$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: 1q8Lul9nJn1JdXy7Zl39nT3PimZ+tDeND1gecx8gy7E= Subject key identifier: E9:91:25:FB:E3:A8:A8:0D:07:17:F0:C1:9B:02:A9:F5:3D:CA:5C:E6 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 03E2 Signing time: Sat 23 Nov 2024 00:08:15 +0000 Manifest this update: Sat 23 Nov 2024 00:08:15 +0000 Manifest next update: Sat 30 Nov 2024 00:08:15 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: bMz24DaNE7KcRpLb7FE010YZMsgG0K/J55cBpMT64Aw=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: Y2D4bZVCWRU0pKNmh7gUDg+LE8MSxtojGL7g4PBL1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Nov 23 00:08:15 2024 GMT Not After : Nov 30 00:08:15 2024 GMT Subject: CN=67411cef-5448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:46:70:c2:57:1c:67:d3:0b:f8:a0:ee:76: ba:6f:e7:c4:54:44:73:f0:63:e1:2b:e8:c6:4c:1c: 74:99:70:2a:b0:b7:48:62:bf:74:9b:f2:97:f8:3d: 1e:ad:37:9a:bf:4c:3d:ac:d9:39:a6:2d:c2:bd:f5: 7c:a6:52:3e:46:96:43:db:2e:54:6a:81:d2:65:6e: 39:64:6f:85:16:bd:b8:b6:f9:fb:b9:2e:8f:40:ca: 8b:77:7d:1d:a8:63:b6:77:3c:24:f0:5b:23:8b:01: 9c:a8:31:7c:ee:83:a6:e4:e1:89:d0:61:88:3c:b6: ef:d4:dd:31:fc:d0:ee:8f:17:f6:ae:cf:81:d3:03: 04:d4:a9:a2:fd:ee:73:29:83:91:bb:a2:d0:70:12: ad:b5:33:22:92:95:f9:5f:04:da:2a:9b:8c:70:c0: 37:cd:3c:78:4f:8f:19:ef:f7:7c:18:e6:42:b6:ad: 10:45:a4:d0:72:e4:b8:14:03:ee:95:ca:9c:b7:7e: 25:86:8a:dc:a3:34:d2:b9:39:94:87:0c:f4:85:37: 56:c8:3e:0a:b5:b1:85:e6:e3:26:91:6d:f3:2d:14: f4:fa:1f:2b:83:cf:97:24:e1:9d:60:e0:7e:0e:27: ac:15:d5:4b:65:c1:1f:1f:4a:c5:5c:36:a3:12:9d: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:25:FB:E3:A8:A8:0D:07:17:F0:C1:9B:02:A9:F5:3D:CA:5C:E6 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:d9:82:76:c4:e8:c8:8f:5c:30:41:4e:f7:12:4a:9e:d2: 78:e5:0c:3f:f4:f3:ad:76:95:67:1f:d7:db:29:0e:1b:63:32: a9:f1:08:51:8b:82:99:e4:39:c5:b9:aa:98:22:59:cd:0d:86: 98:80:27:7b:b8:f9:b6:5b:57:0c:5f:f4:a2:f9:79:77:a8:b0: 68:c2:8f:48:d2:b6:08:2d:07:47:f3:5c:f9:3d:cc:08:ec:26: fc:62:56:73:e2:45:df:7d:a6:da:d0:7f:e1:22:f3:74:49:6f: 59:b2:14:9e:0b:c4:4a:9f:33:85:41:94:ee:35:be:d8:e2:c0: cf:b8:3d:18:8b:d1:6f:f4:ae:25:26:6b:e9:2c:fc:35:42:a5: fb:fb:8b:72:22:be:29:e0:15:bb:c4:5f:34:57:80:7f:1a:d2: 92:0e:92:d4:d8:c2:84:d0:a4:ab:fd:12:52:5a:f7:8c:e7:71: e8:99:03:4b:89:4b:39:15:71:a9:e1:f1:0d:df:50:90:df:0c: 8e:44:e5:50:be:23:55:56:d1:73:5d:7e:71:1f:d3:39:4b:2b: 6f:16:64:e1:45:99:39:ee:df:0d:a9:06:aa:bf:67:0f:46:63: 39:19:f1:c1:33:9e:a3:d3:3a:58:bd:86:20:fd:2f:69:1c:3d: 96:b9:35:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjQxMTIzMDAwODE1WhcNMjQxMTMwMDAwODE1WjAYMRYwFAYD VQQDEw02NzQxMWNlZi01NDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyNGcMJXHGfTC/ig7na6b+fEVERz8GPhK+jGTBx0mXAqsLdIYr90m/KX+D0e rTeav0w9rNk5pi3CvfV8plI+RpZD2y5UaoHSZW45ZG+FFr24tvn7uS6PQMqLd30d qGO2dzwk8FsjiwGcqDF87oOm5OGJ0GGIPLbv1N0x/NDujxf2rs+B0wME1Kmi/e5z KYORu6LQcBKttTMikpX5XwTaKpuMcMA3zTx4T48Z7/d8GOZCtq0QRaTQcuS4FAPu lcqct34lhorcozTSuTmUhwz0hTdWyD4KtbGF5uMmkW3zLRT0+h8rg8+XJOGdYOB+ DiesFdVLZcEfH0rFXDajEp04kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmRJfvj qKgNBxfwwZsCqfU9ylzmMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsNdmCdsToyI9cMEFO9xJKntJ45Qw/9POtdpVnH9fbKQ4bYzKp8QhR i4KZ5DnFuaqYIlnNDYaYgCd7uPm2W1cMX/Si+Xl3qLBowo9I0rYILQdH81z5PcwI 7Cb8YlZz4kXffaba0H/hIvN0SW9ZshSeC8RKnzOFQZTuNb7Y4sDPuD0Yi9Fv9K4l JmvpLPw1QqX7+4tyIr4p4BW7xF80V4B/GtKSDpLU2MKE0KSr/RJSWveM53HomQNL iUs5FXGp4fEN31CQ3wyOROVQviNVVtFzXX5xH9M5SytvFmThRZk57t8NqQaqv2cP RmM5GfHBM56j0zpYvYYg/S9pHD2WuTXj -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org