$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json) Hash identifier: 0QsGbnRBw/MFchYq2/yLx+o9+45N04wYboPePkMxS8s= Subject key identifier: D8:C1:39:3C:FD:2D:93:61:6F:40:1B:67:27:28:4D:07:4B:08:6A:7C Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft Manifest number: 25 Signing time: Wed 23 Oct 2024 06:25:12 +0000 Manifest this update: Wed 23 Oct 2024 06:25:11 +0000 Manifest next update: Wed 30 Oct 2024 06:25:11 +0000 Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: MPDJzzKNfyEU201UJ6C0hx6DRs8pNgCq2Mrl4LhtYtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Validity Not Before: Oct 23 06:25:11 2024 GMT Not After : Oct 30 06:25:11 2024 GMT Subject: CN=671896c7-39ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:ca:9a:18:ad:b5:36:d3:81:16:8d:48:10: ca:4b:6a:c4:57:8a:32:77:44:1e:66:5c:91:85:a5: 0e:cc:a2:e7:50:59:dd:3d:1e:01:d9:78:13:e3:f0: 58:a4:74:5d:bb:d9:ff:2b:be:19:87:03:04:f2:c9: 3d:1c:09:40:be:cd:0e:b3:c9:39:7c:67:7b:51:35: 32:30:fd:e2:78:f8:96:ae:28:11:f5:9a:b4:9c:61: c5:56:51:8f:42:44:b0:f1:04:85:43:f4:b0:da:c0: 9c:e9:21:e9:a6:ce:7d:5d:42:ec:35:5a:a2:e1:45: 05:b1:3e:a7:38:7a:35:cf:1c:2b:66:47:b7:ce:3e: 3d:72:0b:2c:00:a0:0a:89:58:fb:f5:f7:5a:d9:fb: a4:95:8f:8c:6a:ab:f5:9d:85:39:12:95:80:14:07: ad:fc:25:b2:49:cd:97:1b:07:28:bc:62:d2:f4:1f: 94:13:97:49:c2:a5:7f:36:d0:14:ce:8b:56:73:f0: d6:02:7a:4c:1b:21:d4:7d:2b:95:86:74:fd:6f:8c: eb:a0:0c:e5:eb:9f:18:5a:41:9e:4c:f8:cf:aa:fc: 59:b6:5c:35:3b:4c:d6:55:eb:25:ef:d7:da:16:3c: a5:d2:db:e6:79:26:8b:1c:fe:bf:fe:85:93:c6:a6: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:39:3C:FD:2D:93:61:6F:40:1B:67:27:28:4D:07:4B:08:6A:7C X509v3 Authority Key Identifier: keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f2:1b:f6:41:6e:ee:05:84:a4:5d:c2:41:18:6e:c4:3a:c2: a3:76:11:1a:c9:d9:a0:cf:b0:f4:c6:b4:ee:86:6b:e9:26:42: ab:fa:99:85:74:cb:44:93:16:3a:37:7c:b3:f6:9e:32:b9:2c: a4:61:78:e3:cc:06:c2:6b:c2:c6:15:98:44:e2:80:a6:b0:b8: f0:7d:60:eb:31:e7:46:74:94:92:15:ee:fb:d0:0c:4b:f6:ca: bf:b4:43:71:b4:5b:f7:28:33:5c:09:dc:b0:98:a7:f2:6b:ee: e7:1d:41:bd:a6:8a:d0:7e:d5:e8:4f:20:73:13:1c:d4:e3:f4: a1:0c:7d:b8:59:0f:10:ab:25:76:bf:71:f0:7c:98:ec:59:2d: c5:07:5a:a7:3f:c1:21:2b:e1:ff:d6:3b:c2:61:e2:29:87:a9: dd:4d:81:3d:cb:e7:10:60:90:ca:13:8d:93:01:41:33:a1:91: c8:10:b8:13:39:e9:7a:ce:63:5e:68:a0:36:df:5e:8b:d7:76: 10:cb:77:09:b8:8c:05:d2:97:15:65:28:d3:40:6a:c1:f7:ef: 03:67:60:95:d7:b3:19:38:98:ef:59:73:31:15:a1:1f:16:4e: 27:4f:8c:7f:08:45:ad:b3:3b:19:c1:34:c3:91:f2:a5:dd:ce: 12:01:65:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTk2NDExMC8GA1UEBRMoODMxQTg5MTM2REUxMjdBMDBBNjlEM0UwNkZEMEQzNzE3 RjdDRTk5QTAeFw0yNDEwMjMwNjI1MTFaFw0yNDEwMzAwNjI1MTFaMBgxFjAUBgNV BAMTDTY3MTg5NmM3LTM5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl18qaGK21NtOBFo1IEMpLasRXijJ3RB5mXJGFpQ7MoudQWd09HgHZeBPj8Fik dF272f8rvhmHAwTyyT0cCUC+zQ6zyTl8Z3tRNTIw/eJ4+JauKBH1mrScYcVWUY9C RLDxBIVD9LDawJzpIemmzn1dQuw1WqLhRQWxPqc4ejXPHCtmR7fOPj1yCywAoAqJ WPv191rZ+6SVj4xqq/WdhTkSlYAUB638JbJJzZcbByi8YtL0H5QTl0nCpX820BTO i1Zz8NYCekwbIdR9K5WGdP1vjOugDOXrnxhaQZ5M+M+q/Fm2XDU7TNZV6yXv19oW PKXS2+Z5Josc/r/+hZPGpscVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ME5PP0t k2FvQBtnJyhNB0sIanwwHwYDVR0jBBgwFoAUgxqJE23hJ6AKadPgb9DTcX986Zow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OTY0L0ZEM0UzODlFNUIx NDExRUZBQzk3NDQ2MUM0RjlBRTAyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZa by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hxSkUyM2hKNkFLYWRQZ2I5RFRjWDk4NlpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OTY0L0ZEM0UzODlFNUIxNDExRUZBQzk3NDQ2MUM0RjlBRTAyL2d4cUpFMjNoSjZB S2FkUGdiOURUY1g5ODZaby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvyG/ZBbu4FhKRdwkEYbsQ6wqN2ERrJ2aDPsPTGtO6Ga+kmQqv6mYV0 y0STFjo3fLP2njK5LKRheOPMBsJrwsYVmETigKawuPB9YOsx50Z0lJIV7vvQDEv2 yr+0Q3G0W/coM1wJ3LCYp/Jr7ucdQb2mitB+1ehPIHMTHNTj9KEMfbhZDxCrJXa/ cfB8mOxZLcUHWqc/wSEr4f/WO8Jh4imHqd1NgT3L5xBgkMoTjZMBQTOhkcgQuBM5 6XrOY15ooDbfXovXdhDLdwm4jAXSlxVlKNNAasH37wNnYJXXsxk4mO9ZczEVoR8W TidPjH8IRa2zOxnBNMOR8qXdzhIBZdA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org