$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft File: gUKKAcUWkeeoxdhD7Lax09muQk4.mft (raw, json) Hash identifier: Tv1aF168O8OgsOxGKv/27JN5FniTvy54vwDNPpkwJqE= Subject key identifier: FD:7A:80:B9:C4:C9:58:A0:DD:C3:0A:4B:06:A2:1F:89:AD:2B:47:FC Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Certificate serial: 0B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft Manifest number: 0B26 Signing time: Thu 02 May 2024 20:03:10 +0000 Manifest this update: Thu 02 May 2024 20:03:10 +0000 Manifest next update: Thu 09 May 2024 20:03:10 +0000 Files and hashes: 1: gUKKAcUWkeeoxdhD7Lax09muQk4.crl (hash: bn3RMH0TLAM46ozOX0XZ+xg99IaaY6WkGUEdpU/ae1o=) 2: 1DA7074E94AC11EE9DC7D24AC4F9AE02.roa (hash: p/1tF2/ilvemUOVEPtMudUJxCOZQyGRW0Ck2u46HSpo=) 3: 81EB4A8E47A911EA80B8633AC4F9AE02.roa (hash: G5Ak8TX3+eeBzOkbzLop/v8HwMO/hdELq8urNXz/RJs=) 4: 220BB95647A811EAB74E6635C4F9AE02.roa (hash: xzTGNm+bjyicQUIZ4sTnQPbZ0kR33wMzQnPtwHu4444=) 5: D8F9E264CA3D11EBA982F140C4F9AE02.roa (hash: TeiHm+tWOZxJ0BwaFMPGNNwylndpfoYPBBWK0VrgKyI=) 6: 1E8E348E94AC11EE9DC7D24AC4F9AE02.roa (hash: u/c9m2EvxXRq1q/Pb9LaUIktNo1bXTmNZnS1p4xkJio=) 7: 20F4644647A811EAB74E6635C4F9AE02.roa (hash: WV0iaT4o4mWVunpYKv9lK4g2zUj7MAoL1rXYJ9vhunc=) 8: 38C200523FFE11EB9AE7EE80C4F9AE02.roa (hash: dyQhki+SNLmRg+AAVTc90r70ss3AX+2HiGAnGYOMrmY=) 9: 37988C283FFE11EB9AE7EE80C4F9AE02.roa (hash: 8/lD/Au1/YW1CflKA22bOBOMBwKpdkUGD3WKmGIPAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Validity Not Before: May 2 20:03:10 2024 GMT Not After : May 9 20:03:10 2024 GMT Subject: CN=6633f17e-341b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:18:d9:0d:31:ce:23:c9:a8:e3:4d:42:c7: 25:c9:11:ed:ee:21:dd:46:66:8a:d5:19:f7:69:6c: 4d:89:eb:df:99:66:ad:1a:18:e4:83:be:a3:ce:b3: 48:3f:07:82:49:cc:d1:af:d7:0b:2d:c6:04:0f:4e: c0:f2:55:99:a9:29:59:64:18:7c:27:05:ee:06:bb: 4d:f9:9b:e5:cd:66:33:99:98:18:78:3a:f5:4a:3d: cd:d0:81:67:6c:85:f0:26:16:c2:02:93:2c:26:ad: e8:78:1a:15:4a:5e:08:cd:46:45:bd:79:16:2a:56: 87:a9:13:ca:bf:eb:aa:b7:38:b2:1d:cb:e5:fe:a6: 86:3f:86:6c:cc:9b:db:73:0d:55:fa:34:8c:8e:5c: f8:a2:36:37:9f:e4:56:d4:8c:bd:da:dc:13:00:96: f4:da:42:a2:f4:6c:c7:f2:a6:4a:b3:35:04:2e:00: e7:23:16:36:8f:fb:96:38:8f:73:1a:5f:0e:04:53: 0a:de:3d:84:ad:ea:3b:d0:00:36:98:d1:5a:57:f5: 12:fa:93:f8:ee:76:bc:be:77:58:70:5d:9c:a4:16: 81:27:85:5b:9f:74:ac:32:8f:b7:d7:d6:ba:93:df: 18:21:bb:ef:b7:ae:85:84:b4:f5:5b:0a:2b:2b:18: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7A:80:B9:C4:C9:58:A0:DD:C3:0A:4B:06:A2:1F:89:AD:2B:47:FC