$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: RMpeGW8oSXnTmXkTKOnday1jN3fJQ8T9RVTele9oW7c= Subject key identifier: 4D:73:CF:8C:20:18:99:BC:C8:E0:9F:EC:B4:A4:6B:26:50:8B:B5:3D Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 01B1 Signing time: Sat 23 Nov 2024 01:49:42 +0000 Manifest this update: Sat 23 Nov 2024 01:49:41 +0000 Manifest next update: Sat 30 Nov 2024 01:49:41 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: iyJTgPgmBxyOiK8DE0xrqvpwnOxRe7R3KNdK0HNylHU=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Nov 23 01:49:41 2024 GMT Not After : Nov 30 01:49:41 2024 GMT Subject: CN=674134b6-3bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:75:7e:c9:d0:ef:75:85:5c:eb:8e:74:e9: 0f:b5:67:cb:6d:ea:f2:35:3d:2f:de:91:db:57:4c: 22:5a:29:d3:7f:73:a3:ba:91:e1:da:9a:25:4e:f2: fd:44:90:7d:b9:e6:71:b9:92:5a:9a:66:5b:41:2e: ed:dd:12:43:af:e3:10:69:6a:9e:d4:7c:0e:ea:3e: b7:f5:32:41:4d:f4:67:80:97:97:8e:1a:2e:49:64: d1:02:b8:4e:70:06:b9:b5:67:b5:f6:fc:3a:c3:cc: 6a:16:b2:0a:40:82:82:a6:03:a4:89:70:cc:1b:5d: ba:65:9d:44:0d:84:ed:41:ed:c0:f4:40:cf:38:b2: 2e:55:d7:60:0b:cf:a7:29:6c:85:b8:33:36:64:0c: bf:d6:c9:ff:10:a9:79:9e:1d:c3:bc:5b:ab:50:c5: 7b:86:94:6d:8b:92:23:8a:28:1a:31:85:4d:20:bb: dd:a2:72:37:66:e0:29:9a:03:3b:76:63:8e:3d:04: 1e:3c:fe:72:6f:29:c2:c0:77:63:23:3e:3b:86:db: 7b:ad:c2:9d:c3:61:95:d5:77:50:60:67:01:20:d1: e6:13:23:90:b0:55:7b:98:8a:96:90:30:27:c0:45: e1:a4:83:ed:27:ef:d6:84:11:d3:ab:cd:9e:42:5c: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:CF:8C:20:18:99:BC:C8:E0:9F:EC:B4:A4:6B:26:50:8B:B5:3D X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3f:db:38:78:5c:a4:85:6e:6a:fb:7f:be:bc:e6:a2:18:c0: ba:76:c3:dd:51:6e:95:02:29:c0:31:4e:4c:fa:04:b3:57:60: 55:db:70:c3:23:fc:0b:eb:73:dc:8b:ef:7a:0c:70:52:23:bb: 5d:e7:4e:fd:09:7a:20:39:a2:b3:40:ac:6e:42:72:73:54:66: d0:bc:26:dd:35:cb:33:b8:e3:2b:93:c0:91:50:27:97:17:70: d2:71:56:17:3c:dd:85:14:94:8f:00:97:f7:9b:ec:57:92:e8: 02:b0:09:fa:ae:13:77:04:2d:17:03:ce:b2:d1:e0:a9:2e:f7: ed:e0:3b:e5:98:12:fd:fb:79:f4:52:36:12:8e:56:6a:65:a7: 7c:10:c6:90:e9:60:cb:c3:e0:16:bb:00:71:b2:33:05:6a:95: c2:f3:8f:9e:fb:ce:a4:a5:ee:90:cc:af:f5:24:aa:b8:41:6b: ec:03:d3:f2:f5:7a:78:f8:ac:1f:56:86:4b:80:3f:78:f1:cc: e2:c1:12:ee:24:f6:29:43:9a:5e:c4:7d:5c:6c:e5:f5:68:f1: c7:4f:c4:6a:1a:42:85:e6:a9:dc:f6:63:42:df:c3:f8:48:c7: d9:21:da:0d:c1:15:9c:b1:8a:6d:12:5c:cc:6b:3a:2f:c7:4c: 3f:70:47:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjQxMTIzMDE0OTQxWhcNMjQxMTMwMDE0OTQxWjAYMRYwFAYD VQQDEw02NzQxMzRiNi0zYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05R1fsnQ73WFXOuOdOkPtWfLberyNT0v3pHbV0wiWinTf3OjupHh2polTvL9 RJB9ueZxuZJammZbQS7t3RJDr+MQaWqe1HwO6j639TJBTfRngJeXjhouSWTRArhO cAa5tWe19vw6w8xqFrIKQIKCpgOkiXDMG126ZZ1EDYTtQe3A9EDPOLIuVddgC8+n KWyFuDM2ZAy/1sn/EKl5nh3DvFurUMV7hpRti5IjiigaMYVNILvdonI3ZuApmgM7 dmOOPQQePP5ybynCwHdjIz47htt7rcKdw2GV1XdQYGcBINHmEyOQsFV7mIqWkDAn wEXhpIPtJ+/WhBHTq82eQlyMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1zz4wg GJm8yOCf7LSkayZQi7U9MB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfP9s4eFykhW5q+3++vOaiGMC6dsPdUW6VAinAMU5M+gSzV2BV23DD I/wL63Pci+96DHBSI7td5079CXogOaKzQKxuQnJzVGbQvCbdNcszuOMrk8CRUCeX F3DScVYXPN2FFJSPAJf3m+xXkugCsAn6rhN3BC0XA86y0eCpLvft4DvlmBL9+3n0 UjYSjlZqZad8EMaQ6WDLw+AWuwBxsjMFapXC84+e+86kpe6QzK/1JKq4QWvsA9Py 9Xp4+KwfVoZLgD948cziwRLuJPYpQ5pexH1cbOX1aPHHT8RqGkKF5qnc9mNC38P4 SMfZIdoNwRWcsYptElzMazovx0w/cEdA -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org