$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft File: gUHVSVFieGXQZezgAAkR-g6k_60.mft (raw, json) Hash identifier: 4QRDB5neIfZKMs/aw/UZXQ8ByqNjGCAYlck3CpirSx0= Subject key identifier: 49:02:25:3A:A4:64:EF:D2:12:3C:F9:C8:78:64:58:5F:8F:09:AB:59 Authority key identifier: 81:41:D5:49:51:62:78:65:D0:65:EC:E0:00:09:11:FA:0E:A4:FF:AD Certificate issuer: /CN=A91D5ED4/serialNumber=8141D54951627865D065ECE0000911FA0EA4FFAD Certificate serial: 0FB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft Manifest number: 0FA4 Signing time: Sat 18 May 2024 18:04:56 +0000 Manifest this update: Sat 18 May 2024 18:04:56 +0000 Manifest next update: Sat 25 May 2024 18:04:56 +0000 Files and hashes: 1: gUHVSVFieGXQZezgAAkR-g6k_60.crl (hash: KpQoNfikaZh9AZNM3wCfKuo+BO9crJaRjEK9vlZCl/s=) 2: B9F60EAE3DAF11EA87C61F7FC4F9AE02.roa (hash: iU49nvPIRjrZJA/Xk0SIcWY01nuOj5adTFeJaiHn9to=) 3: 29443BB41DFF11ED87243D87C4F9AE02.roa (hash: nAGQobHoBKBatOIwCkXQxFjJ6QH6/y53xlmVJ7spn8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.crl rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4017 (0xfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ED4/serialNumber=8141D54951627865D065ECE0000911FA0EA4FFAD Validity Not Before: May 18 18:04:56 2024 GMT Not After : May 25 18:04:56 2024 GMT Subject: CN=6648edc8-aede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:ea:df:2d:cb:63:3c:6a:7b:f4:6c:a6:7f: f6:6e:3f:18:a9:13:7b:d9:b0:d7:9b:37:d8:4a:a0: 57:0e:4f:aa:c2:87:04:d7:33:a7:06:ff:13:c3:46: db:f3:d9:4a:a2:c8:82:ca:94:bb:cb:3e:33:dd:05: 90:f4:b6:8d:85:5f:4a:24:d6:d9:29:ef:76:e7:b7: 30:ae:03:c4:b6:f8:db:f8:81:ba:70:a8:5b:e8:10: 82:ea:ce:97:c1:2d:3c:45:e0:8c:71:1f:5a:54:9f: ff:7c:d3:46:43:05:e2:aa:67:4d:13:52:34:5c:99: 33:ed:41:53:24:42:af:b5:b3:f7:ab:69:13:c7:8f: 96:ca:d8:9a:cc:79:6c:01:c5:9f:92:6a:e8:f0:3d: f6:1a:5d:5b:a6:c8:14:14:2f:03:eb:67:c4:03:c6: e4:bd:20:d8:86:02:e9:f1:25:de:28:0b:f1:14:c2: b1:34:20:3f:bf:24:ea:48:4b:c8:ea:62:5d:5e:73: 53:bf:f7:83:14:e1:de:db:2d:83:ba:60:eb:38:6e: 92:0a:9b:9b:42:7c:37:4c:fd:c3:1a:65:53:79:01: 9a:20:8d:c8:ee:71:2b:1a:ac:4d:6c:d3:68:5a:4f: d4:35:28:75:98:80:f0:04:21:fa:69:76:a5:d3:39: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:25:3A:A4:64:EF:D2:12:3C:F9:C8:78:64:58:5F:8F:09:AB:59 X509v3 Authority Key Identifier: