$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: fU2bwyHiYtlRm/sePLeNYAFDPS650qytFeWV0OdpS0s= Subject key identifier: 92:EA:97:B9:8D:74:F4:3A:70:03:9D:8E:42:A3:A4:F2:B1:63:82:A4 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 24 Signing time: Fri 31 May 2024 09:34:23 +0000 Manifest this update: Fri 31 May 2024 09:34:23 +0000 Manifest next update: Fri 07 Jun 2024 09:34:23 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: TYXHqyYKOxRn+1O5/6KuW8XuGA7J2jJiINhWRJsr7Mk=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: owuYl2f9BSGVA0/70enqvT/0aH6Gh7FL60SNuEqExK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: May 31 09:34:23 2024 GMT Not After : Jun 7 09:34:23 2024 GMT Subject: CN=6659999f-45dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:50:c9:ef:25:80:be:c1:ea:0c:af:1c:6f:f1: d4:b3:1c:6e:f0:06:9d:e2:01:6f:96:0c:f6:ae:d8: 06:a1:3a:65:15:d5:4c:a5:8e:77:36:fe:c4:37:35: 04:9e:9a:ed:a3:50:ce:8b:13:b7:2d:32:80:c5:1f: 53:fd:f0:c3:1e:30:e8:6e:93:23:4b:ea:33:52:76: 51:29:7e:f6:89:84:eb:4d:7e:8b:36:5f:a7:ff:a6: ab:ac:0d:f4:de:cf:98:37:e4:2d:00:91:e1:80:2d: 4a:9f:ac:1d:df:10:91:88:77:1f:8f:23:36:23:fc: 7b:3f:86:70:35:2c:30:a4:92:87:a3:f2:7a:2f:dd: fb:dc:d7:76:93:57:5a:3c:00:b4:d6:29:3c:97:66: 91:3c:74:4d:b6:3c:53:18:a0:b4:0b:0d:0e:eb:c8: e2:41:11:08:7d:3d:14:6a:ee:8b:c7:ee:e4:5a:fa: 4a:f5:01:4e:18:35:9f:37:ea:7a:d7:58:99:92:f5: 56:e6:37:e6:04:7c:67:f7:14:4d:42:85:37:2c:06: b9:7d:b1:57:72:c2:a2:89:ab:bc:48:d0:63:f0:c1: 0c:65:b2:ea:7b:b5:62:31:67:4f:87:7d:be:3c:ca: 9e:a9:03:27:76:6d:86:f5:b1:0c:48:b3:a4:55:ba: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EA:97:B9:8D:74:F4:3A:70:03:9D:8E:42:A3:A4:F2:B1:63:82:A4 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:9b:be:5d:56:25:5a:e0:03:b8:11:30:69:67:09:2b:50: 87:d9:1c:8e:ff:6e:7e:53:3a:1f:6d:1a:7f:03:db:03:d5:70: af:b1:37:ed:dc:9a:16:bc:1b:dd:50:48:86:ff:33:48:e4:28: bf:89:0f:f1:1f:1f:00:74:9a:99:28:95:4c:be:83:b8:7a:67: 6c:81:01:c2:ef:58:df:a6:8c:83:65:11:59:51:f4:32:97:39: 14:5b:b8:98:10:5c:18:88:83:90:f2:22:cd:06:2e:f8:bd:2a: 1f:c4:27:a7:36:d1:c1:38:89:b0:f6:50:16:98:18:a2:f8:89: b2:ae:ec:38:75:c0:64:80:e7:72:22:6e:95:d0:39:92:ce:4d: e0:86:fb:66:8d:3e:2e:7b:75:9d:2e:27:5e:12:76:02:83:c1: e5:9b:64:17:d7:ab:a5:e5:f6:18:88:b5:59:5e:b2:f3:9b:72: ad:f0:00:67:d7:35:f2:31:8e:3d:cf:89:63:11:5c:d0:6c:c1: 29:99:35:f2:04:f4:dc:e3:9f:b5:e0:83:66:67:4b:a8:64:73: 81:18:09:21:3f:07:49:2c:8b:c2:68:67:72:cc:aa:13:14:99: d1:e4:35:48:cd:c8:84:eb:e0:16:7e:64:95:9a:69:a0:5d:99: d5:2a:1e:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEEzQTExMC8GA1UEBRMoODNFNEJDQjc2M0I4Q0VEMDM2NTE5MEU3MjgwRjBBNkEz NEIzNUI1MTAeFw0yNDA1MzEwOTM0MjNaFw0yNDA2MDcwOTM0MjNaMBgxFjAUBgNV BAMTDTY2NTk5OTlmLTQ1ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgUMnvJYC+weoMrxxv8dSzHG7wBp3iAW+WDPau2AahOmUV1Uyljnc2/sQ3NQSe mu2jUM6LE7ctMoDFH1P98MMeMOhukyNL6jNSdlEpfvaJhOtNfos2X6f/pqusDfTe z5g35C0AkeGALUqfrB3fEJGIdx+PIzYj/Hs/hnA1LDCkkoej8nov3fvc13aTV1o8 ALTWKTyXZpE8dE22PFMYoLQLDQ7ryOJBEQh9PRRq7ovH7uRa+kr1AU4YNZ836nrX WJmS9VbmN+YEfGf3FE1ChTcsBrl9sVdywqKJq7xI0GPwwQxlsup7tWIxZ0+Hfb48 yp6pAyd2bYb1sQxIs6RVuq6DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkuqXuY10 9DpwA52OQqOk8rFjgqQwHwYDVR0jBBgwFoAUg+S8t2O4ztA2UZDnKA8KajSzW1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QTNBLzE4MTRGMzY2RUNC NTExRUVBNDY1MDMzN0M0RjlBRTAyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZy1TOHQyTzR6dEEyVVpEbktBOEthalN6VzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QTNBLzE4MTRGMzY2RUNCNTExRUVBNDY1MDMzN0M0RjlBRTAyL2ctUzh0Mk80enRB MlVaRG5LQThLYWpTelcxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFzWm75dViVa4AO4ETBpZwkrUIfZHI7/bn5TOh9tGn8D2wPVcK+xN+3c mha8G91QSIb/M0jkKL+JD/EfHwB0mpkolUy+g7h6Z2yBAcLvWN+mjINlEVlR9DKX ORRbuJgQXBiIg5DyIs0GLvi9Kh/EJ6c20cE4ibD2UBaYGKL4ibKu7Dh1wGSA53Ii bpXQOZLOTeCG+2aNPi57dZ0uJ14SdgKDweWbZBfXq6Xl9hiItVlesvObcq3wAGfX NfIxjj3PiWMRXNBswSmZNfIE9Nzjn7Xgg2ZnS6hkc4EYCSE/B0ksi8JoZ3LMqhMU mdHkNUjNyITr4BZ+ZJWaaaBdmdUqHiQ= -----END CERTIFICATE-----Generated at Fri May 31 13:04:59 2024 by rpki-client on console-ams.rpki-client.org