$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: QJE7WZf+EuS2iK/1Qbxx5wb6IzrWLQsk22w84zVWmI0= Subject key identifier: 9F:52:6F:5D:89:83:CC:4D:1C:5C:CA:1F:4C:98:33:15:72:91:CE:7A Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 11 Signing time: Wed 25 Dec 2024 06:07:21 +0000 Manifest this update: Wed 25 Dec 2024 06:07:21 +0000 Manifest next update: Wed 01 Jan 2025 06:07:21 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: f6SZzKGx2EbmteEKeu+ICD8LcSyNMpBgIMwVVJ+sOQI=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: zJ3vBuHNvU2BtLgZ93Uo5Q9St8BhgcO1ynlNtZ1Jaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Dec 25 06:07:21 2024 GMT Not After : Jan 1 06:07:21 2025 GMT Subject: CN=676ba119-3339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:91:65:16:de:af:b9:13:f4:24:e6:82:2b: bd:3c:dc:94:72:5f:62:1e:fd:f8:41:bd:b7:98:a2: 88:ff:31:65:1e:0d:f4:78:de:69:5a:02:95:f8:3b: 28:1b:e7:1e:e3:2d:ca:85:d4:88:60:9f:2d:3c:e9: b8:6b:4d:9e:d7:13:aa:27:fa:7f:21:2b:20:fc:07: f3:fc:e7:2a:e3:dd:4b:9e:e0:de:d3:a7:f7:4e:5d: 26:c2:d9:83:fe:09:e1:a1:d0:0f:b7:d2:43:46:6a: 92:7a:a2:e9:07:58:56:41:98:ef:43:5e:63:7c:97: ad:36:e5:c1:84:82:db:75:f1:64:60:b1:40:fd:6e: 40:43:1a:a5:4d:90:56:b7:d4:11:c0:02:cc:9e:ec: e1:7b:02:19:e9:4b:b9:2f:55:32:c8:c7:aa:3a:5c: 65:db:28:42:ad:e8:26:12:55:e2:f2:da:44:a5:fe: 7b:46:72:6b:b4:59:fc:ba:3b:5e:da:be:f9:3f:c6: 0f:e0:4f:27:19:f1:17:d6:8c:b5:f4:58:fc:e6:66: 12:ad:53:04:a2:e7:36:01:61:25:d4:33:c7:ca:9a: 40:50:f8:34:2e:e8:76:c2:26:92:c9:5a:1c:b4:e6: 3c:2a:b0:97:1f:80:c6:d4:9f:e6:47:38:0a:82:09: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:6F:5D:89:83:CC:4D:1C:5C:CA:1F:4C:98:33:15:72:91:CE:7A X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:85:40:cd:ce:bb:cb:b0:98:ad:b0:39:53:e5:27:be:38: 53:a3:7f:df:0f:ac:ce:15:d3:9a:33:dc:d9:f7:05:cb:f3:63: 80:34:2d:e9:e3:23:bc:ad:60:1a:de:6a:3a:80:e5:f5:65:24: c7:31:dd:52:d8:63:d3:64:6f:7f:16:53:74:1b:fa:17:f2:3c: 5f:ee:c0:c1:6d:40:a2:8c:f0:cb:8c:fd:a0:7a:40:68:87:a0: 6f:15:26:4d:2a:65:4b:e6:16:b4:e2:24:3f:b6:01:5b:5a:43: 62:bf:6d:07:3d:28:2f:e8:04:23:e9:54:43:72:ec:b7:29:67: 16:9e:65:25:1f:bc:ad:77:36:9c:d3:e3:08:09:eb:f1:b7:fb: d4:3e:07:c1:24:e7:21:98:78:e9:e0:66:62:8a:5a:f6:bd:58: 9e:4d:13:58:e8:d6:a1:36:4a:e5:6a:8a:9f:b4:af:db:04:b9: 2a:f3:04:c5:57:d4:d8:e1:49:cd:5b:98:0e:1d:e3:3a:55:41: a4:52:c3:41:d3:9d:50:40:00:85:2b:e0:ae:34:4a:cf:de:a8: b2:50:4b:5c:ac:5e:9a:05:0e:69:5e:7e:8c:29:de:fe:0d:01: 88:0a:f4:72:a1:01:fa:70:5c:97:bf:56:08:6d:9d:e5:76:3a: 73:76:46:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE NkFEOTVFRDAeFw0yNDEyMjUwNjA3MjFaFw0yNTAxMDEwNjA3MjFaMBgxFjAUBgNV BAMTDTY3NmJhMTE5LTMzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJG5FlFt6vuRP0JOaCK7083JRyX2Ie/fhBvbeYooj/MWUeDfR43mlaApX4Oygb 5x7jLcqF1Ihgny086bhrTZ7XE6on+n8hKyD8B/P85yrj3Uue4N7Tp/dOXSbC2YP+ CeGh0A+30kNGapJ6oukHWFZBmO9DXmN8l6025cGEgtt18WRgsUD9bkBDGqVNkFa3 1BHAAsye7OF7AhnpS7kvVTLIx6o6XGXbKEKt6CYSVeLy2kSl/ntGcmu0Wfy6O17a vvk/xg/gTycZ8RfWjLX0WPzmZhKtUwSi5zYBYSXUM8fKmkBQ+DQu6HbCJpLJWhy0 5jwqsJcfgMbUn+ZHOAqCCUalAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn1JvXYmD zE0cXMofTJgzFXKRznowHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5 TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRThUDNzrvLsJitsDlT5Se+OFOjf98PrM4V05oz3Nn3BcvzY4A0Lenj I7ytYBreajqA5fVlJMcx3VLYY9Nkb38WU3Qb+hfyPF/uwMFtQKKM8MuM/aB6QGiH oG8VJk0qZUvmFrTiJD+2AVtaQ2K/bQc9KC/oBCPpVENy7LcpZxaeZSUfvK13NpzT 4wgJ6/G3+9Q+B8Ek5yGYeOngZmKKWva9WJ5NE1jo1qE2SuVqip+0r9sEuSrzBMVX 1NjhSc1bmA4d4zpVQaRSw0HTnVBAAIUr4K40Ss/eqLJQS1ysXpoFDmlefowp3v4N AYgK9HKhAfpwXJe/VghtneV2OnN2Rtc= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:03 2024 by rpki-client on console-ams.rpki-client.org