$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: KPNWGgVFY/vYrQkQX81TZk9dHodoYyzI229QGg8UihA= Subject key identifier: F7:57:0B:4D:E3:E5:B9:7F:9D:D6:8C:18:8B:E1:0F:9C:FD:1D:D2:8C Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0C39 Signing time: Fri 26 Apr 2024 18:57:49 +0000 Manifest this update: Fri 26 Apr 2024 18:57:48 +0000 Manifest next update: Fri 03 May 2024 18:57:48 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: Ia7knSV2goPw8BsMf6ORYUWnE6gRjBC8MYfvGZURspM=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: NXZtMP8QIEkBZDxt3A22a3JGSYC7bg2dQfJiVL0IKAY=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 38yLKN6yjR8G1JYsGzdn7Gki8XoazSfdMX6az4kRom4=) 4: B0D340BE101E11ED9FA78415C4F9AE02.roa (hash: fk+yqfR0fVI1eDXCWxm3bx5h8N8HFig5LbDvOTLclhQ=) 5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: 6g1lkhKMAHqBuQe+eySRpMFD6htPI+a6Ewmu9/TBywU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Apr 26 18:57:48 2024 GMT Not After : May 3 18:57:48 2024 GMT Subject: CN=662bf92d-8898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:37:ef:98:5b:95:ae:b0:65:ce:df:84:79: 56:ab:16:cf:02:95:b3:6b:ed:c2:11:e1:e5:30:eb: de:93:c4:54:43:fd:88:77:90:af:9b:ac:47:a9:20: df:f2:f9:31:3a:27:5b:98:48:32:38:46:77:ef:0d: 39:79:bf:a7:4a:39:0f:64:4c:1f:31:09:3f:b3:8b: d1:3f:3c:1d:1e:5a:c2:95:2c:63:25:7e:48:19:eb: 67:6e:f0:94:55:ae:6d:96:d4:32:91:6d:29:e2:1c: 63:9f:0b:b1:3c:a4:0a:fd:f0:2b:9f:aa:35:28:76: f3:67:08:95:6a:e0:24:35:a4:e1:a7:5f:c6:09:ba: 2f:9d:71:71:b4:e1:75:3c:08:9b:91:39:da:9c:c0: c6:53:88:95:21:b6:9e:96:40:2e:44:da:17:80:c8: 45:18:e4:16:d7:b1:37:b4:21:98:19:11:43:5f:c5: 89:1b:bc:6a:a9:2f:85:43:70:b5:ff:4f:f9:1c:c5: e2:d9:ef:65:54:8a:78:52:dd:0e:c8:9e:a2:38:b7: 7a:84:10:b6:a6:e3:23:77:61:29:7d:fd:dd:fd:4e: 75:f6:24:8c:e9:19:31:01:fc:92:32:cd:fa:86:49: 81:77:ec:a9:60:27:e4:72:35:15:0c:6e:30:87:32: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:57:0B:4D:E3:E5:B9:7F:9D:D6:8C:18:8B:E1:0F:9C:FD:1D:D2:8C X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7d:c5:c8:4f:88:6e:b8:17:e7:f3:87:0e:e6:8f:bc:a6:bb: cb:d9:cd:11:27:3f:37:fd:21:68:79:b7:6e:af:e3:a2:13:16: f2:ce:14:c1:e6:aa:c1:c4:09:12:73:53:05:88:09:0f:d1:c2: 78:55:06:5c:97:be:07:c2:ce:84:e0:26:de:05:1c:c4:cc:b7: d0:05:8c:6a:bb:20:b4:3e:40:bb:63:6e:e6:03:0c:9b:64:92: e4:02:bd:63:03:f8:f1:ad:4f:1d:81:2b:c1:16:6f:44:94:84: bf:14:ae:24:2e:ab:b9:93:ce:a1:34:01:8e:37:fc:7a:cd:8e: 57:de:15:a2:e6:fd:0c:39:bd:7c:9b:eb:25:f2:f3:8c:92:4c: a5:8c:f3:49:fc:17:70:e9:54:c3:62:8b:9d:e9:29:a2:0c:9f: 9f:97:4c:54:bc:b4:42:73:63:f7:0d:1d:36:97:34:a4:e4:23: 68:d2:c0:2d:08:95:4d:fa:5e:32:16:5c:25:72:04:a3:7c:9e: 28:79:e7:90:5e:7b:62:46:60:2a:89:47:ed:b1:ed:42:08:2c: 04:85:22:69:f1:ed:6e:91:8c:47:f5:96:9d:f9:49:9a:10:74: 0f:26:95:92:98:46:4c:3d:a4:7c:40:cc:c3:9d:ee:b9:a6:2d: 22:51:93:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjQwNDI2MTg1NzQ4WhcNMjQwNTAzMTg1NzQ4WjAYMRYwFAYD VQQDEw02NjJiZjkyZC04ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0o375hbla6wZc7fhHlWqxbPApWza+3CEeHlMOvek8RUQ/2Id5Cvm6xHqSDf 8vkxOidbmEgyOEZ37w05eb+nSjkPZEwfMQk/s4vRPzwdHlrClSxjJX5IGetnbvCU Va5tltQykW0p4hxjnwuxPKQK/fArn6o1KHbzZwiVauAkNaThp1/GCbovnXFxtOF1 PAibkTnanMDGU4iVIbaelkAuRNoXgMhFGOQW17E3tCGYGRFDX8WJG7xqqS+FQ3C1 /0/5HMXi2e9lVIp4Ut0OyJ6iOLd6hBC2puMjd2Epff3d/U519iSM6RkxAfySMs36 hkmBd+ypYCfkcjUVDG4whzIpUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdXC03j 5bl/ndaMGIvhD5z9HdKMMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBofcXIT4huuBfn84cO5o+8prvL2c0RJz83/SFoebdur+OiExbyzhTB 5qrBxAkSc1MFiAkP0cJ4VQZcl74Hws6E4CbeBRzEzLfQBYxquyC0PkC7Y27mAwyb ZJLkAr1jA/jxrU8dgSvBFm9ElIS/FK4kLqu5k86hNAGON/x6zY5X3hWi5v0MOb18 m+sl8vOMkkyljPNJ/Bdw6VTDYoud6SmiDJ+fl0xUvLRCc2P3DR02lzSk5CNo0sAt CJVN+l4yFlwlcgSjfJ4oeeeQXntiRmAqiUftse1CCCwEhSJp8e1ukYxH9Zad+Uma EHQPJpWSmEZMPaR8QMzDne65pi0iUZNd -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:27 2024 by rpki-client on console-ams.rpki-client.org