$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft File: GhmPmhfws17bhJVg-1-YUBw8nK8.mft (raw, json) Hash identifier: pbn0xrZjuoLyqOogk8+4bV52EQjiEEEJ/w4p73tIwzw= Subject key identifier: 17:94:B8:75:89:A9:38:31:57:68:16:D0:AE:89:A7:BA:DA:94:D6:5A Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF Certificate issuer: /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft Manifest number: 0F7C Signing time: Fri 22 Nov 2024 17:31:13 +0000 Manifest this update: Fri 22 Nov 2024 17:31:13 +0000 Manifest next update: Fri 29 Nov 2024 17:31:13 +0000 Files and hashes: 1: GhmPmhfws17bhJVg-1-YUBw8nK8.crl (hash: 17x7dUzRP7eVuE7R8XDu+0bgPLVxlU3U6rle/1CqreU=) 2: A49557ACC92711EDAE3AB84EC4F9AE02.roa (hash: K0TrDvlQBbeXKzQ9vaUe+7lmLC+hvFIU95lEo1YqUYo=) 3: 795616EA506211E9850D8886C4F9AE02.roa (hash: 5cTSG400yyRYoVixrOxbylmewbPzNDI6meVn62CNhvI=) 4: 32D02AAABCC711EDB96C8F81C4F9AE02.roa (hash: +0RjdoO/nNOOxvYVrVomPnCBwTh8UeSrzAvUryBi70Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF Validity Not Before: Nov 22 17:31:13 2024 GMT Not After : Nov 29 17:31:13 2024 GMT Subject: CN=6740bfe1-8e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:c7:5f:3e:39:af:35:90:82:9b:a0:70:3b: 63:fa:a9:e4:63:63:75:b6:39:69:2d:a7:98:36:92: 35:70:9b:26:d4:1b:91:af:24:7f:72:9d:93:c9:90: e6:0a:95:f5:54:7e:12:90:2e:d4:b0:2e:b4:79:5d: 3e:c6:6b:0a:27:47:f3:df:0e:16:84:14:fb:84:2c: cf:c0:37:89:c9:ff:6d:a9:39:c8:cd:88:37:2f:8f: 4a:ca:e7:8c:78:03:5a:38:d3:a8:05:4a:fe:b0:5b: 8d:e2:5a:62:1b:1e:84:3e:0a:34:a4:73:69:d8:ca: b6:01:6c:8c:ef:28:5f:88:29:38:af:46:a3:ed:b8: a1:b3:ff:a1:fe:15:90:88:12:09:19:b5:6c:98:53: ab:a7:2f:95:d6:c2:34:0a:f4:97:85:74:9e:43:f0: 7a:74:61:a3:d5:17:37:58:de:cc:84:a5:ab:10:c8: 67:c2:c8:1e:9f:e4:89:0f:9a:d2:f8:40:fa:af:83: 39:19:a6:90:9a:d1:b6:2e:93:b6:2a:28:9e:80:32: 81:5e:c1:84:44:8d:2d:a1:50:f1:b2:25:f2:aa:cb: 70:3c:f5:d4:7b:3c:cd:3f:29:9f:ee:36:3e:98:5c: ef:5e:bd:94:1a:e2:c8:4d:54:2a:ce:fb:31:70:af: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:B8:75:89:A9:38:31:57:68:16:D0:AE:89:A7:BA:DA:94:D6:5A X509v3 Authority Key Identifier: keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:eb:5d:29:8f:d2:84:c9:1f:05:d9:0b:6c:8a:d8:48:11:54: 6e:2e:06:14:6a:87:ff:01:e2:e9:ed:9d:80:a9:dd:90:ed:74: