$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json) Hash identifier: FB15XvhrClyMljyOaG6rj4LZ6ecV/EExLkzi8E0xtUg= Subject key identifier: CE:5E:3A:C2:BE:7F:9E:A4:51:08:4F:90:3D:06:F5:90:FE:69:61:70 Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft Manifest number: 04B9 Signing time: Sun 19 May 2024 02:46:17 +0000 Manifest this update: Sun 19 May 2024 02:46:17 +0000 Manifest next update: Sun 26 May 2024 02:46:17 +0000 Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: 4Ljo9P4WdIg66BDUkLxLh57R8wmf/q02fimxg4dyTfA=) 2: AB42AD0EE50811EE9CCB8069C4F9AE02.roa (hash: HL78DFeMs7KZ/mfAMMK8JORY4ohIFhpmiMrHPpufuBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Validity Not Before: May 19 02:46:17 2024 GMT Not After : May 26 02:46:17 2024 GMT Subject: CN=664967f9-a35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:8c:7e:85:f7:6d:7c:af:96:cb:0f:ee:11: 77:28:a3:fc:b5:10:85:1d:47:cf:e1:b9:02:db:f1: 92:a1:09:71:bb:03:4e:46:3c:47:6f:30:fa:cd:e3: 91:b8:3e:f3:9a:cf:7e:fc:2e:dc:2d:89:bf:2b:62: ba:6f:58:6f:0d:49:71:d2:5d:33:9c:8f:a0:03:ac: e0:8c:08:67:e6:fa:67:72:f1:7c:1c:8e:ae:b5:3e: b8:9f:3b:c1:93:d8:0d:b0:94:dc:05:22:cb:25:8f: fe:c1:f1:96:59:ce:41:09:e9:91:62:2a:df:10:ce: ec:16:ad:3e:3c:2a:11:52:8e:10:bf:d3:0f:34:4f: 22:6f:8b:1b:01:d6:46:f4:60:9b:13:65:5e:67:28: 30:ad:d1:a1:ca:a0:e2:82:87:43:6d:f6:9a:f0:b3: ea:c4:2b:a8:9c:50:6d:de:d0:f1:0f:1b:1f:aa:d6: 3e:58:98:08:98:6e:a1:29:af:15:b8:b0:ef:27:27: 59:5e:38:23:b8:81:2e:f0:4a:2a:92:ef:db:f4:fd: 5b:24:98:f0:ba:5c:04:48:4d:55:1a:26:15:ca:b1: 6b:b2:13:23:9f:f8:dc:e7:6b:eb:3f:52:66:fa:33: 97:30:04:00:1e:0e:57:5b:13:de:27:3a:8c:13:a7: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:3A:C2:BE:7F:9E:A4:51:08:4F:90:3D:06:F5:90:FE:69:61:70 X509v3 Authority Key Identifier: keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:90:90:4c:27:18:5a:34:b2:63:f1:b4:e0:63:84:29:0b: 4a:ae:86:0d:15:a5:9a:12:63:0c:cd:d2:ed:51:7b:54:3f:71: db:81:1b:9c:d2:97:6a:91:e2:4a:58:c3:8c:9d:a2:41:1f:79: 6a:7f:90:bb:7e:2e:11:c1:43:49:07:01:05:96:bc:85:32:3d: 6f:3c:88:03:b9:c2:75:1d:61:d9:58:b8:77:cc:72:34:2f:65: cb:5a:d5:50:8d:01:eb:cd:e0:f1:05:1a:19:2d:8f:33:79:b1: e7:a8:12:ee:d6:46:68:9b:52:69:99:7d:b2:70:f0:f0:13:f8: 8c:c4:2b:e1:43:d3:73:99:dd:47:56:fb:07:2f:25:6c:54:d6: ca:a7:e8:77:23:e0:a1:71:74:a5:67:17:3a:bc:9a:9d:a1:0c: b3:47:fd:7f:80:1b:ed:32:88:49:90:6e:6d:3b:74:fb:6a:ea: 45:5c:f4:fc:03:7c:99:2c:8f:b3:04:71:bc:4d:35:3a:5e:e2: 2d:28:31:4f:b4:6d:2f:41:10:2f:b0:b6:8e:d4:40:22:ab:ec: be:ab:fd:2c:01:13:1e:29:61:fb:b9:40:aa:39:58:25:6a:56: 22:e9:6a:2f:68:92:12:6f:02:3e:de:3a:7f:f7:7e:e6:a7:63: 69:b5:b1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB MzNENzIyNTYwHhcNMjQwNTE5MDI0NjE3WhcNMjQwNTI2MDI0NjE3WjAYMRYwFAYD VQQDEw02NjQ5NjdmOS1hMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08eMfoX3bXyvlssP7hF3KKP8tRCFHUfP4bkC2/GSoQlxuwNORjxHbzD6zeOR uD7zms9+/C7cLYm/K2K6b1hvDUlx0l0znI+gA6zgjAhn5vpncvF8HI6utT64nzvB k9gNsJTcBSLLJY/+wfGWWc5BCemRYirfEM7sFq0+PCoRUo4Qv9MPNE8ib4sbAdZG 9GCbE2VeZygwrdGhyqDigodDbfaa8LPqxCuonFBt3tDxDxsfqtY+WJgImG6hKa8V uLDvJydZXjgjuIEu8Eoqku/b9P1bJJjwulwESE1VGiYVyrFrshMjn/jc52vrP1Jm +jOXMAQAHg5XWxPeJzqME6cykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5eOsK+ f56kUQhPkD0G9ZD+aWFwMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQ TWl4UXR5aWs5MldqUFhJbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGpZCQTCcYWjSyY/G04GOEKQtKroYNFaWaEmMMzdLtUXtUP3HbgRuc 0pdqkeJKWMOMnaJBH3lqf5C7fi4RwUNJBwEFlryFMj1vPIgDucJ1HWHZWLh3zHI0 L2XLWtVQjQHrzeDxBRoZLY8zebHnqBLu1kZom1JpmX2ycPDwE/iMxCvhQ9Nzmd1H VvsHLyVsVNbKp+h3I+ChcXSlZxc6vJqdoQyzR/1/gBvtMohJkG5tO3T7aupFXPT8 A3yZLI+zBHG8TTU6XuItKDFPtG0vQRAvsLaO1EAiq+y+q/0sARMeKWH7uUCqOVgl alYi6WovaJISbwI+3jp/937mp2NptbG+ -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org