X509v3 Authority Key Identifier: keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:2c:f0:ed:1d:79:77:07:fb:d6:78:67:61:1e:e0:0e:39: 2e:57:b7:2a:d0:be:90:19:92:4a:b4:7c:d5:31:47:98:84:dc: c7:27:d0:1b:7b:67:09:2d:5c:ff:d0:25:63:47:fd:8e:60:6b: cc:3d:72:69:a6:73:f1:5f:c6:04:2a:57:1b:57:bf:04:68:67: cc:41:82:86:54:0d:03:df:aa:7a:83:e9:96:10:aa:d6:47:9b: 9a:4b:4d:8d:fc:c1:b5:c5:97:14:ca:a7:00:76:8a:29:ac:25: d9:74:89:04:53:c9:ac:ad:75:a8:8e:6c:c6:2d:34:35:5b:87: cb:37:26:9d:63:d0:03:2e:8f:db:aa:d6:33:8a:1e:0d:98:bd: e4:01:65:d2:ae:be:2b:bf:7e:bc:65:ea:76:9c:e7:97:48:23: 75:e2:1d:9b:6f:f5:14:ed:fa:a3:5c:b2:f4:20:62:2e:82:0f: e5:c2:0a:d0:5f:71:83:b4:3c:0a:ea:14:56:35:48:60:f4:f4: 97:ae:a5:31:c5:79:c0:0d:43:3c:ce:67:4c:4d:cf:2d:0f:14: e7:bc:8b:bf:d3:58:0b:b6:6c:5f:03:a5:76:58:1c:78:59:e2: c3:03:6b:69:40:d1:45:e0:df:de:dd:60:94:d0:67:5e:4d:4e: dc:e9:a0:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJGNTIxMTAvBgNVBAUTKDgxNDI4QTAxQzUxNjkxRTdBOEM1RDg0M0VDQjZCMUQz RDlBRTQyNEUwHhcNMjQwNTAyMjAwMzEwWhcNMjQwNTA5MjAwMzEwWjAYMRYwFAYD VQQDEw02NjMzZjE3ZS0zNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVsY2Q0xziPJqONNQsclyRHt7iHdRmaK1Rn3aWxNievfmWatGhjkg76jzrNI PweCSczRr9cLLcYED07A8lWZqSlZZBh8JwXuBrtN+ZvlzWYzmZgYeDr1Sj3N0IFn bIXwJhbCApMsJq3oeBoVSl4IzUZFvXkWKlaHqRPKv+uqtziyHcvl/qaGP4ZszJvb cw1V+jSMjlz4ojY3n+RW1Iy92twTAJb02kKi9GzH8qZKszUELgDnIxY2j/uWOI9z Gl8OBFMK3j2Ereo70AA2mNFaV/US+pP47na8vndYcF2cpBaBJ4Vbn3SsMo+319a6 k98YIbvvt66FhLT1WworKxgdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP16gLnE yVig3cMKSwaiH4mtK0f8MB8GA1UdIwQYMBaAFIFCigHFFpHnqMXYQ+y2sdPZrkJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkY1Mi84OEVCQ0ZEQzFE NDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tlZW94ZGhEN0xheDA5bXVR azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVS0tBY1VXa2Vlb3hkaEQ3TGF4MDltdVFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkY1Mi84OEVCQ0ZEQzFENDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tl ZW94ZGhEN0xheDA5bXVRazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1yzw7R15dwf71nhnYR7gDjkuV7cq0L6QGZJKtHzVMUeYhNzHJ9Ab e2cJLVz/0CVjR/2OYGvMPXJppnPxX8YEKlcbV78EaGfMQYKGVA0D36p6g+mWEKrW R5uaS02N/MG1xZcUyqcAdooprCXZdIkEU8msrXWojmzGLTQ1W4fLNyadY9ADLo/b qtYzih4NmL3kAWXSrr4rv368Zep2nOeXSCN14h2bb/UU7fqjXLL0IGIugg/lwgrQ X3GDtDwK6hRWNUhg9PSXrqUxxXnADUM8zmdMTc8tDxTnvIu/01gLtmxfA6V2WBx4 WeLDA2tpQNFF4N/e3WCU0GdeTU7c6aDU -----END CERTIFICATE-----Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org