$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: 7Yhoi8zSxosMrnwwEyi/kOG88xrwu5U6QqgSk8AXOt0= Subject key identifier: E6:65:41:77:70:E9:8F:C1:3B:76:28:18:35:02:76:91:C1:EC:77:B5 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 2B Signing time: Mon 25 Nov 2024 05:44:28 +0000 Manifest this update: Mon 25 Nov 2024 05:44:28 +0000 Manifest next update: Mon 02 Dec 2024 05:44:28 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: p4/HrSx8dbxvY7VKhs1qFRRPyU/Un0cSMYX5SIyHGQ4=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: k8bmIEi5AkEe4xzWalacEnF3qdgyVE7VkZI11nYD+RY=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: rPvzorCtxEUQHBw6HlxY0A29sySWnjRa4667RhmeUc8=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: FsiT3oYazNjnPtPEe7G6GkJ5HTMUOkycbdZ+8LjujNs=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: L5hcVKih/+nBko6kW7js31KvZiJs+q86I/1/tFKfyVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Nov 25 05:44:28 2024 GMT Not After : Dec 2 05:44:28 2024 GMT Subject: CN=67440ebc-fe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:8d:98:3c:02:2c:2d:1a:00:a3:d4:e1:1c: 81:2b:2a:b8:38:cc:c2:fc:70:9b:1b:26:92:83:c7: 7d:98:07:3f:78:0f:4d:b7:d3:f5:22:2f:38:7b:92: 7e:10:fe:44:72:c1:1c:2c:58:38:7e:ed:7c:34:78: 8b:d3:dc:fc:88:56:ef:4e:1b:ae:81:b3:af:77:99: e4:94:fd:8b:f0:3f:05:a8:c2:3d:9a:08:71:18:9d: e9:cf:b4:34:3a:4c:e5:d4:76:df:7b:cf:c5:8c:b2: ae:da:e4:f2:2c:b1:3a:1a:30:06:77:c8:60:87:3a: 75:46:36:9b:01:ad:9b:56:2c:df:d5:c6:ad:b6:e6: da:c2:79:57:a4:17:2f:59:44:ea:29:df:e7:bd:d2: 69:b8:13:91:8e:74:94:f4:b0:36:d9:d1:4b:4f:13: 76:53:dc:17:f0:5d:2b:69:85:59:98:0e:1b:3d:8c: f0:fb:0e:99:69:d1:a7:88:0a:34:77:ce:a2:4f:f5: 5c:df:45:da:ca:9c:e5:5b:b7:0e:2e:d7:3a:37:36: 10:56:86:53:08:2a:21:54:d0:ee:44:61:15:11:b5: 79:b9:ea:20:be:bf:75:a6:f6:ee:60:4e:8d:49:19: 10:61:5c:8c:b9:85:57:f4:ea:ec:63:77:f5:8c:07: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:41:77:70:E9:8F:C1:3B:76:28:18:35:02:76:91:C1:EC:77:B5 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3e:ef:6e:5a:fd:33:12:50:c6:40:57:a1:4e:97:fc:57:6d: 1a:b9:f9:10:91:ed:c0:37:44:8d:7b:b2:fe:90:dc:dd:5a:66: 78:5b:40:3f:05:6c:19:05:1d:ed:e4:e6:8a:cc:a1:73:a4:9e: 80:79:9c:91:d4:f2:e1:e8:48:e3:d7:40:28:41:f9:fa:b2:f3: 25:5c:26:39:d7:2c:01:01:f1:fc:c3:3e:27:b8:39:e1:38:38: 45:e5:1c:52:55:9e:56:6d:0d:27:5e:a2:d8:dc:17:5e:56:0f: 08:a0:80:fe:27:a9:cd:15:23:3f:66:9c:0e:b5:94:5c:8c:ee: f4:e3:a0:a3:65:48:c7:02:fe:15:ae:ce:f3:1b:20:08:73:ed: 3c:54:50:70:7f:8f:3e:b3:b9:18:dd:00:dc:71:a3:41:7f:f4: 84:eb:75:0f:80:87:c2:ca:64:5a:0c:84:0b:5d:11:5b:a5:b1: 6a:27:43:24:7b:54:9d:2c:93:bc:91:d7:84:83:36:44:2b:e5: a6:3e:e1:73:e7:6e:1c:db:29:11:1f:d8:7f:df:f3:34:1f:2e: bf:63:9a:e1:19:ce:1a:35:8e:cd:21:35:87:71:83:7d:93:18: 45:ed:ac:f6:e6:11:81:4e:87:b5:3d:ca:e7:64:7e:cb:b6:3b: 7d:28:49:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyQzExMC8GA1UEBRMoODE3REQzODAyRjI2RTU3RUNFODI2NUNFODYyNkZDQkI5 QzY0RTlENDAeFw0yNDExMjUwNTQ0MjhaFw0yNDEyMDIwNTQ0MjhaMBgxFjAUBgNV BAMTDTY3NDQwZWJjLWZlMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGGY2YPAIsLRoAo9ThHIErKrg4zML8cJsbJpKDx32YBz94D0230/UiLzh7kn4Q /kRywRwsWDh+7Xw0eIvT3PyIVu9OG66Bs693meSU/YvwPwWowj2aCHEYnenPtDQ6 TOXUdt97z8WMsq7a5PIssToaMAZ3yGCHOnVGNpsBrZtWLN/Vxq225trCeVekFy9Z ROop3+e90mm4E5GOdJT0sDbZ0UtPE3ZT3BfwXStphVmYDhs9jPD7Dplp0aeICjR3 zqJP9VzfRdrKnOVbtw4u1zo3NhBWhlMIKiFU0O5EYRURtXm56iC+v3Wm9u5gTo1J GRBhXIy5hVf06uxjd/WMB5OhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5mVBd3Dp j8E7digYNQJ2kcHsd7UwHwYDVR0jBBgwFoAUgX3TgC8m5X7OgmXOhib8u5xk6dQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTJDL0UyQzA3N0RFNzc2 NjExRUZCNTVFRDI3OUM0RjlBRTAyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1gzVGdDOG01WDdPZ21YT2hpYjh1NXhrNmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTJDL0UyQzA3N0RFNzc2NjExRUZCNTVFRDI3OUM0RjlBRTAyL2dYM1RnQzhtNVg3 T2dtWE9oaWI4dTV4azZkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU+725a/TMSUMZAV6FOl/xXbRq5+RCR7cA3RI17sv6Q3N1aZnhbQD8F bBkFHe3k5orMoXOknoB5nJHU8uHoSOPXQChB+fqy8yVcJjnXLAEB8fzDPie4OeE4 OEXlHFJVnlZtDSdeotjcF15WDwiggP4nqc0VIz9mnA61lFyM7vTjoKNlSMcC/hWu zvMbIAhz7TxUUHB/jz6zuRjdANxxo0F/9ITrdQ+Ah8LKZFoMhAtdEVulsWonQyR7 VJ0sk7yR14SDNkQr5aY+4XPnbhzbKREf2H/f8zQfLr9jmuEZzho1js0hNYdxg32T GEXtrPbmEYFOh7U9yudkfsu2O30oSWQ= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:48 2024 by rpki-client on console-ams.rpki-client.org