$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: QIDc9fAAaZu2Y4il0NOOohMrJSJTJqZieWOaE+CvA0s= Subject key identifier: ED:AB:B5:E7:D1:10:A0:6B:08:BD:28:78:E6:37:9E:56:96:FD:95:16 Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 0686 Signing time: Tue 30 Apr 2024 23:43:19 +0000 Manifest this update: Tue 30 Apr 2024 23:43:18 +0000 Manifest next update: Tue 07 May 2024 23:43:18 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: HxQ58ST/jyTZIbaSqxJLqD/Ak/kUQeuVK+gdRdsKwqA=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: pvGor71t4ioPGT4f0E8Hry/0JGwGZCFr6ATYIOq/AWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Apr 30 23:43:18 2024 GMT Not After : May 7 23:43:18 2024 GMT Subject: CN=66318216-c3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0b:d2:7a:df:c7:e4:dd:b5:29:76:fd:0b:82: a7:b3:a5:ea:7d:a5:0d:9a:8a:77:7b:ae:61:71:81: 67:fd:ba:97:07:52:3c:ab:2c:63:3f:fa:4e:d4:7e: 40:95:9a:ee:84:89:2f:bf:01:15:60:4c:57:96:c0: de:bc:45:58:16:f3:f2:c2:e7:ef:13:ec:b9:fc:ea: 49:b5:a6:99:a1:54:18:9a:17:cb:48:2e:15:0c:62: bd:d5:a3:c4:3e:02:c5:46:4a:bb:3e:ba:72:8b:fe: 16:c9:6f:16:00:cf:ee:52:d9:90:c5:46:44:d1:ba: 18:21:90:7b:c6:c7:47:0d:2f:b8:01:0e:22:f3:9e: dd:f2:b9:ae:6c:1e:df:af:05:54:10:4b:f0:a9:0a: ae:25:75:7e:d7:ff:41:ef:46:7a:fa:6d:e2:03:3a: 72:85:cc:a7:41:3f:d2:ae:13:f1:2c:72:a8:7d:ef: 7a:ca:bc:c4:7b:41:97:28:85:d6:da:c4:d3:c3:e8: e5:6b:33:76:0e:3c:dd:6f:3d:98:f4:60:96:9c:86: fb:91:54:66:c2:b4:67:47:2f:20:b7:9d:5b:18:6b: b1:58:98:e0:68:b1:c4:f6:89:a8:b9:7c:24:36:84: 2b:20:9c:5e:ca:1a:b6:25:33:df:d2:02:b4:e9:d5: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AB:B5:E7:D1:10:A0:6B:08:BD:28:78:E6:37:9E:56:96:FD:95:16 X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d8:1d:48:fb:88:27:c2:d2:aa:9c:9e:99:be:d1:25:79:1a: 2f:af:c6:3b:b0:d3:80:d1:7a:2b:82:c2:1d:90:63:0b:6b:9e: 9a:1c:68:50:b0:cc:de:4e:a9:d9:3b:50:27:65:40:8c:ca:29: 42:39:8f:46:51:46:44:4d:c7:a8:62:16:98:f6:de:2d:ed:37: d5:82:44:be:48:9a:1f:e4:c7:21:4e:4d:70:b0:56:ce:93:0e: e5:5e:5b:46:dc:15:db:ea:16:eb:a8:7f:71:6c:4c:35:0c:90: 64:83:89:fc:fa:f7:eb:ad:73:22:76:51:c3:c9:65:45:6b:07: 58:bc:d9:88:07:08:e8:bc:9b:30:2e:79:b8:29:d0:c0:72:92: 79:d8:f1:32:32:85:d5:1c:53:fb:17:37:47:63:02:c2:16:5f: e7:35:aa:ec:62:f8:62:20:ea:e7:08:4b:57:42:1f:f9:c4:94: 5f:fb:2b:64:2f:6f:70:76:35:1f:28:3d:c5:49:bd:cc:57:fd: 96:a4:be:b5:fc:5c:31:ac:8a:ec:f2:1d:cf:0a:6c:97:ac:54: c8:6c:ba:a1:d2:7b:c5:d0:28:f7:b5:6c:1f:73:3e:51:b4:9f: 69:09:bc:2e:55:03:f3:c3:e5:9d:b3:68:b2:20:1b:eb:9b:39: e3:54:67:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjQwNDMwMjM0MzE4WhcNMjQwNTA3MjM0MzE4WjAYMRYwFAYD VQQDEw02NjMxODIxNi1jM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gvSet/H5N21KXb9C4Kns6XqfaUNmop3e65hcYFn/bqXB1I8qyxjP/pO1H5A lZruhIkvvwEVYExXlsDevEVYFvPywufvE+y5/OpJtaaZoVQYmhfLSC4VDGK91aPE PgLFRkq7Prpyi/4WyW8WAM/uUtmQxUZE0boYIZB7xsdHDS+4AQ4i857d8rmubB7f rwVUEEvwqQquJXV+1/9B70Z6+m3iAzpyhcynQT/SrhPxLHKofe96yrzEe0GXKIXW 2sTTw+jlazN2Djzdbz2Y9GCWnIb7kVRmwrRnRy8gt51bGGuxWJjgaLHE9omouXwk NoQrIJxeyhq2JTPf0gK06dWCNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2rtefR EKBrCL0oeOY3nlaW/ZUWMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA2B1I+4gnwtKqnJ6ZvtEleRovr8Y7sNOA0XorgsIdkGMLa56aHGhQ sMzeTqnZO1AnZUCMyilCOY9GUUZETceoYhaY9t4t7TfVgkS+SJof5MchTk1wsFbO kw7lXltG3BXb6hbrqH9xbEw1DJBkg4n8+vfrrXMidlHDyWVFawdYvNmIBwjovJsw Lnm4KdDAcpJ52PEyMoXVHFP7FzdHYwLCFl/nNarsYvhiIOrnCEtXQh/5xJRf+ytk L29wdjUfKD3FSb3MV/2WpL61/FwxrIrs8h3PCmyXrFTIbLqh0nvF0Cj3tWwfcz5R tJ9pCbwuVQPzw+Wds2iyIBvrmznjVGfB -----END CERTIFICATE-----Generated at Wed May 1 00:35:48 2024 by rpki-client on console-ams.rpki-client.org