$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json) Hash identifier: 1n+gILsVdmhZ4lgonAGvLvTA1TvRLl/muQkwa65IojQ= Subject key identifier: B3:8A:73:3B:CC:B0:66:7C:6D:D8:76:BE:0D:EE:68:B9:94:A1:3D:BA Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 100E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft Manifest number: 0FF6 Signing time: Wed 20 Nov 2024 17:23:58 +0000 Manifest this update: Wed 20 Nov 2024 17:23:57 +0000 Manifest next update: Wed 27 Nov 2024 17:23:57 +0000 Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: 4YP+Vk0/aoBxI0HkLvO/3phaOIY1Bp5dZEK0KgPsry8=) 2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: djH0DEstrjY1MlI/KGVSozlxQ/scosHYDHl38KhovH4=) 3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: JmtzVr9gglmzWYD320C9vJdh/yOVfgM+na2sd2lwcAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4110 (0x100e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Nov 20 17:23:57 2024 GMT Not After : Nov 27 17:23:57 2024 GMT Subject: CN=673e1b2e-4257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:0b:59:b5:86:38:73:16:14:bc:e3:d1:c1: d9:40:10:a3:a3:c5:8e:81:9d:2d:29:bb:f9:cf:65: bd:83:54:77:82:bf:03:be:60:bf:f7:1d:5b:4f:2d: 2a:db:70:95:66:ca:05:38:82:38:57:80:c9:66:37: 6d:cc:ac:81:5c:f7:f6:d5:f5:40:d1:fb:3f:e6:55: 7c:65:77:a2:6c:0a:3c:b3:29:25:84:25:5f:5d:48: e7:99:e8:a9:16:f7:20:bc:74:02:ba:01:47:1f:e6: 66:65:5a:2f:5e:d8:03:d9:66:3a:fe:2a:ed:59:cc: 40:57:1e:89:f9:38:7b:74:5f:5a:ed:76:46:0e:dd: 57:fe:94:c7:47:8a:74:58:08:f0:14:0b:9f:94:0d: 96:26:83:b6:cf:de:bb:7d:61:9c:bc:da:64:35:87: c5:52:5f:94:05:87:96:e3:2d:1c:14:9e:f8:70:5a: ef:89:ad:ff:2c:0b:27:02:f9:28:f4:5d:cc:19:a6: 0a:24:3e:fe:02:55:a2:38:76:03:9a:42:8c:87:00: 87:c5:32:49:68:58:71:46:df:64:dc:6f:a0:63:ca: cf:c0:52:b0:e0:4f:ea:aa:bb:d0:95:2c:51:5a:05: 56:fa:46:70:80:7e:07:5c:a6:ec:8c:75:ef:12:a0: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:73:3B:CC:B0:66:7C:6D:D8:76:BE:0D:EE:68:B9:94:A1:3D:BA X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8d:b8:46:9a:64:76:fd:6d:04:29:38:92:b2:87:4a:cb:fd: 39:61:9f:5e:2a:5a:43:fd:b3:4e:af:28:e6:f5:57:73:54:86: b6:d5:1d:67:5d:87:73:8c:5d:0a:f2:33:58:0a:e2:f4:64:42: 7b:3a:60:fe:f6:65:37:9b:68:a8:1b:15:f9:95:e5:f1:88:42: 8c:7e:96:c9:ce:42:1a:cc:4b:af:fb:ce:04:68:b0:f4:78:29: 03:68:c4:55:3f:4a:16:ef:61:a6:fd:f0:52:f2:3b:d1:99:15: d3:09:b3:12:3e:37:24:7c:00:b1:28:ae:24:1b:56:d7:a1:16: 94:b8:ae:c6:cf:df:e4:a1:02:00:f1:3d:0a:b1:30:60:bf:53: 2f:4b:eb:d9:ed:91:11:a1:a9:f0:9d:76:c1:3b:9a:a5:47:68: 92:52:76:f4:d7:9a:a2:a8:37:71:6d:59:81:b4:aa:00:cd:67: 71:f4:92:f3:cd:d6:d3:df:59:5a:69:54:ba:ff:db:35:fd:fc: 44:fe:4c:82:c3:9a:e8:b8:e4:0b:e9:48:24:4c:3b:0f:db:64: 1a:91:67:e9:28:4d:d1:25:fb:65:30:92:7e:fb:41:26:ca:e0: 38:2b:b2:51:d0:fb:90:bf:72:0a:3d:cd:70:3c:53:8d:f7:a5: 11:a2:c7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjQxMTIwMTcyMzU3WhcNMjQxMTI3MTcyMzU3WjAYMRYwFAYD VQQDEw02NzNlMWIyZS00MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ULWbWGOHMWFLzj0cHZQBCjo8WOgZ0tKbv5z2W9g1R3gr8DvmC/9x1bTy0q 23CVZsoFOII4V4DJZjdtzKyBXPf21fVA0fs/5lV8ZXeibAo8syklhCVfXUjnmeip FvcgvHQCugFHH+ZmZVovXtgD2WY6/irtWcxAVx6J+Th7dF9a7XZGDt1X/pTHR4p0 WAjwFAuflA2WJoO2z967fWGcvNpkNYfFUl+UBYeW4y0cFJ74cFrvia3/LAsnAvko 9F3MGaYKJD7+AlWiOHYDmkKMhwCHxTJJaFhxRt9k3G+gY8rPwFKw4E/qqrvQlSxR WgVW+kZwgH4HXKbsjHXvEqCP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOKczvM sGZ8bdh2vg3uaLmUoT26MB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcjbhGmmR2/W0EKTiSsodKy/05YZ9eKlpD/bNOryjm9VdzVIa21R1n XYdzjF0K8jNYCuL0ZEJ7OmD+9mU3m2ioGxX5leXxiEKMfpbJzkIazEuv+84EaLD0 eCkDaMRVP0oW72Gm/fBS8jvRmRXTCbMSPjckfACxKK4kG1bXoRaUuK7Gz9/koQIA 8T0KsTBgv1MvS+vZ7ZERoanwnXbBO5qlR2iSUnb015qiqDdxbVmBtKoAzWdx9JLz zdbT31laaVS6/9s1/fxE/kyCw5rouOQL6UgkTDsP22QakWfpKE3RJftlMJJ++0Em yuA4K7JR0PuQv3IKPc1wPFON96URose0 -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org