$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: 06LLbK6mMrYSZJJj6Fd6Xd4dBFFk3zglZra5hrbtDg8= Subject key identifier: C0:D6:83:1D:73:5F:11:36:FD:40:36:60:53:F3:E0:87:B1:3F:CA:F4 Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 0FA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 0F7B Signing time: Sat 18 May 2024 18:10:09 +0000 Manifest this update: Sat 18 May 2024 18:10:08 +0000 Manifest next update: Sat 25 May 2024 18:10:08 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: u25GminWfVTiwoXR5T0/LJnqgjZJMPmBPjQJqtiit2c=) 2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: azjhCYtaU7rnc9Y0DERGMgiCTal02Kbh/k65yAtbGzU=) 3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: 2BdelQMuoX+M2ZfQcZ+3aYS5cASDjANIG1Gg1/tTowM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: May 18 18:10:08 2024 GMT Not After : May 25 18:10:08 2024 GMT Subject: CN=6648ef01-b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:79:a4:18:cb:ac:41:4f:8f:6d:8e:65:8a: 9e:56:b3:7e:3c:b2:4d:9c:00:03:b0:85:0a:d2:37: f9:53:cb:ba:9b:e2:32:bb:c1:28:cd:03:40:06:44: c1:c4:82:ec:21:11:c0:79:77:fa:14:3b:4d:02:7b: 2a:40:15:be:53:fd:7e:8a:40:e1:5b:2f:5b:22:d2: 62:19:f5:d1:a0:cd:04:b0:14:55:bf:00:c4:4a:9a: 5b:1e:4b:3b:b3:37:8b:0b:95:39:a6:78:21:e5:52: 4e:af:3f:14:55:d1:0c:29:be:45:d6:c4:f8:4b:df: eb:5c:77:47:61:68:74:aa:b4:de:d1:c0:c0:cc:38: 28:af:1d:37:4b:a6:4e:24:54:49:1e:27:14:94:70: 43:c6:68:5d:36:9f:6f:96:10:07:a9:d7:40:e0:2c: a7:69:5b:db:03:a6:11:00:c7:b1:31:68:b5:2d:4c: 32:8e:d6:d0:85:04:2d:4f:58:6a:df:6c:42:70:9e: 69:0b:d4:49:18:dd:df:ef:08:bc:be:6d:cc:92:33: 39:ae:ba:5f:a8:c7:ee:81:f5:87:25:81:9d:0e:57: 88:ad:f7:5a:77:70:a5:eb:00:62:53:19:53:91:5f: e1:5b:a7:00:49:0f:1f:fb:f9:6c:75:0b:57:07:74: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:83:1D:73:5F:11:36:FD:40:36:60:53:F3:E0:87:B1:3F:CA:F4 X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c6:c9:7d:e2:ae:61:8f:4b:e0:72:99:0a:c5:9a:0f:05:cf: b5:93:0c:56:6b:7a:a2:4c:c7:14:ce:21:f5:ba:78:96:8d:1f: 26:2c:cd:be:72:97:af:88:ec:53:4d:8e:44:a7:26:a2:25:5b: b1:3d:f6:fa:76:e0:07:ae:0f:b0:93:50:3c:6b:fa:59:6d:64: 33:78:ec:ac:0d:3c:bc:c4:d1:9e:d6:9e:9d:5a:34:86:49:4c: db:b7:ba:69:9a:42:eb:6a:96:a7:5b:49:91:a7:a6:e3:d0:ac: 31:f2:68:6d:ea:4c:13:61:9a:eb:d4:d0:11:6c:ec:0e:5b:df: 65:7f:17:ea:e2:1b:1c:4b:cd:5a:0c:d9:11:72:ad:d4:7e:94: aa:a9:18:c8:2b:b3:6d:ad:c2:36:6d:9a:80:b3:02:c5:30:3a: 9f:80:f2:80:1b:36:cc:86:79:0d:da:6f:46:24:a8:67:a2:c0: 73:1d:85:2b:25:d2:69:bb:c3:85:1d:c2:b3:8d:ba:83:90:7b: 14:8e:75:4c:59:46:ad:38:8e:e7:3a:9a:ce:69:e8:34:8b:9e: 10:3f:72:83:49:3d:cb:58:0c:66:70:62:f9:b1:1a:63:e9:59: 43:75:a8:74:9c:aa:64:f3:32:3e:04:38:42:30:d2:22:00:47: c1:6b:d7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjQwNTE4MTgxMDA4WhcNMjQwNTI1MTgxMDA4WjAYMRYwFAYD VQQDEw02NjQ4ZWYwMS1iMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4F5pBjLrEFPj22OZYqeVrN+PLJNnAADsIUK0jf5U8u6m+Iyu8EozQNABkTB xILsIRHAeXf6FDtNAnsqQBW+U/1+ikDhWy9bItJiGfXRoM0EsBRVvwDESppbHks7 szeLC5U5pngh5VJOrz8UVdEMKb5F1sT4S9/rXHdHYWh0qrTe0cDAzDgorx03S6ZO JFRJHicUlHBDxmhdNp9vlhAHqddA4CynaVvbA6YRAMexMWi1LUwyjtbQhQQtT1hq 32xCcJ5pC9RJGN3f7wi8vm3MkjM5rrpfqMfugfWHJYGdDleIrfdad3Cl6wBiUxlT kV/hW6cASQ8f+/lsdQtXB3RM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDWgx1z XxE2/UA2YFPz4IexP8r0MB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgxsl94q5hj0vgcpkKxZoPBc+1kwxWa3qiTMcUziH1uniWjR8mLM2+ cpeviOxTTY5EpyaiJVuxPfb6duAHrg+wk1A8a/pZbWQzeOysDTy8xNGe1p6dWjSG SUzbt7ppmkLrapanW0mRp6bj0Kwx8mht6kwTYZrr1NARbOwOW99lfxfq4hscS81a DNkRcq3UfpSqqRjIK7NtrcI2bZqAswLFMDqfgPKAGzbMhnkN2m9GJKhnosBzHYUr JdJpu8OFHcKzjbqDkHsUjnVMWUatOI7nOprOaeg0i54QP3KDST3LWAxmcGL5sRpj 6VlDdah0nKpk8zI+BDhCMNIiAEfBa9ce -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org