$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: NFCgg9YIzNNlcUbWNpz47DlvGXZMGUMeC3ZZ4a9tloQ= Subject key identifier: 77:50:74:9D:68:43:62:D6:C0:44:21:E0:2E:9A:E2:3B:41:4B:17:07 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0A91 Signing time: Fri 22 Nov 2024 15:37:59 +0000 Manifest this update: Fri 22 Nov 2024 15:37:59 +0000 Manifest next update: Fri 29 Nov 2024 15:37:59 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: elf+BkEMg/8HGZAj6TqJayFrJQdbrltLRt2z4F6zoE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Nov 22 15:37:59 2024 GMT Not After : Nov 29 15:37:59 2024 GMT Subject: CN=6740a557-28e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:6b:ab:88:31:2f:03:4a:f4:18:f6:8d:ca: 88:15:c4:0b:e9:33:be:61:90:1a:a6:32:4e:ff:39: 4c:a2:e5:49:8b:f7:0f:d8:a6:3c:2a:55:dc:04:58: f4:13:1d:51:b8:c7:12:6e:af:6e:7e:41:11:49:be: 8f:8d:70:1d:13:c5:9a:99:05:8b:3d:d0:8f:ad:a0: c4:05:26:eb:18:74:9e:4c:ff:c0:41:4e:48:e7:f7: 33:1c:b9:57:cb:fb:31:92:24:80:3b:d4:af:99:94: 8d:a6:9e:f8:07:42:a0:f3:84:d3:31:c0:8a:39:c8: 03:25:dc:af:51:5b:b8:66:48:ee:f6:48:fa:df:4f: 5f:7a:2d:a4:4b:0b:19:4f:aa:97:e1:fa:ab:fb:95: c3:c0:93:ea:f4:29:48:86:8d:f9:b2:dd:df:26:f7: 12:4c:58:a5:73:06:02:8c:b2:03:78:d0:d6:03:04: ce:87:42:13:a5:9b:b4:6f:25:95:d5:cb:ad:8c:f1: 3c:f0:8c:0d:0f:4b:f9:18:ca:9d:c9:3e:d0:f3:20: dc:d5:9e:c5:ba:20:bb:88:2a:7b:5d:d2:92:81:56: 76:6b:da:35:24:78:e8:3d:7f:48:1e:c6:ca:3b:a7: b4:18:9f:7c:2c:4d:79:71:ca:76:d6:a6:b1:ee:ab: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:50:74:9D:68:43:62:D6:C0:44:21:E0:2E:9A:E2:3B:41:4B:17:07 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:03:3a:18:e3:75:1b:e6:65:17:4a:85:58:ee:c3:b9:58:46: 5c:ab:de:cf:90:7a:88:e2:4c:3c:85:b4:c0:6c:be:06:19:10: bf:22:0b:8a:b4:b0:ba:3d:17:f0:5a:bb:1f:a7:5b:ba:d2:f9: 4b:76:cd:8b:53:85:3f:bf:bd:76:80:d4:a1:70:86:e3:19:6a: 83:c4:43:b4:f0:65:03:15:94:cf:d4:da:9d:9c:24:a5:32:e6: 12:36:86:bf:82:04:bb:0c:1c:bb:5c:df:37:ce:fc:63:ec:6e: 4a:7e:a7:39:1e:dc:02:6a:94:be:7e:ea:85:d7:c8:8b:55:f8: 1c:5a:a4:bd:6d:8e:35:87:4a:ac:d9:81:36:5a:79:17:22:5e: 22:1c:ef:18:f7:78:1e:f6:bb:a2:ce:50:0a:22:7e:24:6f:da: ec:64:41:45:51:d6:4c:30:d1:7a:b5:ef:1e:75:87:54:86:d5: bf:e9:b0:bd:43:8f:59:88:84:5f:78:8f:85:b1:a1:5c:d4:31: b5:84:91:99:09:f0:be:15:d3:f3:e1:db:ca:d6:59:09:d0:d7: 5b:7a:22:43:b7:b6:14:47:71:65:d4:9a:62:11:96:d7:b5:c3: 3e:4e:e6:45:26:31:50:27:8d:68:ed:86:b6:d1:f0:03:07:62: b8:aa:fe:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjQxMTIyMTUzNzU5WhcNMjQxMTI5MTUzNzU5WjAYMRYwFAYD VQQDEw02NzQwYTU1Ny0yOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h5rq4gxLwNK9Bj2jcqIFcQL6TO+YZAapjJO/zlMouVJi/cP2KY8KlXcBFj0 Ex1RuMcSbq9ufkERSb6PjXAdE8WamQWLPdCPraDEBSbrGHSeTP/AQU5I5/czHLlX y/sxkiSAO9SvmZSNpp74B0Kg84TTMcCKOcgDJdyvUVu4Zkju9kj6309fei2kSwsZ T6qX4fqr+5XDwJPq9ClIho35st3fJvcSTFilcwYCjLIDeNDWAwTOh0ITpZu0byWV 1cutjPE88IwND0v5GMqdyT7Q8yDc1Z7FuiC7iCp7XdKSgVZ2a9o1JHjoPX9IHsbK O6e0GJ98LE15ccp21qax7qswkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdQdJ1o Q2LWwEQh4C6a4jtBSxcHMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDAzoY43Ub5mUXSoVY7sO5WEZcq97PkHqI4kw8hbTAbL4GGRC/IguK tLC6PRfwWrsfp1u60vlLds2LU4U/v712gNShcIbjGWqDxEO08GUDFZTP1NqdnCSl MuYSNoa/ggS7DBy7XN83zvxj7G5Kfqc5HtwCapS+fuqF18iLVfgcWqS9bY41h0qs 2YE2WnkXIl4iHO8Y93ge9ruizlAKIn4kb9rsZEFFUdZMMNF6te8edYdUhtW/6bC9 Q49ZiIRfeI+FsaFc1DG1hJGZCfC+FdPz4dvK1lkJ0NdbeiJDt7YUR3Fl1JpiEZbX tcM+TuZFJjFQJ41o7Ya20fADB2K4qv4C -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org