$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json) Hash identifier: +VzNqLKmpwHqZcyoMqX8VLUFnFdITST0o5N/K890yhA= Subject key identifier: 1D:41:80:4F:71:9A:46:F3:16:02:7C:92:23:18:69:2F:0F:A8:E0:56 Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft Manifest number: 027B Signing time: Thu 21 Nov 2024 01:14:04 +0000 Manifest this update: Thu 21 Nov 2024 01:14:03 +0000 Manifest next update: Thu 28 Nov 2024 01:14:03 +0000 Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: O6NTPFn6DpW1VxyhqpIAvEo0BXHsD1z6XnlY/0E+yoc=) 2: 4AEA05D08C7211EFB277DF2FC4F9AE02.roa (hash: KKLRGtA0Dq1oGe9dEcHecYG0VzyarmCgGk6T+1aIEL0=) 3: CA1FFF4A8E6511EFB7E3F85FC4F9AE02.roa (hash: SR9KQobrAZpiVBq6tO3MXH4mW4d5vpb6U3K8utPodrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Validity Not Before: Nov 21 01:14:03 2024 GMT Not After : Nov 28 01:14:03 2024 GMT Subject: CN=673e895b-3b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:23:22:7f:f0:c4:ca:d9:76:a0:85:4b:f0: 4e:31:70:3f:6c:89:a9:f0:2e:43:25:51:c8:64:3c: d9:83:7d:f8:2f:39:45:82:3a:65:e5:6e:be:d3:ae: 0b:ef:2d:03:23:6d:24:95:33:0d:93:f5:31:b8:c5: 61:d7:9c:48:f5:bc:57:ab:5f:bd:27:d7:6e:a5:6a: 82:9b:fa:ae:3a:b7:05:16:f6:7e:59:16:10:9b:8f: 7d:53:ae:02:54:c5:c2:27:15:cd:c0:f8:f4:30:03: 34:9d:ed:f9:15:db:25:f9:df:99:21:0c:62:69:68: 49:67:da:f7:a6:f6:02:cd:02:08:d1:5a:d5:31:69: 5d:91:69:3c:b5:7b:6f:a7:af:77:6c:ac:23:0b:fb: ff:19:b3:c2:33:ce:a6:af:14:79:e1:a9:30:a0:bd: 15:30:30:0c:a3:d5:d9:9b:03:93:78:1c:57:48:14: f9:84:ca:7f:fb:1e:76:17:87:73:eb:b6:f6:27:d2: 02:77:02:31:89:6b:07:a2:e2:ed:64:24:c1:d8:99: 02:d3:bb:b5:29:6c:e5:82:85:58:36:c7:a3:a6:4d: c1:67:13:76:21:4f:f6:f4:01:2a:72:0b:2e:53:a3: 8c:7f:b1:1a:f1:9d:b0:be:e1:e7:d3:c3:2d:dc:b1: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:41:80:4F:71:9A:46:F3:16:02:7C:92:23:18:69:2F:0F:A8:E0:56 X509v3 Authority Key Identifier: keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f3:68:d7:c5:b6:87:db:eb:47:aa:2b:ec:86:c4:21:0a:c5: d9:4b:99:f8:f7:b8:9b:5e:6d:c4:f6:00:a0:c0:5b:aa:05:51: 09:f3:dc:11:55:b9:b4:f0:c5:41:45:bf:16:cf:88:db:3a:03: c8:a3:e6:57:c7:c7:f8:3d:77:bf:dd:aa:86:d3:18:f8:c4:22: 0f:80:66:51:e2:df:02:e3:58:6f:dc:e4:5e:6a:8f:49:00:98: 64:b2:ae:a7:b2:ee:4b:7c:b5:fe:d4:a9:97:81:68:50:0f:7e: 70:aa:93:0f:a3:bf:f3:28:4c:91:6a:0e:ae:42:8c:4f:48:9a: 7a:1b:b9:41:d1:f8:27:b3:e1:cf:b4:9b:99:22:0e:48:c6:9a: ae:0c:bc:b6:a2:fd:06:2e:05:15:c0:92:32:68:37:7a:84:a4: 40:88:bd:8a:7e:1c:03:3e:72:39:66:95:f0:7f:17:5d:00:b1: d5:e9:cb:a3:de:59:5b:66:df:69:73:38:ee:62:e0:bd:90:77: 29:de:75:a1:52:84:e3:12:a6:f5:35:02:1e:f0:0e:07:ff:43: 02:1b:21:07:af:23:34:1b:38:04:2e:66:38:4b:86:98:02:1c: f1:be:85:a9:39:b9:0f:a7:8e:0b:14:cb:1f:e9:a2:6d:de:83: 03:ed:34:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw QTc0NUMyRTAwHhcNMjQxMTIxMDExNDAzWhcNMjQxMTI4MDExNDAzWjAYMRYwFAYD VQQDEw02NzNlODk1Yi0zYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKwjIn/wxMrZdqCFS/BOMXA/bImp8C5DJVHIZDzZg334LzlFgjpl5W6+064L 7y0DI20klTMNk/UxuMVh15xI9bxXq1+9J9dupWqCm/quOrcFFvZ+WRYQm499U64C VMXCJxXNwPj0MAM0ne35Fdsl+d+ZIQxiaWhJZ9r3pvYCzQII0VrVMWldkWk8tXtv p693bKwjC/v/GbPCM86mrxR54akwoL0VMDAMo9XZmwOTeBxXSBT5hMp/+x52F4dz 67b2J9ICdwIxiWsHouLtZCTB2JkC07u1KWzlgoVYNsejpk3BZxN2IU/29AEqcgsu U6OMf7Ea8Z2wvuHn08Mt3LFZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1BgE9x mkbzFgJ8kiMYaS8PqOBWMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK VkxUWmVsMDNySUlLZEZ3dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY82jXxbaH2+tHqivshsQhCsXZS5n497ibXm3E9gCgwFuqBVEJ89wR Vbm08MVBRb8Wz4jbOgPIo+ZXx8f4PXe/3aqG0xj4xCIPgGZR4t8C41hv3OReao9J AJhksq6nsu5LfLX+1KmXgWhQD35wqpMPo7/zKEyRag6uQoxPSJp6G7lB0fgns+HP tJuZIg5IxpquDLy2ov0GLgUVwJIyaDd6hKRAiL2KfhwDPnI5ZpXwfxddALHV6cuj 3llbZt9pczjuYuC9kHcp3nWhUoTjEqb1NQIe8A4H/0MCGyEHryM0GzgELmY4S4aY AhzxvoWpObkPp44LFMsf6aJt3oMD7TR6 -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:40 2024 by rpki-client on console-ams.rpki-client.org