$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: vJ5ZSPEgJoHRiLd2UqQMkULw5aBYdHqCffaNlComdZs= Subject key identifier: 3C:48:C8:DE:2F:72:7D:F5:47:98:DB:78:20:A2:0E:47:DC:69:4D:11 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 3432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 3429 Signing time: Fri 22 Nov 2024 14:42:37 +0000 Manifest this update: Fri 22 Nov 2024 14:42:37 +0000 Manifest next update: Fri 29 Nov 2024 14:42:37 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: 1DXLYY6A+HWiZet9RpfOUFp8CJ/mE+XedzVcNzWm+F4=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: 2R/JIm+dy3J9QEhBrc+vl6TnBvASBKCKIARBdM+hz20=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: GofCRUflvDRo1yALF5A3qEW6x0Z/FLZHjkmP8REXKAE=) 4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: /ZfamkrcyVX98fX+BafwQ7UNJGR9Hte2HxcSkHXGZs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13362 (0x3432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Nov 22 14:42:37 2024 GMT Not After : Nov 29 14:42:37 2024 GMT Subject: CN=6740985d-a165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:c0:51:6c:35:12:c9:1d:40:ce:e6:80:08: 5b:e8:44:0d:02:d7:67:ee:d0:96:60:01:35:88:d0: ff:2c:50:db:77:97:22:01:da:a0:88:d2:cf:8e:97: 21:9c:49:f6:2c:d4:a0:8b:5d:42:4b:7a:cc:3c:0b: 5a:4e:d7:7d:4b:41:a2:13:94:0a:e1:ca:8d:9b:bb: ae:8d:f5:bc:dc:65:a3:a8:40:5a:9a:c8:46:c3:f0: 80:45:4d:d2:2c:c4:4b:4d:53:34:1b:8a:ba:bf:69: 5c:c2:55:75:a2:a4:56:36:76:4a:78:46:45:d7:b0: eb:65:19:a0:8d:e2:55:79:2b:2c:2f:cd:de:2e:8f: b7:e9:fa:61:b9:5c:c3:fd:69:fe:0c:75:65:e8:e2: 76:8a:34:69:d2:b7:58:dd:99:ea:8e:b6:07:22:d0: 97:d6:87:5d:aa:68:79:5c:8d:84:2d:0f:b0:95:d2: 41:4f:4e:53:4e:02:69:a4:1e:6f:a2:6e:38:54:0b: 45:89:93:6a:a6:f0:0d:47:40:b0:bb:a5:5f:ed:4e: f7:0a:84:3e:6c:56:80:3d:81:75:f0:5a:d0:c6:65: e8:f8:2f:24:ed:84:de:84:7b:86:6d:b7:9c:85:02: 1e:0b:1f:8e:2f:96:e9:ee:ff:98:3e:b7:3e:2f:f4: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:C8:DE:2F:72:7D:F5:47:98:DB:78:20:A2:0E:47:DC:69:4D:11 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:68:5e:86:76:da:c7:67:a5:b8:40:91:f6:c6:bf:05:c5:ff: d0:11:0a:28:a6:04:7c:4e:a5:cb:6a:6d:29:df:73:c8:9c:2f: 01:d1:27:87:eb:ba:57:7f:fe:53:af:94:89:6c:b4:48:da:1f: b4:a2:95:42:c5:63:e0:b3:23:28:fc:21:21:a4:5c:47:ce:fb: 20:db:69:ca:71:ef:50:03:1a:55:aa:8e:8a:29:fa:3e:7a:05: c6:29:61:be:5d:85:05:1b:6d:da:27:2b:7c:a4:26:9a:5a:aa: 27:3c:b6:48:da:52:6b:1c:7a:a1:e4:1e:74:fa:cc:2d:34:b0: ee:f3:a6:67:b9:09:b3:63:72:00:69:a8:f9:53:c3:2b:0c:0f: 07:87:6e:01:49:17:ca:0b:ba:d5:51:bb:99:1c:cc:23:d1:be: 1d:df:f9:a2:56:58:16:c1:2f:8f:fc:4e:60:8a:14:1e:dc:ed: b2:79:2b:37:dd:4a:ff:f2:60:4e:d9:71:4c:44:8f:fc:f0:b2: 5b:36:52:89:99:21:93:9b:b7:04:0a:4a:ee:9e:40:7e:1a:1f: 69:7b:8a:c0:b5:89:60:a5:b2:59:c5:bc:63:46:59:ba:4f:a9: 30:d8:98:dd:a7:de:45:ac:4b:82:76:dc:34:3b:55:ae:79:ff: a0:2a:5c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjQxMTIyMTQ0MjM3WhcNMjQxMTI5MTQ0MjM3WjAYMRYwFAYD VQQDEw02NzQwOTg1ZC1hMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpXAUWw1EskdQM7mgAhb6EQNAtdn7tCWYAE1iND/LFDbd5ciAdqgiNLPjpch nEn2LNSgi11CS3rMPAtaTtd9S0GiE5QK4cqNm7uujfW83GWjqEBamshGw/CARU3S LMRLTVM0G4q6v2lcwlV1oqRWNnZKeEZF17DrZRmgjeJVeSssL83eLo+36fphuVzD /Wn+DHVl6OJ2ijRp0rdY3ZnqjrYHItCX1oddqmh5XI2ELQ+wldJBT05TTgJppB5v om44VAtFiZNqpvANR0Cwu6Vf7U73CoQ+bFaAPYF18FrQxmXo+C8k7YTehHuGbbec hQIeCx+OL5bp7v+YPrc+L/RF4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxIyN4v cn31R5jbeCCiDkfcaU0RMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCaF6GdtrHZ6W4QJH2xr8Fxf/QEQoopgR8TqXLam0p33PInC8B0SeH 67pXf/5Tr5SJbLRI2h+0opVCxWPgsyMo/CEhpFxHzvsg22nKce9QAxpVqo6KKfo+ egXGKWG+XYUFG23aJyt8pCaaWqonPLZI2lJrHHqh5B50+swtNLDu86ZnuQmzY3IA aaj5U8MrDA8Hh24BSRfKC7rVUbuZHMwj0b4d3/miVlgWwS+P/E5gihQe3O2yeSs3 3Ur/8mBO2XFMRI/88LJbNlKJmSGTm7cECkrunkB+Gh9pe4rAtYlgpbJZxbxjRlm6 T6kw2Jjdp95FrEuCdtw0O1Wuef+gKlx4 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org