$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: gG7XFujdCLoDoArnU4lQErmqmfAPRi1ztIdiA+/dk/I= Subject key identifier: 54:BB:B8:A4:EF:A8:98:D2:D0:B1:32:10:19:EE:34:39:2A:92:09:EC Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 02D1 Signing time: Sat 01 Jun 2024 04:35:46 +0000 Manifest this update: Sat 01 Jun 2024 04:35:46 +0000 Manifest next update: Sat 08 Jun 2024 04:35:46 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: uGOxfiVUG+opvuPyrabKC4Nx0epKra041Wbnzhex448=) 2: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (hash: 066MiC7m2yWcRm0snJWwWTgqv84DeerHg51vseK6fxg=) 3: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (hash: hKelCQKTkm1p+eKNBmnMODuFaGiG9imTLxYzwJCOCio=) 4: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (hash: BaABEEJUMzOwQ3XJ4WXo+v7cM/zbzd2LSNgZ3M14nRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Jun 1 04:35:46 2024 GMT Not After : Jun 8 04:35:46 2024 GMT Subject: CN=665aa522-05c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:45:db:bf:09:2d:cd:53:9e:4f:07:c9:ea: 12:24:0e:4e:08:32:bd:05:a4:83:35:da:57:e1:47: a7:8e:2d:2b:bb:af:19:39:89:ce:a7:00:4b:eb:ad: 57:13:fc:57:6f:4f:b9:29:07:07:65:4b:de:fd:79: f2:16:01:2c:1e:b8:2a:9f:21:b2:b6:50:48:63:df: d1:ce:fe:21:fb:ed:80:61:25:e7:b6:3f:d7:81:66: dd:fe:53:28:ed:e6:f4:08:e3:d3:df:fc:c0:8a:13: db:55:22:f3:f6:79:e4:a3:02:92:dc:4b:9e:0e:ec: 0c:64:dd:fe:72:0e:ef:56:11:ba:7e:ce:35:31:e5: 20:1b:da:7f:99:40:16:58:ed:1d:dd:30:01:f0:5f: 98:3d:2c:b5:e0:1a:0f:b4:46:55:64:3f:d0:82:f0: 92:94:a8:39:4a:82:67:aa:3b:86:f1:2a:e5:e0:d2: 23:3e:34:9b:37:52:df:c6:45:d8:2b:56:c1:66:12: 5a:bf:5f:5b:05:36:07:50:96:93:ff:d9:d3:c1:62: 3e:f6:d4:71:50:df:01:f4:12:29:01:a4:b9:f7:d0: 5d:c5:2a:14:d4:d9:ba:ce:56:7b:ce:2e:73:d4:2b: 8a:02:3d:43:62:27:8b:2e:d8:30:61:ae:94:93:cf: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:B8:A4:EF:A8:98:D2:D0:B1:32:10:19:EE:34:39:2A:92:09:EC X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:1c:c2:4f:60:7b:2e:a6:0d:ab:ee:c3:50:c7:cc:37:3d: fe:28:29:a5:24:b7:a6:53:5c:02:0f:1a:22:c5:72:2b:9f:04: 56:e4:38:5b:05:43:e5:59:68:b1:8e:8d:2f:c8:6d:99:bd:37: d8:87:49:8b:ef:1b:34:e2:4a:12:25:50:9b:fb:33:43:0e:39: bc:c8:4b:6d:66:d9:47:a3:df:66:13:e2:ce:56:ad:5b:a0:59: ef:8b:7b:7f:9c:32:b4:30:ca:5d:4c:72:a7:ca:d4:19:c7:59: c6:ef:de:1c:50:59:96:b8:b9:dc:7b:d7:0b:66:de:7e:b9:99: cd:56:77:69:91:3b:f9:60:2c:df:9c:78:e7:89:83:44:22:c8: ad:98:73:a7:8f:bd:95:94:bd:21:e7:6a:39:ee:0d:a4:27:df: 4b:f0:41:d4:b9:70:bc:c0:7f:96:23:2a:20:e6:5c:2d:06:fb: e6:43:cf:5d:29:5e:36:9f:63:fc:62:1f:d8:98:4d:31:1d:59: 00:4b:d1:d5:6f:60:8a:36:27:27:38:6b:ea:6f:3d:97:1b:46: ac:d6:21:4a:93:8a:01:55:59:7d:0e:78:ee:cb:f0:83:74:52: 30:28:86:25:26:95:41:a2:b4:5b:2e:ca:e6:fe:a2:87:a3:d5: 13:ad:71:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjQwNjAxMDQzNTQ2WhcNMjQwNjA4MDQzNTQ2WjAYMRYwFAYD VQQDEw02NjVhYTUyMi0wNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEBF278JLc1Tnk8HyeoSJA5OCDK9BaSDNdpX4Uenji0ru68ZOYnOpwBL661X E/xXb0+5KQcHZUve/XnyFgEsHrgqnyGytlBIY9/Rzv4h++2AYSXntj/XgWbd/lMo 7eb0COPT3/zAihPbVSLz9nnkowKS3EueDuwMZN3+cg7vVhG6fs41MeUgG9p/mUAW WO0d3TAB8F+YPSy14BoPtEZVZD/QgvCSlKg5SoJnqjuG8Srl4NIjPjSbN1LfxkXY K1bBZhJav19bBTYHUJaT/9nTwWI+9tRxUN8B9BIpAaS599BdxSoU1Nm6zlZ7zi5z 1CuKAj1DYieLLtgwYa6Uk8/fhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS7uKTv qJjS0LEyEBnuNDkqkgnsMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU7hzCT2B7LqYNq+7DUMfMNz3+KCmlJLemU1wCDxoixXIrnwRW5Dhb BUPlWWixjo0vyG2ZvTfYh0mL7xs04koSJVCb+zNDDjm8yEttZtlHo99mE+LOVq1b oFnvi3t/nDK0MMpdTHKnytQZx1nG794cUFmWuLnce9cLZt5+uZnNVndpkTv5YCzf nHjniYNEIsitmHOnj72VlL0h52o57g2kJ99L8EHUuXC8wH+WIyog5lwtBvvmQ89d KV42n2P8Yh/YmE0xHVkAS9HVb2CKNicnOGvqbz2XG0as1iFKk4oBVVl9Dnjuy/CD dFIwKIYlJpVBorRbLsrm/qKHo9UTrXFm -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:10 2024 by rpki-client on console-ams.rpki-client.org