$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: ZXxmwxHIMDaF0hKJwbHwY6tLo/ps2yAvwW8RGUDraKU= Subject key identifier: DD:8B:09:5F:F7:CB:03:D4:F9:2C:D9:A7:25:15:24:37:D2:C6:C6:48 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 05A4 Signing time: Fri 22 Nov 2024 22:47:27 +0000 Manifest this update: Fri 22 Nov 2024 22:47:26 +0000 Manifest next update: Fri 29 Nov 2024 22:47:26 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: h6IkpBkVYG7X3WCbQxiajzfe+E7neFHxrZYZ0iKxxLs=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: NA32Il3ooyRG5ZJzSaQY0C1tJ0UNwEBD0xl7vGAZUYs=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: CVu1eE6uo1a4oR5jqcfO88CtMHewZGUSBjKAtdVPCIw=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: x1ayzpnW5YFxaRN24Av9ElsmrFSke9qosmrhE25drSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Nov 22 22:47:26 2024 GMT Not After : Nov 29 22:47:26 2024 GMT Subject: CN=674109fe-b93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:ff:75:0e:9d:02:98:a4:ce:09:97:fd:d4: 1f:c0:65:2e:b2:5a:cc:4b:97:b6:1e:f4:e9:be:df: 6e:21:ba:30:7b:67:27:e4:ae:3f:69:b2:74:b8:6b: 63:a5:2f:47:f4:a3:97:f0:e5:17:39:5e:70:5a:95: 63:e8:b8:03:48:51:51:67:48:2a:18:a4:87:a3:c1: 2d:9b:64:a0:fd:ae:b9:be:06:2f:78:34:36:cc:1e: 18:1d:ec:59:d5:70:e4:87:d5:e4:ad:14:c5:5f:c9: 97:be:36:6e:34:ff:38:ef:46:b2:f3:90:a7:df:35: eb:c9:28:89:97:8b:30:73:3d:a5:7f:3f:23:a5:26: 9f:d7:c6:69:46:b0:82:ed:b2:dc:37:4e:e5:b3:be: c3:b4:d1:b5:22:02:51:84:a6:72:68:da:72:bd:4e: 5e:23:9a:bc:51:10:5d:11:9f:50:6e:7e:a2:11:6d: c3:aa:48:24:60:76:36:cf:19:63:01:a4:00:c6:f5: 46:82:17:c0:c1:c2:0b:a2:cb:1f:c4:e8:30:71:2c: c8:87:ad:17:97:7c:af:7d:38:fe:68:c6:dc:7b:4a: c6:55:19:d3:fa:ed:e7:3e:ae:64:85:8e:61:51:f3: fe:66:14:f5:67:63:68:1e:e0:95:d2:7f:f6:c1:20: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:09:5F:F7:CB:03:D4:F9:2C:D9:A7:25:15:24:37:D2:C6:C6:48 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d9:bc:2b:f5:1e:cb:8e:3d:d6:ef:59:33:bc:ac:c5:6e:f1: ec:f3:d9:a6:93:79:70:e7:ad:19:51:ec:4d:3f:35:dc:b1:68: a3:9e:8b:90:d9:67:fb:ff:31:93:c7:30:34:89:9d:e6:63:48: a9:c0:f4:62:29:bf:b0:1c:01:d0:f6:b6:2f:49:5a:9f:b0:ce: e3:29:e0:33:64:4a:f1:fb:55:ff:f6:f5:29:16:11:a2:50:21: b5:60:7b:69:77:03:aa:b7:2c:81:fc:73:ab:30:1c:f8:02:8d: 19:f8:bd:1a:c2:93:2c:f2:c7:d8:e8:b3:7d:4f:36:6d:c2:1f: 63:e2:be:95:51:ac:96:4b:fb:e2:0a:fa:e1:06:f8:a3:c4:97: dd:e4:5c:5a:7e:8d:09:86:39:df:6d:20:d2:b7:fe:d7:5d:92: 0d:dd:aa:af:22:11:50:72:ba:fa:af:cb:68:74:b5:5f:6b:4f: fd:99:75:52:00:d6:24:53:7d:a5:5d:ab:9b:0d:89:aa:dd:89: 7f:13:5e:6f:8f:59:40:92:e4:3f:34:53:6e:07:36:0b:73:a0: e8:60:69:aa:5b:1c:76:8b:39:cf:4c:4e:b5:14:e5:91:93:b2: 63:95:51:0c:15:8a:63:13:0f:d6:a4:ae:68:17:e9:65:bb:e3: 4a:b9:4e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjQxMTIyMjI0NzI2WhcNMjQxMTI5MjI0NzI2WjAYMRYwFAYD VQQDEw02NzQxMDlmZS1iOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfv/dQ6dApikzgmX/dQfwGUuslrMS5e2HvTpvt9uIbowe2cn5K4/abJ0uGtj pS9H9KOX8OUXOV5wWpVj6LgDSFFRZ0gqGKSHo8Etm2Sg/a65vgYveDQ2zB4YHexZ 1XDkh9XkrRTFX8mXvjZuNP8470ay85Cn3zXrySiJl4swcz2lfz8jpSaf18ZpRrCC 7bLcN07ls77DtNG1IgJRhKZyaNpyvU5eI5q8URBdEZ9Qbn6iEW3DqkgkYHY2zxlj AaQAxvVGghfAwcILossfxOgwcSzIh60Xl3yvfTj+aMbce0rGVRnT+u3nPq5khY5h UfP+ZhT1Z2NoHuCV0n/2wSBivwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2LCV/3 ywPU+SzZpyUVJDfSxsZIMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR2bwr9R7Ljj3W71kzvKzFbvHs89mmk3lw560ZUexNPzXcsWijnouQ 2Wf7/zGTxzA0iZ3mY0ipwPRiKb+wHAHQ9rYvSVqfsM7jKeAzZErx+1X/9vUpFhGi UCG1YHtpdwOqtyyB/HOrMBz4Ao0Z+L0awpMs8sfY6LN9TzZtwh9j4r6VUayWS/vi CvrhBvijxJfd5Fxafo0JhjnfbSDSt/7XXZIN3aqvIhFQcrr6r8todLVfa0/9mXVS ANYkU32lXaubDYmq3Yl/E15vj1lAkuQ/NFNuBzYLc6DoYGmqWxx2iznPTE61FOWR k7JjlVEMFYpjEw/WpK5oF+llu+NKuU62 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:42 2024 by rpki-client on console-ams.rpki-client.org