$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: xrF4NvsQ3iQ5WsIaXZnrrHZbUZ8AUsr4khgXX7KrjUI= Subject key identifier: 68:57:72:6E:C7:0D:01:DE:1E:32:F3:68:5D:7D:47:FD:0A:A6:40:19 Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0ADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0ACB Signing time: Wed 20 Nov 2024 19:08:26 +0000 Manifest this update: Wed 20 Nov 2024 19:08:25 +0000 Manifest next update: Wed 27 Nov 2024 19:08:25 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: x5lDmNYKAEgyjlrXpd/cFNk+SdcoU/WIdAygp3b3jf0=) 2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=) 3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Nov 20 19:08:25 2024 GMT Not After : Nov 27 19:08:25 2024 GMT Subject: CN=673e33aa-2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:23:40:9f:68:5f:51:ea:20:cb:30:9e:6f: 6c:d9:2e:1e:ed:43:0d:35:29:a1:b3:b0:51:95:90: ea:12:86:6d:45:14:52:86:e6:0a:5c:9d:e3:40:fc: 80:e1:36:4d:0e:bc:78:51:1d:4f:cf:e4:5f:13:06: bb:f8:12:35:51:3c:cf:01:92:9a:70:ac:81:dd:02: b6:ba:6d:e4:0d:44:fc:41:57:b9:dd:4d:16:a8:d9: 13:53:13:28:01:e0:4a:c8:0f:22:1f:7b:59:e6:87: c3:75:f1:73:9e:c0:b7:02:f2:bd:1d:29:33:2f:f9: 8d:6f:b5:5d:53:ef:23:1f:39:eb:e3:be:25:fb:be: ba:89:34:70:15:3f:07:f0:5f:c0:02:a5:39:4e:db: e4:39:5a:8b:0f:06:26:1a:a3:bb:f6:60:f5:cb:1f: b2:70:b5:ab:a7:10:c6:3b:85:1c:60:40:4c:b9:26: 1c:97:4e:9a:02:e9:ed:58:b1:27:f1:09:20:40:a9: 0a:4c:d3:42:59:50:af:7e:83:e3:e5:45:c1:1a:b5: d0:58:7b:a8:b1:62:98:69:fd:f1:00:4b:0a:31:95: f4:ae:2c:9e:c4:cc:38:33:9c:3b:2c:ec:49:71:da: 36:b4:e9:dc:27:8d:35:f2:c3:1e:f2:11:28:c2:8c: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:72:6E:C7:0D:01:DE:1E:32:F3:68:5D:7D:47:FD:0A:A6:40:19 X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ab:2d:24:a3:b4:df:75:03:74:3a:e0:9b:ec:19:8b:5e:98: 6b:d2:36:79:f2:05:0d:cb:ad:fc:00:b1:9d:8d:e6:9a:4f:d1: d9:d6:78:fa:0c:ef:9c:0e:28:9e:8b:4b:ba:0c:45:87:b0:3d: 67:c6:b2:dc:ec:2a:cf:6e:aa:4b:0d:8d:62:3b:3b:48:4e:77: ff:a6:a1:28:d6:bd:b7:d1:db:25:5f:ef:16:f4:51:ec:9a:e6: c9:3b:c2:25:97:33:ff:14:d4:11:cf:a8:b9:cf:1a:e6:8b:45: 04:3b:78:97:ad:10:ec:89:d2:9a:9c:5a:6b:dd:41:64:6e:c6: 8c:6f:ce:e9:b9:21:d2:96:44:62:e1:e1:12:8c:87:07:e3:d7: 15:81:b8:d9:ed:32:26:cb:1b:7b:c5:c4:66:51:3b:d4:5d:cb: 69:a1:3d:0d:19:36:97:15:ff:1c:cc:63:35:1b:08:bb:97:ef: dc:d4:f9:9b:34:e3:de:48:a9:19:32:1f:00:ca:e9:3f:8c:f4: 77:52:72:26:3c:59:79:cf:7a:c2:62:44:6f:14:73:5e:43:e3: 4b:24:30:58:48:76:ed:34:b0:ef:98:a4:da:2e:41:7f:9b:48: 9b:0f:9e:ff:83:a9:b1:ce:ea:88:27:a2:d8:27:b9:05:4c:02: 7c:f0:af:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjQxMTIwMTkwODI1WhcNMjQxMTI3MTkwODI1WjAYMRYwFAYD VQQDEw02NzNlMzNhYS0yNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EsjQJ9oX1HqIMswnm9s2S4e7UMNNSmhs7BRlZDqEoZtRRRShuYKXJ3jQPyA 4TZNDrx4UR1Pz+RfEwa7+BI1UTzPAZKacKyB3QK2um3kDUT8QVe53U0WqNkTUxMo AeBKyA8iH3tZ5ofDdfFznsC3AvK9HSkzL/mNb7VdU+8jHznr474l+766iTRwFT8H 8F/AAqU5TtvkOVqLDwYmGqO79mD1yx+ycLWrpxDGO4UcYEBMuSYcl06aAuntWLEn 8QkgQKkKTNNCWVCvfoPj5UXBGrXQWHuosWKYaf3xAEsKMZX0riyexMw4M5w7LOxJ cdo2tOncJ4018sMe8hEowoy7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhXcm7H DQHeHjLzaF19R/0KpkAZMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwqy0ko7TfdQN0OuCb7BmLXphr0jZ58gUNy638ALGdjeaaT9HZ1nj6 DO+cDiiei0u6DEWHsD1nxrLc7CrPbqpLDY1iOztITnf/pqEo1r230dslX+8W9FHs mubJO8IllzP/FNQRz6i5zxrmi0UEO3iXrRDsidKanFpr3UFkbsaMb87puSHSlkRi 4eESjIcH49cVgbjZ7TImyxt7xcRmUTvUXctpoT0NGTaXFf8czGM1Gwi7l+/c1Pmb NOPeSKkZMh8Ayuk/jPR3UnImPFl5z3rCYkRvFHNeQ+NLJDBYSHbtNLDvmKTaLkF/ m0ibD57/g6mxzuqIJ6LYJ7kFTAJ88K8o -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org