$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json) Hash identifier: i1qeyS6gJqR5NICucJkchxiydXTapsf42B5b1MOZl8s= Subject key identifier: E7:70:79:6F:CB:21:5C:C8:77:B2:88:34:F6:9C:67:21:12:AA:C0:E5 Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft Manifest number: 020F Signing time: Fri 31 May 2024 04:44:49 +0000 Manifest this update: Fri 31 May 2024 04:44:48 +0000 Manifest next update: Fri 07 Jun 2024 04:44:48 +0000 Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: 1XC1e11C3JCQpLOgXcuqio5d+1mY66Y/jJYi4xUve+M=) 2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: MhAxL8s969meCKEJYh/A6392Up+MC9qpXlObK9HjlKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Validity Not Before: May 31 04:44:48 2024 GMT Not After : Jun 7 04:44:48 2024 GMT Subject: CN=665955c0-4dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:37:14:cf:a9:61:9c:04:40:3f:52:21:e1:1f: 29:98:5d:b1:90:27:12:7b:ad:4b:be:33:d1:58:40: 8c:ff:df:f0:79:3a:1d:80:56:9f:f3:52:bf:e2:1e: b6:6d:e3:31:a0:f5:eb:24:1d:e4:1c:ed:1f:ad:22: 54:e1:3d:20:51:19:b6:4d:e5:9a:8f:2b:c9:1e:0b: 7f:6a:58:5c:ba:e9:6e:ab:fb:72:c4:87:d9:39:a7: 92:88:08:64:a4:f6:fb:23:94:c7:1f:8a:f1:b5:0d: 1c:b6:ce:b8:47:ec:48:62:fe:df:75:5f:47:a0:4a: 62:21:7a:5e:6e:34:f4:a5:ed:80:00:4d:d2:22:06: 8a:38:56:1a:b7:5e:35:b2:ac:77:e5:de:e8:bf:58: bb:e2:5e:25:53:a1:9c:ce:85:ba:6b:42:cb:83:06: fc:53:33:c6:79:e9:93:95:13:e9:c3:dc:ab:40:4b: e2:8d:f2:07:f9:cd:7a:aa:2e:0f:b9:73:c8:d5:de: c6:d8:0d:b0:d0:bb:b2:19:88:d9:b3:a1:80:cc:ad: ae:14:cb:b3:7d:30:97:4e:34:5c:43:ea:fe:12:90: 8d:66:d7:de:74:b0:1b:f0:eb:67:86:e9:eb:ad:8b: f9:e2:bc:94:c6:5e:37:66:fc:ea:ae:dc:85:93:0d: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:70:79:6F:CB:21:5C:C8:77:B2:88:34:F6:9C:67:21:12:AA:C0:E5 X509v3 Authority Key Identifier: keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bf:4a:50:86:bb:94:c4:3a:70:11:1b:b7:68:af:4b:b9:3b: 6c:b6:90:fd:83:ec:55:e6:74:dc:18:95:f6:6d:2e:ac:35:0e: 06:c0:07:09:1e:a8:95:89:de:f6:4a:2f:a7:c0:22:f1:ed:89: 6c:5a:15:e2:db:08:96:a3:2c:52:14:a5:6c:6f:39:6d:bf:03: 66:b1:1d:48:ca:29:5a:74:3b:fe:87:d3:fb:c6:ba:14:e9:83: ea:f3:40:d3:25:c5:90:6a:12:76:fd:bf:31:19:3c:cb:7e:1e: 81:49:cc:87:52:9b:36:f6:53:8f:ce:4e:3a:7f:72:50:be:3b: 95:27:db:36:91:87:51:da:31:8d:4d:d0:df:34:b0:0a:f2:a3: 42:63:61:b4:c5:a7:b4:aa:3c:b9:86:ec:d3:5d:00:73:47:3a: 26:85:3b:54:8e:10:1f:26:51:fd:3f:4e:9c:e1:8e:29:0b:a0: 7e:ff:dc:ef:2c:1a:52:a5:24:a4:02:d3:ed:fe:70:cc:82:13: 0d:bb:91:f1:2c:20:82:1b:d4:ed:b1:3b:4e:2d:69:d5:68:67: 0b:6e:f9:f5:39:a1:19:de:89:b5:50:2b:d2:70:d3:59:57:9e: ba:3b:b2:64:11:41:0b:bf:fd:8b:0c:d6:8b:11:f3:56:28:36: 93:fc:48:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0 NzcyRThGRUYwHhcNMjQwNTMxMDQ0NDQ4WhcNMjQwNjA3MDQ0NDQ4WjAYMRYwFAYD VQQDEw02NjU5NTVjMC00ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zcUz6lhnARAP1Ih4R8pmF2xkCcSe61LvjPRWECM/9/weTodgFaf81K/4h62 beMxoPXrJB3kHO0frSJU4T0gURm2TeWajyvJHgt/alhcuuluq/tyxIfZOaeSiAhk pPb7I5THH4rxtQ0cts64R+xIYv7fdV9HoEpiIXpebjT0pe2AAE3SIgaKOFYat141 sqx35d7ov1i74l4lU6GczoW6a0LLgwb8UzPGeemTlRPpw9yrQEvijfIH+c16qi4P uXPI1d7G2A2w0LuyGYjZs6GAzK2uFMuzfTCXTjRcQ+r+EpCNZtfedLAb8Otnhunr rYv54ryUxl43ZvzqrtyFkw3DawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdweW/L IVzId7KINPacZyESqsDlMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLv0pQhruUxDpwERu3aK9LuTtstpD9g+xV5nTcGJX2bS6sNQ4GwAcJ HqiVid72Si+nwCLx7YlsWhXi2wiWoyxSFKVsbzltvwNmsR1IyiladDv+h9P7xroU 6YPq80DTJcWQahJ2/b8xGTzLfh6BScyHUps29lOPzk46f3JQvjuVJ9s2kYdR2jGN TdDfNLAK8qNCY2G0xae0qjy5huzTXQBzRzomhTtUjhAfJlH9P06c4Y4pC6B+/9zv LBpSpSSkAtPt/nDMghMNu5HxLCCCG9TtsTtOLWnVaGcLbvn1OaEZ3om1UCvScNNZ V566O7JkEUELv/2LDNaLEfNWKDaT/Ehe -----END CERTIFICATE-----Generated at Fri May 31 06:49:03 2024 by rpki-client on console-ams.rpki-client.org