$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: dveEebKHOJNoA1bXS5wIVM0wEx//MAm0naKZcfB8ksg= Subject key identifier: 94:13:2C:F1:FA:83:2A:6D:E3:01:B5:16:58:8D:77:56:75:F2:F8:2E Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0AB0 Signing time: Fri 22 Nov 2024 19:16:20 +0000 Manifest this update: Fri 22 Nov 2024 19:16:20 +0000 Manifest next update: Fri 29 Nov 2024 19:16:20 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: gMMD0TlYTL5+zOSCWXD3ywshzVD9lj/QK8hzOBy8btM=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 80S3I2a1DbY0ILpt3AY7JkYgVzOJPXrqkGBT2AXkLJ8=) 3: FDA839F8B5E011EEA4B1F86BC4F9AE02.roa (hash: n5dacGQlJpdBUGz42EhPmcJ+Fta9LH95gYvjLxHr08s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Nov 22 19:16:20 2024 GMT Not After : Nov 29 19:16:20 2024 GMT Subject: CN=6740d884-25f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:bd:bd:66:5a:bc:0d:c6:06:6e:1c:1b:a9: 89:a8:73:4a:16:19:65:33:9f:05:00:d5:ea:5a:07: 3a:a0:19:17:68:c7:18:f2:20:7e:7a:a5:60:05:52: 1b:bd:74:c4:20:1b:a3:45:8a:ea:e1:62:77:71:a3: 8b:11:13:37:65:cc:22:3b:51:38:ea:59:20:db:ad: a0:d9:ac:cd:35:fb:38:3e:60:a6:9d:21:27:54:27: d6:8c:79:db:d6:97:fe:c3:e2:05:a7:d1:ae:c7:75: 33:ae:51:fb:01:7e:07:1a:58:a5:22:44:f4:d0:e6: 75:b0:d4:9f:58:c1:d3:d4:d8:44:82:29:c4:b7:67: 0b:1c:30:53:f3:59:cd:35:98:11:dd:88:5e:eb:d3: eb:72:34:32:a4:8d:05:c2:74:2e:21:81:e7:15:e0: b4:33:82:bf:b2:79:81:ec:e4:81:31:f1:3d:d2:31: fb:af:02:d5:e6:b8:00:81:92:20:46:4f:83:aa:18: 35:a9:7b:f7:09:89:1f:16:44:46:36:9f:d9:c9:c0: c3:a2:1d:fc:a7:fb:6b:af:b6:dd:4b:96:64:d5:cd: f1:ee:cd:3c:41:39:af:f8:56:65:65:6b:a1:1e:c7: a6:68:86:4e:df:60:f8:59:cd:a7:a2:31:36:90:ab: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:2C:F1:FA:83:2A:6D:E3:01:B5:16:58:8D:77:56:75:F2:F8:2E X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:97:a2:b6:5a:e6:bc:cc:27:d1:56:9e:ad:55:39:e2:84: 01:da:b0:b4:f2:d5:c8:54:5c:08:08:8d:cc:1f:4b:d0:19:f4: 9c:5b:71:43:65:0d:41:9f:96:4b:0e:6f:45:28:17:50:95:3c: 1a:fa:ff:be:b4:d3:3f:6a:fb:9f:88:7d:74:69:64:23:02:8e: aa:d0:f8:c7:2d:61:e5:a6:af:84:ac:d9:7a:30:49:02:d8:35: d8:37:c7:0c:16:cb:90:a7:a2:7d:5f:a6:f2:6a:1d:8d:b2:5b: f9:5b:3a:f1:59:99:21:88:6f:05:d4:6d:69:58:b5:49:5d:5f: 78:e9:44:67:83:85:bd:64:52:fe:06:ee:2f:57:9a:56:70:82: d2:95:0b:13:20:65:73:07:bb:85:e0:f4:ab:79:c2:4f:b7:c4: 75:ad:34:11:35:d1:7e:1a:86:0b:8f:fe:f3:66:46:16:e7:18: c2:16:49:04:96:7e:a6:42:0c:bd:bc:1d:f3:a7:de:16:86:21: 1b:cb:eb:6f:f5:33:29:ab:18:88:28:1b:ca:8a:be:56:eb:ec: 7c:7e:09:64:df:ab:0b:fa:2b:ad:44:48:21:62:28:08:2d:fb: 8d:55:fc:42:76:38:32:ff:c5:99:c2:06:9d:f2:3c:9f:49:f7: 28:60:24:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjQxMTIyMTkxNjIwWhcNMjQxMTI5MTkxNjIwWjAYMRYwFAYD VQQDEw02NzQwZDg4NC0yNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cm9vWZavA3GBm4cG6mJqHNKFhllM58FANXqWgc6oBkXaMcY8iB+eqVgBVIb vXTEIBujRYrq4WJ3caOLERM3ZcwiO1E46lkg262g2azNNfs4PmCmnSEnVCfWjHnb 1pf+w+IFp9Gux3UzrlH7AX4HGlilIkT00OZ1sNSfWMHT1NhEginEt2cLHDBT81nN NZgR3Yhe69PrcjQypI0FwnQuIYHnFeC0M4K/snmB7OSBMfE90jH7rwLV5rgAgZIg Rk+Dqhg1qXv3CYkfFkRGNp/ZycDDoh38p/trr7bdS5Zk1c3x7s08QTmv+FZlZWuh HsemaIZO32D4Wc2nojE2kKs+aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQTLPH6 gypt4wG1FliNd1Z18vguMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA80JeitlrmvMwn0VaerVU54oQB2rC08tXIVFwICI3MH0vQGfScW3FD ZQ1Bn5ZLDm9FKBdQlTwa+v++tNM/avufiH10aWQjAo6q0PjHLWHlpq+ErNl6MEkC 2DXYN8cMFsuQp6J9X6byah2Nslv5WzrxWZkhiG8F1G1pWLVJXV946URng4W9ZFL+ Bu4vV5pWcILSlQsTIGVzB7uF4PSrecJPt8R1rTQRNdF+GoYLj/7zZkYW5xjCFkkE ln6mQgy9vB3zp94WhiEby+tv9TMpqxiIKBvKir5W6+x8fglk36sL+iutREghYigI LfuNVfxCdjgy/8WZwgad8jyfSfcoYCQJ -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org