$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: EViTuGfXWBKX0TrdOWNkW+ekQ+nqGg8dLl0t0y9jlIw= Subject key identifier: 5F:7E:AA:BD:CD:B3:BD:19:FC:8F:85:57:19:F8:56:DD:8C:F3:46:F5 Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 056A Signing time: Sun 19 May 2024 00:42:32 +0000 Manifest this update: Sun 19 May 2024 00:42:32 +0000 Manifest next update: Sun 26 May 2024 00:42:32 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: yNXz83CkuZJ7A63tK2tXDNisK4mK0JgUaL12ZYsrO9A=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: YkeAt1drk4bdwdSADWm8joBbgfvJQHT5/J+Fr8f/lCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: May 19 00:42:32 2024 GMT Not After : May 26 00:42:32 2024 GMT Subject: CN=66494af8-050d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:49:3c:03:17:40:8b:90:1d:ce:25:f7:73: 52:45:85:73:4e:fc:c9:42:2c:99:0e:f8:49:8d:0b: 93:b0:1b:d1:8b:01:dc:43:a0:25:05:50:d9:dc:95: 23:ee:60:39:ac:25:f8:3e:b5:14:a1:a0:87:08:36: ad:8d:e8:27:09:bc:39:1d:55:b0:d6:ee:f0:77:4a: ef:c9:fa:dc:59:2b:ca:7a:42:20:c8:2a:6b:3b:dc: 2f:bf:cc:c9:77:70:62:85:a8:9a:c5:4f:ac:dc:f6: 54:6f:2d:6b:5a:de:48:83:66:26:60:7f:6e:dd:2f: 53:41:4e:ef:0b:92:78:3f:03:e6:f7:38:b5:a4:49: d4:04:95:b1:ca:31:52:4d:80:70:9b:8a:64:52:bc: 36:9d:de:2c:18:41:36:fb:d6:f8:ad:5a:39:f1:7f: 0d:3c:8a:fa:f9:b8:e9:33:aa:6f:27:90:e1:ec:03: 10:45:50:a1:8a:b4:1e:8b:4d:25:db:25:3f:65:21: ed:a8:95:c1:48:ac:2f:91:9d:af:3f:e7:b9:f0:cc: b7:4d:5f:ef:24:74:16:aa:58:b5:55:1d:a5:b8:08: 3a:6e:06:19:59:75:12:cd:c1:e7:c5:2f:51:42:dd: e8:c3:87:a1:2c:3c:4e:34:07:a9:b3:3d:ce:9a:b8: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:AA:BD:CD:B3:BD:19:FC:8F:85:57:19:F8:56:DD:8C:F3:46:F5 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:0e:50:5a:09:aa:e3:62:b0:1b:86:cb:13:cd:e1:d9:1e: e6:93:9e:c0:e0:b2:48:e5:64:5e:f4:c2:73:fa:c2:f1:86:81: b0:81:d5:cd:94:af:cf:90:0f:a3:4e:d0:1a:3b:cf:3b:d0:6c: 18:72:4d:e3:c3:12:56:e0:34:d8:49:ee:d8:b4:48:1d:1c:28: 44:fc:20:4c:d3:dd:3d:0f:cb:e2:69:13:93:01:d7:b0:7a:6b: c4:40:f1:cc:9e:d4:ff:b9:69:54:90:da:46:94:ac:b4:de:dd: b7:b7:40:c4:8c:52:e1:c6:67:0a:61:07:bc:00:30:7b:9a:54: 27:f9:3b:0a:5e:6b:18:28:ef:f8:54:df:a8:cd:26:9d:89:67: 72:e9:20:eb:0f:eb:3e:54:80:e8:12:3b:c7:73:14:6b:2b:7f: 7a:4e:6a:de:9a:7e:29:78:8d:33:9e:37:b8:81:a1:31:35:70: ec:d5:d8:11:4b:0b:b0:3c:0d:3a:94:0c:90:4f:db:c3:b3:13: e0:e2:2f:3f:ce:cc:a8:ca:f5:47:d6:ed:fc:b3:0b:f9:79:eb: dc:4b:72:1e:34:f6:2b:0c:fd:13:b7:fc:c7:a7:7f:a7:13:ce: 0d:d0:cd:9c:2c:20:f0:dc:91:63:f8:47:53:a5:31:95:48:58: 25:30:1e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjQwNTE5MDA0MjMyWhcNMjQwNTI2MDA0MjMyWjAYMRYwFAYD VQQDEw02NjQ5NGFmOC0wNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BlJPAMXQIuQHc4l93NSRYVzTvzJQiyZDvhJjQuTsBvRiwHcQ6AlBVDZ3JUj 7mA5rCX4PrUUoaCHCDatjegnCbw5HVWw1u7wd0rvyfrcWSvKekIgyCprO9wvv8zJ d3BihaiaxU+s3PZUby1rWt5Ig2YmYH9u3S9TQU7vC5J4PwPm9zi1pEnUBJWxyjFS TYBwm4pkUrw2nd4sGEE2+9b4rVo58X8NPIr6+bjpM6pvJ5Dh7AMQRVChirQei00l 2yU/ZSHtqJXBSKwvkZ2vP+e58My3TV/vJHQWqli1VR2luAg6bgYZWXUSzcHnxS9R Qt3ow4ehLDxONAepsz3OmrijcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9+qr3N s70Z/I+FVxn4Vt2M80b1MB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALxw5QWgmq42KwG4bLE83h2R7mk57A4LJI5WRe9MJz+sLxhoGwgdXN lK/PkA+jTtAaO8870GwYck3jwxJW4DTYSe7YtEgdHChE/CBM0909D8viaROTAdew emvEQPHMntT/uWlUkNpGlKy03t23t0DEjFLhxmcKYQe8ADB7mlQn+TsKXmsYKO/4 VN+ozSadiWdy6SDrD+s+VIDoEjvHcxRrK396Tmremn4peI0znje4gaExNXDs1dgR SwuwPA06lAyQT9vDsxPg4i8/zsyoyvVH1u38swv5eevcS3IeNPYrDP0Tt/zHp3+n E84N0M2cLCDw3JFj+EdTpTGVSFglMB5T -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org