$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: ZZ3c6ibcxsuDQ5OIBTLtH+S7i1nG2W8durMKRcIsi2E= Subject key identifier: 90:26:80:AE:E9:E8:AF:7D:7B:FF:8F:A6:4E:04:BE:9C:43:E4:1F:CC Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 145D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 1455 Signing time: Fri 22 Nov 2024 16:53:57 +0000 Manifest this update: Fri 22 Nov 2024 16:53:57 +0000 Manifest next update: Fri 29 Nov 2024 16:53:56 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: sQmMvZp7s6UGBkvXwuczEi+HZWNQ0QJqNU+4EI6wtSk=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: P4pXm3Akk+1BNm0AErATD6yX0hSNAer5oQwcgjfFUX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5213 (0x145d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Nov 22 16:53:57 2024 GMT Not After : Nov 29 16:53:56 2024 GMT Subject: CN=6740b725-c21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:b8:3c:6d:46:07:cc:01:f7:b1:b2:f5:9e: cd:5c:f0:0a:a4:b9:e8:d7:30:14:e8:eb:a8:27:e4: a0:b7:58:f8:b2:ac:d5:e2:11:73:bf:18:2f:e3:d0: 44:a6:ca:8c:b1:59:9b:5f:93:24:eb:53:33:de:97: bf:9e:bb:8a:07:af:a8:54:18:5c:33:bb:0e:14:87: 73:66:72:bc:45:b5:ed:fa:e1:0d:7e:c0:1a:e6:e8: a7:8b:41:31:8e:83:88:dd:32:0a:06:19:63:9b:2d: 87:bf:00:d6:ca:41:56:5a:eb:1e:ce:98:33:82:ad: 89:f7:28:65:5f:6a:2f:14:e9:d0:f7:77:3d:c6:1b: 66:4b:4b:4c:db:23:04:6f:c4:f4:6d:c8:cf:00:fb: cf:5a:4e:d6:2f:1f:27:c1:ff:53:bb:89:27:65:89: 61:ef:49:1d:7b:81:e1:e6:06:c8:99:cd:13:8b:a4: 59:dd:fe:b7:d3:fe:0e:01:b2:9f:79:2b:29:28:f1: 84:7e:12:6e:86:f7:a4:3e:37:7e:29:1b:1e:62:a5: 44:f6:ea:0c:23:fa:83:58:5a:c1:9c:d2:dd:9c:45: b1:7a:2b:64:ac:d2:a8:3a:69:c2:c9:2c:4f:ff:d4: 30:5a:55:14:7b:38:e2:db:90:fa:88:3a:82:5d:a1: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:80:AE:E9:E8:AF:7D:7B:FF:8F:A6:4E:04:BE:9C:43:E4:1F:CC X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:d1:22:73:ff:6b:59:1b:7d:3c:b8:98:5f:37:ba:bf:0d: 92:d0:c1:c5:79:4f:c2:f4:9d:99:8a:f8:ac:2e:e2:8a:11:1c: b7:e9:06:c6:73:27:94:03:4c:9c:1d:65:39:57:8a:b5:58:f2: a1:e9:d6:28:ec:28:b1:ef:db:59:62:31:1e:1d:8e:8e:c1:53: 7a:f5:a6:60:e3:78:e1:7a:31:4b:96:5b:ad:07:8a:9c:eb:cd: a3:b5:23:d8:01:f5:70:30:3d:49:2c:32:ae:be:bd:41:71:02: 1f:5a:1c:05:53:1e:09:89:0d:4e:86:3e:c5:c9:8a:f4:15:ec: 44:d7:9a:39:30:6f:dc:60:cb:cf:6d:16:c7:e4:d4:a9:cc:77: 29:c1:df:55:cc:b3:33:01:e3:7d:99:ba:96:c1:e0:3b:aa:b9: 9c:8e:9a:ed:20:79:d0:98:92:71:94:6f:d1:67:df:dc:c5:8f: 6e:e7:ab:ec:e0:6e:09:16:a0:7c:0a:cc:0f:39:da:1e:10:38: dc:66:2a:99:6f:1d:70:4a:23:99:67:fc:23:ec:3c:67:ac:e1: 35:1e:ba:90:2a:5d:47:1f:09:f1:b7:3e:87:27:5a:ac:4f:e5: 5a:dc:3d:d8:37:33:21:1d:ed:8e:78:72:b0:b5:bc:54:96:15: 1d:4c:99:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjQxMTIyMTY1MzU3WhcNMjQxMTI5MTY1MzU2WjAYMRYwFAYD VQQDEw02NzQwYjcyNS1jMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueG4PG1GB8wB97Gy9Z7NXPAKpLno1zAU6OuoJ+Sgt1j4sqzV4hFzvxgv49BE psqMsVmbX5Mk61Mz3pe/nruKB6+oVBhcM7sOFIdzZnK8RbXt+uENfsAa5uini0Ex joOI3TIKBhljmy2HvwDWykFWWusezpgzgq2J9yhlX2ovFOnQ93c9xhtmS0tM2yME b8T0bcjPAPvPWk7WLx8nwf9Tu4knZYlh70kde4Hh5gbImc0Ti6RZ3f630/4OAbKf eSspKPGEfhJuhvekPjd+KRseYqVE9uoMI/qDWFrBnNLdnEWxeitkrNKoOmnCySxP /9QwWlUUezji25D6iDqCXaG08QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAmgK7p 6K99e/+Ppk4EvpxD5B/MMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/vtEic/9rWRt9PLiYXze6vw2S0MHFeU/C9J2ZivisLuKKERy36QbG cyeUA0ycHWU5V4q1WPKh6dYo7Cix79tZYjEeHY6OwVN69aZg43jhejFLllutB4qc 682jtSPYAfVwMD1JLDKuvr1BcQIfWhwFUx4JiQ1Ohj7FyYr0FexE15o5MG/cYMvP bRbH5NSpzHcpwd9VzLMzAeN9mbqWweA7qrmcjprtIHnQmJJxlG/RZ9/cxY9u56vs 4G4JFqB8CswPOdoeEDjcZiqZbx1wSiOZZ/wj7DxnrOE1HrqQKl1HHwnxtz6HJ1qs T+Va3D3YNzMhHe2OeHKwtbxUlhUdTJkM -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org