$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: lfKytfqZdIW0ZesSTniThfbiOWfH8iiMOi1jv3Mv61A= Subject key identifier: 35:37:EE:86:AE:EF:9A:A3:4C:7B:F2:BB:95:62:47:43:6F:CB:F9:A5 Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 11D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 11C7 Signing time: Fri 22 Nov 2024 17:10:40 +0000 Manifest this update: Fri 22 Nov 2024 17:10:39 +0000 Manifest next update: Fri 29 Nov 2024 17:10:39 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: 7pu2j4R0W4pqrdr2ylcQNjcpfethKmWXHHrhumonv8A=) 2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: xAAO6itcprSh+8gb3Y6zviRgaXnWwWSK7iIacRpKf1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4562 (0x11d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: Nov 22 17:10:39 2024 GMT Not After : Nov 29 17:10:39 2024 GMT Subject: CN=6740bb10-c8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:fe:2c:d5:26:b4:bb:57:e7:4e:f7:70:c7: 84:99:ff:44:9d:a5:f7:e1:8c:31:fe:65:d5:9a:31: b2:aa:3f:55:15:d0:bc:56:58:0c:6d:7a:86:0e:8c: 17:68:c2:85:fe:d5:33:11:a6:57:13:7e:91:a1:81: e9:6f:95:53:c0:30:dd:4b:ca:75:8c:dd:a7:42:87: 4e:ad:28:0d:b6:72:51:50:ba:ca:ba:cf:91:73:8e: fb:90:c3:e5:48:f6:80:a4:85:9d:f3:77:7c:d0:ef: 2b:61:ac:8e:f5:0b:b7:2b:a1:e4:23:f8:47:12:b2: 74:81:87:d3:18:6b:d1:4b:d4:e9:d9:fb:71:8a:f4: 84:10:c2:78:e2:8e:3a:4e:8f:ff:8f:e3:f8:47:02: e7:20:11:35:18:bb:95:d7:79:0b:51:34:d1:fb:84: 14:07:1c:88:50:25:2f:f1:1c:8a:74:48:e9:2a:44: f6:de:e5:85:29:c3:61:7b:21:d5:c5:21:a6:3b:28: a8:6f:a3:67:46:0e:55:69:53:8d:86:11:6c:60:6b: a6:cc:39:3f:5e:3d:18:c2:58:42:f4:0e:85:a9:98: 7a:84:c5:cd:d8:95:ca:ae:5e:22:69:ad:00:a7:0e: 0b:e6:4d:50:19:3f:45:31:26:a8:dd:c0:ca:ca:cd: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:EE:86:AE:EF:9A:A3:4C:7B:F2:BB:95:62:47:43:6F:CB:F9:A5 X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:46:ea:c0:2f:a7:56:99:e3:a0:44:ba:a9:3f:f1:11:66:6f: b1:b0:e3:34:f3:3a:78:82:2c:2e:16:51:81:d1:6e:94:08:d9: 51:4a:ea:32:94:47:8a:e9:71:93:22:f0:72:2b:e5:ba:96:6b: 80:7a:4d:b1:9e:7a:95:87:03:71:5a:ab:e1:e1:30:ed:b8:11: b8:7f:91:61:8c:cc:de:08:31:61:ef:a1:59:fe:2c:52:df:00: 23:94:a0:67:0b:bc:e4:7c:a6:e1:cf:96:c5:5a:be:fa:69:2b: 0b:bc:09:34:f7:e7:2a:1a:ae:0c:c2:ee:62:39:ee:a1:a0:4c: f6:e5:c0:fa:c3:d0:89:ea:cc:32:cc:c9:03:8b:5f:95:68:46: 1f:e9:1a:6d:2d:7f:9c:35:ce:46:eb:87:72:0e:b6:a9:be:f9: 52:fb:09:33:a2:9f:04:28:37:ac:25:18:3f:b5:b0:92:22:18: 78:ef:21:43:ee:3c:c5:d0:44:c6:b7:34:2f:dc:f6:51:04:b2: 31:53:4b:d1:91:08:ac:7f:aa:7e:e5:9a:cc:aa:3a:f3:e1:a9: d4:2d:ec:52:4a:f1:61:15:9c:cd:02:a3:66:80:f3:cb:01:83: b3:31:a2:0e:ac:52:b8:df:6e:a8:03:4a:ac:77:65:d0:2b:67: ad:1e:f9:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjQxMTIyMTcxMDM5WhcNMjQxMTI5MTcxMDM5WjAYMRYwFAYD VQQDEw02NzQwYmIxMC1jOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVz+LNUmtLtX5073cMeEmf9EnaX34Ywx/mXVmjGyqj9VFdC8VlgMbXqGDowX aMKF/tUzEaZXE36RoYHpb5VTwDDdS8p1jN2nQodOrSgNtnJRULrKus+Rc477kMPl SPaApIWd83d80O8rYayO9Qu3K6HkI/hHErJ0gYfTGGvRS9Tp2ftxivSEEMJ44o46 To//j+P4RwLnIBE1GLuV13kLUTTR+4QUBxyIUCUv8RyKdEjpKkT23uWFKcNheyHV xSGmOyiob6NnRg5VaVONhhFsYGumzDk/Xj0YwlhC9A6FqZh6hMXN2JXKrl4iaa0A pw4L5k1QGT9FMSao3cDKys3D1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU37oau 75qjTHvyu5ViR0Nvy/mlMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJRurAL6dWmeOgRLqpP/ERZm+xsOM08zp4giwuFlGB0W6UCNlRSuoy lEeK6XGTIvByK+W6lmuAek2xnnqVhwNxWqvh4TDtuBG4f5FhjMzeCDFh76FZ/ixS 3wAjlKBnC7zkfKbhz5bFWr76aSsLvAk09+cqGq4Mwu5iOe6hoEz25cD6w9CJ6swy zMkDi1+VaEYf6RptLX+cNc5G64dyDrapvvlS+wkzop8EKDesJRg/tbCSIhh47yFD 7jzF0ETGtzQv3PZRBLIxU0vRkQisf6p+5ZrMqjrz4anULexSSvFhFZzNAqNmgPPL AYOzMaIOrFK4326oA0qsd2XQK2etHvlh -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org