$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: 4ymEoGn0JNrEvpR0Enb7SjTmFqM67QFdhfrPu5k7I54= Subject key identifier: 42:BF:D8:66:1D:9D:5E:8E:5D:E3:D6:B5:8E:56:A3:A8:1A:B7:B9:18 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 0D Signing time: Thu 21 Nov 2024 06:10:54 +0000 Manifest this update: Thu 21 Nov 2024 06:10:54 +0000 Manifest next update: Thu 28 Nov 2024 06:10:54 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: 0qiMTaVXwRWm1Ynrwu1Txhrww6/1aDtw0HbDIB4e3Js=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Nov 21 06:10:54 2024 GMT Not After : Nov 28 06:10:54 2024 GMT Subject: CN=673eceee-da43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:fb:06:30:9d:37:16:c3:9e:17:9f:ec:e5: 0c:05:cf:08:9b:f9:3f:9e:cb:5e:df:26:13:f7:65: 60:75:e5:00:5a:48:c1:0d:83:87:ac:d0:5c:f4:46: e8:27:36:4c:40:56:de:e5:f3:5e:ce:c2:2f:13:14: b7:43:3d:cd:bb:96:78:29:8a:11:57:38:aa:1e:71: a0:19:af:a4:7b:17:0f:47:c7:fc:a5:38:26:48:23: 7a:9d:47:c5:fc:3c:39:cf:8b:a4:20:3e:66:d7:88: 66:c8:f6:af:55:b6:14:19:9b:90:36:b5:d9:a0:ce: 52:fa:6c:f1:85:60:2e:3a:bb:53:66:ae:4b:16:2b: 47:f9:4d:ee:46:52:2e:dc:66:0e:87:86:53:2a:e5: 29:2d:b4:ae:a8:10:4b:bf:2b:0c:fa:a6:aa:2f:77: 7e:45:5a:44:d5:13:64:3b:a7:84:be:cf:a7:58:64: 73:48:49:05:54:7e:0c:a2:7e:c1:4c:94:d9:76:b0: 85:a2:13:db:9b:16:e5:74:1a:4f:08:58:49:36:8a: 86:df:32:14:51:49:1f:34:5e:7d:5a:f0:78:c8:35: e8:f3:ca:c3:9f:67:ef:f5:ad:a9:3f:eb:d1:99:81: 62:ec:57:71:0a:42:c1:ae:46:9a:65:44:19:e0:85: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:D8:66:1D:9D:5E:8E:5D:E3:D6:B5:8E:56:A3:A8:1A:B7:B9:18 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d9:f7:1c:82:8c:c9:9f:dc:05:07:2b:1e:ad:27:ca:60:90: 28:b7:f6:ad:71:c1:f4:b4:d8:e3:ef:79:76:1e:ea:f6:61:83: da:72:30:00:17:fd:a9:8f:f3:60:43:1d:ba:80:5a:e9:d4:cc: 05:cb:58:3a:99:41:ba:52:f7:f6:b2:69:c6:fe:ce:2b:72:b8: 97:c9:cb:0d:a0:41:f1:fc:ca:d4:e3:ff:1c:75:06:9b:9b:47: b4:40:9d:69:18:ca:0b:d7:06:ee:8c:31:e6:5d:a3:bc:ed:60: ef:38:7a:98:b3:b8:8c:7a:22:25:db:bb:9f:6b:90:67:1d:66: f5:c7:95:a4:1a:a9:45:4f:fc:f0:7b:73:2b:16:20:80:e6:b2: 65:51:48:65:b8:e4:1f:01:70:ed:0b:9c:33:32:55:c6:c2:9e: 43:59:f4:84:ca:5c:ca:5d:1d:82:ef:ab:3c:dc:4f:d1:62:ba: 61:f8:5d:f1:8c:9f:48:d8:76:90:1e:bc:6f:82:68:28:fe:c1: 99:a7:57:44:95:2f:90:e3:1d:c3:86:1d:e5:41:83:e3:ff:d7: c9:1c:a8:5f:f0:f9:28:99:d3:79:e3:c1:70:ca:81:fd:73:58: af:40:c9:1f:ac:5d:ae:7d:26:b5:2d:3f:6e:5e:67:7d:ec:36: 34:ef:c6:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoRDQ2OTY0RjlGMzczMUYyRjYzRTY3MDA4QzkxRTU5QzdE Q0M3ODU1NzAeFw0yNDExMjEwNjEwNTRaFw0yNDExMjgwNjEwNTRaMBgxFjAUBgNV BAMTDTY3M2VjZWVlLWRhNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY7vsGMJ03FsOeF5/s5QwFzwib+T+ey17fJhP3ZWB15QBaSMENg4es0Fz0Rugn NkxAVt7l817Owi8TFLdDPc27lngpihFXOKoecaAZr6R7Fw9Hx/ylOCZII3qdR8X8 PDnPi6QgPmbXiGbI9q9VthQZm5A2tdmgzlL6bPGFYC46u1NmrksWK0f5Te5GUi7c Zg6HhlMq5SkttK6oEEu/Kwz6pqovd35FWkTVE2Q7p4S+z6dYZHNISQVUfgyifsFM lNl2sIWiE9ubFuV0Gk8IWEk2iobfMhRRSR80Xn1a8HjINejzysOfZ+/1rak/69GZ gWLsV3EKQsGuRpplRBnghUknAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQr/YZh2d Xo5d49a1jlajqBq3uRgwHwYDVR0jBBgwFoAU1Glk+fNzHy9j5nAIyR5Zx9zHhVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0U5MjZFOTEyOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhW Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUdsay1mTnpIeTlqNW5BSXlSNVp4OXpIaFZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RjExL0U5MjZFOTEyOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5 ajVuQUl5UjVaeDl6SGhWYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHLZ9xyCjMmf3AUHKx6tJ8pgkCi39q1xwfS02OPveXYe6vZhg9pyMAAX /amP82BDHbqAWunUzAXLWDqZQbpS9/ayacb+zityuJfJyw2gQfH8ytTj/xx1Bpub R7RAnWkYygvXBu6MMeZdo7ztYO84epizuIx6IiXbu59rkGcdZvXHlaQaqUVP/PB7 cysWIIDmsmVRSGW45B8BcO0LnDMyVcbCnkNZ9ITKXMpdHYLvqzzcT9FiumH4XfGM n0jYdpAevG+CaCj+wZmnV0SVL5DjHcOGHeVBg+P/18kcqF/w+SiZ03njwXDKgf1z WK9AyR+sXa59JrUtP25eZ33sNjTvxsE= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org