$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: jcP209SFyfkYb0CwgcainqbhEPPyij1kU6Q4un6NvYE= Subject key identifier: 0D:5E:1B:5C:53:3A:7B:3C:4D:C1:7E:B3:F7:DC:D9:C2:62:8C:CE:87 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: 13 Signing time: Sun 19 May 2024 08:48:33 +0000 Manifest this update: Sun 19 May 2024 08:48:33 +0000 Manifest next update: Sun 26 May 2024 08:48:33 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: RxO+ugRjNjvldECgx5cj9SyUs2g8ql31P1rtew2Za7s=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: BGOd98PUeVhCajtNKxl03gfnN9UakYRrbRlF2SGG5p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: May 19 08:48:33 2024 GMT Not After : May 26 08:48:33 2024 GMT Subject: CN=6649bce1-6ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:39:9d:7c:b6:56:c3:3b:30:f6:21:82:03: 40:97:4d:c7:bd:8e:ff:d4:ba:fc:03:8e:33:64:cb: bc:58:e7:ad:a1:87:26:b1:1c:43:16:a6:d8:b9:78: fa:a6:01:b9:ab:c3:f9:11:e4:e3:27:20:5c:f4:98: b5:46:13:8a:37:20:1b:c7:4e:85:ba:46:4f:f5:78: ec:d4:ea:1a:2e:62:46:0e:4b:e3:bc:01:8e:fd:19: cd:82:af:76:8d:b3:1f:33:df:6a:fd:db:1f:b3:11: a3:51:a5:9d:e7:84:b1:0d:d0:00:38:93:03:df:ce: 0b:c3:74:65:f3:68:6d:de:58:55:b9:27:8d:44:41: 18:39:6d:67:7c:d1:aa:a6:58:77:58:e8:7e:45:c4: d8:09:29:2f:60:4c:a4:69:be:da:8a:87:73:5a:4c: 16:ce:3f:dd:3d:8b:2f:16:38:55:e0:5c:ab:33:30: 1c:35:ce:93:d7:dd:24:26:48:23:d9:30:3d:e9:56: dc:6a:41:7d:7d:5f:93:91:72:37:87:ab:3a:f7:db: 42:66:46:9c:75:0f:65:50:bd:1f:76:01:9a:4a:84: 38:2f:14:ff:ad:b5:5b:cf:20:81:61:b9:6a:c9:ae: c7:5d:ff:5e:36:b7:c1:43:09:12:5c:d0:a5:0f:29: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5E:1B:5C:53:3A:7B:3C:4D:C1:7E:B3:F7:DC:D9:C2:62:8C:CE:87 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:a9:8f:ab:4a:ad:ab:63:b7:a5:87:5f:fa:91:91:9e:d2: 4b:92:d9:d4:3e:0c:88:38:79:ff:be:c9:21:dd:e4:65:0d:6c: 4c:7c:f6:69:f3:50:ce:63:ba:26:77:c2:51:f2:51:cc:a8:d5: fe:43:40:16:76:c6:03:34:01:18:0f:49:11:dc:b2:7c:34:23: e9:a0:99:d6:6e:32:7d:6c:32:6a:e0:19:2d:5c:6b:bf:44:fd: 18:49:aa:c1:f2:4e:5c:a5:1a:81:ec:38:1a:1b:c8:20:c2:28: 57:c5:d6:d0:d8:a1:97:e0:70:62:3e:94:b5:25:0b:1b:18:00: 33:bb:3f:44:98:be:59:c5:7d:87:7b:8a:b1:f8:22:fc:9d:5f: cf:13:b1:1c:08:3f:a4:45:76:69:45:bf:56:66:74:68:50:d8: 74:5b:56:3c:09:0f:c2:b0:ee:0f:f9:c0:8d:15:bb:70:c3:8a: 23:42:3e:f7:58:22:36:07:cd:82:49:f0:21:d3:83:e3:7f:2a: e3:df:fb:6f:ee:15:98:4b:aa:f7:25:cc:25:69:9a:86:bc:29: 1b:1b:11:60:ca:0f:a6:1f:73:a9:7a:c4:10:24:f2:36:24:d8: b1:b0:cd:4e:5e:e5:b6:4c:66:87:b8:c7:cf:70:c5:4e:7c:2f: 7f:5f:54:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTk4NzExMC8GA1UEBRMoQjA2MUJDNDhBMTQ0MTAwMEFCRUI4QzQ0OEEwOUYxOTVG OTEzOUUxQTAeFw0yNDA1MTkwODQ4MzNaFw0yNDA1MjYwODQ4MzNaMBgxFjAUBgNV BAMTDTY2NDliY2UxLTZhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHvDmdfLZWwzsw9iGCA0CXTce9jv/UuvwDjjNky7xY562hhyaxHEMWpti5ePqm Abmrw/kR5OMnIFz0mLVGE4o3IBvHToW6Rk/1eOzU6houYkYOS+O8AY79Gc2Cr3aN sx8z32r92x+zEaNRpZ3nhLEN0AA4kwPfzgvDdGXzaG3eWFW5J41EQRg5bWd80aqm WHdY6H5FxNgJKS9gTKRpvtqKh3NaTBbOP909iy8WOFXgXKszMBw1zpPX3SQmSCPZ MD3pVtxqQX19X5ORcjeHqzr320JmRpx1D2VQvR92AZpKhDgvFP+ttVvPIIFhuWrJ rsdd/142t8FDCRJc0KUPKScTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDV4bXFM6 ezxNwX6z99zZwmKMzocwHwYDVR0jBBgwFoAUsGG8SKFEEACr64xEignxlfkTnhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5OTg3L0YwRkE0RkE2RkMy MjExRUU4QkJGRUM2QUM0RjlBRTAyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5o by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0dHOFNLRkVFQUNyNjR4RWlnbnhsZmtUbmhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 OTg3L0YwRkE0RkE2RkMyMjExRUU4QkJGRUM2QUM0RjlBRTAyL3NHRzhTS0ZFRUFD cjY0eEVpZ254bGZrVG5oby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwHqY+rSq2rY7elh1/6kZGe0kuS2dQ+DIg4ef++ySHd5GUNbEx89mnz UM5juiZ3wlHyUcyo1f5DQBZ2xgM0ARgPSRHcsnw0I+mgmdZuMn1sMmrgGS1ca79E /RhJqsHyTlylGoHsOBobyCDCKFfF1tDYoZfgcGI+lLUlCxsYADO7P0SYvlnFfYd7 irH4IvydX88TsRwIP6RFdmlFv1ZmdGhQ2HRbVjwJD8Kw7g/5wI0Vu3DDiiNCPvdY IjYHzYJJ8CHTg+N/KuPf+2/uFZhLqvclzCVpmoa8KRsbEWDKD6Yfc6l6xBAk8jYk 2LGwzU5e5bZMZoe4x89wxU58L39fVK8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org