keyid:81:41:D5:49:51:62:78:65:D0:65:EC:E0:00:09:11:FA:0E:A4:FF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b4:51:f3:c1:05:79:f2:b3:7c:19:f5:8d:13:cd:cd:d6:34: 5c:f2:19:15:7c:ef:5d:d1:8c:df:d9:a1:1a:1c:d0:f3:45:57: 1f:29:91:b6:e8:a4:46:ec:29:fd:01:08:dd:6c:4b:f7:b1:de: e2:16:82:ab:e4:83:a6:03:a3:03:d2:d2:27:87:a2:41:52:68: 06:95:60:9c:ad:27:23:89:4d:24:1e:4c:d0:c2:9e:2b:76:60: f3:91:05:04:1f:44:8c:26:0a:c9:c3:12:99:2b:7f:cf:14:8d: a0:8c:05:f2:ef:63:73:2a:52:dc:2a:0c:34:49:92:5d:68:b6: 48:54:5e:b6:50:90:77:5b:08:4c:50:d2:10:0d:a6:0b:1b:21: d3:77:7d:b7:4d:cc:2b:24:cd:e4:0e:aa:db:3a:dd:b6:c6:b8: 39:74:a5:69:ea:62:a1:ad:f2:48:e8:59:c8:86:15:f4:62:01: a6:c9:60:f5:87:4d:ba:39:2a:01:19:53:34:a3:42:1a:f3:97: ad:63:8e:e3:4c:05:7e:e8:61:a4:7a:01:99:09:fa:e3:d1:0d: 48:63:a0:aa:e5:f2:26:8a:95:df:23:96:69:ae:32:94:65:f2: d1:5b:af:03:98:e0:0c:d0:62:a6:2a:14:f2:69:df:c4:4f:2a: ce:6d:a6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFRDQxMTAvBgNVBAUTKDgxNDFENTQ5NTE2Mjc4NjVEMDY1RUNFMDAwMDkxMUZB MEVBNEZGQUQwHhcNMjQwNTE4MTgwNDU2WhcNMjQwNTI1MTgwNDU2WjAYMRYwFAYD VQQDEw02NjQ4ZWRjOC1hZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59zq3y3LYzxqe/Rspn/2bj8YqRN72bDXmzfYSqBXDk+qwocE1zOnBv8Tw0bb 89lKosiCypS7yz4z3QWQ9LaNhV9KJNbZKe9257cwrgPEtvjb+IG6cKhb6BCC6s6X wS08ReCMcR9aVJ//fNNGQwXiqmdNE1I0XJkz7UFTJEKvtbP3q2kTx4+WytiazHls AcWfkmro8D32Gl1bpsgUFC8D62fEA8bkvSDYhgLp8SXeKAvxFMKxNCA/vyTqSEvI 6mJdXnNTv/eDFOHe2y2DumDrOG6SCpubQnw3TP3DGmVTeQGaII3I7nErGqxNbNNo Wk/UNSh1mIDwBCH6aXal0zn/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkCJTqk ZO/SEjz5yHhkWF+PCatZMB8GA1UdIwQYMBaAFIFB1UlRYnhl0GXs4AAJEfoOpP+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVENC8yQTE1RjI0MDM0 REMxMUU5OEI2N0I4NUVDNEY5QUUwMi9nVUhWU1ZGaWVHWFFaZXpnQUFrUi1nNmtf NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVSFZTVkZpZUdYUVplemdBQWtSLWc2a182MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVENC8yQTE1RjI0MDM0REMxMUU5OEI2N0I4NUVDNEY5QUUwMi9nVUhWU1ZGaWVH WFFaZXpnQUFrUi1nNmtfNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAztFHzwQV58rN8GfWNE83N1jRc8hkVfO9d0Yzf2aEaHNDzRVcfKZG2 6KRG7Cn9AQjdbEv3sd7iFoKr5IOmA6MD0tInh6JBUmgGlWCcrScjiU0kHkzQwp4r dmDzkQUEH0SMJgrJwxKZK3/PFI2gjAXy72NzKlLcKgw0SZJdaLZIVF62UJB3WwhM UNIQDaYLGyHTd323TcwrJM3kDqrbOt22xrg5dKVp6mKhrfJI6FnIhhX0YgGmyWD1 h026OSoBGVM0o0Ia85etY47jTAV+6GGkegGZCfrj0Q1IY6Cq5fImipXfI5ZprjKU ZfLRW68DmOAM0GKmKhTyad/ETyrObaZL -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org