$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft File: GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json) Hash identifier: BvTHU5c+s6eBcc4Dvy6dPCBumqjQzquUbb4E2NCXWsk= Subject key identifier: 62:8F:90:44:13:13:D7:47:FC:40:B0:A8:47:5A:55:C8:E7:57:AC:37 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft Manifest number: 223A Signing time: Fri 22 Nov 2024 15:52:36 +0000 Manifest this update: Fri 22 Nov 2024 15:52:36 +0000 Manifest next update: Fri 29 Nov 2024 15:52:36 +0000 Files and hashes: 1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: 3sTHXs135+kRglM1v4jrcwqWesG5VrLBPBslqwZNPOU=) 2: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (hash: ZBtOF1xT6EKlO+rHUrRBk/pUU05Lr98W+iZWu8Btr6s=) 3: A163C5C869A111ECA4837D28C4F9AE02.roa (hash: 9UC6aZiqBYbXRSE3p9u+q/vO1rK8XINzV0Z6f+Roz8Y=) 4: E57A64AA165C11EABB13924AC4F9AE02.roa (hash: fE+xNdMDYb/0HGjeyvMRDc1oxL2XxvnI8RrngGcNbSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8825 (0x2279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Nov 22 15:52:36 2024 GMT Not After : Nov 29 15:52:36 2024 GMT Subject: CN=6740a8c4-7e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:e2:65:f4:08:e6:17:e3:07:2d:e2:23:4a: d2:59:2d:2e:69:5f:6f:04:85:bd:c5:b2:b9:e2:bf: e9:ff:e5:b2:96:5d:f1:06:b7:eb:16:7a:ed:48:c9: d2:4c:59:1c:0f:70:ca:db:42:36:47:45:f3:0c:5d: 36:33:60:1f:02:3b:e2:e6:43:10:6a:49:9f:88:08: 66:09:25:cb:c2:95:f8:3f:b7:67:8c:e5:3d:0b:44: e3:55:7c:58:fe:f0:64:e2:28:6f:6e:d8:be:aa:69: 5f:60:34:b2:9c:db:c2:99:e3:b3:1c:d7:85:fe:c3: 96:aa:f0:3b:10:e6:1b:be:b9:a4:9d:b2:39:6d:04: 36:54:a2:b4:64:94:f5:45:be:40:18:fd:6b:fd:47: 93:f1:ed:69:2d:74:d0:ac:0e:d8:9b:37:b2:ff:fd: 36:03:59:fe:51:6f:04:2e:d6:07:7e:72:69:6b:79: 7b:10:2a:4e:ff:b0:8f:10:29:19:d3:9e:d9:58:b5: 5e:77:f1:7f:7e:bd:c3:42:65:28:95:3e:b2:2a:7f: 6b:4f:1b:05:f9:62:a5:3c:90:61:25:95:b2:bf:2a: 09:0d:73:14:06:9e:20:bf:7c:6b:7b:94:5e:fa:01: c9:54:c4:1c:e3:3b:68:69:64:bf:49:76:8f:a6:89: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8F:90:44:13:13:D7:47:FC:40:B0:A8:47:5A:55:C8:E7:57:AC:37 X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7b:82:d8:5c:f1:e7:f5:7e:e1:ad:ce:74:eb:83:21:4d:e8: 8f:52:a3:9c:a9:e8:c7:e1:bd:96:85:b3:3a:e0:e8:76:f7:4e: 2c:c5:ec:74:b0:05:89:43:91:69:ee:07:20:4d:ca:53:ff:66: a7:42:84:cf:e3:ca:3b:be:a7:92:dc:43:13:fe:e4:2e:62:1c: 10:60:6b:65:e2:6c:1a:dd:28:86:10:7b:38:d4:0f:6e:ce:e4: 31:54:c3:91:a7:33:33:5f:45:00:e5:2e:65:26:7c:71:eb:54: 9a:ae:05:40:b6:2a:1a:38:2b:c4:92:62:ee:d6:6b:f0:e9:4a: 98:4e:64:95:33:75:5e:89:c9:d3:c8:d1:27:2b:67:50:a8:94: 97:fe:41:87:b4:05:f8:81:42:f4:f2:de:a8:45:72:b9:1f:5a: ea:07:be:a0:c3:0b:7f:d4:d4:7c:87:6f:da:31:01:3f:57:97: 87:88:93:49:e5:b4:6c:80:c5:9c:e2:8a:f6:91:30:a7:12:60: 16:86:b1:b3:b4:01:ca:19:ba:0f:9a:70:2f:18:2e:9e:1a:aa: 5f:15:18:ed:09:d3:a2:60:bf:4b:9c:64:38:3f:0a:b9:b2:c1: b0:11:05:20:18:1c:3a:73:24:07:fa:b7:bf:4f:4e:3c:e5:8c: 35:f4:99:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjQxMTIyMTU1MjM2WhcNMjQxMTI5MTU1MjM2WjAYMRYwFAYD VQQDEw02NzQwYThjNC03ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuriZfQI5hfjBy3iI0rSWS0uaV9vBIW9xbK54r/p/+Wyll3xBrfrFnrtSMnS TFkcD3DK20I2R0XzDF02M2AfAjvi5kMQakmfiAhmCSXLwpX4P7dnjOU9C0TjVXxY /vBk4ihvbti+qmlfYDSynNvCmeOzHNeF/sOWqvA7EOYbvrmknbI5bQQ2VKK0ZJT1 Rb5AGP1r/UeT8e1pLXTQrA7Ymzey//02A1n+UW8ELtYHfnJpa3l7ECpO/7CPECkZ 057ZWLVed/F/fr3DQmUolT6yKn9rTxsF+WKlPJBhJZWyvyoJDXMUBp4gv3xre5Re +gHJVMQc4ztoaWS/SXaPpokJrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKPkEQT E9dH/ECwqEdaVcjnV6w3MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY2My9COEFFRjEzOEE5NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4 Z0M0bWlzWnZFUWhpdmxlSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCle4LYXPHn9X7hrc5064MhTeiPUqOcqejH4b2WhbM64Oh2904sxex0 sAWJQ5Fp7gcgTcpT/2anQoTP48o7vqeS3EMT/uQuYhwQYGtl4mwa3SiGEHs41A9u zuQxVMORpzMzX0UA5S5lJnxx61SargVAtioaOCvEkmLu1mvw6UqYTmSVM3VeicnT yNEnK2dQqJSX/kGHtAX4gUL08t6oRXK5H1rqB76gwwt/1NR8h2/aMQE/V5eHiJNJ 5bRsgMWc4or2kTCnEmAWhrGztAHKGboPmnAvGC6eGqpfFRjtCdOiYL9LnGQ4Pwq5 ssGwEQUgGBw6cyQH+re/T0485Yw19JmQ -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org