$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: MeFkSMVOEKdbyuIuk1mZz38U6jY8U4opyzR3mx9d98o= Subject key identifier: 46:0E:85:CB:A8:49:86:19:1D:82:D6:D2:EA:DF:03:9B:19:5F:79:24 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0AC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0ABB Signing time: Wed 20 Nov 2024 19:09:55 +0000 Manifest this update: Wed 20 Nov 2024 19:09:54 +0000 Manifest next update: Wed 27 Nov 2024 19:09:54 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: kUGBDrNxBVeTVBaA6R1e6RXpNElF4JaCE3TQF2pBK2s=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 0grWoPbIw7eqZ5KWG4fjW4iWTJDkl1s1OqL5n5v7b8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Nov 20 19:09:54 2024 GMT Not After : Nov 27 19:09:54 2024 GMT Subject: CN=673e3402-5416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:d9:f2:ec:4e:00:da:e1:91:ed:f0:80:e8: 53:82:cd:18:a1:b4:04:1d:75:27:90:59:71:b1:ab: b5:da:b2:54:27:a7:b7:3a:09:16:b6:be:10:94:96: cf:68:e7:be:9a:87:26:7e:4f:3b:68:f9:9d:64:0a: b8:6b:64:c3:c3:ac:73:ad:19:4c:dc:53:85:09:27: 30:3d:b9:43:9c:61:9c:03:26:22:c1:0d:4f:06:88: ad:54:0d:f1:11:85:7d:d0:b3:fc:45:c9:8b:ca:70: 77:ff:ee:18:90:68:a1:ba:58:3e:f7:b1:ee:9c:eb: 33:74:5a:3e:9e:57:c2:95:3f:24:84:4a:6c:6d:d2: ce:b6:27:88:86:d1:d1:5c:0c:b6:ab:a1:b0:4d:e8: 51:d8:ee:9b:db:4e:53:d1:fb:63:d4:30:6f:d6:02: bb:f7:de:20:dc:2f:93:9b:b5:9a:04:9f:ee:f7:c1: 5b:b1:f5:9c:0c:c2:8a:f8:d0:08:a2:10:c1:11:1d: 94:8e:6a:b7:e8:19:5b:54:db:dd:1f:70:07:ea:46: 6e:3c:32:5f:f2:da:f2:3f:18:1d:e4:ef:d7:e6:83: 87:f3:51:35:96:53:ee:55:af:5b:fc:45:ce:39:a9: 7a:6f:68:19:9f:14:72:e4:a4:a1:a8:3b:65:0d:f4: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:85:CB:A8:49:86:19:1D:82:D6:D2:EA:DF:03:9B:19:5F:79:24 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:48:17:f4:43:0a:e5:09:c5:b3:3e:3e:9d:ee:27:c2:e3: 64:0a:64:ce:e2:0f:19:ed:65:f9:48:5f:a2:44:9f:a6:f5:31: 7c:3e:a1:98:60:b7:ec:1e:0a:de:d8:42:f6:be:7c:ac:d1:4c: 17:4b:4a:57:af:c7:f4:0a:4b:6e:b2:07:06:ba:4f:a8:dc:39: 70:bd:d6:9f:ee:40:6b:a0:8a:90:44:cc:10:75:39:3f:d7:11: 30:e2:d0:a1:1c:5c:22:e6:3b:ff:d3:a7:63:b6:aa:ba:74:30: bd:31:75:b5:b3:93:81:95:5c:dc:32:fc:e2:58:97:27:91:25: 1d:c3:bc:22:7e:61:62:e2:a5:6a:4b:5f:a7:48:74:f8:34:32: f5:96:13:cc:78:99:a8:ed:ac:77:46:ee:55:ab:f6:36:f3:8f: ab:6d:33:a6:a2:0b:ad:de:11:1b:62:91:f2:12:97:2f:5b:8f: e6:4e:e2:87:f9:34:4d:d2:51:73:ab:db:3a:aa:4e:27:17:62: bc:a2:d4:92:dc:5f:c6:77:50:71:1d:e0:47:95:03:41:5f:e2: 1f:0e:04:2d:7d:52:09:20:c8:70:e2:42:b8:62:0a:e8:c4:7d: 80:2a:20:03:60:e9:29:bd:1d:71:c7:a1:1c:4c:1a:29:66:36: 50:2a:b7:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjQxMTIwMTkwOTU0WhcNMjQxMTI3MTkwOTU0WjAYMRYwFAYD VQQDEw02NzNlMzQwMi01NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mvZ8uxOANrhke3wgOhTgs0YobQEHXUnkFlxsau12rJUJ6e3OgkWtr4QlJbP aOe+mocmfk87aPmdZAq4a2TDw6xzrRlM3FOFCScwPblDnGGcAyYiwQ1PBoitVA3x EYV90LP8RcmLynB3/+4YkGihulg+97HunOszdFo+nlfClT8khEpsbdLOtieIhtHR XAy2q6GwTehR2O6b205T0ftj1DBv1gK7994g3C+Tm7WaBJ/u98FbsfWcDMKK+NAI ohDBER2Ujmq36BlbVNvdH3AH6kZuPDJf8tryPxgd5O/X5oOH81E1llPuVa9b/EXO Oal6b2gZnxRy5KShqDtlDfQt3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYOhcuo SYYZHYLW0urfA5sZX3kkMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGHkgX9EMK5QnFsz4+ne4nwuNkCmTO4g8Z7WX5SF+iRJ+m9TF8PqGY YLfsHgre2EL2vnys0UwXS0pXr8f0CktusgcGuk+o3Dlwvdaf7kBroIqQRMwQdTk/ 1xEw4tChHFwi5jv/06djtqq6dDC9MXW1s5OBlVzcMvziWJcnkSUdw7wifmFi4qVq S1+nSHT4NDL1lhPMeJmo7ax3Ru5Vq/Y284+rbTOmogut3hEbYpHyEpcvW4/mTuKH +TRN0lFzq9s6qk4nF2K8otSS3F/Gd1BxHeBHlQNBX+IfDgQtfVIJIMhw4kK4Ygro xH2AKiADYOkpvR1xx6EcTBopZjZQKrdy -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org