$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: RMyDRVXF6BnHTB08939wCzBj7aheW9YfIPsZ7v385Gs= Subject key identifier: C2:78:E4:29:36:18:C2:D8:45:51:CF:38:C9:33:8B:52:F5:89:8F:E3 Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: E8 Signing time: Sun 19 May 2024 05:50:13 +0000 Manifest this update: Sun 19 May 2024 05:50:12 +0000 Manifest next update: Sun 26 May 2024 05:50:12 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: UEtTXiwIK0ILl/EARS8XbIQl+P6iL1UzZT8HVbcL/uY=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: 9pZw51RMY8f+N/Au2Y/vvtY+MBxGFT8ZPDNyzQSdAP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: May 19 05:50:12 2024 GMT Not After : May 26 05:50:12 2024 GMT Subject: CN=66499315-68f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:2a:50:e4:5b:ec:97:be:17:f8:c2:80:19: 38:a3:54:e4:a8:1b:10:2c:9f:1b:37:6e:95:47:8b: d3:ad:7c:46:8b:45:24:d4:ae:eb:af:75:10:f9:9a: e0:54:b2:d5:ae:4a:6f:7b:0a:90:2d:14:91:88:46: 1c:6f:19:0d:67:41:82:39:41:5b:16:da:71:87:61: b9:93:47:f9:8c:a0:27:25:29:70:27:72:69:5c:fa: a7:17:70:8c:b3:ee:67:c9:48:f9:af:c4:c2:d5:59: 2c:2a:10:23:7b:d2:ed:78:a1:5a:b1:fc:ac:c4:bc: 88:b7:a1:ef:fb:49:60:e1:9d:87:fe:44:69:02:a6: 48:19:3e:ad:56:68:bf:42:34:6e:29:b5:ea:63:f6: 15:28:4c:30:aa:76:0e:24:80:c3:8a:0e:ed:14:82: 33:d7:ee:f4:f8:eb:c6:51:1f:d5:b1:cb:ba:41:d3: d6:71:a1:17:bd:34:1e:b9:58:2b:53:d6:87:b5:b8: 52:db:ce:13:7d:31:b5:1b:08:42:fd:5d:9b:c0:6b: bc:89:11:7d:73:24:8a:64:d6:e6:b6:60:c3:fe:c8: 60:d6:cc:cf:50:da:0f:1a:12:15:d7:e7:b2:6c:58: bd:ff:cf:5b:8d:e8:44:ac:5c:c7:67:6b:06:1c:51: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:E4:29:36:18:C2:D8:45:51:CF:38:C9:33:8B:52:F5:89:8F:E3 X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ce:28:28:a8:b7:af:6e:b8:ba:85:60:2c:f4:f0:14:3c:8e: a8:ec:c7:cd:d4:b0:88:ea:45:e6:f7:50:d0:62:11:7d:65:05: c3:2c:4f:db:0e:0a:1e:12:c0:79:dc:42:da:ab:3f:47:12:07: dd:41:f4:22:e9:bc:fa:e1:21:f7:70:c3:d0:e3:74:50:87:db: 29:e8:c8:1a:3e:d0:0a:0f:da:47:4c:64:3d:f3:f9:ee:e3:ec: 2b:d4:c6:6e:26:d2:68:8f:73:13:28:0e:1b:50:77:d3:f3:ae: 58:be:6a:04:49:b1:ad:98:b3:74:77:9a:05:b0:2f:dd:47:6d: ce:8d:76:af:32:9c:9e:ea:29:a8:30:19:1e:a4:e8:b9:4b:c0: e4:2d:1e:f4:ef:15:be:ab:7a:55:28:30:6b:64:c1:33:00:a6: b0:fb:83:8d:e6:f0:1d:bc:a0:db:0d:fe:67:81:17:46:0d:89: 20:d7:8e:e9:8d:c6:5e:53:2c:81:7f:9d:94:25:f3:9c:5e:5b: 56:bd:a8:f6:dc:0c:ea:ed:f9:a3:43:32:0f:d4:e7:ad:a4:2a: e5:09:94:a0:53:4b:02:b5:b9:8e:d8:39:1a:df:e8:d7:68:e7: c0:fb:8a:e8:40:1c:dd:5a:3b:dc:61:91:2a:00:c0:37:cf:87: df:da:f2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjQwNTE5MDU1MDEyWhcNMjQwNTI2MDU1MDEyWjAYMRYwFAYD VQQDEw02NjQ5OTMxNS02OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1msqUORb7Je+F/jCgBk4o1TkqBsQLJ8bN26VR4vTrXxGi0Uk1K7rr3UQ+Zrg VLLVrkpvewqQLRSRiEYcbxkNZ0GCOUFbFtpxh2G5k0f5jKAnJSlwJ3JpXPqnF3CM s+5nyUj5r8TC1VksKhAje9LteKFasfysxLyIt6Hv+0lg4Z2H/kRpAqZIGT6tVmi/ QjRuKbXqY/YVKEwwqnYOJIDDig7tFIIz1+70+OvGUR/Vscu6QdPWcaEXvTQeuVgr U9aHtbhS284TfTG1GwhC/V2bwGu8iRF9cySKZNbmtmDD/shg1szPUNoPGhIV1+ey bFi9/89bjehErFzHZ2sGHFHZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ45Ck2 GMLYRVHPOMkzi1L1iY/jMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZzigoqLevbri6hWAs9PAUPI6o7MfN1LCI6kXm91DQYhF9ZQXDLE/b DgoeEsB53ELaqz9HEgfdQfQi6bz64SH3cMPQ43RQh9sp6MgaPtAKD9pHTGQ98/nu 4+wr1MZuJtJoj3MTKA4bUHfT865YvmoESbGtmLN0d5oFsC/dR23OjXavMpye6imo MBkepOi5S8DkLR707xW+q3pVKDBrZMEzAKaw+4ON5vAdvKDbDf5ngRdGDYkg147p jcZeUyyBf52UJfOcXltWvaj23Azq7fmjQzIP1OetpCrlCZSgU0sCtbmO2Dka3+jX aOfA+4roQBzdWjvcYZEqAMA3z4ff2vJ2 -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org