$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft File: gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json) Hash identifier: Qi5JUy0AUGyP6p1Y8obKco/vc8CZP1fqa4ZsxPCtjBM= Subject key identifier: B1:6E:C5:0A:7D:EF:7A:62:BE:66:48:EE:08:CE:19:98:09:80:91:85 Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88 Certificate issuer: /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft Manifest number: 0499 Signing time: Sun 19 May 2024 01:35:17 +0000 Manifest this update: Sun 19 May 2024 01:35:17 +0000 Manifest next update: Sun 26 May 2024 01:35:17 +0000 Files and hashes: 1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: Srd6in8d3bYXFJ/gWa3zId3+969aYyT/AI+xpwv+Zws=) 2: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: h42qy5TQroXCH9xLmGazsIgcWrGIwp/6nGKvDVykOx0=) 3: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: RVkiqV7MRqC0U6mkN+vNh20U5JgvPkFLHzROcSU7tCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88 Validity Not Before: May 19 01:35:17 2024 GMT Not After : May 26 01:35:17 2024 GMT Subject: CN=66495755-e85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:17:9f:05:34:7b:73:25:c5:4d:2e:2b:12:3e: ef:78:24:cb:4f:f7:69:78:42:22:81:6c:02:fa:18: ee:da:1d:b8:11:63:e5:54:72:f0:9a:58:4c:12:dd: 9e:5f:da:6b:cb:1f:cb:53:60:2d:65:f9:80:c4:74: de:e4:fb:0d:93:86:a4:6a:5e:26:8e:5d:5a:78:fb: 36:c8:b5:23:15:4c:2c:84:ef:18:4c:cd:9e:00:9e: 5e:da:ad:17:7a:46:3a:96:d2:ec:f8:f8:5b:9a:ec: e3:ed:5f:d5:e0:88:0a:7a:d3:40:ef:a7:8f:8d:e7: b4:8f:da:e6:db:b9:ca:f1:9b:c3:2b:78:1c:51:df: 3c:9b:4c:8f:96:26:1a:94:36:e8:fc:dd:ff:1a:e3: 54:b0:e0:49:9f:b4:a1:45:d2:4c:ea:76:73:42:7a: 0d:6a:6f:fc:ab:c9:19:d0:04:ef:21:bf:ec:08:a8: 27:e6:3a:a6:6e:de:c8:fd:a6:61:4e:86:ac:d3:f4: 83:4f:8b:26:ec:a9:d0:eb:0d:23:59:2e:89:2f:0e: 51:95:59:99:8c:db:70:ef:f2:b7:c7:11:b6:46:4a: 05:f6:31:4f:a2:a5:61:ac:19:a8:e2:b3:fe:48:aa: 59:78:af:8d:0d:2c:d0:66:91:51:6d:c5:09:1c:37: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6E:C5:0A:7D:EF:7A:62:BE:66:48:EE:08:CE:19:98:09:80:91:85 X509v3 Authority Key Identifier: keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:07:9c:fb:0d:50:6c:2d:ec:08:b5:c7:df:c3:31:0b:76:d7: ed:e1:62:7f:3a:83:67:99:e3:3b:b6:52:49:e2:6b:9c:48:a2: 91:a9:37:5b:d5:ea:4d:25:f0:e7:9e:f7:59:bd:24:ca:40:0c: 36:10:fa:0c:ba:37:a8:3e:4d:da:42:48:b8:fe:02:8f:96:79: 05:69:72:49:1c:9a:ef:73:aa:3d:f4:1b:6d:42:4f:18:00:b8: a5:b7:fd:79:ef:88:3c:0d:7a:bb:d9:32:5b:c2:0f:cc:8d:63: df:54:87:4a:d1:7b:f6:ac:01:1b:72:17:a2:22:47:6d:14:73: 24:a1:7b:59:4d:72:7e:b5:5b:4a:64:ac:47:b6:9d:83:93:8e: 26:40:b7:ea:2e:c4:42:0d:1f:76:16:28:a2:28:e0:72:ae:67: 84:95:e6:a7:0e:96:e5:b7:bf:05:78:29:ba:e3:87:c3:ae:ca: b1:ba:78:c5:07:c4:bc:e3:e3:78:fc:fe:ef:49:91:d1:39:a0: 08:3c:11:3a:d8:5a:b1:cd:16:44:fa:62:9f:5c:f1:8e:31:51: ae:dc:b9:00:11:2e:0c:a1:51:fb:7c:16:e9:96:b9:58:65:d0: 5f:fc:23:55:65:46:a7:38:50:b7:22:a9:de:9c:03:ba:3f:db: 59:76:79:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE2RDIxMTAvBgNVBAUTKDgwOThBMUE0QTY1N0E3NzBBRkJENjZBNThEQURFMDE5 M0Y1QTFFODgwHhcNMjQwNTE5MDEzNTE3WhcNMjQwNTI2MDEzNTE3WjAYMRYwFAYD VQQDEw02NjQ5NTc1NS1lODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xefBTR7cyXFTS4rEj7veCTLT/dpeEIigWwC+hju2h24EWPlVHLwmlhMEt2e X9pryx/LU2AtZfmAxHTe5PsNk4akal4mjl1aePs2yLUjFUwshO8YTM2eAJ5e2q0X ekY6ltLs+Phbmuzj7V/V4IgKetNA76ePjee0j9rm27nK8ZvDK3gcUd88m0yPliYa lDbo/N3/GuNUsOBJn7ShRdJM6nZzQnoNam/8q8kZ0ATvIb/sCKgn5jqmbt7I/aZh Toas0/SDT4sm7KnQ6w0jWS6JLw5RlVmZjNtw7/K3xxG2RkoF9jFPoqVhrBmo4rP+ SKpZeK+NDSzQZpFRbcUJHDcn1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFuxQp9 73pivmZI7gjOGZgJgJGFMB8GA1UdIwQYMBaAFICYoaSmV6dwr71mpY2t4Bk/Wh6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZEMi83RDU3QUVFRUVB OUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAzQ3Z2V2FsamEzZ0dUOWFI b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKaWhwS1pYcDNDdnZXYWxqYTNnR1Q5YUhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTZEMi83RDU3QUVFRUVBOUMxMUVCQTMxMkE5MjZDNEY5QUUwMi9nSmlocEtaWHAz Q3Z2V2FsamEzZ0dUOWFIb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmB5z7DVBsLewItcffwzELdtft4WJ/OoNnmeM7tlJJ4mucSKKRqTdb 1epNJfDnnvdZvSTKQAw2EPoMujeoPk3aQki4/gKPlnkFaXJJHJrvc6o99BttQk8Y ALilt/1574g8DXq72TJbwg/MjWPfVIdK0Xv2rAEbcheiIkdtFHMkoXtZTXJ+tVtK ZKxHtp2Dk44mQLfqLsRCDR92FiiiKOByrmeEleanDpblt78FeCm644fDrsqxunjF B8S84+N4/P7vSZHROaAIPBE62FqxzRZE+mKfXPGOMVGu3LkAES4MoVH7fBbplrlY ZdBf/CNVZUanOFC3IqnenAO6P9tZdnlL -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org