$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: lhZSI2o5iCZ2lJQqjxLOeOvLSU8exQL+IWQBRl46mVQ= Subject key identifier: 48:81:B3:8E:BB:FA:08:02:4A:CE:FB:F9:EE:5C:90:95:6B:9B:23:8D Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0A60 Signing time: Sat 04 May 2024 20:31:32 +0000 Manifest this update: Sat 04 May 2024 20:31:32 +0000 Manifest next update: Sat 11 May 2024 20:31:32 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: xW7/B6bK2NwBhHDv+Zoc+MSvfmqljHVl4JcJn9zi3Tk=) 2: B6413BFC536311EAB9ACF938C4F9AE02.roa (hash: QxTD9NXaJSvPw+RH2g16x7DqJjBs7jqovLZJ7UXXsAo=) 3: BAA2B2A83D9611EA916B582DC4F9AE02.roa (hash: hrw9I317xbyiaARzveTD/6FExMIFjTT9axzHYhvr61M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: May 4 20:31:32 2024 GMT Not After : May 11 20:31:32 2024 GMT Subject: CN=66369b24-dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:39:a1:e4:18:59:1b:72:b0:76:92:b5:79: 11:51:8a:79:11:df:75:10:dd:fc:58:8a:b1:19:8c: d6:5d:06:ee:af:91:e7:96:00:bf:c7:0d:ac:b7:96: 5c:ad:eb:72:dd:d4:6c:ca:f9:cd:5a:52:a8:02:97: 31:d2:3e:c0:79:5a:35:59:7e:ba:50:a4:25:59:c4: 9f:ab:a6:db:94:0b:e8:0d:0e:e5:28:21:e0:6d:87: ae:4b:36:8c:23:a0:95:d2:28:31:b1:5d:23:b1:78: 85:c8:fa:d4:08:51:61:26:36:d1:7b:08:c8:05:e8: fe:cb:57:b3:82:6d:60:45:fc:d0:e0:c6:9f:08:ef: ed:df:ad:70:c5:f8:db:26:be:09:df:ef:63:06:f8: c4:4f:96:7c:73:23:b8:46:b7:71:1e:3e:42:28:ed: 96:18:d6:ef:d6:e7:dc:f7:f3:f2:ac:59:78:81:2a: fa:b8:a1:1a:df:50:bb:6a:c0:e1:99:d6:b1:7d:cb: eb:2c:a2:69:2e:4e:34:15:98:2a:ed:d9:59:b3:03: 1c:ce:50:7d:f0:9c:f7:3f:e6:8a:36:cd:22:64:79: 5f:62:72:8b:c6:ef:82:14:f6:b5:c3:33:9d:15:10: 04:6f:d4:fe:f7:aa:3e:ad:24:6c:74:7b:5b:ef:5e: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:81:B3:8E:BB:FA:08:02:4A:CE:FB:F9:EE:5C:90:95:6B:9B:23:8D X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:5c:d9:9c:f2:8f:08:89:6c:05:9b:0e:b7:12:d3:3e:00: eb:a9:b8:98:10:54:c1:7f:92:4c:4d:5d:cf:ed:0f:ab:f6:60: 90:f8:8e:9b:73:f2:6e:db:0e:4a:80:3a:5a:cf:53:38:78:02: 7b:4f:e5:68:b2:53:ff:43:09:4a:ad:8b:6f:73:4c:49:cc:e6: 34:93:94:60:64:59:e0:e3:09:b9:be:01:bd:85:44:33:48:20: 3b:fe:ec:33:65:bd:e4:74:e4:e2:35:23:1d:14:ed:31:9b:74: 2f:1d:2d:50:b0:0c:8e:1a:99:ea:6f:9e:57:eb:69:b4:b7:d0: b3:3a:fa:d8:9b:4b:02:a5:4e:a1:64:1e:d2:53:59:26:5b:b5: f9:25:8e:7f:72:4a:0f:32:76:37:8e:dc:c9:f7:7b:6a:e0:0a: 79:55:2d:7f:8a:2d:84:88:48:09:97:65:af:52:0b:c9:5b:37: 22:98:a3:ca:61:19:1c:e8:f8:96:4a:db:bd:5f:fe:e4:6a:a0: ed:60:bb:e0:45:1f:88:23:04:53:5b:26:05:57:2d:d4:22:d0: cd:90:aa:76:3e:2f:25:f1:7a:95:37:ad:35:c7:f2:61:66:25: 00:60:47:86:0b:33:38:7f:80:7c:23:82:1d:ab:86:03:08:d3: d9:49:e0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjQwNTA0MjAzMTMyWhcNMjQwNTExMjAzMTMyWjAYMRYwFAYD VQQDEw02NjM2OWIyNC1kZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwg5oeQYWRtysHaStXkRUYp5Ed91EN38WIqxGYzWXQbur5HnlgC/xw2st5Zc rety3dRsyvnNWlKoApcx0j7AeVo1WX66UKQlWcSfq6bblAvoDQ7lKCHgbYeuSzaM I6CV0igxsV0jsXiFyPrUCFFhJjbRewjIBej+y1ezgm1gRfzQ4MafCO/t361wxfjb Jr4J3+9jBvjET5Z8cyO4RrdxHj5CKO2WGNbv1ufc9/PyrFl4gSr6uKEa31C7asDh mdaxfcvrLKJpLk40FZgq7dlZswMczlB98Jz3P+aKNs0iZHlfYnKLxu+CFPa1wzOd FRAEb9T+96o+rSRsdHtb716JMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiBs467 +ggCSs77+e5ckJVrmyONMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM4VzZnPKPCIlsBZsOtxLTPgDrqbiYEFTBf5JMTV3P7Q+r9mCQ+I6b c/Ju2w5KgDpaz1M4eAJ7T+VoslP/QwlKrYtvc0xJzOY0k5RgZFng4wm5vgG9hUQz SCA7/uwzZb3kdOTiNSMdFO0xm3QvHS1QsAyOGpnqb55X62m0t9CzOvrYm0sCpU6h ZB7SU1kmW7X5JY5/ckoPMnY3jtzJ93tq4Ap5VS1/ii2EiEgJl2WvUgvJWzcimKPK YRkc6PiWStu9X/7kaqDtYLvgRR+IIwRTWyYFVy3UItDNkKp2Pi8l8XqVN601x/Jh ZiUAYEeGCzM4f4B8I4Idq4YDCNPZSeCR -----END CERTIFICATE-----Generated at Sat May 4 21:33:00 2024 by rpki-client on console-fra.rpki-client.org