$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: cBCY91CcEModaQjurrfb3mphxz0CVY/aB2rduYTrgaw= Subject key identifier: 4A:BC:8D:A3:B6:11:4B:6B:0E:A8:A7:6F:71:AF:E6:4D:D1:96:0F:4B Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 073E Signing time: Sat 18 May 2024 22:27:05 +0000 Manifest this update: Sat 18 May 2024 22:27:05 +0000 Manifest next update: Sat 25 May 2024 22:27:05 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: 2pc8dSPR1TFWyWpytJWGVvLyuk4uO/Uy8fiNoVjC3oA=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a8HUGnnGAgvYA0ZsnxVyx+ccDXeZU118Vt4IZK+roOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: May 18 22:27:05 2024 GMT Not After : May 25 22:27:05 2024 GMT Subject: CN=66492b39-b755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:e2:f5:50:83:bb:c1:40:44:68:f3:87:6f: 93:ff:00:11:1a:7b:38:a3:6e:1b:ac:1e:bf:09:3c: 5c:a7:46:9f:1d:49:2c:a0:48:6e:79:9f:77:22:a7: 9a:ee:58:46:40:b3:f3:51:92:55:18:de:f6:ab:15: 9d:b9:be:5b:12:a8:53:fd:00:20:bb:3f:15:99:7b: 66:91:07:92:e6:bc:f2:3f:b1:db:03:b2:54:8e:67: 91:ee:aa:bc:b3:7a:05:93:2d:b4:0a:bc:42:a6:1a: 43:82:3f:78:75:46:8e:45:6b:29:c5:5a:80:d8:78: f6:83:42:2d:2a:d9:61:e6:56:8c:3e:37:82:81:fb: 6b:7d:ac:64:81:81:dc:5b:38:b8:06:fb:df:ee:2d: 17:80:6a:63:ec:d4:8c:47:0c:d4:cd:1f:2b:ae:dc: 72:39:be:d2:35:1c:41:c9:53:6a:f1:a9:c2:00:0e: 08:42:fa:05:2f:88:8f:2f:30:d1:7c:e0:ef:81:80: 0b:09:66:3d:f6:51:3c:78:58:46:74:10:29:35:ab: 62:26:9d:39:4f:42:57:5d:7c:54:31:e3:0a:b3:8f: 25:40:53:c7:22:e0:49:16:ce:60:ac:1d:69:78:95: 89:3a:05:4a:76:b6:28:93:24:1e:05:e6:4b:08:57: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:8D:A3:B6:11:4B:6B:0E:A8:A7:6F:71:AF:E6:4D:D1:96:0F:4B X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:29:fd:be:b8:97:c8:23:a6:bf:3d:55:01:87:07:21:83:26: 48:23:b3:df:04:0c:34:20:41:0e:0c:99:b3:17:7d:db:6c:b7: 95:6d:ba:3d:84:30:b7:f2:f5:08:dd:df:39:ee:cf:5a:85:21: b8:1d:92:6d:ae:76:32:a5:d9:ec:aa:c7:8b:8e:54:ba:02:4d: bc:cf:96:8d:9e:48:88:ed:67:2a:0a:60:0d:1c:15:7b:b4:08: 6e:c1:71:37:9b:af:ab:09:38:d8:ed:21:df:1e:03:68:e6:67: 8b:2d:e5:5b:ae:bf:f7:01:4c:c9:79:64:37:56:21:60:cb:91: b3:84:ac:5c:e6:6d:0c:cb:8b:e2:79:e1:c4:54:02:d5:1f:09: ec:1c:46:13:e3:a2:18:de:e7:0c:e9:67:43:93:db:2c:dc:35: 6c:b7:aa:6f:78:a9:ea:2d:ab:a0:94:80:1f:66:a8:64:8a:85: 86:d3:cd:c2:f1:70:aa:e6:ce:2a:ac:de:30:2c:fa:fb:9a:8d: d8:c3:c6:bf:6b:26:4a:cc:96:3c:25:2f:9a:55:11:36:00:13: 21:9e:55:81:d1:3b:98:0f:ce:f0:ec:6f:83:0c:ad:a1:44:db: d2:f8:75:c9:a3:94:13:37:1b:d3:95:45:73:2e:fd:82:69:00: 22:71:19:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjQwNTE4MjIyNzA1WhcNMjQwNTI1MjIyNzA1WjAYMRYwFAYD VQQDEw02NjQ5MmIzOS1iNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YXi9VCDu8FARGjzh2+T/wARGns4o24brB6/CTxcp0afHUksoEhueZ93Iqea 7lhGQLPzUZJVGN72qxWdub5bEqhT/QAguz8VmXtmkQeS5rzyP7HbA7JUjmeR7qq8 s3oFky20CrxCphpDgj94dUaORWspxVqA2Hj2g0ItKtlh5laMPjeCgftrfaxkgYHc Wzi4Bvvf7i0XgGpj7NSMRwzUzR8rrtxyOb7SNRxByVNq8anCAA4IQvoFL4iPLzDR fODvgYALCWY99lE8eFhGdBApNatiJp05T0JXXXxUMeMKs48lQFPHIuBJFs5grB1p eJWJOgVKdrYokyQeBeZLCFcgvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq8jaO2 EUtrDqinb3Gv5k3Rlg9LMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Kf2+uJfII6a/PVUBhwchgyZII7PfBAw0IEEODJmzF33bbLeVbbo9 hDC38vUI3d857s9ahSG4HZJtrnYypdnsqseLjlS6Ak28z5aNnkiI7WcqCmANHBV7 tAhuwXE3m6+rCTjY7SHfHgNo5meLLeVbrr/3AUzJeWQ3ViFgy5GzhKxc5m0My4vi eeHEVALVHwnsHEYT46IY3ucM6WdDk9ss3DVst6pveKnqLauglIAfZqhkioWG083C 8XCq5s4qrN4wLPr7mo3Yw8a/ayZKzJY8JS+aVRE2ABMhnlWB0TuYD87w7G+DDK2h RNvS+HXJo5QTNxvTlUVzLv2CaQAicRmk -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org