$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: gWRO29NXsWdakRz0JD9uo6sO8tL+ZQWgwoAhQSX0Fs4= Subject key identifier: ED:7B:CF:DB:27:34:C8:26:AC:E5:F9:8A:F5:70:CB:BB:1A:43:37:65 Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 0181 Signing time: Sat 23 Nov 2024 02:02:02 +0000 Manifest this update: Sat 23 Nov 2024 02:02:01 +0000 Manifest next update: Sat 30 Nov 2024 02:02:01 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: g+bmoADYK7SRGk/KjhJBEMv+R4lNjYQgHgsbKuvhL5c=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Nov 23 02:02:01 2024 GMT Not After : Nov 30 02:02:01 2024 GMT Subject: CN=67413799-9bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:d5:bb:0c:5f:bc:86:94:70:92:41:80:10: 3c:db:83:fa:bb:3e:dd:6b:9d:fc:dc:5f:8f:e3:a6: 2c:2b:a5:b0:c7:e4:86:d7:77:99:d9:b0:01:29:e7: ff:31:60:5e:19:c2:e2:80:7c:15:bf:3d:30:56:2b: d0:ff:18:8f:83:d9:2d:0a:4e:6f:95:d8:a0:9b:dd: 70:4a:33:d2:58:7b:94:10:96:d4:7f:a9:4a:62:59: 08:a8:28:d0:5a:7f:55:1a:ea:57:9b:b6:64:b2:9c: 8f:ff:2b:b0:d2:6e:89:7d:41:84:6e:2f:aa:93:43: 95:40:53:41:b6:b8:56:ff:a7:64:89:0b:07:34:75: f7:8b:54:6c:01:8c:15:f1:21:a0:90:0c:77:e4:52: 30:d7:14:86:8b:47:d2:02:b8:ae:d0:dc:3b:95:c4: 48:62:ab:4e:1f:a4:3b:f0:dd:c4:0e:c7:5d:61:5c: b0:ad:3a:3c:7e:fb:f4:66:4d:3b:39:93:99:7e:09: 7b:33:46:45:83:31:58:74:bf:41:3b:51:be:fa:3f: fe:8a:cd:83:43:c4:eb:ff:92:2e:2a:70:56:f8:32: 7e:ec:34:02:c8:ea:fe:86:79:fd:8c:9b:af:d1:23: b9:d2:c4:cb:62:40:f9:ae:90:64:a6:1b:79:a3:6f: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:CF:DB:27:34:C8:26:AC:E5:F9:8A:F5:70:CB:BB:1A:43:37:65 X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:60:ac:8b:ae:35:5e:b1:33:cf:ed:34:af:bb:e2:8f:cb: a9:00:35:1f:af:23:ad:4d:73:98:59:57:b4:35:a3:e7:b1:c7: cf:ff:20:b7:a4:01:74:0f:77:43:61:c2:b8:a3:bf:28:a3:4e: 83:13:ae:0a:dd:2b:c7:d6:c2:f4:d4:0d:ea:7a:7e:d8:36:04: 4b:b2:b4:ac:3e:96:49:6e:9c:58:05:ad:0c:33:80:f0:18:01: d0:e3:69:5b:99:50:d7:0f:ae:bb:0d:0f:e9:0e:21:70:70:72: bc:e1:32:1b:99:61:8b:c6:64:8c:71:5d:a4:41:61:a6:31:24: 3d:70:27:9d:1a:0f:aa:97:04:a7:6a:c9:2f:2d:cf:a7:f3:c2: 9b:3b:e7:56:5b:7d:98:7c:d4:2d:55:f4:61:bd:63:09:46:f6: 10:42:a1:fc:5a:4f:a5:16:7d:ed:bb:07:3b:bb:01:82:8b:2a: af:46:06:30:d8:99:53:a2:67:79:70:6a:66:2f:8b:05:c1:e8: c4:ae:36:66:ae:97:0c:63:a5:ff:71:01:b5:fb:cc:ca:11:f8: b9:f3:56:14:46:1e:30:3b:cc:53:1c:17:34:1a:4d:ad:6b:28: 4b:25:22:16:0f:d4:9a:12:de:d2:5f:23:fc:13:85:92:d3:7b: d7:f1:54:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjQxMTIzMDIwMjAxWhcNMjQxMTMwMDIwMjAxWjAYMRYwFAYD VQQDEw02NzQxMzc5OS05YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8jVuwxfvIaUcJJBgBA824P6uz7da5383F+P46YsK6Wwx+SG13eZ2bABKef/ MWBeGcLigHwVvz0wVivQ/xiPg9ktCk5vldigm91wSjPSWHuUEJbUf6lKYlkIqCjQ Wn9VGupXm7ZkspyP/yuw0m6JfUGEbi+qk0OVQFNBtrhW/6dkiQsHNHX3i1RsAYwV 8SGgkAx35FIw1xSGi0fSAriu0Nw7lcRIYqtOH6Q78N3EDsddYVywrTo8fvv0Zk07 OZOZfgl7M0ZFgzFYdL9BO1G++j/+is2DQ8Tr/5IuKnBW+DJ+7DQCyOr+hnn9jJuv 0SO50sTLYkD5rpBkpht5o29C8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO17z9sn NMgmrOX5ivVwy7saQzdlMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcYGCsi641XrEzz+00r7vij8upADUfryOtTXOYWVe0NaPnscfP/yC3 pAF0D3dDYcK4o78oo06DE64K3SvH1sL01A3qen7YNgRLsrSsPpZJbpxYBa0MM4Dw GAHQ42lbmVDXD667DQ/pDiFwcHK84TIbmWGLxmSMcV2kQWGmMSQ9cCedGg+qlwSn askvLc+n88KbO+dWW32YfNQtVfRhvWMJRvYQQqH8Wk+lFn3tuwc7uwGCiyqvRgYw 2JlTomd5cGpmL4sFwejErjZmrpcMY6X/cQG1+8zKEfi581YURh4wO8xTHBc0Gk2t ayhLJSIWD9SaEt7SXyP8E4WS03vX8VTZ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org