$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: DNiPVExjtDrBdiTW+MEG05kN1x6RsURmi4vbsl5uaoE= Subject key identifier: B4:47:C7:D3:0D:D8:0C:02:A7:B6:FD:77:D8:EE:47:1E:07:34:51:B2 Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 02EE Signing time: Sun 19 May 2024 03:16:52 +0000 Manifest this update: Sun 19 May 2024 03:16:51 +0000 Manifest next update: Sun 26 May 2024 03:16:51 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: AlNK2nvYrxRbqhuTy2QSrFhtfE1Mw5lIWYBy2Ya/VBI=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: H28aH7kF2uwm9MmumzSnfWUQDIbBrIR34W+ffok6mmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Validity Not Before: May 19 03:16:51 2024 GMT Not After : May 26 03:16:51 2024 GMT Subject: CN=66496f23-7ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:46:1b:84:cb:d2:f5:ca:c9:b7:f3:17:26: 45:ab:70:90:f1:cd:95:49:e4:dd:c6:9e:80:f9:f4: d9:7b:e7:c8:83:52:cc:48:c5:de:30:aa:e7:22:e2: 9c:80:97:b9:78:e3:76:5e:36:2f:1d:4d:97:e2:ab: e1:ab:cc:f0:96:48:30:01:75:60:02:0f:b7:ef:e3: 4e:73:83:e0:ec:f6:98:73:df:90:cf:aa:f5:71:06: 17:01:8d:4f:76:ef:4f:a4:22:b7:a4:67:71:3e:07: 94:0d:04:dc:c5:5f:ac:12:8e:8c:9e:68:27:83:da: ae:ec:22:3f:64:16:4e:50:bd:84:7c:97:9b:b2:d0: 9b:79:78:33:e3:3c:df:49:28:4e:b3:e0:8c:8b:fa: 1c:c4:f0:b9:dd:5f:e8:9e:31:20:84:91:28:17:1b: 81:ef:35:c1:9a:6f:20:f4:52:33:f3:5d:bd:bc:65: d8:dd:c3:e7:31:cf:94:dc:19:57:7a:02:f0:ee:f6: b4:24:c8:2f:16:2d:28:7b:e7:99:9d:8d:93:91:35: 0d:67:f3:c1:e3:ea:89:d8:58:be:2b:00:70:5f:47: 89:cb:13:1d:98:44:e6:46:11:37:68:80:cd:4c:43: 4f:04:55:29:17:a4:89:ce:6c:28:f7:30:d7:91:86: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:47:C7:D3:0D:D8:0C:02:A7:B6:FD:77:D8:EE:47:1E:07:34:51:B2 X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:a4:4a:f3:90:96:96:f6:6b:a7:d4:56:51:82:24:b0:09: 89:d5:47:83:dd:21:10:2f:e4:f4:e6:51:45:9a:13:07:63:65: 09:88:fe:33:2a:93:c2:fa:8d:c2:82:89:dd:7a:7b:aa:d1:f7: 9a:87:10:60:96:8a:41:f6:8f:39:a6:80:89:b8:f3:e8:ae:f9: 25:33:f4:9c:30:5d:8d:ed:a2:ad:5c:cf:f2:fa:26:dd:15:83: 99:c1:dd:43:84:6e:98:7c:c5:75:f3:8a:fa:71:c0:c9:06:bb: e1:68:c1:e6:b3:41:4b:dc:3d:35:92:24:07:0c:35:59:eb:cb: 2a:55:7b:80:19:3f:8e:f8:91:7d:5e:58:7b:6f:28:ef:ba:90: 8c:f6:d9:06:70:de:96:a7:2d:f5:82:26:a4:4c:c8:8b:39:10: d2:b8:1f:f8:7c:23:14:51:35:6e:67:41:98:d2:97:b8:16:a9: a2:7a:d5:5e:20:c7:21:5a:a8:6e:22:bf:45:27:7f:61:ea:45: 61:c5:9f:eb:eb:64:ec:d9:3f:bd:11:7c:0f:76:ea:07:d1:47: 66:80:28:a5:f6:7e:a2:79:47:bc:04:c2:be:7c:5c:eb:8e:d5: 6c:7c:44:35:6f:06:32:73:55:c3:d2:7e:72:2c:73:cb:83:a0: 62:5e:f6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjQwNTE5MDMxNjUxWhcNMjQwNTI2MDMxNjUxWjAYMRYwFAYD VQQDEw02NjQ5NmYyMy03Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mVGG4TL0vXKybfzFyZFq3CQ8c2VSeTdxp6A+fTZe+fIg1LMSMXeMKrnIuKc gJe5eON2XjYvHU2X4qvhq8zwlkgwAXVgAg+37+NOc4Pg7PaYc9+Qz6r1cQYXAY1P du9PpCK3pGdxPgeUDQTcxV+sEo6Mnmgng9qu7CI/ZBZOUL2EfJebstCbeXgz4zzf SShOs+CMi/ocxPC53V/onjEghJEoFxuB7zXBmm8g9FIz8129vGXY3cPnMc+U3BlX egLw7va0JMgvFi0oe+eZnY2TkTUNZ/PB4+qJ2Fi+KwBwX0eJyxMdmETmRhE3aIDN TENPBFUpF6SJzmwo9zDXkYZ8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRHx9MN 2AwCp7b9d9juRx4HNFGyMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGKqRK85CWlvZrp9RWUYIksAmJ1UeD3SEQL+T05lFFmhMHY2UJiP4z KpPC+o3Cgondenuq0feahxBglopB9o85poCJuPPorvklM/ScMF2N7aKtXM/y+ibd FYOZwd1DhG6YfMV184r6ccDJBrvhaMHms0FL3D01kiQHDDVZ68sqVXuAGT+O+JF9 Xlh7byjvupCM9tkGcN6Wpy31giakTMiLORDSuB/4fCMUUTVuZ0GY0pe4FqmietVe IMchWqhuIr9FJ39h6kVhxZ/r62Ts2T+9EXwPduoH0UdmgCil9n6ieUe8BMK+fFzr jtVsfEQ1bwYyc1XD0n5yLHPLg6BiXvZk -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org