$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: LMTGXY5lALXfDPXkf2xSCQW4Cj30B0P6v0Bcu4v+pFU= Subject key identifier: F8:20:13:61:CC:2E:D4:5C:7B:EE:6C:15:24:F8:18:38:5D:4D:44:49 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 19 Signing time: Sun 19 May 2024 08:44:39 +0000 Manifest this update: Sun 19 May 2024 08:44:38 +0000 Manifest next update: Sun 26 May 2024 08:44:38 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: PJ4zPbNs37K7I3LOKXE8yli0WS1yT4CRnxU/eH5ffrs=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: WlGg3hTs6Tp0wM849EpdyTISeL/xzllUnK75hnMfU24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: May 19 08:44:38 2024 GMT Not After : May 26 08:44:38 2024 GMT Subject: CN=6649bbf6-17c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:99:de:1a:43:72:3e:58:f7:cf:94:92:ff: 7a:e8:7d:12:f2:8a:7f:0f:e8:8d:f1:76:70:3d:51: 12:21:cc:d9:06:a6:bc:cd:e7:82:d0:ee:65:a0:40: 02:3b:a2:22:e5:75:12:7a:d8:21:f7:e7:90:b7:38: b1:32:8e:38:cd:7d:40:4c:dc:d7:7e:06:44:5f:0f: e8:e9:a1:ca:18:cc:87:7c:96:f6:ff:e1:c4:0f:e4: 02:f1:ad:21:81:80:ee:3f:3f:4c:65:f5:12:e6:e6: ed:13:cc:24:ab:57:35:78:70:ee:1d:23:98:11:0a: 95:68:69:5e:29:66:5e:cf:56:71:65:d4:22:d7:27: 6c:a6:a7:56:bf:e7:dc:ca:f2:f3:55:da:18:3f:84: 94:49:2e:36:6f:2c:3d:18:91:3d:a6:4c:d9:6c:5a: 47:60:e1:50:88:ba:3d:00:57:93:ad:e2:e8:d1:f9: 10:a1:cc:1e:22:a8:45:3b:68:09:de:b9:c6:df:41: d6:b9:7e:a1:a5:c8:a0:fe:b3:3b:a6:e8:02:8c:f0: 53:b7:1a:0e:af:2a:c3:fc:93:3d:b1:b3:f1:8b:46: ed:cf:44:b6:44:2a:5f:1a:c2:9a:96:7b:c1:e6:44: 9f:a9:10:85:b6:ad:04:64:f9:fa:1d:79:0b:08:73: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:20:13:61:CC:2E:D4:5C:7B:EE:6C:15:24:F8:18:38:5D:4D:44:49 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:95:55:f7:d0:3f:92:55:a0:cd:55:0d:ef:f8:af:4f:b2:f6: 53:3b:07:09:60:bc:ee:52:5d:ab:a2:4b:86:bc:a8:f5:77:93: 57:a9:f6:ce:3b:59:78:d4:d5:6e:d1:fb:4a:c6:6a:03:3f:ca: a9:65:c6:46:43:69:9b:14:55:20:e2:60:eb:79:3f:09:84:c1: a3:d6:4d:75:fc:39:f0:eb:c3:2d:79:b7:6a:1c:f4:98:68:74: 6d:24:11:81:58:48:da:ed:ea:75:34:31:69:29:81:75:cf:ec: 45:63:9b:df:ad:46:c7:21:3f:81:ee:2d:b5:07:6d:7b:17:e6: e7:8e:6c:ea:46:75:c8:3d:19:ff:0f:35:e0:fe:c4:36:e5:99: e1:18:ba:d7:f2:67:49:d4:ca:8d:e2:f2:84:d4:f4:7b:64:76: 33:de:2a:88:e0:d9:26:eb:a4:38:e5:b9:ec:3b:61:fa:50:69: 0e:79:d8:23:7d:59:45:63:36:73:93:bb:a5:72:5a:d6:8d:98: e3:f0:fe:f0:1c:28:d8:ed:2f:c9:a7:a8:ad:64:2a:b3:76:7a: 30:45:7f:7e:2d:ad:b0:0a:47:9e:77:5e:3f:76:ce:5b:fe:26: d2:20:7b:1a:93:68:b8:c7:a8:03:4e:a7:b1:9a:04:2f:d5:07: 3b:30:76:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTJCMTExMC8GA1UEBRMoMUE0NTI0N0IzQTFCMDI2OTI3MUQ3NDZDNUE1RkFDMDE0 NUZGMzMyMjAeFw0yNDA1MTkwODQ0MzhaFw0yNDA1MjYwODQ0MzhaMBgxFjAUBgNV BAMTDTY2NDliYmY2LTE3YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0i5neGkNyPlj3z5SS/3rofRLyin8P6I3xdnA9URIhzNkGprzN54LQ7mWgQAI7 oiLldRJ62CH355C3OLEyjjjNfUBM3Nd+BkRfD+jpocoYzId8lvb/4cQP5ALxrSGB gO4/P0xl9RLm5u0TzCSrVzV4cO4dI5gRCpVoaV4pZl7PVnFl1CLXJ2ymp1a/59zK 8vNV2hg/hJRJLjZvLD0YkT2mTNlsWkdg4VCIuj0AV5Ot4ujR+RChzB4iqEU7aAne ucbfQda5fqGlyKD+szum6AKM8FO3Gg6vKsP8kz2xs/GLRu3PRLZEKl8awpqWe8Hm RJ+pEIW2rQRk+fodeQsIc48rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+CATYcwu 1Fx77mwVJPgYOF1NREkwHwYDVR0jBBgwFoAUGkUkezobAmknHXRsWl+sAUX/MyIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMkIxLzE5QTgyRjY2RjNC NTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2tVa2V6b2JBbWtuSFhSc1dsLXNBVVhfTXlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MkIxLzE5QTgyRjY2RjNCNTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1r bkhYUnNXbC1zQVVYX015SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWVVffQP5JVoM1VDe/4r0+y9lM7BwlgvO5SXauiS4a8qPV3k1ep9s47 WXjU1W7R+0rGagM/yqllxkZDaZsUVSDiYOt5PwmEwaPWTXX8OfDrwy15t2oc9Jho dG0kEYFYSNrt6nU0MWkpgXXP7EVjm9+tRschP4HuLbUHbXsX5ueObOpGdcg9Gf8P NeD+xDblmeEYutfyZ0nUyo3i8oTU9HtkdjPeKojg2SbrpDjluew7YfpQaQ552CN9 WUVjNnOTu6VyWtaNmOPw/vAcKNjtL8mnqK1kKrN2ejBFf34trbAKR553Xj92zlv+ JtIgexqTaLjHqANOp7GaBC/VBzswdpw= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org