$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: fqh3kmPbdeMVfk6I3jhP9kQKQ4dwI7oHLU/sxngAjao= Subject key identifier: FE:0F:62:D1:2F:DC:5C:0B:25:45:B1:17:0D:10:77:59:F7:AC:C2:89 Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: 12 Signing time: Sat 23 Nov 2024 06:01:09 +0000 Manifest this update: Sat 23 Nov 2024 06:01:08 +0000 Manifest next update: Sat 30 Nov 2024 06:01:08 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: EIDFs0S1q62dysWsHL6oFTMsJaG4/08h6Hsc2EZr4kI=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: Nov 23 06:01:08 2024 GMT Not After : Nov 30 06:01:08 2024 GMT Subject: CN=67416fa5-21aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:d3:c8:1e:48:10:98:b2:c6:b9:ab:62:90: 01:2c:0a:06:83:0a:2f:49:a4:38:b2:21:01:a7:05: 14:03:f5:02:9e:75:51:2c:2c:0d:2a:17:1f:59:79: 85:eb:1a:3f:1d:d3:99:ed:af:c0:c3:ab:d2:44:69: 11:93:a9:25:6c:ce:04:4d:d7:3c:78:ff:b1:81:df: cb:a9:15:aa:32:50:07:1c:e9:77:1f:8f:dd:74:5a: 34:3b:68:7e:04:45:4b:17:83:7d:b8:a6:ca:89:70: b3:03:c4:de:61:e6:68:b4:85:09:0a:a8:63:38:42: 50:aa:e5:f9:db:2f:e8:1c:12:2a:03:a3:37:d0:e4: d0:72:67:85:33:10:92:79:e6:69:39:07:c9:9b:cc: f7:8e:66:9b:a0:37:e6:03:93:43:db:76:e0:d4:c2: ba:e9:19:5f:97:21:d7:b7:05:eb:95:f0:f8:52:4e: b4:af:b8:78:b4:b9:e8:4e:08:42:1a:d1:b5:39:45: f1:d4:38:ac:75:37:61:c5:8e:8f:6c:ee:48:1a:01: 3b:cf:5d:56:ca:d9:a0:e4:28:5a:40:be:1c:e9:a9: f4:16:04:95:ce:02:e3:e2:06:a8:4e:17:25:db:e6: 0c:c3:19:85:a1:a6:af:5c:d1:d6:f5:e4:df:ef:aa: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:62:D1:2F:DC:5C:0B:25:45:B1:17:0D:10:77:59:F7:AC:C2:89 X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:45:89:bd:87:2a:7b:80:ad:b9:9a:e5:6a:3e:6f:04:82:3f: 9f:ed:07:4a:f3:e2:9e:8e:66:cd:f4:61:68:1d:a5:ca:dc:48: 0c:ca:c3:6f:6c:7a:67:ad:36:3e:dd:55:da:d9:aa:25:ac:ea: 97:20:d0:fc:34:f8:78:30:5b:b4:e5:da:11:86:64:f8:52:b0: 1c:d5:ec:2a:5e:9d:7a:0f:75:4c:f4:0a:1d:c9:cb:2a:9b:77: 1e:e3:bb:ac:38:4b:ce:2d:e4:c9:73:64:e3:88:62:12:5c:ab: 80:01:c1:ec:23:3c:3a:7e:7e:42:1a:2f:85:d0:ef:a4:7c:64: c2:df:c6:2c:e3:48:e0:bb:41:76:d1:ad:d7:e1:24:6d:42:09: 84:f6:a6:1c:43:c2:08:0e:3e:c9:93:5a:89:76:3b:04:5c:46: ca:64:a5:65:8b:0f:57:ee:37:58:ca:af:13:0c:4a:c9:04:af: 49:24:d3:0c:1a:63:a6:01:25:de:1d:d0:64:7f:06:c2:de:ea: cd:c0:75:35:a8:7c:e9:91:1c:3f:b1:c4:65:a0:0c:e8:56:9e: 91:90:c0:9d:e6:51:4e:c5:78:63:fe:2b:d3:55:a4:54:2e:22: 62:4a:71:13:dd:3e:bf:56:53:05:4b:cf:a4:86:c4:29:be:ae: cb:58:88:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEU3MDExMC8GA1UEBRMoODFDMjZGM0Q4RjQxMzZFNTE5MENDN0ExN0Q2QUY3MjI0 MjJFQjY2RjAeFw0yNDExMjMwNjAxMDhaFw0yNDExMzAwNjAxMDhaMBgxFjAUBgNV BAMTDTY3NDE2ZmE1LTIxYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhlNPIHkgQmLLGuatikAEsCgaDCi9JpDiyIQGnBRQD9QKedVEsLA0qFx9ZeYXr Gj8d05ntr8DDq9JEaRGTqSVszgRN1zx4/7GB38upFaoyUAcc6Xcfj910WjQ7aH4E RUsXg324psqJcLMDxN5h5mi0hQkKqGM4QlCq5fnbL+gcEioDozfQ5NByZ4UzEJJ5 5mk5B8mbzPeOZpugN+YDk0PbduDUwrrpGV+XIde3BeuV8PhSTrSvuHi0uehOCEIa 0bU5RfHUOKx1N2HFjo9s7kgaATvPXVbK2aDkKFpAvhzpqfQWBJXOAuPiBqhOFyXb 5gzDGYWhpq9c0db15N/vqo+dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/g9i0S/c XAslRbEXDRB3WfeswokwHwYDVR0jBBgwFoAUgcJvPY9BNuUZDMehfWr3IkIutm8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RTcwLzJEOTk3MEQ4OTU1 QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2NKdlBZOUJOdVVaRE1laGZXcjNJa0l1dG04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 RTcwLzJEOTk3MEQ4OTU1QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVV WkRNZWhmV3IzSWtJdXRtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAONFib2HKnuArbma5Wo+bwSCP5/tB0rz4p6OZs30YWgdpcrcSAzKw29s emetNj7dVdrZqiWs6pcg0Pw0+HgwW7Tl2hGGZPhSsBzV7CpenXoPdUz0Ch3Jyyqb dx7ju6w4S84t5MlzZOOIYhJcq4ABwewjPDp+fkIaL4XQ76R8ZMLfxizjSOC7QXbR rdfhJG1CCYT2phxDwggOPsmTWol2OwRcRspkpWWLD1fuN1jKrxMMSskEr0kk0wwa Y6YBJd4d0GR/BsLe6s3AdTWofOmRHD+xxGWgDOhWnpGQwJ3mUU7FeGP+K9NVpFQu ImJKcRPdPr9WUwVLz6SGxCm+rstYiMg= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org