$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: DGBeXjKSD/Ra61OnzOduiju7E7cuw1Wj93r5q+LXEuw= Subject key identifier: 9F:99:1E:68:64:FB:7A:03:63:F0:0B:FE:F4:A5:2E:CB:83:99:3E:D0 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: 65 Signing time: Sat 23 Nov 2024 04:57:40 +0000 Manifest this update: Sat 23 Nov 2024 04:57:40 +0000 Manifest next update: Sat 30 Nov 2024 04:57:40 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: HaKGU5a/GRPyZywWbszd2E6svfsUFQkzOjtfMlCVGZA=) 2: A697738410FA11EF9A068536C4F9AE02.roa (hash: Zv0ZFs3ilUsRHmjHi746Q/P+ClsZujQ8kkuNmYui824=) 3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: oCCDEtGddaMKQfOelMIcnjIu17ZvyL6EU64SchGV+9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Nov 23 04:57:40 2024 GMT Not After : Nov 30 04:57:40 2024 GMT Subject: CN=674160c4-b999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:30:63:56:4f:8c:38:a4:c8:87:93:1c:98: 03:a4:86:7e:14:c4:8b:1e:8b:39:2e:28:d7:d5:8c: 71:a9:c2:1d:68:ee:8a:70:d1:60:2c:e1:3d:b9:08: eb:ff:65:d5:08:44:c4:9f:b3:ab:0f:85:9d:07:5f: ae:3b:f9:77:04:ad:a5:a0:ce:b3:5a:a7:be:92:85: 11:58:1e:f2:d9:e3:83:eb:ea:f1:ad:f5:bf:cc:08: 0d:2f:66:5e:96:73:e9:cf:e9:91:04:78:a0:71:42: 58:50:9f:5b:58:3b:41:45:01:6c:f8:d6:fa:2e:d7: fc:4b:ac:ed:c4:bc:b4:70:4c:67:3e:92:3a:2b:43: ee:ab:a1:1d:70:bb:40:66:b0:5d:d2:7f:55:05:ee: ca:6c:4d:4f:5b:4d:bf:9e:e8:ac:12:26:4e:dd:75: 3e:45:5b:60:8d:72:2f:1d:dd:bd:59:e3:7b:fe:16: af:5a:8e:c9:1b:23:11:8d:70:cf:09:4e:82:f6:71: 0a:d5:18:fa:5c:f4:79:95:7f:0b:74:4c:7c:71:0a: 99:86:ef:d6:b2:89:11:b5:f1:82:a9:0a:8c:c7:4c: b4:45:75:c9:b8:d5:d6:af:2f:ef:6a:fa:cb:49:b7: 06:7f:9a:89:92:d0:13:da:02:10:ec:08:c9:fc:b0: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:1E:68:64:FB:7A:03:63:F0:0B:FE:F4:A5:2E:CB:83:99:3E:D0 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:77:e1:84:14:29:c5:21:50:50:30:78:89:ce:f4:57:13:6d: 93:1b:55:e0:2c:f5:c5:9a:ae:e8:da:0d:84:44:f1:6b:bf:ab: a6:fa:1d:18:9c:b7:f2:fb:41:b1:6d:cb:c3:18:d6:df:76:10: 62:54:bb:68:32:16:da:10:0f:dc:9a:57:c9:d4:4a:36:1b:67: 60:83:8a:5b:c7:93:75:50:eb:63:41:c4:cc:f9:8c:0f:70:aa: aa:d6:2a:f7:66:4c:f2:5f:4a:b1:58:11:39:b9:a0:66:ec:07: 5c:df:9b:eb:6e:eb:63:1b:d0:27:3b:f9:23:ae:aa:30:48:67: ab:01:e4:8e:13:8d:94:71:f1:17:14:7c:79:8a:2e:21:da:6a: 01:de:2a:83:b6:d5:1b:3f:9a:33:47:f7:ed:c1:97:d1:a0:13: d6:59:62:52:15:70:ab:ed:30:68:30:dd:7f:ed:57:1b:63:7a: cc:b4:8e:fa:c8:8c:75:6f:c9:96:38:63:be:69:e8:71:49:62: 02:b3:81:ef:b3:0d:b3:56:a0:43:6e:cb:a4:c9:79:ee:9f:65: 34:ba:52:a4:30:9d:ad:9f:f9:28:56:8c:23:e7:30:e0:0b:14: 09:68:cf:b2:d9:9b:35:f1:33:80:8c:4c:72:8a:48:d7:f4:dd: a5:4f:2a:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzNGMTExMC8GA1UEBRMoODA3QzA0MEZBOTAxRTVEODY5NUE2NTM0REU2NkMzRDZB MEJGQkNDNTAeFw0yNDExMjMwNDU3NDBaFw0yNDExMzAwNDU3NDBaMBgxFjAUBgNV BAMTDTY3NDE2MGM0LWI5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/fzBjVk+MOKTIh5McmAOkhn4UxIseizkuKNfVjHGpwh1o7opw0WAs4T25COv/ ZdUIRMSfs6sPhZ0HX647+XcEraWgzrNap76ShRFYHvLZ44Pr6vGt9b/MCA0vZl6W c+nP6ZEEeKBxQlhQn1tYO0FFAWz41vou1/xLrO3EvLRwTGc+kjorQ+6roR1wu0Bm sF3Sf1UF7spsTU9bTb+e6KwSJk7ddT5FW2CNci8d3b1Z43v+Fq9ajskbIxGNcM8J ToL2cQrVGPpc9HmVfwt0THxxCpmG79ayiRG18YKpCozHTLRFdcm41davL+9q+stJ twZ/momS0BPaAhDsCMn8sG5rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn5keaGT7 egNj8Av+9KUuy4OZPtAwHwYDVR0jBBgwFoAUgHwED6kB5dhpWmU03mbD1qC/vMUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDM0YxLzk1QjcxMUM0MTBG OTExRUY4ODhDNTIyRkM0RjlBRTAyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZN VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0h3RUQ2a0I1ZGhwV21VMDNtYkQxcUNfdk1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD M0YxLzk1QjcxMUM0MTBGOTExRUY4ODhDNTIyRkM0RjlBRTAyL2dId0VENmtCNWRo cFdtVTAzbWJEMXFDX3ZNVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFN34YQUKcUhUFAweInO9FcTbZMbVeAs9cWarujaDYRE8Wu/q6b6HRic t/L7QbFty8MY1t92EGJUu2gyFtoQD9yaV8nUSjYbZ2CDilvHk3VQ62NBxMz5jA9w qqrWKvdmTPJfSrFYETm5oGbsB1zfm+tu62Mb0Cc7+SOuqjBIZ6sB5I4TjZRx8RcU fHmKLiHaagHeKoO21Rs/mjNH9+3Bl9GgE9ZZYlIVcKvtMGgw3X/tVxtjesy0jvrI jHVvyZY4Y75p6HFJYgKzge+zDbNWoENuy6TJee6fZTS6UqQwna2f+ShWjCPnMOAL FAloz7LZmzXxM4CMTHKKSNf03aVPKsw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org