$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: WGsXyOHLbDgfSD4lkttVlH8DgJjXl29PS0hUtRH70Nc= Subject key identifier: 45:65:2C:B0:66:36:7C:4A:21:ED:2F:24:70:A9:86:D8:4E:77:B3:59 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0906 Signing time: Wed 20 Nov 2024 20:04:14 +0000 Manifest this update: Wed 20 Nov 2024 20:04:14 +0000 Manifest next update: Wed 27 Nov 2024 20:04:14 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: QlmiYUKTwuswkxN5zrCrQ3YHOm+2dHb1uEOLz+8FflE=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Nov 20 20:04:14 2024 GMT Not After : Nov 27 20:04:14 2024 GMT Subject: CN=673e40be-11b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:cb:9b:a8:fe:c6:be:c3:4a:43:8b:d9:3d: 1a:6a:3c:70:f5:9d:79:84:80:5a:89:72:cd:e3:66: 69:03:0c:53:b4:66:84:f8:12:91:8c:7b:a7:b3:bd: 26:b0:4e:76:13:92:7f:19:b8:3c:d1:50:94:bf:3a: c8:a6:01:7d:18:87:88:9a:7b:0f:da:63:ca:f3:a3: cc:3b:e1:c0:4d:00:d3:0a:4c:34:a3:8a:ef:fd:00: ad:2b:44:d8:79:a5:91:a7:0f:43:28:36:13:70:df: de:d6:01:40:ce:23:35:1c:7c:6e:26:7b:33:96:8e: b0:16:f5:e4:18:cb:42:b2:23:6f:4e:3f:2a:c9:f7: c4:3e:4b:b3:e4:d0:64:95:dd:ac:9a:10:22:f6:56: d8:7d:79:8d:fd:95:03:39:4b:12:f2:52:9c:01:49: ca:5c:95:65:8f:d4:3d:82:9e:d0:13:22:c8:3b:91: 92:c3:f6:27:c0:b3:1f:c2:89:6f:31:e6:c4:96:60: e9:66:d2:30:9e:29:79:8e:fa:f1:0d:d3:4c:b7:d6: 9b:f1:7c:7c:b7:0f:5c:45:29:d3:9b:99:d5:d4:13: 68:d2:44:97:a5:25:60:8b:51:0d:b7:2a:42:0f:98: ab:f6:23:9a:46:63:93:60:53:74:da:7c:21:df:9c: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:2C:B0:66:36:7C:4A:21:ED:2F:24:70:A9:86:D8:4E:77:B3:59 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1a:8e:6d:8d:aa:ac:64:a5:44:9f:e5:3e:66:66:61:3c:ce: bb:fc:a5:f4:0a:c2:d9:86:a1:59:8a:76:83:3d:c2:5b:bb:c1: ab:0a:e1:68:d8:16:12:ec:b4:1d:10:61:48:b8:6c:ed:53:4d: 58:25:9e:fc:3d:02:4c:2c:ff:72:a4:6b:ff:80:0c:f7:80:fd: f3:db:33:54:6a:0c:ca:94:a6:cc:7c:23:98:e9:7b:04:e6:fa: 3f:3e:3b:7b:7c:6b:d3:b6:b0:7e:f4:98:74:df:da:bc:f7:62: 55:0b:9f:ff:4b:05:41:e1:0f:75:81:d2:be:87:db:7c:bc:61: bb:d9:58:56:a4:1b:bb:6e:ff:75:6d:9e:b0:a7:65:10:f5:7f: d8:e2:03:23:7f:a5:1e:cc:43:21:4f:75:32:ee:87:2d:88:da: 90:8a:00:16:92:ee:16:db:bf:05:48:f1:53:13:bc:a8:55:8c: 21:63:01:47:0b:1a:72:cd:79:9a:56:a5:98:8d:66:ea:35:7b: e0:be:6b:18:87:01:d0:23:67:f3:9f:ac:5a:3b:34:8b:c1:3b: 3f:9f:7e:f9:53:6c:d5:b1:21:67:d4:c1:dc:63:b3:69:0a:3b: aa:21:b8:54:73:c7:26:86:1f:3f:d7:a6:db:6d:49:14:22:eb: d9:77:e1:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjQxMTIwMjAwNDE0WhcNMjQxMTI3MjAwNDE0WjAYMRYwFAYD VQQDEw02NzNlNDBiZS0xMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N7Lm6j+xr7DSkOL2T0aajxw9Z15hIBaiXLN42ZpAwxTtGaE+BKRjHuns70m sE52E5J/Gbg80VCUvzrIpgF9GIeImnsP2mPK86PMO+HATQDTCkw0o4rv/QCtK0TY eaWRpw9DKDYTcN/e1gFAziM1HHxuJnszlo6wFvXkGMtCsiNvTj8qyffEPkuz5NBk ld2smhAi9lbYfXmN/ZUDOUsS8lKcAUnKXJVlj9Q9gp7QEyLIO5GSw/YnwLMfwolv MebElmDpZtIwnil5jvrxDdNMt9ab8Xx8tw9cRSnTm5nV1BNo0kSXpSVgi1ENtypC D5ir9iOaRmOTYFN02nwh35yuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVlLLBm NnxKIe0vJHCphthOd7NZMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGo5tjaqsZKVEn+U+ZmZhPM67/KX0CsLZhqFZinaDPcJbu8GrCuFo 2BYS7LQdEGFIuGztU01YJZ78PQJMLP9ypGv/gAz3gP3z2zNUagzKlKbMfCOY6XsE 5vo/Pjt7fGvTtrB+9Jh039q892JVC5//SwVB4Q91gdK+h9t8vGG72VhWpBu7bv91 bZ6wp2UQ9X/Y4gMjf6UezEMhT3Uy7octiNqQigAWku4W278FSPFTE7yoVYwhYwFH CxpyzXmaVqWYjWbqNXvgvmsYhwHQI2fzn6xaOzSLwTs/n375U2zVsSFn1MHcY7Np CjuqIbhUc8cmhh8/16bbbUkUIuvZd+FY -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org