$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: 49sp+1AqI0RVXcgR4as4RQJPqOBUxlhiDqpea6tKHyY= Subject key identifier: A3:E7:F7:C6:D5:32:7E:CD:02:EF:71:97:67:E2:CF:A1:1B:AC:71:C2 Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 01B7 Signing time: Sun 19 May 2024 04:31:48 +0000 Manifest this update: Sun 19 May 2024 04:31:48 +0000 Manifest next update: Sun 26 May 2024 04:31:48 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: H1Bjf4UJ1MjCG3Uq0GkO5PiKfGQPU1blDxyiea3v7A4=) 2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: H7gFBfSKuVP6R/OmKqYC78WBb2LAqvaWDA0cY1eM3ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: May 19 04:31:48 2024 GMT Not After : May 26 04:31:48 2024 GMT Subject: CN=664980b4-ea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:26:d8:10:e7:37:0b:1b:09:5b:71:7d:fb: b1:df:8d:2d:73:53:f5:fc:10:15:cb:14:ba:20:45: 96:5f:f1:e7:00:37:82:48:d2:1c:a5:c0:b3:48:06: b9:73:5e:58:73:dc:e5:c7:66:5f:46:00:bf:7a:4c: 01:72:15:cd:bc:75:52:97:83:ca:46:60:34:48:5b: 8e:49:11:d6:21:a4:64:8c:6a:b2:62:fc:eb:2a:51: 46:58:0e:a0:3b:87:48:b4:10:c0:56:28:0e:2e:38: b4:69:62:a1:11:d6:0c:1c:28:99:4c:18:37:47:f8: 59:58:ca:9f:6c:fe:56:51:1a:d7:e2:bf:4b:cd:1d: 09:8c:6e:1e:12:80:af:bc:a1:30:98:b2:15:34:4c: d9:fe:56:fe:f3:81:9e:13:3f:e2:46:68:37:f2:f0: 1b:07:03:4d:00:7c:10:c1:50:ad:a2:d1:9a:58:92: 5e:3d:18:08:44:27:b2:01:05:9d:e8:b0:50:50:0b: b1:3b:02:14:d4:ed:9a:34:71:8a:a1:47:54:87:83: a3:22:be:3b:19:bd:8b:8a:96:a5:3d:ec:b0:c8:4b: 2d:95:b6:81:9a:3f:ef:cc:54:d8:fb:6a:4e:69:70: 2b:2e:3e:e4:fd:47:c9:b9:fe:05:3f:82:c5:48:4e: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E7:F7:C6:D5:32:7E:CD:02:EF:71:97:67:E2:CF:A1:1B:AC:71:C2 X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:53:50:10:75:ff:b6:ed:66:2c:d7:ec:35:9f:4f:a9:54:a5: 4e:ac:73:fa:fd:25:6a:ec:ad:ac:68:28:e3:c3:4e:63:ba:ba: 53:d4:6d:3e:7d:9a:91:fd:a2:18:01:32:c5:ad:22:0f:66:a5: 4d:f1:31:c5:32:8c:90:24:b6:28:b0:fd:1b:8d:71:3d:14:65: 68:ad:b7:b4:41:e9:fd:d5:9b:b5:9d:b5:d5:d7:51:7d:08:2b: b4:88:df:bd:ad:0b:20:5a:33:ef:9a:7c:44:58:e7:2f:26:e9: 28:54:8f:e2:dd:0e:45:c1:1d:56:fe:e7:b1:5a:5a:bb:72:ee: f6:de:7c:0f:c8:45:b8:23:3f:71:59:bc:33:a0:0c:1b:17:10: d5:8c:05:62:a8:7a:d9:77:91:dc:5d:1a:3c:3d:a7:f0:c5:57: 41:8b:21:13:fb:07:07:8f:67:50:d6:3e:9c:f5:3c:3e:0b:e1: e4:0b:70:a7:85:fd:fc:5b:54:d4:f8:a1:4d:05:ef:73:31:0c: c6:c8:eb:ca:9e:2a:1b:25:16:7f:53:0c:93:94:12:80:96:f9: 29:fb:b5:26:d7:73:86:2e:32:f0:9d:e4:86:73:77:fa:d1:6b: fa:bf:69:52:1e:85:dc:4e:b9:5b:e7:71:32:a6:ed:51:29:d6: 7d:9d:69:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjQwNTE5MDQzMTQ4WhcNMjQwNTI2MDQzMTQ4WjAYMRYwFAYD VQQDEw02NjQ5ODBiNC1lYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KMm2BDnNwsbCVtxffux340tc1P1/BAVyxS6IEWWX/HnADeCSNIcpcCzSAa5 c15Yc9zlx2ZfRgC/ekwBchXNvHVSl4PKRmA0SFuOSRHWIaRkjGqyYvzrKlFGWA6g O4dItBDAVigOLji0aWKhEdYMHCiZTBg3R/hZWMqfbP5WURrX4r9LzR0JjG4eEoCv vKEwmLIVNEzZ/lb+84GeEz/iRmg38vAbBwNNAHwQwVCtotGaWJJePRgIRCeyAQWd 6LBQUAuxOwIU1O2aNHGKoUdUh4OjIr47Gb2LipalPeywyEstlbaBmj/vzFTY+2pO aXArLj7k/UfJuf4FP4LFSE74CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPn98bV Mn7NAu9xl2fiz6EbrHHCMB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+U1AQdf+27WYs1+w1n0+pVKVOrHP6/SVq7K2saCjjw05jurpT1G0+ fZqR/aIYATLFrSIPZqVN8THFMoyQJLYosP0bjXE9FGVorbe0Qen91Zu1nbXV11F9 CCu0iN+9rQsgWjPvmnxEWOcvJukoVI/i3Q5FwR1W/uexWlq7cu723nwPyEW4Iz9x WbwzoAwbFxDVjAViqHrZd5HcXRo8PafwxVdBiyET+wcHj2dQ1j6c9Tw+C+HkC3Cn hf38W1TU+KFNBe9zMQzGyOvKniobJRZ/UwyTlBKAlvkp+7Um13OGLjLwneSGc3f6 0Wv6v2lSHoXcTrlb53Eypu1RKdZ9nWlh -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org