$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: kiIeB05vXHe1K/59BinWBQZm4WSsebncRzEX1dWmF6Q= Subject key identifier: 5F:02:07:F3:6A:21:6F:23:9E:2A:31:02:04:8F:D1:6D:92:DA:60:02 Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 010F Signing time: Thu 21 Nov 2024 03:07:58 +0000 Manifest this update: Thu 21 Nov 2024 03:07:57 +0000 Manifest next update: Thu 28 Nov 2024 03:07:57 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: 4lsCoTYrZ8QczuFuNTGMoMOHMU8o0LkId9dZ29n3DFg=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: 0YyUbP/GJ+UuQCl7qEg3Lew5r+V1ykLIOBRod/oh4qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: Nov 21 03:07:57 2024 GMT Not After : Nov 28 03:07:57 2024 GMT Subject: CN=673ea40d-ec59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:0b:22:9b:03:c7:3d:da:38:75:13:07:72: 8a:2d:f7:3d:69:77:78:31:0c:6e:21:95:0f:d0:56: a3:21:d4:3c:e4:51:8b:4c:5b:5d:a9:b1:8f:d1:d7: 6d:8e:83:9b:a6:06:18:f4:68:48:12:d1:8c:a4:f7: 0e:98:51:10:9b:f4:15:23:49:49:9e:52:8d:7b:50: 29:ef:bc:fb:ad:80:39:f9:23:8c:26:e6:4d:ae:22: 8e:62:a8:60:b1:18:90:99:7f:9a:74:6b:db:5d:57: 1d:71:df:ee:f4:05:7f:bf:5c:66:13:39:fb:11:65: e8:ba:82:16:6f:1a:2e:fa:c3:8a:7b:48:67:48:d1: 53:3a:02:21:09:e4:8f:1a:26:fd:d9:fa:01:5e:f5: 3e:47:48:80:fb:64:97:46:be:29:2f:e6:9b:f6:c6: 88:79:ac:99:da:bb:df:b8:79:b7:65:90:62:2e:67: ed:84:b4:06:af:d0:d1:3a:d4:e4:b2:81:5a:84:1b: 05:65:e8:d4:29:e9:6e:fc:68:3e:81:f4:a3:9d:95: e2:b5:fa:d5:95:d5:2b:c7:84:66:66:34:fa:46:38: 32:8a:7b:71:5e:61:a9:45:9a:92:07:08:34:65:d0: 35:8c:33:9e:7d:24:79:7a:04:c5:9a:25:2f:9e:b4: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:07:F3:6A:21:6F:23:9E:2A:31:02:04:8F:D1:6D:92:DA:60:02 X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:46:73:38:d3:4e:b6:35:01:92:ef:90:d1:d6:8f:cf:3a:64: 0e:b3:4f:4b:ac:69:b3:98:22:d2:c3:64:10:80:6c:da:df:8e: 76:4b:d1:d6:58:62:41:30:d6:39:b3:37:d4:6f:8e:89:f1:0b: 94:42:87:6a:27:3f:01:f1:32:88:9f:3a:11:73:bb:5f:13:6d: eb:81:04:b5:22:82:64:5b:01:65:60:b0:f0:1b:96:da:68:46: c8:5f:1f:57:55:89:e8:dc:21:f4:0b:77:c8:aa:3f:06:f5:a8: b4:2a:b4:4d:ec:e5:ec:66:fe:58:6c:c7:53:04:77:24:1f:03: 7b:57:0f:df:84:34:c3:de:d4:f8:76:bb:02:09:21:b8:b9:d3: 04:e8:5d:fa:63:0e:7e:89:51:0c:4b:f3:43:9f:bd:36:5a:a4: 57:b4:91:dd:78:5d:ec:24:3c:77:27:d5:0a:16:13:7a:77:fe: 18:ff:64:3d:56:ed:c8:be:93:c8:bb:65:b3:1b:c1:e4:7c:f1: ea:56:3c:ab:15:f5:80:58:06:bc:81:6e:b7:13:84:78:a4:31: af:9f:52:f2:97:d9:12:31:db:97:eb:eb:67:a4:19:cd:4e:86: c7:c4:17:89:1a:cd:66:78:bb:5b:71:31:7f:dc:35:85:37:7a: 40:41:4d:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjQxMTIxMDMwNzU3WhcNMjQxMTI4MDMwNzU3WjAYMRYwFAYD VQQDEw02NzNlYTQwZC1lYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLsLIpsDxz3aOHUTB3KKLfc9aXd4MQxuIZUP0FajIdQ85FGLTFtdqbGP0ddt joObpgYY9GhIEtGMpPcOmFEQm/QVI0lJnlKNe1Ap77z7rYA5+SOMJuZNriKOYqhg sRiQmX+adGvbXVcdcd/u9AV/v1xmEzn7EWXouoIWbxou+sOKe0hnSNFTOgIhCeSP Gib92foBXvU+R0iA+2SXRr4pL+ab9saIeayZ2rvfuHm3ZZBiLmfthLQGr9DROtTk soFahBsFZejUKelu/Gg+gfSjnZXitfrVldUrx4RmZjT6RjgyintxXmGpRZqSBwg0 ZdA1jDOefSR5egTFmiUvnrRZPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8CB/Nq IW8jnioxAgSP0W2S2mACMB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRnM40062NQGS75DR1o/POmQOs09LrGmzmCLSw2QQgGza3452S9HW WGJBMNY5szfUb46J8QuUQodqJz8B8TKInzoRc7tfE23rgQS1IoJkWwFlYLDwG5ba aEbIXx9XVYno3CH0C3fIqj8G9ai0KrRN7OXsZv5YbMdTBHckHwN7Vw/fhDTD3tT4 drsCCSG4udME6F36Yw5+iVEMS/NDn702WqRXtJHdeF3sJDx3J9UKFhN6d/4Y/2Q9 Vu3IvpPIu2WzG8HkfPHqVjyrFfWAWAa8gW63E4R4pDGvn1Lyl9kSMduX6+tnpBnN TobHxBeJGs1meLtbcTF/3DWFN3pAQU0Z -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:22 2024 by rpki-client on console-ams.rpki-client.org