$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: ilwUXISpMemxRZd8l5DzpHrZtewCOYlI+Kb27DwTZU8= Subject key identifier: 4A:ED:C1:9D:50:CA:60:5F:BE:3D:38:0D:CD:72:1E:1B:28:34:F0:A5 Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 26CE Signing time: Sun 24 Nov 2024 15:53:19 +0000 Manifest this update: Sun 24 Nov 2024 15:53:19 +0000 Manifest next update: Sun 01 Dec 2024 15:53:19 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: 3oP3yySIB5IhqM+CiuVJKZelKiwwUGyZCt+ugjm/j2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Nov 24 15:53:19 2024 GMT Not After : Dec 1 15:53:19 2024 GMT Subject: CN=67434bef-806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:5e:6a:ab:83:d9:c0:65:25:8e:66:ac:15: 0a:df:a1:88:60:e1:00:76:f7:00:ae:8e:4e:5e:48: f4:50:12:0b:b3:6f:e1:d8:62:92:8c:31:4d:4d:24: 6a:7f:da:d1:26:6d:ad:b9:3d:89:a6:94:78:62:99: 8b:92:59:ff:5c:c6:4b:c6:ea:e4:7d:32:5d:4f:93: 5d:9c:db:be:c4:bf:69:4e:7c:b7:4a:66:72:cc:cf: 15:2d:63:6d:b0:32:d7:5e:f2:af:f9:71:f5:60:fc: 25:fc:28:67:2a:69:46:db:db:32:a4:09:25:d4:c1: 9d:c2:01:e3:1f:9a:22:ad:7f:b3:7b:f5:10:ff:9d: 20:02:56:69:61:82:f4:d7:aa:8a:63:7e:b9:83:66: 56:99:dc:c4:d2:ed:f6:c6:a0:64:46:f4:10:24:df: f2:24:fb:03:fa:5a:e2:35:a1:51:01:4a:ba:44:28: e4:a6:b4:64:16:00:74:85:c2:0b:7a:4a:b9:1a:2f: b2:29:3f:fa:53:be:19:7e:2d:80:a2:8e:b0:fb:6f: 7b:cd:3b:c6:a0:2e:d8:c7:21:19:17:0c:0d:c5:d5: 9b:68:a2:63:e2:c3:6b:e7:15:45:dd:8b:7d:3e:ba: 44:f9:f0:46:90:d9:1b:8b:b2:dc:e9:7e:f3:ad:7b: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:C1:9D:50:CA:60:5F:BE:3D:38:0D:CD:72:1E:1B:28:34:F0:A5 X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e2:ae:89:f0:7a:e1:62:8d:ef:96:a3:0d:db:29:82:d8:9a: 7c:a8:de:81:30:c9:77:aa:b5:36:e2:ff:32:8f:14:51:8e:37: 1b:3c:41:4b:f0:2f:81:c3:9f:99:81:53:d1:81:c3:a4:7f:8b: 45:79:9b:c2:9e:01:08:a3:9d:b4:6b:61:03:72:80:79:e0:f4: 19:23:e8:e6:fe:03:fa:64:ba:cb:a2:17:54:1d:9b:4d:6a:03: f7:67:d8:52:29:69:c1:73:71:76:65:86:32:b2:0f:68:59:ad: 48:5d:b6:98:42:dc:d0:10:73:50:cc:d8:c0:ed:f2:cd:97:44: 86:61:3b:60:b1:6c:57:f6:4d:3a:58:cc:bf:4d:de:ad:a0:c3: 11:07:dc:be:82:14:5a:11:7a:d2:ee:7b:84:0f:2a:c1:d0:9c: c9:31:0c:c3:9b:75:37:80:fc:0f:0a:80:5c:dc:23:88:fe:c1: 46:7a:43:70:a3:a4:a3:58:1d:87:38:39:6d:bf:99:ea:82:fa: 2a:1a:d4:4e:ed:30:6f:5c:8a:81:0d:06:ad:aa:f1:5f:1c:0f: ef:5d:4f:5c:07:85:87:b4:68:19:46:07:b2:3b:12:1d:d5:9d: 08:61:2f:50:68:8f:f3:00:a6:28:92:ff:36:2e:d5:11:19:14: ff:04:0a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjQxMTI0MTU1MzE5WhcNMjQxMjAxMTU1MzE5WjAYMRYwFAYD VQQDEw02NzQzNGJlZi04MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrxeaquD2cBlJY5mrBUK36GIYOEAdvcAro5OXkj0UBILs2/h2GKSjDFNTSRq f9rRJm2tuT2JppR4YpmLkln/XMZLxurkfTJdT5NdnNu+xL9pTny3SmZyzM8VLWNt sDLXXvKv+XH1YPwl/ChnKmlG29sypAkl1MGdwgHjH5oirX+ze/UQ/50gAlZpYYL0 16qKY365g2ZWmdzE0u32xqBkRvQQJN/yJPsD+lriNaFRAUq6RCjkprRkFgB0hcIL ekq5Gi+yKT/6U74Zfi2Aoo6w+297zTvGoC7YxyEZFwwNxdWbaKJj4sNr5xVF3Yt9 PrpE+fBGkNkbi7Lc6X7zrXvibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErtwZ1Q ymBfvj04Dc1yHhsoNPClMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH4q6J8HrhYo3vlqMN2ymC2Jp8qN6BMMl3qrU24v8yjxRRjjcbPEFL 8C+Bw5+ZgVPRgcOkf4tFeZvCngEIo520a2EDcoB54PQZI+jm/gP6ZLrLohdUHZtN agP3Z9hSKWnBc3F2ZYYysg9oWa1IXbaYQtzQEHNQzNjA7fLNl0SGYTtgsWxX9k06 WMy/Td6toMMRB9y+ghRaEXrS7nuEDyrB0JzJMQzDm3U3gPwPCoBc3COI/sFGekNw o6SjWB2HODltv5nqgvoqGtRO7TBvXIqBDQatqvFfHA/vXU9cB4WHtGgZRgeyOxId 1Z0IYS9QaI/zAKYokv82LtURGRT/BAof -----END CERTIFICATE-----Generated at Sun Nov 24 18:25:00 2024 by rpki-client on console-ams.rpki-client.org