$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft File: GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json) Hash identifier: 3LIi0FB84Mtcxj26eLZvQV8QISiKv9W3gZ2z3VGbVMM= Subject key identifier: E6:47:4F:0F:3E:4B:BD:19:D8:15:91:45:58:E4:A7:0F:8E:0F:54:96 Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft Manifest number: 05AA Signing time: Fri 22 Nov 2024 22:43:13 +0000 Manifest this update: Fri 22 Nov 2024 22:43:13 +0000 Manifest next update: Fri 29 Nov 2024 22:43:13 +0000 Files and hashes: 1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: mPTZzjp4qrHHs4SI6s8Dwppa+vSs08k5hPtBK8sSO4k=) 2: 6E6A801066CB11EFA513A684C4F9AE02.roa (hash: vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=) 3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Validity Not Before: Nov 22 22:43:13 2024 GMT Not After : Nov 29 22:43:13 2024 GMT Subject: CN=67410901-7d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:ed:a7:2f:fd:b6:fd:55:6d:97:4c:b4:f1: 36:24:c5:0c:7e:9e:62:eb:45:3b:46:a2:03:45:d1: 39:c8:24:90:f0:fd:c4:75:4b:eb:c8:5e:1a:1a:50: 0d:3b:e0:62:97:5a:ee:6a:7c:d2:a8:2d:cb:10:07: 84:c2:82:83:51:20:ec:6a:48:85:43:6e:d8:8d:f5: da:6a:f2:ed:a5:4c:e1:68:e7:56:4c:ba:5b:e9:19: 1a:02:1a:8d:38:02:1f:e6:99:c3:eb:a3:76:85:db: 73:42:db:c9:f0:d0:26:30:8a:56:6a:43:2d:05:df: d3:57:7a:5b:2b:a4:da:0e:7d:8e:0f:c2:c1:99:5d: da:f8:bc:41:50:3a:a6:82:6b:1e:79:67:9e:39:85: 98:b2:40:a6:a4:89:cb:12:9a:f9:e6:1c:e6:41:5e: 5c:c5:e8:b7:d2:eb:ee:ac:d1:0b:5f:0e:c9:0e:48: 20:26:f4:f0:24:fc:4b:7a:b6:0c:b9:66:96:bb:b8: b6:b3:77:a5:b2:dc:1f:9e:93:de:72:16:2d:0d:a5: a2:a6:ba:2d:db:21:8a:03:f1:09:15:5c:97:4a:75: 1f:d7:1b:4a:7f:d7:86:d5:9d:48:a4:71:06:9d:99: cf:65:61:66:5e:24:b0:09:73:db:87:72:f8:fa:c3: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:4F:0F:3E:4B:BD:19:D8:15:91:45:58:E4:A7:0F:8E:0F:54:96 X509v3 Authority Key Identifier: keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:48:ab:c8:e3:d5:e3:62:dc:8e:97:60:4b:ea:a4:13:46:db: 2a:30:d6:5a:42:d2:0f:b9:a1:36:5c:e6:98:06:8b:0a:d5:a9: df:e1:b6:bc:c0:a6:b8:31:6d:bf:48:5d:e9:a9:42:bd:04:e7: a7:e2:3b:19:c2:8a:99:b9:4c:71:97:12:5a:9b:a4:14:e4:d2: 92:99:98:8b:d8:b5:4d:64:b0:68:9f:f3:99:2a:44:50:df:86: e8:cf:52:15:b7:e4:f9:68:8b:94:f8:de:da:5a:ad:6c:73:6e: df:3b:8d:33:d7:c4:db:18:54:b4:8d:da:57:8f:2f:75:97:75: 3d:9c:1e:e3:b7:ff:36:b9:99:6e:7a:d8:c2:1b:62:ea:f7:d5: 95:fb:c4:2f:9e:85:44:46:59:5d:1d:6b:3a:a1:0e:0d:7f:76: 2d:f0:7a:b4:75:ca:b8:41:d8:68:03:ab:39:ba:bc:ac:70:a6: 9d:dd:3d:b4:55:67:e9:ba:b8:5f:0d:71:81:af:d3:20:0f:a9: 4d:c2:1a:85:32:fc:c7:58:42:87:e4:a5:18:84:9c:ac:f4:be: 20:cc:df:bb:1b:37:7c:05:16:13:04:54:38:b3:b5:f2:41:f9: 8e:8b:c8:e0:96:e7:ba:0e:78:f6:02:d4:e7:d9:2b:51:96:c5: 70:3d:bd:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz RDkyNUI2MzYwHhcNMjQxMTIyMjI0MzEzWhcNMjQxMTI5MjI0MzEzWjAYMRYwFAYD VQQDEw02NzQxMDkwMS03ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2jtpy/9tv1VbZdMtPE2JMUMfp5i60U7RqIDRdE5yCSQ8P3EdUvryF4aGlAN O+Bil1ruanzSqC3LEAeEwoKDUSDsakiFQ27YjfXaavLtpUzhaOdWTLpb6RkaAhqN OAIf5pnD66N2hdtzQtvJ8NAmMIpWakMtBd/TV3pbK6TaDn2OD8LBmV3a+LxBUDqm gmseeWeeOYWYskCmpInLEpr55hzmQV5cxei30uvurNELXw7JDkggJvTwJPxLerYM uWaWu7i2s3elstwfnpPechYtDaWiprot2yGKA/EJFVyXSnUf1xtKf9eG1Z1IpHEG nZnPZWFmXiSwCXPbh3L4+sM6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZHTw8+ S70Z2BWRRVjkpw+OD1SWMB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2 NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwQy9DM0VDRDk2OEE2NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92 ZlFLMnZySXM0Vms5a2x0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdSKvI49XjYtyOl2BL6qQTRtsqMNZaQtIPuaE2XOaYBosK1anf4ba8 wKa4MW2/SF3pqUK9BOen4jsZwoqZuUxxlxJam6QU5NKSmZiL2LVNZLBon/OZKkRQ 34boz1IVt+T5aIuU+N7aWq1sc27fO40z18TbGFS0jdpXjy91l3U9nB7jt/82uZlu etjCG2Lq99WV+8QvnoVERlldHWs6oQ4Nf3Yt8Hq0dcq4QdhoA6s5uryscKad3T20 VWfpurhfDXGBr9MgD6lNwhqFMvzHWEKH5KUYhJys9L4gzN+7Gzd8BRYTBFQ4s7Xy QfmOi8jglue6Dnj2AtTn2StRlsVwPb3e -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org