$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: +QkkdziJnW/abI1aaFSn3Pal0snh4KFlaNhv11nRcQ0= Subject key identifier: 7D:C0:AD:F6:86:99:FF:1A:3A:32:8B:B7:3A:57:EC:A7:E2:3B:51:A2 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 0195 Signing time: Sat 23 Nov 2024 01:52:32 +0000 Manifest this update: Sat 23 Nov 2024 01:52:32 +0000 Manifest next update: Sat 30 Nov 2024 01:52:32 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: /MTVTOvHCwyMYzXBZtjsSA8Bxqcx8pxnRlmLPeSiCM8=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Nov 23 01:52:32 2024 GMT Not After : Nov 30 01:52:32 2024 GMT Subject: CN=67413560-54bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:ce:88:d7:da:02:2f:8a:e0:35:5c:46:5c: bf:ea:d1:7f:1b:7b:69:f2:61:c4:19:39:da:4e:9d: c3:8f:38:5f:7c:82:76:e5:1c:c6:df:4a:ee:2a:97: ee:a5:b4:3d:94:ed:a6:04:c0:3b:b4:25:73:ef:5a: 52:67:16:57:35:80:1b:e6:29:cd:e4:d6:7e:cc:14: 29:de:a1:3e:46:eb:dc:6a:bc:7f:66:9b:18:71:59: 35:49:2a:61:24:26:37:fe:3d:97:a0:c0:29:fe:34: 9e:bd:e8:4a:ad:fc:12:2d:f8:7a:2c:cf:d1:3b:27: 6f:48:ea:18:8f:21:93:e1:db:92:9c:dd:d8:f1:d0: 85:f2:18:09:42:a9:cf:cf:7c:6c:56:1d:7a:78:ae: c1:7b:6a:8e:8c:fa:48:53:61:19:fb:5b:1a:6d:f2: e9:3f:ae:61:ac:1d:a1:06:e9:3e:1e:85:69:85:2d: 1c:79:92:41:e8:7a:d5:56:e6:67:f6:4c:eb:40:4d: be:06:06:ee:9c:6e:7f:94:db:bd:69:a1:43:86:1f: 9f:d5:1d:f8:42:fc:87:89:6d:3e:f6:4d:2f:af:6c: 22:12:cf:70:c0:b5:6a:09:df:99:f3:ab:35:95:eb: 80:fa:14:e7:d6:a7:0f:3a:4e:5e:4a:0a:c3:4c:29: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C0:AD:F6:86:99:FF:1A:3A:32:8B:B7:3A:57:EC:A7:E2:3B:51:A2 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9e:ee:06:a8:d0:bf:fb:b2:9d:2d:39:fc:da:f0:e9:10:f5: 89:80:3b:7d:d2:c3:e8:21:84:1d:93:da:24:21:41:5b:3b:07: 88:93:49:8f:53:e2:05:0e:dd:75:e3:d4:72:5a:c9:58:b5:d6: e5:80:f0:30:c4:ce:bb:a4:f8:bc:b4:fc:cc:e5:18:0a:62:f7: 96:04:04:72:2e:d5:6c:51:9e:4c:28:e3:1d:5c:34:2a:e3:5d: 57:77:0a:42:58:42:1b:04:fe:5d:65:c3:7a:83:fc:82:ef:52: 60:93:11:e5:42:fe:48:8e:76:9c:33:bc:ba:e9:d7:cb:a6:2a: bb:87:39:5f:b8:a6:06:6a:b3:a6:71:4e:98:78:af:5b:82:fd: 83:86:1e:8b:34:39:f2:f3:19:c6:a5:c1:17:67:c7:59:db:32: 98:81:1e:48:15:67:db:02:46:31:f1:ea:f7:25:ea:4f:0d:2b: 65:89:f4:ae:ec:24:9e:dd:ab:ae:a2:8f:7c:12:30:2a:07:07: 55:7b:46:dd:9d:34:bf:e4:84:26:d8:ff:99:76:2b:bc:fa:92: ba:f0:f2:f1:26:c4:ba:37:96:11:e2:34:1c:dc:aa:c5:d6:91: 15:58:1d:b4:60:a5:14:cb:2b:1d:51:2d:cd:9d:14:4f:3f:1d: 3c:3e:e0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjQxMTIzMDE1MjMyWhcNMjQxMTMwMDE1MjMyWjAYMRYwFAYD VQQDEw02NzQxMzU2MC01NGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/rOiNfaAi+K4DVcRly/6tF/G3tp8mHEGTnaTp3DjzhffIJ25RzG30ruKpfu pbQ9lO2mBMA7tCVz71pSZxZXNYAb5inN5NZ+zBQp3qE+Ruvcarx/ZpsYcVk1SSph JCY3/j2XoMAp/jSevehKrfwSLfh6LM/ROydvSOoYjyGT4duSnN3Y8dCF8hgJQqnP z3xsVh16eK7Be2qOjPpIU2EZ+1sabfLpP65hrB2hBuk+HoVphS0ceZJB6HrVVuZn 9kzrQE2+BgbunG5/lNu9aaFDhh+f1R34QvyHiW0+9k0vr2wiEs9wwLVqCd+Z86s1 leuA+hTn1qcPOk5eSgrDTCndDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3ArfaG mf8aOjKLtzpX7KfiO1GiMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWnu4GqNC/+7KdLTn82vDpEPWJgDt90sPoIYQdk9okIUFbOweIk0mP U+IFDt1149RyWslYtdblgPAwxM67pPi8tPzM5RgKYveWBARyLtVsUZ5MKOMdXDQq 411XdwpCWEIbBP5dZcN6g/yC71JgkxHlQv5IjnacM7y66dfLpiq7hzlfuKYGarOm cU6YeK9bgv2Dhh6LNDny8xnGpcEXZ8dZ2zKYgR5IFWfbAkYx8er3JepPDStlifSu 7CSe3auuoo98EjAqBwdVe0bdnTS/5IQm2P+Zdiu8+pK68PLxJsS6N5YR4jQc3KrF 1pEVWB20YKUUyysdUS3NnRRPPx08PuDs -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org