$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: IxtZUDKZ86PBAZzKxUhlO8ewxMwqXCIIv4RqM+COgqU= Subject key identifier: 4F:F5:1C:3F:A0:43:8C:8B:62:B5:66:C6:4E:93:89:FE:21:0F:55:B4 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: FB Signing time: Thu 21 Nov 2024 02:21:23 +0000 Manifest this update: Thu 21 Nov 2024 02:21:23 +0000 Manifest next update: Thu 28 Nov 2024 02:21:23 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: lIujc+tIuM35UTTQQz5j1xfYTygxjn8MUzV9B8PyOc4=) 2: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: Ap6JsjwmxCIBrkhccqP7cgmi42P+pr0y3jufqU9IGfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Nov 21 02:21:23 2024 GMT Not After : Nov 28 02:21:23 2024 GMT Subject: CN=673e9923-529b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:d6:1a:40:b6:a4:42:7e:ac:df:ae:81:d5: da:bb:85:66:b3:89:29:f8:83:74:38:88:b7:ee:3e: 1b:18:2e:6d:38:3b:3e:c7:2c:b3:8f:5b:4a:5c:29: e5:04:c8:33:0b:9c:3d:0d:d0:e1:30:b7:0b:14:d0: fa:be:ad:e2:0c:3f:27:8f:11:0e:ee:2f:7a:73:0f: cc:7c:a4:33:95:fb:95:1e:e0:d3:10:dc:d3:21:6e: 64:42:6c:82:82:a5:07:2b:35:dc:44:76:9d:8e:ca: e6:ef:b2:dc:a8:33:b3:9a:14:28:0c:fe:dc:51:1a: 27:96:45:42:cd:df:6b:bd:5c:14:f4:c9:62:91:4a: 57:ce:fd:86:8c:d2:60:23:1c:81:ce:a7:8a:15:92: 6c:fb:c0:4a:50:15:21:c6:2a:ba:97:16:7f:77:75: 6d:f9:b0:9d:cb:3f:bb:18:b7:d1:91:5e:ee:a8:c0: bc:75:56:7f:20:c2:e9:8e:31:59:54:e0:eb:9b:4a: 4e:b7:d4:f3:b9:35:87:93:d1:63:f8:ad:39:1a:f7: 82:68:23:cb:f8:5f:0e:0c:7e:35:6e:63:97:d3:83: 4b:5f:e5:e4:06:bb:a0:c8:a9:14:89:0b:e1:98:83: 43:63:27:e6:59:79:d0:ec:7a:19:51:25:21:f8:14: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:1C:3F:A0:43:8C:8B:62:B5:66:C6:4E:93:89:FE:21:0F:55:B4 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0d:6d:a4:80:a2:cc:50:a6:d9:19:d6:fb:1b:bb:19:d5:06: ef:c1:e6:b4:71:36:20:3b:a9:63:4c:3a:9f:75:2a:e5:33:39: fe:33:5e:8b:57:ea:65:06:02:82:61:1b:10:7c:23:74:09:50: 89:58:cc:09:91:43:02:a9:84:bc:2d:93:1e:ac:87:14:67:69: 7c:a6:b0:73:35:6f:c9:8d:55:2f:f5:0a:74:14:b9:6c:15:8e: 51:54:03:b2:6f:00:73:b4:bd:7e:a5:4f:08:1d:58:70:07:31: 28:c7:7e:23:74:5d:eb:1b:f7:e6:47:e6:19:37:a4:e9:86:87: 54:2b:76:fb:e3:19:20:d3:28:cd:95:b7:08:75:bd:71:7a:68: 32:20:ff:10:09:e9:77:2d:c5:c1:97:7f:6f:48:9c:37:f2:eb: a6:a8:71:ea:37:b1:1f:39:44:cf:35:d4:12:e8:63:3e:8b:d4: 45:41:f6:16:b2:1f:35:3f:13:5f:10:d6:fc:9d:81:b5:7d:ee: 70:4c:53:82:3b:d7:b4:83:61:b9:5f:6d:ba:4b:1b:d6:7f:2e: ac:d3:11:c7:a4:be:25:99:76:07:66:05:04:b9:94:60:5f:64: 3a:d9:48:66:5d:b5:4f:71:5e:fd:29:ad:59:4d:96:24:9e:07: 5d:0e:73:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjQxMTIxMDIyMTIzWhcNMjQxMTI4MDIyMTIzWjAYMRYwFAYD VQQDEw02NzNlOTkyMy01MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06nWGkC2pEJ+rN+ugdXau4Vms4kp+IN0OIi37j4bGC5tODs+xyyzj1tKXCnl BMgzC5w9DdDhMLcLFND6vq3iDD8njxEO7i96cw/MfKQzlfuVHuDTENzTIW5kQmyC gqUHKzXcRHadjsrm77LcqDOzmhQoDP7cURonlkVCzd9rvVwU9MlikUpXzv2GjNJg IxyBzqeKFZJs+8BKUBUhxiq6lxZ/d3Vt+bCdyz+7GLfRkV7uqMC8dVZ/IMLpjjFZ VODrm0pOt9TzuTWHk9Fj+K05GveCaCPL+F8ODH41bmOX04NLX+XkBrugyKkUiQvh mINDYyfmWXnQ7HoZUSUh+BTXbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/1HD+g Q4yLYrVmxk6Tif4hD1W0MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtDW2kgKLMUKbZGdb7G7sZ1Qbvwea0cTYgO6ljTDqfdSrlMzn+M16L V+plBgKCYRsQfCN0CVCJWMwJkUMCqYS8LZMerIcUZ2l8prBzNW/JjVUv9Qp0FLls FY5RVAOybwBztL1+pU8IHVhwBzEox34jdF3rG/fmR+YZN6TphodUK3b74xkg0yjN lbcIdb1xemgyIP8QCel3LcXBl39vSJw38uumqHHqN7EfOUTPNdQS6GM+i9RFQfYW sh81PxNfENb8nYG1fe5wTFOCO9e0g2G5X226SxvWfy6s0xHHpL4lmXYHZgUEuZRg X2Q62UhmXbVPcV79Ka1ZTZYkngddDnNK -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org