$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: vJgCdZZ59daBAA3SzN5SUFWbLeOtEu7+RxCRZJ1zDqA= Subject key identifier: 99:91:9B:4D:ED:01:CB:9B:D6:DB:03:84:60:DC:3A:7D:48:4F:25:63 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 038B Signing time: Sat 23 Nov 2024 00:27:40 +0000 Manifest this update: Sat 23 Nov 2024 00:27:40 +0000 Manifest next update: Sat 30 Nov 2024 00:27:40 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: d7N/KFzu0WFvCAHv9nZ+YT7xRdZo7kV/+InCA1nZ34E=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: XYAlCpJ7mzvp/cofGi5NvPIKtbxLdre0l8+aO1T1+jg=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: DWvrRFsnIPoLKEJMzAK4aBrg0Gv8BJj/6fbSi0CsC/o=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 5W5E+3mSkVgIcfD5D9nwVRXpAej/2LIvbq7hJHUIIQs=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 1/c265I61z81RbwUjN+/+ktuTISDdU6AGxRGRBwwFGQ=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: 0bYsYs837SFgGZweeq9bSFBIzROTTbuMX0UkDBxpW3g=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: zT5o3xGQl3eggTa0HGvpU0sVsYrZsqPQ9mpieJGNY8E=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: ZX3EFF6YPYsvFLMNAm4Da6miOiuOSCWVNa70Njpa5XM=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Nov 23 00:27:40 2024 GMT Not After : Nov 30 00:27:40 2024 GMT Subject: CN=6741217c-e12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:77:04:3f:cd:43:62:ad:97:0c:b8:c7:6a: f2:6f:64:d2:97:43:ab:e1:04:19:0b:c1:eb:fe:7d: 03:40:16:bc:bb:75:41:10:1e:93:4f:0a:9d:7f:1a: b1:1b:c4:68:49:41:7a:fd:33:53:be:38:af:87:e2: 87:af:92:8f:82:2d:b0:06:cc:70:44:ea:7e:aa:6c: 04:bd:d6:80:28:4b:ce:a0:6e:84:14:b6:e1:97:f2: 47:03:be:21:dc:56:4c:b8:8a:1d:68:d4:b3:d1:29: 4b:1a:d8:a7:c2:61:f4:f4:1c:27:1d:2a:29:31:75: 04:6a:a1:47:c6:cb:23:84:fc:8f:a8:ce:b9:31:10: 0c:c5:1d:d5:1d:19:20:47:24:51:71:1e:cb:fa:59: cd:64:ea:28:6d:68:32:3f:05:e3:d2:00:a9:01:f8: e2:04:d7:a5:ee:cc:be:79:c0:e8:ee:12:ca:81:c8: fd:c3:56:f9:0c:5a:62:d9:c1:2a:25:0a:8d:14:c0: 3c:6d:b0:84:ae:27:e2:25:e9:c1:d0:33:bb:34:61: 6d:6f:ab:96:51:a5:de:83:42:21:39:1a:91:8c:0a: 0d:c3:99:3a:c7:c9:ff:aa:4b:48:e0:54:4c:ff:87: 38:0f:c9:ee:16:b4:c4:75:92:28:5f:82:1b:3d:d9: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:9B:4D:ED:01:CB:9B:D6:DB:03:84:60:DC:3A:7D:48:4F:25:63 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:bd:3e:77:10:9a:6f:52:54:41:96:5e:d8:a2:8a:ba:9b:05: 42:99:d8:da:15:6a:03:72:73:9b:69:4f:e8:d7:4b:3c:b3:d3: 08:55:a2:93:26:79:32:8d:81:ea:38:4b:ff:ff:a0:fe:29:41: f4:f7:74:2a:3a:cb:9d:dd:ad:4f:00:ba:8a:a0:cf:8b:72:b9: f3:0d:1e:15:2d:ef:13:6b:0c:e2:97:fd:e0:91:a3:c4:62:16: a3:75:5d:62:65:6e:65:8c:62:ba:76:f7:3d:b3:35:12:3c:79: bf:87:0c:39:0f:f3:af:32:fe:f6:10:c7:31:71:cb:63:6c:54: d7:91:22:e9:24:34:9c:05:81:57:79:2e:56:31:14:ec:d0:72: 69:c8:c6:c2:5a:97:67:14:65:79:fc:b2:a3:9e:f6:1f:6b:df: 59:5a:1c:62:ec:c9:4b:b2:5a:e6:c1:a6:85:0e:ff:b5:43:ac: 77:af:35:f4:a0:56:d1:51:d2:74:72:19:62:e5:a5:62:12:b8: ab:21:c2:e5:be:a4:a7:66:87:23:72:dd:c9:95:af:41:37:d6: 4e:61:70:d7:d2:00:2e:7d:76:93:7a:8a:b8:87:5f:5c:91:e4: 23:fe:0f:4e:7a:9c:03:e8:18:8a:e7:e5:2e:e4:09:ee:7b:c0: 6c:32:f1:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjQxMTIzMDAyNzQwWhcNMjQxMTMwMDAyNzQwWjAYMRYwFAYD VQQDEw02NzQxMjE3Yy1lMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdB3BD/NQ2Ktlwy4x2ryb2TSl0Or4QQZC8Hr/n0DQBa8u3VBEB6TTwqdfxqx G8RoSUF6/TNTvjivh+KHr5KPgi2wBsxwROp+qmwEvdaAKEvOoG6EFLbhl/JHA74h 3FZMuIodaNSz0SlLGtinwmH09BwnHSopMXUEaqFHxssjhPyPqM65MRAMxR3VHRkg RyRRcR7L+lnNZOoobWgyPwXj0gCpAfjiBNel7sy+ecDo7hLKgcj9w1b5DFpi2cEq JQqNFMA8bbCErifiJenB0DO7NGFtb6uWUaXeg0IhORqRjAoNw5k6x8n/qktI4FRM /4c4D8nuFrTEdZIoX4IbPdkzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmRm03t Acub1tsDhGDcOn1ITyVjMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/vT53EJpvUlRBll7Yooq6mwVCmdjaFWoDcnObaU/o10s8s9MIVaKT JnkyjYHqOEv//6D+KUH093QqOsud3a1PALqKoM+LcrnzDR4VLe8Tawzil/3gkaPE YhajdV1iZW5ljGK6dvc9szUSPHm/hww5D/OvMv72EMcxcctjbFTXkSLpJDScBYFX eS5WMRTs0HJpyMbCWpdnFGV5/LKjnvYfa99ZWhxi7MlLslrmwaaFDv+1Q6x3rzX0 oFbRUdJ0chli5aViErirIcLlvqSnZocjct3Jla9BN9ZOYXDX0gAufXaTeoq4h19c keQj/g9OepwD6BiK5+Uu5Anue8BsMvHJ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org