$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: ri/u8X8ou9ZufpWJmWYLcHFxmuvW6Io5c3+9e+05e5I= Subject key identifier: BF:BC:E8:14:39:0B:68:2B:C0:70:CE:EF:A5:D1:82:E8:C5:28:F8:7D Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0BBE Signing time: Fri 22 Nov 2024 18:37:27 +0000 Manifest this update: Fri 22 Nov 2024 18:37:27 +0000 Manifest next update: Fri 29 Nov 2024 18:37:27 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: XWSSKnZnOb/eEDoD7FJKRpW5enYx14n34fUhpOeXmac=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Nov 22 18:37:27 2024 GMT Not After : Nov 29 18:37:27 2024 GMT Subject: CN=6740cf67-7614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:24:16:8a:d0:ec:81:dd:91:9d:e9:9b:6a: dc:c6:3f:e4:fd:dd:b0:b5:e7:a4:83:7f:ec:e5:ae: a9:30:b1:43:21:5d:b3:84:8a:87:02:bf:8f:1e:98: ef:65:e3:80:76:55:d3:d9:e7:b7:46:e7:be:64:c8: ad:c1:72:2d:47:c8:46:27:6c:ce:32:e0:61:1e:38: 35:3f:3f:30:3c:eb:16:12:3e:ca:87:6e:55:4d:98: ff:68:85:cb:8f:91:1d:7d:19:c9:ad:66:88:97:e4: 7b:43:e4:87:ac:6d:6d:38:ed:74:eb:61:bd:63:6a: 72:21:b6:2c:ce:80:7d:7e:2c:20:40:83:98:1c:1e: f6:52:71:18:fb:83:ca:e0:af:54:6a:28:59:24:2f: c2:b0:9b:9a:47:b0:35:1c:c9:28:57:3d:07:6c:8c: 8c:41:82:ed:b3:91:f0:a1:8c:20:66:b0:13:31:ed: 83:4d:82:0a:3e:92:58:81:77:97:a4:35:ab:de:92: 19:b9:98:ad:46:99:7b:c1:ba:2f:80:fe:53:80:d9: 08:cc:af:aa:95:b4:c0:ce:6e:c0:2b:2b:30:9f:bf: 48:88:15:15:03:57:f3:5b:d1:c2:ee:c2:55:72:47: aa:54:b3:6f:52:0d:61:c9:7b:9e:19:ac:f3:c2:8d: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BC:E8:14:39:0B:68:2B:C0:70:CE:EF:A5:D1:82:E8:C5:28:F8:7D X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:da:d1:fb:43:5d:b0:f7:de:41:38:36:9a:30:c6:6a:d4: 93:e4:34:18:cd:fa:30:09:50:7b:d0:52:f2:b3:78:68:ef:d8: 5e:70:dd:77:15:85:ee:07:7e:35:ce:eb:cf:03:b4:43:87:dd: dd:00:4d:52:80:9f:44:65:19:b7:2e:41:bb:f9:02:9b:7c:b3: 11:e6:32:b7:d3:4c:55:cf:d0:1e:fd:b0:e7:39:c9:9d:8e:d5: fc:a8:56:56:fe:0b:a3:5a:a6:48:1d:c7:74:61:3a:d0:c4:6d: d8:7c:61:37:00:37:80:50:a6:5e:ce:e6:c6:f3:8f:42:a1:9e: ad:ff:a9:b9:14:bc:d0:23:99:fa:f3:b4:c2:5d:26:03:0e:81: 16:2e:f6:91:eb:3e:33:fd:79:68:cf:d9:a0:1a:16:15:47:0d: 8a:07:21:c9:5f:bd:a5:3f:b3:91:6c:7c:5e:5c:0a:fd:9d:4a: 7a:22:7c:1a:3e:71:40:40:7a:33:b9:61:43:84:9f:34:30:b5: a4:53:53:8e:04:fb:b0:f4:99:a5:4f:de:a7:08:16:c9:f9:88: 7f:f1:41:03:f3:5c:57:92:23:a4:7f:0b:45:c6:5e:93:3d:0c: df:72:fd:d2:b9:a5:c5:d4:9d:5a:86:7d:39:ee:73:be:1a:0d: a3:9e:36:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjQxMTIyMTgzNzI3WhcNMjQxMTI5MTgzNzI3WjAYMRYwFAYD VQQDEw02NzQwY2Y2Ny03NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4AkForQ7IHdkZ3pm2rcxj/k/d2wteekg3/s5a6pMLFDIV2zhIqHAr+PHpjv ZeOAdlXT2ee3Rue+ZMitwXItR8hGJ2zOMuBhHjg1Pz8wPOsWEj7Kh25VTZj/aIXL j5EdfRnJrWaIl+R7Q+SHrG1tOO1062G9Y2pyIbYszoB9fiwgQIOYHB72UnEY+4PK 4K9UaihZJC/CsJuaR7A1HMkoVz0HbIyMQYLts5HwoYwgZrATMe2DTYIKPpJYgXeX pDWr3pIZuZitRpl7wbovgP5TgNkIzK+qlbTAzm7AKyswn79IiBUVA1fzW9HC7sJV ckeqVLNvUg1hyXueGazzwo36DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+86BQ5 C2grwHDO76XRgujFKPh9MB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpf9rR+0NdsPfeQTg2mjDGatST5DQYzfowCVB70FLys3ho79hecN13 FYXuB341zuvPA7RDh93dAE1SgJ9EZRm3LkG7+QKbfLMR5jK300xVz9Ae/bDnOcmd jtX8qFZW/gujWqZIHcd0YTrQxG3YfGE3ADeAUKZezubG849CoZ6t/6m5FLzQI5n6 87TCXSYDDoEWLvaR6z4z/Xloz9mgGhYVRw2KByHJX72lP7ORbHxeXAr9nUp6Inwa PnFAQHozuWFDhJ80MLWkU1OOBPuw9JmlT96nCBbJ+Yh/8UED81xXkiOkfwtFxl6T PQzfcv3SuaXF1J1ahn057nO+Gg2jnjaQ -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org