde/Comp8JsfvjKdOlltg3aMo2SyPwzkMKKlFOgHFT5 QHSzWSI7nvIiPA4LC50OAJUxJ3L2Jm/n2cZE7DIf+7OMlmWOCagbjlkbgrPy255w GhxTz3By2q3JAmzDruyGLhZmzXx4+xyA0rbil+hUCms39z7qJN2ri//t20MnFwYJ CGuQ+Ae3ahoNszQtzK4dBMUoBaSqVoknspxPSGYM7RbUFjrXSQL23wX1Rh4uyAKV Gh7mAtQ9YCOd7Ea158m9TtSlU7Ux3y1UBxHGSRtJfyA9ZhaJz9YiXoBPi+ghp3Oa srWXzM9IoM50Eo8hzrjFHUQYIfJv9bzN -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:19 2024 by rpki-client on console-ams.rpki-client.org