$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: wfkoGk+BxNdvF6xC59pQ54hen7DwzplueHdno4Xb8gA= Subject key identifier: C3:60:FF:1D:66:E8:BC:4A:0E:96:76:97:A3:CD:16:63:9C:9B:9C:56 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1DB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1DA6 Signing time: Fri 22 Nov 2024 16:06:46 +0000 Manifest this update: Fri 22 Nov 2024 16:06:46 +0000 Manifest next update: Fri 29 Nov 2024 16:06:46 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: ImHGY07+HBs+rTquFGJ7RbJQPsg0cmkCz31ktbS54+c=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: aU2YJVr1JgNSnSBDLACjKPXwpUH3eD6D3PqoxsGGeXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7602 (0x1db2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Nov 22 16:06:46 2024 GMT Not After : Nov 29 16:06:46 2024 GMT Subject: CN=6740ac16-0377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:13:e9:fe:2c:72:b7:6b:b7:1b:ad:cd:b2: a3:36:c8:7a:95:f2:d4:f3:65:62:bd:0f:4c:52:c6: 3e:db:6d:6e:fb:27:09:74:b6:6b:69:bc:fd:3b:d6: 4d:96:22:da:1d:58:fa:c9:17:a7:e9:48:d3:ba:d3: 94:21:4c:59:82:5a:01:45:b5:9e:3e:75:ea:3a:bc: b1:71:f0:d4:f1:48:5e:d2:d9:53:bb:2c:ba:5c:0b: 44:f6:bb:83:75:64:d9:fa:6c:62:ed:99:42:dc:49: 55:41:75:bf:ab:1a:43:0d:ab:22:94:b0:f4:e6:25: 4b:81:5b:77:11:de:31:f3:02:81:a9:df:14:88:93: 24:05:57:42:cb:c0:fe:2a:89:84:9a:b0:97:9d:df: 82:49:dc:d4:29:88:e6:39:0e:28:1b:f8:9f:7c:83: d3:18:d2:25:d8:5b:11:7e:bc:46:bc:c2:99:f9:4c: 06:35:69:3d:6b:f3:90:fa:ca:35:e4:d3:54:c8:c6: c7:95:ed:57:84:ef:ca:b7:ea:ba:95:a1:fb:1e:e8: ac:73:37:d1:68:50:67:fc:a5:bf:ea:40:90:1b:a1: b5:02:9c:66:e3:b7:9b:42:1d:bf:ea:d7:88:31:4d: ff:59:62:d6:c6:95:4e:19:33:e4:87:ba:05:82:4a: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:60:FF:1D:66:E8:BC:4A:0E:96:76:97:A3:CD:16:63:9C:9B:9C:56 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:15:8a:fc:32:f9:86:fd:3d:67:e2:c9:0d:2f:17:db:fc:29: 78:ea:25:45:94:6c:25:c9:b7:32:4c:67:91:d6:5f:4c:ce:a7: 8c:1f:19:ca:93:e6:90:89:f0:9e:ef:7c:41:b0:2a:16:27:d9: 08:9b:38:80:36:4e:0e:af:11:96:ef:6e:6f:61:a7:3b:91:7b: 29:51:88:cc:32:80:e0:8d:a9:6f:8d:e4:a5:37:9d:13:9d:8a: 39:b9:27:39:6f:68:b4:0a:de:3d:77:bf:ba:2f:7a:f0:a9:fa: 18:f1:8f:32:44:10:e6:4c:28:a0:10:33:58:10:4e:aa:a3:57: 35:09:7d:80:47:7d:b1:b0:8b:76:65:7d:6d:63:4f:68:7d:69: e1:0e:c7:05:33:6e:c2:2c:02:b4:44:3b:bb:0e:0d:4b:bd:3e: e7:16:e7:19:75:68:bf:07:94:7b:34:e3:38:5b:ec:cc:78:d9: 7d:6e:d8:30:47:64:50:9c:53:bc:02:6a:b0:74:3f:f5:bf:62: 70:5f:15:20:2a:19:68:59:73:6a:2c:ba:31:cf:c6:a1:e8:23: 07:6e:5e:46:a5:9d:14:f8:ae:2e:39:95:6c:75:85:34:42:fe: 09:76:63:c4:a1:97:9e:c1:b2:11:76:13:86:03:13:1b:1f:71: ac:c7:c4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjQxMTIyMTYwNjQ2WhcNMjQxMTI5MTYwNjQ2WjAYMRYwFAYD VQQDEw02NzQwYWMxNi0wMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uIT6f4scrdrtxutzbKjNsh6lfLU82VivQ9MUsY+221u+ycJdLZrabz9O9ZN liLaHVj6yRen6UjTutOUIUxZgloBRbWePnXqOryxcfDU8Uhe0tlTuyy6XAtE9ruD dWTZ+mxi7ZlC3ElVQXW/qxpDDasilLD05iVLgVt3Ed4x8wKBqd8UiJMkBVdCy8D+ KomEmrCXnd+CSdzUKYjmOQ4oG/iffIPTGNIl2FsRfrxGvMKZ+UwGNWk9a/OQ+so1 5NNUyMbHle1XhO/Kt+q6laH7HuisczfRaFBn/KW/6kCQG6G1Apxm47ebQh2/6teI MU3/WWLWxpVOGTPkh7oFgkpz9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNg/x1m 6LxKDpZ2l6PNFmOcm5xWMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNFYr8MvmG/T1n4skNLxfb/Cl46iVFlGwlybcyTGeR1l9MzqeMHxnK k+aQifCe73xBsCoWJ9kImziANk4OrxGW725vYac7kXspUYjMMoDgjalvjeSlN50T nYo5uSc5b2i0Ct49d7+6L3rwqfoY8Y8yRBDmTCigEDNYEE6qo1c1CX2AR32xsIt2 ZX1tY09ofWnhDscFM27CLAK0RDu7Dg1LvT7nFucZdWi/B5R7NOM4W+zMeNl9btgw R2RQnFO8AmqwdD/1v2JwXxUgKhloWXNqLLoxz8ah6CMHbl5GpZ0U+K4uOZVsdYU0 Qv4JdmPEoZeewbIRdhOGAxMbH3Gsx8Sb -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org