$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: sRoqyO1wUVgaIznDQFR/M+XhcBo2mf/Dj1GjKlIEoZY= Subject key identifier: B3:F6:54:24:20:EC:96:EC:7B:20:C1:B0:9D:C4:84:DF:22:60:1C:B3 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 036E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 036B Signing time: Sun 19 May 2024 02:49:51 +0000 Manifest this update: Sun 19 May 2024 02:49:51 +0000 Manifest next update: Sun 26 May 2024 02:49:51 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: IZ/30JrIX3o9rde01kTq03vPBeo2FwzNs+zhqgBtJp8=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: ds+qaw3dGk+5wdxup1MkFf79YEILW3/vQ3fIAFmvJcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: May 19 02:49:51 2024 GMT Not After : May 26 02:49:51 2024 GMT Subject: CN=664968cf-ab8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:ea:a3:fa:5f:b5:39:ff:27:51:54:0e:ff: c1:30:0c:a2:7c:6a:c9:64:0a:93:69:e7:a9:94:d4: d0:53:e6:9e:51:a9:db:a3:d4:24:74:6e:aa:d0:61: f6:9a:a4:da:88:72:15:cd:25:b9:d8:8f:a8:d8:87: 64:dd:21:c0:40:db:f4:72:df:e3:08:26:c4:45:9f: 80:30:c1:76:47:14:70:0f:48:03:05:52:91:b7:28: df:73:42:6a:05:a9:85:25:83:78:38:3f:cb:37:be: 70:50:44:d8:5c:65:71:84:a9:59:08:24:28:96:c0: 04:52:d9:59:ff:bb:23:84:db:bc:60:e1:50:8a:b1: c2:e8:a2:e6:a9:ae:a1:e8:37:07:89:8f:13:11:5b: 87:92:90:3d:74:03:56:a2:58:1b:d9:4f:da:30:c6: 09:2d:5a:7d:e1:53:b5:5f:5a:c8:28:89:93:aa:27: 12:98:4f:ed:4c:cd:e5:02:61:90:54:ae:1b:1c:31: 50:d5:c3:1b:99:64:a5:03:d5:35:9d:e7:09:30:14: ed:1a:8f:e4:7c:08:04:fc:63:69:e3:88:87:4d:d8: 7f:a5:2d:3d:a0:ab:b4:45:29:90:9f:fa:6b:1d:78: b8:f7:d5:d2:ff:0d:6d:b3:3a:bf:cc:1b:54:b1:e0: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:54:24:20:EC:96:EC:7B:20:C1:B0:9D:C4:84:DF:22:60:1C:B3 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:09:9e:6c:c3:41:a5:09:49:0b:d9:b7:38:d6:4c:ae:38:3d: bb:b6:98:bd:39:c2:26:af:41:7f:e2:08:dc:c5:31:2f:46:12: 11:d8:ea:4a:ab:8d:85:00:56:17:cd:24:81:66:15:03:a7:75: 00:f8:eb:f2:0b:67:46:19:72:dd:1a:9d:81:3e:91:c9:e5:09: 6e:7a:53:34:9a:62:43:d5:ce:a3:1a:ec:ed:de:92:92:9c:0f: ec:1c:cc:f6:f2:9b:c6:9c:7b:c7:9e:a4:74:e2:81:75:f1:80: 3e:f6:ef:15:42:08:fe:8c:ce:f8:8f:0d:74:c3:94:e3:33:5d: a2:07:07:44:13:0b:4d:c6:e1:57:f3:44:34:89:43:d1:3d:36: 59:92:e3:4a:6d:33:ad:ee:4a:0e:3e:2c:0e:97:6c:df:43:0e: 78:c9:3e:8f:80:98:94:cb:b8:52:f7:5b:41:aa:af:f0:f8:f1: 44:e5:f4:fd:59:d3:5d:6e:53:0e:7d:ba:b9:0b:eb:28:b6:2b: 0c:a0:ab:64:e2:64:60:8d:0b:47:9f:7c:2d:09:4b:50:58:14: 91:20:4a:9b:6c:70:fa:90:2d:3e:5f:90:0a:3c:98:4b:1f:af: 4f:53:2d:a0:ca:dd:f5:d3:8b:fa:a3:28:28:64:08:8e:e8:82: 6b:fa:1c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjQwNTE5MDI0OTUxWhcNMjQwNTI2MDI0OTUxWjAYMRYwFAYD VQQDEw02NjQ5NjhjZi1hYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T7qo/pftTn/J1FUDv/BMAyifGrJZAqTaeeplNTQU+aeUanbo9QkdG6q0GH2 mqTaiHIVzSW52I+o2Idk3SHAQNv0ct/jCCbERZ+AMMF2RxRwD0gDBVKRtyjfc0Jq BamFJYN4OD/LN75wUETYXGVxhKlZCCQolsAEUtlZ/7sjhNu8YOFQirHC6KLmqa6h 6DcHiY8TEVuHkpA9dANWolgb2U/aMMYJLVp94VO1X1rIKImTqicSmE/tTM3lAmGQ VK4bHDFQ1cMbmWSlA9U1necJMBTtGo/kfAgE/GNp44iHTdh/pS09oKu0RSmQn/pr HXi499XS/w1tszq/zBtUseCPTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP2VCQg 7JbseyDBsJ3EhN8iYByzMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5CZ5sw0GlCUkL2bc41kyuOD27tpi9OcImr0F/4gjcxTEvRhIR2OpK q42FAFYXzSSBZhUDp3UA+OvyC2dGGXLdGp2BPpHJ5QluelM0mmJD1c6jGuzt3pKS nA/sHMz28pvGnHvHnqR04oF18YA+9u8VQgj+jM74jw10w5TjM12iBwdEEwtNxuFX 80Q0iUPRPTZZkuNKbTOt7koOPiwOl2zfQw54yT6PgJiUy7hS91tBqq/w+PFE5fT9 WdNdblMOfbq5C+sotisMoKtk4mRgjQtHn3wtCUtQWBSRIEqbbHD6kC0+X5AKPJhL H69PUy2gyt3104v6oygoZAiO6IJr+hwi -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org