$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: trrUAcD23yDLBoCCJ/bL1Ur19Qh3SazVA5hY1HOUUAE= Subject key identifier: 01:42:7E:F2:BA:D1:1C:10:56:1C:EF:3A:59:94:9C:15:E3:CA:12:23 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0A9F Signing time: Thu 30 May 2024 20:35:31 +0000 Manifest this update: Thu 30 May 2024 20:35:31 +0000 Manifest next update: Thu 06 Jun 2024 20:35:31 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 0Hk9y2k8O7XmddYoKlYe+jb24PJrL12k9Zd79IlCA40=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0CVlwWdHMnQ7Gb1e3i5Vmz+DwnzV08tbLlKmynwufrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2724 (0xaa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: May 30 20:35:31 2024 GMT Not After : Jun 6 20:35:31 2024 GMT Subject: CN=6658e313-8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:64:86:f1:45:fe:a4:39:fa:65:fa:16:be: f5:fc:41:93:a1:92:4d:47:a3:08:14:0a:e5:7d:df: 7d:2a:e8:f4:8c:31:d7:3c:21:62:9e:87:24:95:5e: e4:1b:0e:dc:4d:b0:fc:9f:10:af:72:ab:f6:5f:dd: 68:85:39:8b:78:0c:89:ca:63:a8:4b:35:7a:4d:91: c5:38:5b:15:ab:93:b5:e4:0d:ab:57:12:bf:b3:1c: 0e:06:6d:a9:57:62:08:aa:63:07:11:dc:52:a4:30: 8d:48:62:63:bd:39:9f:93:11:d3:bc:55:64:22:48: e0:da:78:a2:12:a6:7f:24:3e:71:3c:0f:05:1e:8c: 21:c4:95:7b:26:f8:e2:32:0f:e8:c8:1c:a3:9f:56: a7:21:a4:22:fc:ed:5a:09:52:68:ca:8a:6a:f9:80: 86:d8:e1:d1:55:ab:fc:e1:77:90:dd:58:6b:92:fc: c0:36:d9:2d:4e:43:46:1b:3d:f5:47:1e:39:c7:fc: 54:a6:4b:f9:c0:d4:a9:96:de:d0:4c:f1:91:9a:74: 9f:b4:c7:ef:f6:14:22:60:70:09:6b:e5:b4:ac:48: a7:2c:36:99:0a:df:59:53:a9:de:2d:a6:d1:d0:4c: 69:b8:5d:32:45:63:d6:f9:b3:8c:91:f5:95:c8:7b: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:42:7E:F2:BA:D1:1C:10:56:1C:EF:3A:59:94:9C:15:E3:CA:12:23 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:77:50:c3:ef:90:d5:06:80:f0:e2:08:72:d9:a6:c4:7d:6b: de:5d:06:81:81:96:b7:f1:2a:d0:e3:af:2e:46:88:fe:a5:7b: 8e:ea:83:1a:48:c2:5b:b6:fc:7b:7f:7e:57:3b:1a:c0:04:7b: dd:65:ab:b1:02:52:a7:9d:64:bc:39:63:7e:dd:37:6f:33:ef: 97:c6:9b:6d:ee:04:33:62:bb:fd:59:a8:33:e5:52:c7:d9:e2: 4c:cf:3e:ff:d2:41:b5:be:09:fd:20:a4:32:83:b5:0b:a0:01: 87:94:f5:07:7a:ea:4a:d0:91:ed:7b:c9:c0:06:24:42:89:15: 92:86:b1:7a:49:9d:05:ce:e5:33:27:4c:f9:e4:ba:53:be:b0: 61:ba:1b:46:45:d3:c5:02:5b:80:d3:3f:01:6b:3e:d3:2e:b5: 2c:45:5e:bf:1b:a1:b0:37:66:8b:12:be:6f:91:5f:ae:39:19: 8e:57:6f:63:50:26:d4:ad:16:e9:1f:7b:10:86:21:e3:a3:d4: c4:8a:fd:bd:ab:c4:cf:81:03:bf:64:20:39:c9:70:e1:06:48: 27:7e:49:6f:59:84:a7:29:7a:d5:94:36:f7:e7:fe:ce:25:59: b6:8f:d8:8b:59:81:43:72:62:08:36:3c:4e:38:06:eb:a5:d1: 68:23:51:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjQwNTMwMjAzNTMxWhcNMjQwNjA2MjAzNTMxWjAYMRYwFAYD VQQDEw02NjU4ZTMxMy04YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h5khvFF/qQ5+mX6Fr71/EGToZJNR6MIFArlfd99Kuj0jDHXPCFinocklV7k Gw7cTbD8nxCvcqv2X91ohTmLeAyJymOoSzV6TZHFOFsVq5O15A2rVxK/sxwOBm2p V2IIqmMHEdxSpDCNSGJjvTmfkxHTvFVkIkjg2niiEqZ/JD5xPA8FHowhxJV7Jvji Mg/oyByjn1anIaQi/O1aCVJoyopq+YCG2OHRVav84XeQ3VhrkvzANtktTkNGGz31 Rx45x/xUpkv5wNSplt7QTPGRmnSftMfv9hQiYHAJa+W0rEinLDaZCt9ZU6neLabR 0ExpuF0yRWPW+bOMkfWVyHsrpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFCfvK6 0RwQVhzvOlmUnBXjyhIjMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7d1DD75DVBoDw4ghy2abEfWveXQaBgZa38SrQ468uRoj+pXuO6oMa SMJbtvx7f35XOxrABHvdZauxAlKnnWS8OWN+3TdvM++Xxptt7gQzYrv9Wagz5VLH 2eJMzz7/0kG1vgn9IKQyg7ULoAGHlPUHeupK0JHte8nABiRCiRWShrF6SZ0FzuUz J0z55LpTvrBhuhtGRdPFAluA0z8Baz7TLrUsRV6/G6GwN2aLEr5vkV+uORmOV29j UCbUrRbpH3sQhiHjo9TEiv29q8TPgQO/ZCA5yXDhBkgnfklvWYSnKXrVlDb35/7O JVm2j9iLWYFDcmIINjxOOAbrpdFoI1E1 -----END CERTIFICATE-----Generated at Thu May 30 21:49:27 2024 by rpki-client on console-ams.rpki-client.org