e8:09:81:67:1f:fa:1b:3e:f6:25:f3:d5:82:32:92:c4:1b:81: 4e:ca:8c:d6:c7:69:bd:1d:75:a3:4d:9e:7a:36:aa:78:7f:94: 84:e0:07:b7:1c:2c:72:8c:99:65:c4:90:28:e3:22:db:88:52: 5f:6c:88:b5:78:6f:e1:f4:82:2a:a6:bf:68:30:14:2e:f3:63: 17:70:07:44:fd:25:8a:e1:2d:99:98:20:9a:41:57:d5:dd:cf: 96:77:cf:28:85:dd:a9:d9:ce:c3:04:80:a5:f8:dc:dc:72:54: a4:15:82:af:63:f2:b1:6a:80:ee:c9:14:9b:3c:e8:fe:6a:e8: cf:4e:af:10:39:fe:13:b4:4a:96:96:ee:ca:17:c9:89:3e:f0: 6f:9e:e5:e0:c8:07:f5:5e:1a:f5:0b:00:cc:c6:5b:df:d5:21: a5:95:37:a8:7f:4a:5b:b6:44:f5:c8:80:ba:d8:c6:bf:fd:2c: d9:48:74:f3:f7:3d:5f:1d:67:aa:b4:80:d8:5e:fb:48:65:5b: 77:f4:f9:0a:cb:ab:2f:c7:b9:c6:bd:e4:de:30:97:a1:08:29: dc:19:f6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzMDAxMTAvBgNVBAUTKDFBMTk4RjlBMTdGMEIzNUVEQjg0OTU2MEZCNUY5ODUw MUMzQzlDQUYwHhcNMjQxMTIyMTczMTEzWhcNMjQxMTI5MTczMTEzWjAYMRYwFAYD VQQDEw02NzQwYmZlMS04ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wvHXz45rzWQgpugcDtj+qnkY2N1tjlpLaeYNpI1cJsm1BuRryR/cp2TyZDm CpX1VH4SkC7UsC60eV0+xmsKJ0fz3w4WhBT7hCzPwDeJyf9tqTnIzYg3L49KyueM eANaONOoBUr+sFuN4lpiGx6EPgo0pHNp2Mq2AWyM7yhfiCk4r0aj7bihs/+h/hWQ iBIJGbVsmFOrpy+V1sI0CvSXhXSeQ/B6dGGj1Rc3WN7MhKWrEMhnwsgen+SJD5rS +ED6r4M5GaaQmtG2LpO2KiiegDKBXsGERI0toVDxsiXyqstwPPXUezzNPymf7jY+ mFzvXr2UGuLITVQqzvsxcK+VwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeUuHWJ qTgxV2gW0K6Jp7ralNZaMB8GA1UdIwQYMBaAFBoZj5oX8LNe24SVYPtfmFAcPJyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjMwMC9FMUE2Q0IxNDUw NjExMUU5QURCNkZBODVDNEY5QUUwMi9HaG1QbWhmd3MxN2JoSlZnLTEtWVVCdzhu SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dobVBtaGZ3czE3YmhKVmctMS1ZVUJ3OG5LOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjMwMC9FMUE2Q0IxNDUwNjExMUU5QURCNkZBODVDNEY5QUUwMi9HaG1QbWhmd3Mx N2JoSlZnLTEtWVVCdzhuSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4610pj9KEyR8F2QtsithIEVRuLgYUaof/AeLp7Z2Aqd2Q7XToCYFn H/obPvYl89WCMpLEG4FOyozWx2m9HXWjTZ56Nqp4f5SE4Ae3HCxyjJllxJAo4yLb iFJfbIi1eG/h9IIqpr9oMBQu82MXcAdE/SWK4S2ZmCCaQVfV3c+Wd88ohd2p2c7D BICl+NzcclSkFYKvY/KxaoDuyRSbPOj+aujPTq8QOf4TtEqWlu7KF8mJPvBvnuXg yAf1Xhr1CwDMxlvf1SGllTeof0pbtkT1yIC62Ma//SzZSHTz9z1fHWeqtIDYXvtI ZVt39PkKy6svx7nGveTeMJehCCncGfbe -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org