$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json) Hash identifier: 3o5vJmLhfqktIWH1C51M4M0amaGrYkHA+7RUP9R3+EA= Subject key identifier: A0:C5:10:5A:E6:7C:C1:A2:A0:8C:1A:9E:11:F6:58:1F:79:94:7E:60 Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft Manifest number: 01FE Signing time: Sat 27 Apr 2024 04:05:54 +0000 Manifest this update: Sat 27 Apr 2024 04:05:54 +0000 Manifest next update: Sat 04 May 2024 04:05:54 +0000 Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: MFaDpvrtlXkVDkq63UY96N1go6DpKDqopPrWhYpRy0w=) 2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: MhAxL8s969meCKEJYh/A6392Up+MC9qpXlObK9HjlKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Validity Not Before: Apr 27 04:05:54 2024 GMT Not After : May 4 04:05:54 2024 GMT Subject: CN=662c79a2-b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b6:b3:2e:58:f0:55:63:c2:70:d8:73:1d:64: 12:56:23:82:56:ca:83:24:d4:2b:58:a1:03:d6:66: 41:0b:47:9e:30:f9:d2:f9:53:e7:05:f3:73:7b:29: 7a:ce:2a:38:c7:ab:54:6f:ec:c9:49:9a:20:00:d9: 52:3c:b7:0a:dc:a2:3e:75:e6:e3:73:00:7b:24:51: 08:ce:89:ab:da:94:62:21:cd:ab:81:94:ab:2b:4e: a7:37:4a:b1:c9:eb:03:26:b9:20:0f:44:02:c1:f5: 6b:6c:f3:5a:cb:c2:cf:2c:ea:1f:5b:06:1c:33:71: 58:57:c6:c8:ea:ce:34:53:6f:01:a1:c3:32:1b:9e: d3:ab:fb:b9:59:5e:6b:1e:95:c1:e4:87:6c:4f:f7: 61:f2:a5:2e:a0:4b:25:b6:67:6d:30:6c:9a:e3:46: 5a:06:39:49:5f:ef:d0:96:d7:89:67:3a:5c:5a:c2: b1:47:48:89:40:68:7e:d6:16:7b:02:48:bc:61:8e: 09:4b:4b:08:51:25:8d:58:3a:52:34:12:a5:39:f2: 7f:15:84:d2:33:73:ce:b8:b8:26:50:20:d2:28:76: a2:f4:04:89:a7:3e:14:7f:4f:d6:b5:8e:27:16:c7: 1f:66:73:87:3c:16:33:f7:e8:7e:f8:66:7e:8e:38: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:10:5A:E6:7C:C1:A2:A0:8C:1A:9E:11:F6:58:1F:79:94:7E:60 X509v3 Authority Key Identifier: keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:81:31:3d:bc:42:74:a9:5f:04:d7:51:d2:d8:d9:bc:47:11: 3c:0a:be:af:c2:fa:b0:aa:03:0d:ee:e6:57:33:ba:8b:0a:8d: 3b:59:f0:93:8e:af:8a:13:2c:b4:70:28:59:b1:9e:a7:7f:57: 45:74:10:dd:c9:31:34:5b:0e:45:7b:25:59:a6:77:ab:6a:ec: 88:b5:50:76:63:b6:c6:cb:2b:69:12:f8:fa:94:51:bc:0b:ab: 11:1f:5a:c7:e0:24:fe:61:89:49:a6:80:48:59:39:83:57:92: 66:4d:36:07:ed:09:0f:5d:c4:59:d4:c2:74:5c:05:e1:f1:a8: 5b:42:53:34:33:f5:18:57:9a:48:86:89:b8:4b:24:3d:4f:21: e2:5f:85:4e:7b:76:22:45:a6:4a:98:cb:4f:89:3c:8a:3f:cd: c0:41:9e:ba:64:ec:41:36:c0:4e:10:13:bf:47:26:11:b7:43: d8:2e:6d:c8:2e:5b:51:0c:ec:a7:23:f2:a9:0a:3e:28:83:6e: 74:db:83:37:28:8e:cf:47:39:c1:e5:c0:6e:91:8f:67:b8:c0: b3:b5:23:b8:7f:e5:0c:7f:3b:78:64:75:b8:ca:fa:ef:95:62: 7c:e2:d9:0c:4e:12:df:ff:4d:26:a8:f6:91:b5:b4:1b:b6:47: 7d:36:1a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0 NzcyRThGRUYwHhcNMjQwNDI3MDQwNTU0WhcNMjQwNTA0MDQwNTU0WjAYMRYwFAYD VQQDEw02NjJjNzlhMi1iN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bazLljwVWPCcNhzHWQSViOCVsqDJNQrWKED1mZBC0eeMPnS+VPnBfNzeyl6 zio4x6tUb+zJSZogANlSPLcK3KI+debjcwB7JFEIzomr2pRiIc2rgZSrK06nN0qx yesDJrkgD0QCwfVrbPNay8LPLOofWwYcM3FYV8bI6s40U28BocMyG57Tq/u5WV5r HpXB5IdsT/dh8qUuoEsltmdtMGya40ZaBjlJX+/QlteJZzpcWsKxR0iJQGh+1hZ7 Aki8YY4JS0sIUSWNWDpSNBKlOfJ/FYTSM3POuLgmUCDSKHai9ASJpz4Uf0/WtY4n FscfZnOHPBYz9+h++GZ+jjiM3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDFEFrm fMGioIwanhH2WB95lH5gMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwgTE9vEJ0qV8E11HS2Nm8RxE8Cr6vwvqwqgMN7uZXM7qLCo07WfCT jq+KEyy0cChZsZ6nf1dFdBDdyTE0Ww5FeyVZpnerauyItVB2Y7bGyytpEvj6lFG8 C6sRH1rH4CT+YYlJpoBIWTmDV5JmTTYH7QkPXcRZ1MJ0XAXh8ahbQlM0M/UYV5pI hom4SyQ9TyHiX4VOe3YiRaZKmMtPiTyKP83AQZ66ZOxBNsBOEBO/RyYRt0PYLm3I LltRDOynI/KpCj4og25024M3KI7PRznB5cBukY9nuMCztSO4f+UMfzt4ZHW4yvrv lWJ84tkMThLf/00mqPaRtbQbtkd9Nhrj -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:24 2024 by rpki-client on console-ams.rpki-client.org