$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: lfs97xZKLiG0M8DdKOVHOSxHtOp0CYscrxUQhGLbIYU= Subject key identifier: 1E:B9:7A:DF:A9:DB:B6:63:31:76:D2:F4:E7:BA:B7:0D:A8:23:14:CE Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 0120 Signing time: Sun 19 May 2024 05:11:15 +0000 Manifest this update: Sun 19 May 2024 05:11:15 +0000 Manifest next update: Sun 26 May 2024 05:11:15 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: r9Rd7c/VumwTkdeu1B0Hw1kie7Za9NUqA+pSSfug5PA=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: YAXA02U3eZrR0Yjns12Z2nAWMDc+7YprNjgj1meJyJM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: L7qLWgmtFTBW+bZWQgEGFlOf1bK7ALDRsuEjN3YGqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: May 19 05:11:15 2024 GMT Not After : May 26 05:11:15 2024 GMT Subject: CN=664989f3-c3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:08:48:a9:ff:cf:50:df:84:8c:e8:f7:46: 14:3c:c8:15:d7:83:11:19:68:62:2c:f5:df:32:a6: 2c:42:58:21:e2:7a:14:97:82:02:2f:c2:cc:38:07: d4:a9:2b:b2:a7:3e:ad:eb:2b:62:f8:48:50:55:36: 06:01:2f:4d:4e:fd:be:83:7e:26:96:ed:7b:cd:0e: 85:c3:58:d6:95:d3:ba:4f:95:91:50:d2:fe:a4:d9: a5:db:96:13:48:31:f0:3e:26:24:4a:e9:d7:83:51: bc:32:94:8f:cd:53:47:ad:e0:ed:51:50:c4:e7:a1: 4d:23:bc:4d:e9:d5:49:ad:a4:f1:b5:71:75:b3:6a: 5a:5d:06:da:c6:22:24:97:59:3e:e7:56:49:27:39: b2:1f:7e:44:09:27:35:c9:45:5d:ae:1e:0e:f3:0f: 86:3b:c9:7a:33:21:48:75:9a:21:01:a5:fb:1f:1c: dc:d6:02:33:9e:a2:32:30:b2:ae:aa:82:f4:4e:61: b9:2f:05:9b:95:32:ef:11:ae:e0:f6:fa:75:7e:34: f6:3d:cd:b6:53:2b:b5:4b:ba:0f:68:b0:c0:6b:b1: 96:1e:a1:84:9c:1b:d3:72:01:08:27:ff:ac:ce:27: c0:7d:01:6a:54:92:48:2e:63:6d:88:19:50:c9:f6: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:7A:DF:A9:DB:B6:63:31:76:D2:F4:E7:BA:B7:0D:A8:23:14:CE X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:74:7f:b6:09:80:32:15:45:9c:b0:81:6a:c3:52:2f:18: 3c:29:86:b4:db:c7:d1:71:29:7d:d2:b7:05:e6:5a:e4:31:5c: b8:c6:8c:5c:34:3e:86:cb:04:f4:05:41:fe:04:10:da:82:3e: 8d:d1:a6:25:b3:ca:6c:51:c6:4a:b2:ff:5a:d6:07:2e:c1:e7: 2f:7d:f8:7e:bf:b2:7f:57:5f:db:20:5f:41:08:a6:fd:b6:f1: 2d:a6:30:f5:cf:c2:a8:48:ac:9c:13:d7:32:c5:f0:57:39:92: 6f:53:4b:60:ff:d2:bc:73:bf:46:8f:1a:a8:68:ea:10:f7:3d: 1b:5e:ee:35:b9:b3:48:89:ed:a5:46:b9:cb:3a:cc:8e:85:a0: 60:d5:41:a3:15:ef:77:21:a8:bc:5a:4d:98:fe:29:59:d2:07: 3d:2b:25:97:77:f8:b9:ed:88:1c:05:f8:9e:79:d3:ee:6f:ce: 9a:ae:a0:03:f8:18:a8:76:a8:1f:cc:93:23:12:18:e4:bb:c6: e2:b1:bf:a3:bb:93:8f:3c:b1:f2:e8:4d:08:e7:0b:55:3a:ce: 3a:c7:d6:ed:f3:bc:ab:b2:20:87:d1:57:bb:d7:e0:4a:23:4a: fc:77:3f:46:36:cb:77:72:f2:50:d5:74:39:f6:8a:81:c5:cf: f8:31:df:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjQwNTE5MDUxMTE1WhcNMjQwNTI2MDUxMTE1WjAYMRYwFAYD VQQDEw02NjQ5ODlmMy1jM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4kISKn/z1DfhIzo90YUPMgV14MRGWhiLPXfMqYsQlgh4noUl4ICL8LMOAfU qSuypz6t6yti+EhQVTYGAS9NTv2+g34mlu17zQ6Fw1jWldO6T5WRUNL+pNml25YT SDHwPiYkSunXg1G8MpSPzVNHreDtUVDE56FNI7xN6dVJraTxtXF1s2paXQbaxiIk l1k+51ZJJzmyH35ECSc1yUVdrh4O8w+GO8l6MyFIdZohAaX7Hxzc1gIznqIyMLKu qoL0TmG5LwWblTLvEa7g9vp1fjT2Pc22Uyu1S7oPaLDAa7GWHqGEnBvTcgEIJ/+s zifAfQFqVJJILmNtiBlQyfYm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB65et+p 27ZjMXbS9Oe6tw2oIxTOMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEU3R/tgmAMhVFnLCBasNSLxg8KYa028fRcSl90rcF5lrkMVy4xoxc ND6GywT0BUH+BBDagj6N0aYls8psUcZKsv9a1gcuwecvffh+v7J/V1/bIF9BCKb9 tvEtpjD1z8KoSKycE9cyxfBXOZJvU0tg/9K8c79GjxqoaOoQ9z0bXu41ubNIie2l RrnLOsyOhaBg1UGjFe93Iai8Wk2Y/ilZ0gc9KyWXd/i57YgcBfieedPub86arqAD +BiodqgfzJMjEhjku8bisb+ju5OPPLHy6E0I5wtVOs46x9bt87yrsiCH0Ve71+BK I0r8dz9GNst3cvJQ1XQ59oqBxc/4Md86 -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org