$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: czb4WUX4zuZfdrqT6VU73gRQbl9mfe47cDRZxpEOWls= Subject key identifier: FD:13:24:87:31:4C:CC:EC:F2:6D:65:CF:F7:00:D9:18:52:21:A2:61 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3EFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3A8F Signing time: Wed 20 Nov 2024 14:20:00 +0000 Manifest this update: Wed 20 Nov 2024 14:19:59 +0000 Manifest next update: Wed 27 Nov 2024 14:19:59 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: 14otFoIk1gMzWn2kGuL2Y60M5PN6b7iwX6B6ivI2ZCk=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16124 (0x3efc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Nov 20 14:19:59 2024 GMT Not After : Nov 27 14:19:59 2024 GMT Subject: CN=673df010-d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:24:64:c4:22:5f:31:6c:60:76:aa:76:3b: a3:1e:90:1e:86:1d:a6:ea:10:57:ca:5e:73:9d:61: 95:d2:1a:5a:61:21:0c:a9:8b:5b:8c:88:44:2b:a5: f8:db:5d:f7:57:e7:38:ac:05:a3:4a:a3:54:dd:c0: 91:52:ca:a6:b1:70:4b:c4:d7:2d:6b:ca:70:6f:43: 9c:7d:46:62:fd:1d:4f:ec:48:ff:f1:7e:60:e3:f0: 05:0b:66:bb:20:a0:0c:ec:d4:0e:fc:e2:2b:aa:54: f7:1e:f1:ba:90:55:4a:8c:b4:c5:4d:70:a4:6d:b5: 4b:3f:5a:d5:3a:4d:8d:de:9d:75:a9:2a:72:95:a6: 95:84:3c:8a:80:70:7e:93:15:df:c2:d0:f0:76:85: de:6d:48:77:41:61:5f:f7:55:5d:2c:48:49:c9:e7: 88:e7:43:60:f7:b0:ad:07:ea:fd:d7:74:ad:b6:20: 87:37:cf:b2:dc:7f:79:ac:55:30:3d:9a:65:44:27: a3:65:21:c3:c6:97:21:6b:93:57:a8:7f:6a:f3:85: 12:60:d2:84:8f:e5:4f:00:dd:10:73:d0:50:d3:77: 97:d3:57:4d:d1:36:ce:34:ed:d9:09:a2:ee:59:cf: b5:ce:4a:21:eb:93:6d:77:b5:b8:ed:a9:d7:dc:d1: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:13:24:87:31:4C:CC:EC:F2:6D:65:CF:F7:00:D9:18:52:21:A2:61 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:15:dc:51:b5:24:08:90:f7:07:50:61:da:3a:cb:9b:5b: 64:4b:a7:37:cc:b7:b1:01:09:60:73:0b:24:98:1e:e7:1e:0c: 44:47:75:e9:65:bd:38:e5:29:79:a8:a7:4c:b7:79:8e:7d:33: ca:84:9e:71:cf:17:76:b5:83:0d:58:a3:28:be:46:86:8c:54: 13:0b:c2:11:66:c2:5b:3f:16:f3:fa:74:6e:27:af:c0:ba:94: 4d:b4:ee:a6:a6:ea:12:29:c6:66:38:1c:7c:05:1c:5d:62:94: d0:07:3f:6c:2b:93:47:8b:5f:ae:47:95:59:06:1b:98:49:69: f8:ff:14:82:33:f7:f9:a6:ed:b3:c9:f4:4e:4e:c3:e4:76:32: d2:ac:4d:26:5d:f3:17:84:b4:81:a1:a3:3f:92:7c:2e:6b:54: e6:98:17:7c:f6:59:ad:5e:d9:de:78:76:82:ea:1a:fb:7c:47: ee:c3:bf:92:8e:19:b8:44:cc:e3:d8:de:48:80:9c:64:f7:4f: bd:0b:90:15:ab:2b:26:4c:ad:c0:dd:56:12:82:81:66:c8:aa: db:1a:87:25:64:bd:07:23:f1:6f:d3:62:97:c5:e6:04:93:cf: f4:e5:b4:5d:34:a5:bd:3e:9c:18:c0:c9:29:9d:35:25:98:54: 9b:5d:83:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICPvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjQxMTIwMTQxOTU5WhcNMjQxMTI3MTQxOTU5WjAYMRYwFAYD VQQDEw02NzNkZjAxMC1kOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9QkZMQiXzFsYHaqdjujHpAehh2m6hBXyl5znWGV0hpaYSEMqYtbjIhEK6X4 2133V+c4rAWjSqNU3cCRUsqmsXBLxNcta8pwb0OcfUZi/R1P7Ej/8X5g4/AFC2a7 IKAM7NQO/OIrqlT3HvG6kFVKjLTFTXCkbbVLP1rVOk2N3p11qSpylaaVhDyKgHB+ kxXfwtDwdoXebUh3QWFf91VdLEhJyeeI50Ng97CtB+r913SttiCHN8+y3H95rFUw PZplRCejZSHDxpcha5NXqH9q84USYNKEj+VPAN0Qc9BQ03eX01dN0TbONO3ZCaLu Wc+1zkoh65Ntd7W47anX3NEAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0TJIcx TMzs8m1lz/cA2RhSIaJhMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntBXcUbUkCJD3B1Bh2jrLm1tkS6c3zLexAQlgcwskmB7nHgxER3Xp Zb045Sl5qKdMt3mOfTPKhJ5xzxd2tYMNWKMovkaGjFQTC8IRZsJbPxbz+nRuJ6/A upRNtO6mpuoSKcZmOBx8BRxdYpTQBz9sK5NHi1+uR5VZBhuYSWn4/xSCM/f5pu2z yfROTsPkdjLSrE0mXfMXhLSBoaM/knwua1TmmBd89lmtXtneeHaC6hr7fEfuw7+S jhm4RMzj2N5IgJxk90+9C5AVqysmTK3A3VYSgoFmyKrbGoclZL0HI/Fv02KXxeYE k8/05bRdNKW9PpwYwMkpnTUlmFSbXYOw -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:12 2024 by rpki-client on console-ams.rpki-client.org