$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft File: G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json) Hash identifier: CkLICkGKZ2zBnYajrwK75xICJp3Ud8jZh79BMTGSDEw= Subject key identifier: 91:DF:08:64:72:0C:07:47:49:42:38:A1:69:DB:55:3F:07:B1:A0:F3 Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 Certificate issuer: /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft Manifest number: 12B8 Signing time: Sat 18 May 2024 19:36:00 +0000 Manifest this update: Sat 18 May 2024 19:35:59 +0000 Manifest next update: Sat 25 May 2024 19:35:59 +0000 Files and hashes: 1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: dveSPKQcFEQdZ1qmz/npxqSrEQBVdgpPQIyvOu3XBiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Validity Not Before: May 18 19:35:59 2024 GMT Not After : May 25 19:35:59 2024 GMT Subject: CN=66490320-fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:72:00:e1:64:67:e8:87:38:06:10:cd:2a: a6:c3:03:2a:57:da:7c:4c:62:5c:d1:1b:ab:a4:8a: c4:82:bf:c9:d3:a0:67:28:dd:ee:00:ff:23:2f:bc: 78:0d:b9:37:9f:c7:1b:37:b0:c0:81:bc:c5:14:da: 83:5c:8d:42:fb:a2:1d:7a:b8:1e:d9:e7:8c:5b:97: 99:df:43:21:59:22:4b:85:fa:5e:36:37:ea:75:80: 74:04:ad:2b:ee:de:d2:55:9d:63:dc:1f:9e:9c:44: f8:d0:ed:20:30:85:f1:60:52:85:79:aa:fb:46:69: f2:13:33:f2:01:5e:9f:d4:67:5e:c9:28:1e:ee:54: 12:0c:2d:ee:64:3d:3d:35:c1:df:5b:66:63:8f:16: aa:6c:62:88:96:f2:16:e2:f0:78:fe:8d:b3:1f:ba: 0b:3e:e8:37:2d:15:53:74:7a:77:be:e1:55:07:47: d3:4c:cd:34:95:d7:d9:de:5b:fa:b7:cf:d8:00:3a: 64:65:e8:70:83:15:0a:0d:77:3c:d2:88:eb:76:f7: f7:b7:12:ec:41:1c:5c:62:13:cf:e6:37:f3:cf:65: 21:33:54:7c:75:fc:6d:a5:f2:5d:87:44:aa:1c:ab: ee:73:93:13:fc:aa:01:f0:1d:1d:5f:2a:a6:71:e5: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:08:64:72:0C:07:47:49:42:38:A1:69:DB:55:3F:07:B1:A0:F3 X509v3 Authority Key Identifier: keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e4:e1:90:3d:d7:31:86:61:d8:5b:8b:f6:de:f6:86:ad:46: 81:cb:d3:ac:4b:08:c9:ad:21:dd:42:76:9f:df:f0:8f:74:e3: 23:f1:0a:9a:bc:f6:58:92:96:cc:2c:22:2c:af:ac:20:05:a0: bc:4a:40:f9:5e:8c:23:35:98:28:7f:1a:ef:aa:5b:5b:a7:17: cd:74:b4:87:9a:ae:ca:01:2a:96:16:e9:c2:ad:66:4a:e2:3a: bd:2f:e8:99:65:68:64:7d:f0:16:45:2f:38:f1:e9:aa:9b:9d: 4f:ab:fd:6a:cd:2e:da:c5:26:f9:a9:3a:7d:76:b2:4b:3a:0c: 6b:bb:f5:5a:17:ce:1c:06:ed:02:ff:61:66:bf:0f:f0:af:9e: 0a:45:4d:a9:d9:53:e1:a3:04:41:f3:df:09:0b:e1:ff:74:9a: 57:98:5c:9c:a2:99:de:71:71:b4:49:2b:79:73:16:12:de:8b: aa:4f:39:34:a5:26:b9:8c:f4:3e:a1:0a:44:d5:ed:db:9e:59: ed:62:83:d2:04:bd:41:88:cb:dc:46:6a:3f:3b:cf:a8:8d:cf: 51:ba:cd:65:21:34:80:76:8a:9c:d1:44:ac:55:6e:07:3f:3c: c8:86:5c:8a:31:0c:d2:6a:5d:b4:ff:c1:83:10:50:cf:ce:2a: 88:5e:b8:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND RjZBMDFBMzAwHhcNMjQwNTE4MTkzNTU5WhcNMjQwNTI1MTkzNTU5WjAYMRYwFAYD VQQDEw02NjQ5MDMyMC1mYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbtyAOFkZ+iHOAYQzSqmwwMqV9p8TGJc0RurpIrEgr/J06BnKN3uAP8jL7x4 Dbk3n8cbN7DAgbzFFNqDXI1C+6Iderge2eeMW5eZ30MhWSJLhfpeNjfqdYB0BK0r 7t7SVZ1j3B+enET40O0gMIXxYFKFear7RmnyEzPyAV6f1GdeySge7lQSDC3uZD09 NcHfW2ZjjxaqbGKIlvIW4vB4/o2zH7oLPug3LRVTdHp3vuFVB0fTTM00ldfZ3lv6 t8/YADpkZehwgxUKDXc80ojrdvf3txLsQRxcYhPP5jfzz2UhM1R8dfxtpfJdh0Sq HKvuc5MT/KoB8B0dXyqmceXcuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHfCGRy DAdHSUI4oWnbVT8HsaDzMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn5OGQPdcxhmHYW4v23vaGrUaBy9OsSwjJrSHdQnaf3/CPdOMj8Qqa vPZYkpbMLCIsr6wgBaC8SkD5XowjNZgofxrvqltbpxfNdLSHmq7KASqWFunCrWZK 4jq9L+iZZWhkffAWRS848emqm51Pq/1qzS7axSb5qTp9drJLOgxru/VaF84cBu0C /2Fmvw/wr54KRU2p2VPhowRB898JC+H/dJpXmFycopnecXG0SSt5cxYS3ouqTzk0 pSa5jPQ+oQpE1e3bnlntYoPSBL1BiMvcRmo/O8+ojc9Rus1lITSAdoqc0USsVW4H PzzIhlyKMQzSal20/8GDEFDPziqIXrg+ -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org