$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: EJPx4E3b4blQCTmXgW6TpeCEElxqjrdYex8ZYbMk60o= Subject key identifier: 2A:8A:88:79:9C:11:49:6A:22:1C:07:1C:64:53:6A:76:4A:B6:C5:F1 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 030D Signing time: Sun 19 May 2024 03:09:49 +0000 Manifest this update: Sun 19 May 2024 03:09:48 +0000 Manifest next update: Sun 26 May 2024 03:09:48 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: xHoKSa9+uCOuRp/kMSRIwkU3ITJrOQKJevTxWty6iiM=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: yShCVW/Ki+pOl4xyg9Rzgiedz6DKaXwPSqXRv340YiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: May 19 03:09:48 2024 GMT Not After : May 26 03:09:48 2024 GMT Subject: CN=66496d7c-5240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:04:1d:c7:3b:78:d3:57:7f:f4:16:96:fe: 8b:1d:fc:4d:73:62:ec:70:21:98:bd:54:81:65:bc: c5:b9:f5:96:75:79:16:98:2e:67:20:4b:51:0f:ef: f5:0a:cc:d5:27:74:f3:3d:7e:c6:75:84:c2:e1:a8: 1f:07:0f:9c:de:f7:4f:a2:0e:1a:2e:c2:bd:e5:ee: ec:5b:08:25:4a:27:66:80:93:bd:5b:b8:9c:48:8c: f6:11:1e:57:09:37:ac:33:89:e5:da:ba:6e:47:18: 18:9d:09:b9:a8:88:39:c0:be:65:b2:56:57:8b:a1: ac:46:ac:2f:a2:c1:95:6c:dc:a5:ab:40:88:cb:79: 84:45:55:3f:92:dd:e8:3e:6a:86:52:63:e5:65:82: 5f:15:4c:b2:25:b4:b7:11:b3:ee:c7:0b:8e:e0:cc: 62:e5:51:19:47:de:7a:05:3d:c9:61:06:f9:05:2b: b9:b1:a0:00:30:7e:55:b9:8a:6b:08:bf:19:16:b7: b4:38:d4:a4:01:99:93:a7:e5:d1:f5:fa:08:0c:86: f2:fe:cf:ed:55:34:ea:20:21:a0:31:c3:43:e8:07: e4:bd:09:9c:7b:de:85:8b:11:ef:97:b3:c1:89:0e: 43:9f:9c:a0:d7:b5:0c:71:2c:f2:d6:55:77:bf:1b: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:88:79:9C:11:49:6A:22:1C:07:1C:64:53:6A:76:4A:B6:C5:F1 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b9:0e:d0:ba:a4:71:0c:44:bb:d6:b7:e5:ae:7d:80:31:71: 7e:f5:0f:7b:77:0d:5c:88:bf:d4:c1:4b:11:3e:fa:3a:57:91: cd:ab:20:da:6d:62:d2:40:a0:19:a3:57:a7:b2:6a:68:c1:7a: cb:2d:86:2f:94:07:a0:57:3b:84:80:2d:46:6b:3f:7f:64:59: c4:42:b8:c8:5e:c2:93:cf:ff:2c:af:ac:2d:58:36:13:be:58: 0b:12:59:44:84:a3:ad:e7:5b:a5:f7:5b:23:43:58:9f:e4:c3: f8:7f:6e:78:de:f4:39:6a:d0:27:80:7a:52:56:4d:38:cc:fd: 0c:61:48:fb:f3:00:32:07:39:57:e3:2f:88:7e:ba:57:48:6b: 1c:f0:06:c3:a5:f8:7a:9f:b3:50:7f:67:b8:b4:67:d6:a0:7f: 56:10:52:5a:ad:93:76:86:cb:3a:88:b4:93:60:23:1c:10:68: 07:00:0a:b9:7f:25:ae:e8:9d:7b:8e:7b:56:ae:d6:74:f9:7e: 93:cc:d8:6d:4b:f4:79:c3:85:2d:d8:15:be:8f:64:3b:b7:a8: b9:51:65:76:89:2b:fc:c2:b1:67:71:9f:eb:87:db:36:2c:01: ab:37:3a:85:36:ef:83:fc:b5:b1:7f:0b:71:a5:58:79:73:85: 3b:9d:be:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjQwNTE5MDMwOTQ4WhcNMjQwNTI2MDMwOTQ4WjAYMRYwFAYD VQQDEw02NjQ5NmQ3Yy01MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBsEHcc7eNNXf/QWlv6LHfxNc2LscCGYvVSBZbzFufWWdXkWmC5nIEtRD+/1 CszVJ3TzPX7GdYTC4agfBw+c3vdPog4aLsK95e7sWwglSidmgJO9W7icSIz2ER5X CTesM4nl2rpuRxgYnQm5qIg5wL5lslZXi6GsRqwvosGVbNylq0CIy3mERVU/kt3o PmqGUmPlZYJfFUyyJbS3EbPuxwuO4Mxi5VEZR956BT3JYQb5BSu5saAAMH5VuYpr CL8ZFre0ONSkAZmTp+XR9foIDIby/s/tVTTqICGgMcND6AfkvQmce96FixHvl7PB iQ5Dn5yg17UMcSzy1lV3vxtURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqKiHmc EUlqIhwHHGRTanZKtsXxMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAruQ7QuqRxDES71rflrn2AMXF+9Q97dw1ciL/UwUsRPvo6V5HNqyDa bWLSQKAZo1ensmpowXrLLYYvlAegVzuEgC1Gaz9/ZFnEQrjIXsKTz/8sr6wtWDYT vlgLEllEhKOt51ul91sjQ1if5MP4f2543vQ5atAngHpSVk04zP0MYUj78wAyBzlX 4y+IfrpXSGsc8AbDpfh6n7NQf2e4tGfWoH9WEFJarZN2hss6iLSTYCMcEGgHAAq5 fyWu6J17jntWrtZ0+X6TzNhtS/R5w4Ut2BW+j2Q7t6i5UWV2iSv8wrFncZ/rh9s2 LAGrNzqFNu+D/LWxfwtxpVh5c4U7nb6s -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org