$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: 0vlCAIe8y7QpP8/Kpz1JENndOSe/kr+4+v3oeJgH5Kw= Subject key identifier: E5:D8:4B:74:CA:37:7A:66:7C:D5:53:88:B8:07:02:D4:BD:D5:31:D0 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 0316 Signing time: Sun 19 May 2024 03:09:01 +0000 Manifest this update: Sun 19 May 2024 03:09:01 +0000 Manifest next update: Sun 26 May 2024 03:09:01 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: QwXSSgDMW46f5KkmPlHl+nYQETOF/hPM/2ntDyeHHbk=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: 1bNj00utl01JZwmdk6t3gkdScIvjc34rDYPrm1BEcP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: May 19 03:09:01 2024 GMT Not After : May 26 03:09:01 2024 GMT Subject: CN=66496d4d-d725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:2f:57:5d:84:b5:c3:f7:57:c0:59:60:c7: 14:15:eb:03:81:26:20:59:a3:60:f8:f6:78:68:47: 20:36:46:49:46:df:c9:1b:56:8a:60:0f:1b:d4:21: 4d:78:d4:21:04:3b:f8:9b:e9:9c:c3:8e:72:85:03: 2b:20:f2:b6:19:76:6b:86:5e:ec:1b:1d:f0:58:4e: d7:93:c8:58:13:87:cf:68:ac:b7:17:e3:db:65:09: ab:25:78:43:78:3a:93:e8:e8:05:30:e5:f6:12:5e: 08:34:7a:21:d4:2c:32:b5:cb:0a:46:dc:f1:25:97: 15:6f:1b:a2:aa:88:60:50:ef:1a:55:85:18:4f:15: 6a:25:55:bd:47:f7:fd:93:80:96:bf:fe:52:9c:f2: 4d:c4:b6:85:38:b0:fd:5a:a4:3d:c5:09:c9:6a:13: 78:6f:88:5d:d7:f4:63:32:91:5a:24:02:11:3a:d7: e1:eb:0e:f0:e5:9d:79:28:9d:35:77:d4:4c:f5:da: ac:32:8c:3b:25:55:0a:1f:c2:d8:a0:ec:ed:15:35: 44:31:2d:79:3f:c9:dd:e1:b0:aa:e5:b7:42:61:72: ac:d6:d5:45:db:3e:a2:b9:9c:c0:d6:fd:27:f1:3b: c9:12:e1:a6:f5:20:9a:a5:47:14:0e:4d:19:1b:19: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D8:4B:74:CA:37:7A:66:7C:D5:53:88:B8:07:02:D4:BD:D5:31:D0 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c3:f7:81:58:8c:ab:b9:cb:0e:15:07:f6:bc:70:62:c7:9a: c8:30:49:45:2f:33:05:ec:8a:00:8d:24:3a:2b:b0:84:d8:d1: 24:c7:5d:07:4f:31:28:62:aa:d5:3d:ca:2f:f2:74:8a:1a:d0: 56:32:b2:43:8d:f8:d4:84:e0:7b:75:b9:71:6d:93:48:3d:5c: 1f:49:35:99:da:d4:d0:10:6c:69:fa:61:31:0f:84:80:c2:ff: 53:32:b8:1c:00:f5:24:05:c9:a1:96:97:1c:bf:5f:dc:00:c0: e7:73:17:70:eb:6f:96:35:c1:c2:bb:a2:b9:7d:fa:49:17:66: a5:c3:73:0c:ad:6b:4f:32:5f:ac:79:f0:19:d6:24:35:79:43: ae:0c:36:16:ae:7d:9d:11:af:21:3d:ae:aa:de:8e:08:dc:58: 2b:33:3b:0a:93:d5:09:cd:2a:c7:5e:80:ee:fe:25:bd:f8:71: d7:7e:b2:a7:67:cc:02:cc:ba:3c:1e:c8:09:c5:c9:19:ce:39: ab:ec:63:2e:6d:47:22:c8:9a:aa:92:db:92:81:fb:e2:5e:30: 64:07:23:7f:98:74:de:34:b6:9a:5b:4d:c3:e6:8e:f6:41:95: 1f:6a:1f:0b:b6:9d:c4:b7:6e:e4:70:d0:24:0a:07:99:97:5d: a1:ec:64:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjQwNTE5MDMwOTAxWhcNMjQwNTI2MDMwOTAxWjAYMRYwFAYD VQQDEw02NjQ5NmQ0ZC1kNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39QvV12EtcP3V8BZYMcUFesDgSYgWaNg+PZ4aEcgNkZJRt/JG1aKYA8b1CFN eNQhBDv4m+mcw45yhQMrIPK2GXZrhl7sGx3wWE7Xk8hYE4fPaKy3F+PbZQmrJXhD eDqT6OgFMOX2El4INHoh1CwytcsKRtzxJZcVbxuiqohgUO8aVYUYTxVqJVW9R/f9 k4CWv/5SnPJNxLaFOLD9WqQ9xQnJahN4b4hd1/RjMpFaJAIROtfh6w7w5Z15KJ01 d9RM9dqsMow7JVUKH8LYoOztFTVEMS15P8nd4bCq5bdCYXKs1tVF2z6iuZzA1v0n 8TvJEuGm9SCapUcUDk0ZGxk0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXYS3TK N3pmfNVTiLgHAtS91THQMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaw/eBWIyrucsOFQf2vHBix5rIMElFLzMF7IoAjSQ6K7CE2NEkx10H TzEoYqrVPcov8nSKGtBWMrJDjfjUhOB7dblxbZNIPVwfSTWZ2tTQEGxp+mExD4SA wv9TMrgcAPUkBcmhlpccv1/cAMDncxdw62+WNcHCu6K5ffpJF2alw3MMrWtPMl+s efAZ1iQ1eUOuDDYWrn2dEa8hPa6q3o4I3FgrMzsKk9UJzSrHXoDu/iW9+HHXfrKn Z8wCzLo8HsgJxckZzjmr7GMubUciyJqqktuSgfviXjBkByN/mHTeNLaaW03D5o72 QZUfah8Ltp3Et27kcNAkCgeZl12h7GRf -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org