$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: 2Z/ZbYe9Umn3B7bKV5yAEVskKnB/OPhXqk/EGrvviW8= Subject key identifier: 24:19:CF:BE:2D:55:8D:35:B2:88:A9:71:A3:4A:69:88:AA:CA:5A:B6 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: E4 Signing time: Sat 18 May 2024 18:24:26 +0000 Manifest this update: Sat 18 May 2024 18:24:26 +0000 Manifest next update: Sat 25 May 2024 18:24:26 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: UTREQrsA1QU35X9HMi0p0fuUhc2XpNNdfF4qem/UirQ=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: /rJqGMqLZ7nBs/V2rvnW5bXjWT03Hch1ZVPihuVLC9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: May 18 18:24:26 2024 GMT Not After : May 25 18:24:26 2024 GMT Subject: CN=6648f25a-e55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:14:59:c9:79:9b:05:98:2b:55:7d:d2:f4: d1:54:f4:02:02:cc:2d:e3:a4:5b:9e:d4:b8:73:b7: f4:ae:5f:db:f3:99:6f:9f:27:b2:b2:29:65:b9:04: 89:16:7f:81:22:0b:90:cb:b0:b5:37:1a:99:99:d1: 7d:e0:2f:64:6c:e5:62:2b:29:d0:c1:a1:ce:3f:88: 53:d9:fa:c7:6b:d8:3e:c9:dc:e4:fe:b4:48:04:f2: 00:37:16:d6:de:e3:72:76:bf:d6:15:8f:1a:e8:b8: 6c:9b:93:ee:e3:e8:37:5b:16:bf:12:72:3e:01:3a: cb:96:f1:ed:34:bf:c6:f5:de:18:5f:18:9c:27:77: 8e:c6:ae:83:d4:51:94:55:cc:88:5c:83:3b:99:45: 7e:69:df:67:b7:78:60:29:31:b7:33:3f:22:dd:82: a3:bb:f3:dd:69:d9:6a:cf:6d:c6:4b:8e:49:4f:74: 97:fb:9e:b1:02:6a:f6:2c:c0:77:65:26:39:42:2f: 6d:17:5e:09:5a:e7:4b:33:f6:69:14:45:b5:b0:21: c2:47:06:9f:8b:3f:63:f0:f3:8a:a0:c6:52:17:e3: 4a:d3:a0:9e:2e:88:0d:31:ed:22:65:83:85:83:97: 41:98:ec:91:87:da:b1:f2:aa:3c:ae:5c:60:67:c2: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:19:CF:BE:2D:55:8D:35:B2:88:A9:71:A3:4A:69:88:AA:CA:5A:B6 X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:5d:9a:4f:a3:7c:26:51:e2:84:80:45:99:9b:e5:ec:69: 8d:8b:9e:e7:ba:0a:93:68:db:16:97:18:bc:66:68:07:d7:57: e6:a9:85:19:93:cf:5e:a4:7d:56:2a:4a:90:d9:bd:6f:c5:1d: c0:0f:86:60:0b:13:8e:63:25:29:85:b4:56:4b:da:37:cd:d3: 58:d8:3c:53:e6:be:ec:46:37:c2:58:72:b3:f8:55:f6:b2:8a: 6b:f9:bb:00:9d:53:e5:ba:99:2b:29:94:f9:c6:d4:90:03:54: 1e:26:03:83:cf:97:e9:b2:56:da:87:ff:6a:a2:a4:26:a0:04: 00:a7:15:5d:47:a6:bc:30:ac:1e:4f:82:84:0c:a6:5e:76:ec: 52:84:8c:ea:99:01:53:c7:d2:19:b0:7c:e6:18:94:c5:d2:a1: 88:34:32:b0:cd:ce:38:85:ec:8c:75:16:82:50:b3:69:dd:80: 3e:a3:40:6d:6c:c2:16:b4:82:d9:93:21:98:dc:a3:30:91:04: 31:99:61:75:8a:2f:3b:ad:60:b1:f1:71:bc:32:8e:53:2e:41: 9d:ee:ac:80:b8:0c:d7:b7:06:3b:f1:ca:d0:8a:b1:c8:9a:c3: 6d:2f:8e:ea:ba:c3:c6:91:33:32:a1:82:f0:ad:e1:99:39:b7: fd:dc:af:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjQwNTE4MTgyNDI2WhcNMjQwNTI1MTgyNDI2WjAYMRYwFAYD VQQDEw02NjQ4ZjI1YS1lNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxIUWcl5mwWYK1V90vTRVPQCAswt46RbntS4c7f0rl/b85lvnyeysilluQSJ Fn+BIguQy7C1NxqZmdF94C9kbOViKynQwaHOP4hT2frHa9g+ydzk/rRIBPIANxbW 3uNydr/WFY8a6Lhsm5Pu4+g3Wxa/EnI+ATrLlvHtNL/G9d4YXxicJ3eOxq6D1FGU VcyIXIM7mUV+ad9nt3hgKTG3Mz8i3YKju/Pdadlqz23GS45JT3SX+56xAmr2LMB3 ZSY5Qi9tF14JWudLM/ZpFEW1sCHCRwafiz9j8POKoMZSF+NK06CeLogNMe0iZYOF g5dBmOyRh9qx8qo8rlxgZ8LPAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQZz74t VY01soipcaNKaYiqylq2MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlM12aT6N8JlHihIBFmZvl7GmNi57nugqTaNsWlxi8ZmgH11fmqYUZ k89epH1WKkqQ2b1vxR3AD4ZgCxOOYyUphbRWS9o3zdNY2DxT5r7sRjfCWHKz+FX2 sopr+bsAnVPlupkrKZT5xtSQA1QeJgODz5fpslbah/9qoqQmoAQApxVdR6a8MKwe T4KEDKZeduxShIzqmQFTx9IZsHzmGJTF0qGINDKwzc44heyMdRaCULNp3YA+o0Bt bMIWtILZkyGY3KMwkQQxmWF1ii87rWCx8XG8Mo5TLkGd7qyAuAzXtwY78crQirHI msNtL47qusPGkTMyoYLwreGZObf93K8X -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org