$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: mCbkh7JyPY4iz14WyvayBNjK5q7W9SE/zdowhKUU9aw= Subject key identifier: 1E:F7:03:8D:12:0F:23:25:4C:F0:83:BF:4D:6E:F4:F3:F3:F4:6E:11 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 048C Signing time: Fri 22 Nov 2024 23:35:06 +0000 Manifest this update: Fri 22 Nov 2024 23:35:05 +0000 Manifest next update: Fri 29 Nov 2024 23:35:05 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: b0B24yz1jMHgTacI1P/WuXpbrCN2gCWadvKjVMOouTA=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: Nov 22 23:35:05 2024 GMT Not After : Nov 29 23:35:05 2024 GMT Subject: CN=6741152a-6d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:d1:54:bf:2d:f1:94:29:08:17:66:9c:59: b4:12:81:1c:1e:fe:47:c2:45:c9:a8:3e:76:d8:19: c5:0f:5b:84:ce:1c:cf:6e:ad:de:00:91:b7:a6:e5: b4:be:11:48:3f:03:e8:a3:04:fd:da:9c:4a:82:a4: ec:d3:0d:40:95:ed:53:e8:c1:03:05:f9:66:29:8f: 01:21:c5:c1:cd:91:e0:b4:00:0a:75:85:98:4a:f3: 47:9f:9a:f9:8c:db:a2:f8:46:28:d6:a9:84:45:0b: 33:7f:3b:20:5c:4b:8b:19:10:f0:b6:6f:65:7d:8a: 65:26:5b:64:6f:63:dc:18:b1:44:0b:49:aa:81:4a: c5:65:0d:8f:4b:58:66:33:3a:39:5d:16:56:bd:5d: 36:df:14:aa:1d:4b:b7:7e:e9:e0:25:a2:1c:c5:59: 8c:7d:bb:31:6e:40:6e:16:65:58:05:11:a2:bd:26: 3b:7b:66:0e:76:44:d6:be:ed:aa:8e:76:b5:fe:5e: 7c:d4:94:d2:8a:8e:09:4c:83:ca:78:59:ac:a6:72: e3:da:35:fc:07:ef:da:08:86:bc:a7:ea:51:62:7b: 27:cb:ae:5e:95:45:2b:56:48:9d:b2:5c:6e:f9:4b: a5:ef:e7:b8:1e:ff:3d:39:ff:ca:32:48:c5:70:51: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F7:03:8D:12:0F:23:25:4C:F0:83:BF:4D:6E:F4:F3:F3:F4:6E:11 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9d:94:c7:ff:76:29:5d:a4:f3:6e:9a:db:93:6b:ed:88:6f: c8:cb:0b:2e:7c:6b:a4:b8:91:22:d1:46:2d:76:22:88:7d:59: 18:bd:d2:2d:4d:85:fc:0b:a1:c9:22:84:8d:42:f8:3d:ae:ed: 72:12:93:b6:0d:47:16:4f:bc:14:e9:02:7e:f3:42:d4:fd:68: f1:24:ec:1a:1b:7f:ab:b0:33:0b:f1:60:21:cc:ef:41:85:4d: aa:6e:48:7a:31:b8:e6:1b:62:4d:9c:d9:5a:8b:e3:25:7b:13: f0:95:94:65:9c:d0:1c:ae:74:af:52:d2:94:9b:7f:ca:39:b7: d0:3a:4b:21:5c:4b:33:19:b4:c0:98:a5:dd:08:4c:37:26:0a: ef:3b:b0:e2:94:e1:b0:3e:2f:91:78:96:4e:16:e8:5d:cd:71: 73:d3:b9:ab:38:90:86:3e:67:a6:d8:1c:a5:71:e8:b4:4f:2d: a0:fa:2a:34:8f:1b:76:ba:9b:bb:1a:c6:8c:7e:11:73:74:30: 56:6e:b5:24:8a:33:ec:60:cd:2e:0f:58:7e:ea:31:11:d5:84: fb:3b:5e:5b:ea:79:ea:2a:53:ce:6c:a6:55:64:7a:42:45:8a: 79:89:ff:41:10:9a:41:37:36:03:5a:92:5c:6f:9e:d9:d4:9a: 94:99:f9:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjQxMTIyMjMzNTA1WhcNMjQxMTI5MjMzNTA1WjAYMRYwFAYD VQQDEw02NzQxMTUyYS02ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT/RVL8t8ZQpCBdmnFm0EoEcHv5HwkXJqD522BnFD1uEzhzPbq3eAJG3puW0 vhFIPwPoowT92pxKgqTs0w1Ale1T6MEDBflmKY8BIcXBzZHgtAAKdYWYSvNHn5r5 jNui+EYo1qmERQszfzsgXEuLGRDwtm9lfYplJltkb2PcGLFEC0mqgUrFZQ2PS1hm Mzo5XRZWvV023xSqHUu3fungJaIcxVmMfbsxbkBuFmVYBRGivSY7e2YOdkTWvu2q jna1/l581JTSio4JTIPKeFmspnLj2jX8B+/aCIa8p+pRYnsny65elUUrVkidslxu +Uul7+e4Hv89Of/KMkjFcFF+3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB73A40S DyMlTPCDv01u9PPz9G4RMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4nZTH/3YpXaTzbprbk2vtiG/IywsufGukuJEi0UYtdiKIfVkYvdIt TYX8C6HJIoSNQvg9ru1yEpO2DUcWT7wU6QJ+80LU/WjxJOwaG3+rsDML8WAhzO9B hU2qbkh6MbjmG2JNnNlai+MlexPwlZRlnNAcrnSvUtKUm3/KObfQOkshXEszGbTA mKXdCEw3JgrvO7DilOGwPi+ReJZOFuhdzXFz07mrOJCGPmem2Bylcei0Ty2g+io0 jxt2upu7GsaMfhFzdDBWbrUkijPsYM0uD1h+6jER1YT7O15b6nnqKlPObKZVZHpC RYp5if9BEJpBNzYDWpJcb57Z1JqUmfkX -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org