$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: jGxcX1Fg1TAgqICt3v5pjA6QI9f33FzbBr9GRbEc1h8= Subject key identifier: D2:94:4C:FC:18:FF:5F:42:3A:46:C6:8B:44:72:F0:5A:C9:18:23:55 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: 11 Signing time: Sun 19 May 2024 08:50:18 +0000 Manifest this update: Sun 19 May 2024 08:50:18 +0000 Manifest next update: Sun 26 May 2024 08:50:18 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: yGkmTGMYkJZkx6dAB48kp6Zp1iC35Ca6lUVxVXqOC3M=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: May 19 08:50:18 2024 GMT Not After : May 26 08:50:18 2024 GMT Subject: CN=6649bd4a-1179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5d:6e:49:81:45:0d:4f:e4:8e:ed:d7:6b:ee: b0:6b:9f:8f:81:4f:95:b0:d1:a3:50:5e:ce:68:00: 6c:b5:e5:cc:ef:db:99:07:3d:90:c2:6b:62:55:db: 1c:4a:cc:44:86:9b:f9:1d:f1:58:4f:5c:8a:3d:a1: 3d:73:da:72:96:72:c6:79:78:67:2c:65:d7:49:68: 17:44:3b:3c:f5:23:94:ea:25:6e:a6:53:f8:da:61: 7e:0b:5c:46:a7:24:0f:0b:04:d3:ec:77:af:f4:6f: 32:2f:3a:b9:1e:4f:b0:ee:86:e4:b0:bb:8a:11:ce: 76:ff:06:63:66:69:6f:23:06:2d:07:0b:7c:d3:d6: 4b:98:cd:5c:1a:8e:9d:f9:4c:3e:6a:36:3a:03:3e: 38:b3:3e:ef:c7:67:60:8a:a7:af:20:e4:c9:ac:fb: cf:0d:8a:76:82:c2:67:e2:5e:42:10:7a:e4:81:b4: ed:2d:ab:d2:b0:a1:86:c4:34:64:35:6d:c0:ae:f4: d2:c9:af:e4:e3:86:76:a4:c8:33:8f:23:4e:bc:9e: bb:69:30:e6:40:7a:a4:0f:91:16:3f:de:97:d9:00: de:e2:f8:33:f8:bd:87:9c:e0:7d:1f:31:e2:f4:10: b1:95:7a:11:e5:97:17:65:03:7a:98:0f:99:75:b9: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:4C:FC:18:FF:5F:42:3A:46:C6:8B:44:72:F0:5A:C9:18:23:55 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:71:47:fe:75:52:3e:0e:6d:72:0f:90:79:77:b4:e2:02:cc: 1b:1a:ff:82:0b:02:79:31:82:a4:8b:41:e1:10:f7:d2:2f:95: d1:b0:b3:31:b0:e7:0d:93:c5:6f:19:a8:08:02:20:88:69:a9: f3:a1:59:92:25:8c:ad:50:c2:1e:a2:b3:d8:57:8e:a1:a8:c9: d7:31:aa:24:d3:83:5e:67:41:e1:99:3f:37:43:4b:ed:af:40: d5:a9:b0:19:00:ac:f6:d4:f0:e9:d5:53:33:47:5c:64:7f:a5: 92:b0:3d:29:bb:85:e0:ba:a9:06:c5:f5:c4:ae:0a:90:80:58: ff:38:11:4f:84:07:31:02:f1:e7:67:67:b5:38:4b:18:91:84: e1:a7:25:22:8e:a8:d1:97:e8:59:64:b9:a6:04:df:d2:0b:62: 56:ab:c8:1d:1f:63:a0:52:be:fd:fc:97:68:7e:3a:4f:36:53: 95:a8:9d:c9:23:ef:74:87:8d:e0:ae:3b:e3:72:44:7e:5a:10: 62:44:db:0e:02:a4:9a:b9:eb:a1:97:1e:01:e7:d2:f3:42:9f: 55:29:62:e5:24:4b:d2:b1:18:a7:08:5b:f0:ea:39:07:d0:9f: c0:ab:36:16:b9:f6:5a:94:94:50:f8:e9:fd:ad:1d:3e:1c:28: 53:1e:ad:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkE0ODExMC8GA1UEBRMoMTk3OTRGM0NBQTM3NTUyN0JBMEZEMzM0NDgwQzdFMDMz OEU3OUUyQTAeFw0yNDA1MTkwODUwMThaFw0yNDA1MjYwODUwMThaMBgxFjAUBgNV BAMTDTY2NDliZDRhLTExNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyXW5JgUUNT+SO7ddr7rBrn4+BT5Ww0aNQXs5oAGy15czv25kHPZDCa2JV2xxK zESGm/kd8VhPXIo9oT1z2nKWcsZ5eGcsZddJaBdEOzz1I5TqJW6mU/jaYX4LXEan JA8LBNPsd6/0bzIvOrkeT7DuhuSwu4oRznb/BmNmaW8jBi0HC3zT1kuYzVwajp35 TD5qNjoDPjizPu/HZ2CKp68g5Mms+88NinaCwmfiXkIQeuSBtO0tq9KwoYbENGQ1 bcCu9NLJr+TjhnakyDOPI068nrtpMOZAeqQPkRY/3pfZAN7i+DP4vYec4H0fMeL0 ELGVehHllxdlA3qYD5l1uT3BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0pRM/Bj/ X0I6RsaLRHLwWskYI1UwHwYDVR0jBBgwFoAUGXlPPKo3VSe6D9M0SAx+Azjnniow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTQ4L0I5RTJBQ0EwRkU1 NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5p by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1hsUFBLbzNWU2U2RDlNMFNBeC1BempubmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG QTQ4L0I5RTJBQ0EwRkU1NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNl NkQ5TTBTQXgtQXpqbm5pby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGNxR/51Uj4ObXIPkHl3tOICzBsa/4ILAnkxgqSLQeEQ99IvldGwszGw 5w2TxW8ZqAgCIIhpqfOhWZIljK1Qwh6is9hXjqGoydcxqiTTg15nQeGZPzdDS+2v QNWpsBkArPbU8OnVUzNHXGR/pZKwPSm7heC6qQbF9cSuCpCAWP84EU+EBzEC8edn Z7U4SxiRhOGnJSKOqNGX6FlkuaYE39ILYlaryB0fY6BSvv38l2h+Ok82U5Wonckj 73SHjeCuO+NyRH5aEGJE2w4CpJq566GXHgHn0vNCn1UpYuUkS9KxGKcIW/DqOQfQ n8CrNha59lqUlFD46f2tHT4cKFMerdM= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org