$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: MH1tpdJ33uC5qYVThifJkVq3KmTgaIUB0uGCMHnVGio= Subject key identifier: FE:AA:D6:5F:B5:65:C3:C7:22:A3:C1:63:0A:51:7B:49:37:9F:07:F4 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 0584 Signing time: Sun 05 May 2024 00:42:16 +0000 Manifest this update: Sun 05 May 2024 00:42:15 +0000 Manifest next update: Sun 12 May 2024 00:42:15 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: kkBUfQGsjwi8zbD7gmsu/8YCWPZ1LEw9+GNeODu9Hs8=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: gunOvJOlbGjXfJHFh/SepIdDyMi1uvKafrROfkiVnXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: May 5 00:42:15 2024 GMT Not After : May 12 00:42:15 2024 GMT Subject: CN=6636d5e7-bc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:78:4e:24:54:aa:ab:e6:89:a8:91:87:7e:a4: 76:0c:14:f3:1e:cc:28:21:7c:2e:be:2c:a0:67:1f: 67:76:50:55:f1:a7:cd:00:57:5b:63:25:34:bd:84: 19:0e:0b:4a:b3:a8:03:b3:07:2c:7f:62:52:dd:41: 94:38:4d:e4:07:79:0b:43:68:6c:75:73:d5:b6:9f: 7a:1b:9c:6a:9b:f2:9b:f8:9d:9e:06:1c:fc:8c:07: 5b:86:f2:37:db:9e:78:1d:33:f9:24:41:51:3f:fa: 29:97:35:34:27:e2:de:c2:49:53:9c:05:a0:80:10: df:a0:23:3c:76:c9:74:a1:66:d4:fc:58:cb:bb:b7: 55:63:7e:a7:d9:3b:fb:65:e6:5a:cf:a3:37:e4:02: ba:36:40:24:d0:19:90:d8:30:4b:f3:d1:6e:24:fc: 77:f2:a2:66:84:ab:32:51:9e:f9:fb:bc:c4:8c:ed: c0:fd:ca:0b:84:4e:bb:e6:35:de:44:0e:64:49:5a: 7c:78:69:23:0e:96:e2:a7:7a:05:7a:de:b6:ce:3d: 02:49:aa:fe:0f:c9:38:98:5a:38:d0:a5:54:6a:b8: 95:fa:41:a1:fe:24:ea:7d:c7:72:a7:59:82:88:fa: 15:ed:da:8f:61:1b:dd:5b:7c:f2:30:3e:2c:44:03: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AA:D6:5F:B5:65:C3:C7:22:A3:C1:63:0A:51:7B:49:37:9F:07:F4 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e3:fd:4a:58:97:05:66:14:a8:35:e4:3c:10:27:ea:58:9e: 4a:95:65:bf:a1:2c:fd:19:79:ed:05:da:7e:07:e1:dc:7e:04: 63:dd:4e:89:1a:46:b0:2c:50:d4:6f:f4:d7:c0:ad:94:40:ee: a6:f2:f8:40:5b:51:82:0a:d5:95:5e:7e:75:9b:e0:da:0a:05: 38:22:3d:19:6e:32:0b:c4:47:b5:04:19:7c:38:d0:9f:2e:6a: ad:a1:31:2d:1c:3b:24:2f:cb:d9:df:b7:31:79:54:68:e2:49: 44:bc:18:5c:23:7b:2b:2d:8d:d4:17:cb:f9:a5:a1:25:84:7c: 23:3d:b5:b8:1f:3e:2d:06:ce:75:2b:07:c7:7f:35:cb:f2:63: 84:e4:cf:1b:76:51:c7:e0:9b:cd:1c:26:12:63:fc:bd:61:b3: 2d:00:0c:61:56:d1:84:f8:7b:2b:9e:94:d1:a8:13:45:79:54: a1:4e:04:ce:83:68:91:17:77:33:b6:6c:bb:17:59:25:7e:37: 8c:ee:ae:b3:a0:57:07:57:53:b8:90:02:9e:07:99:f3:39:07: 43:87:08:61:e2:52:32:1e:5f:f3:ee:49:e2:bf:71:1d:1d:cd: dd:5f:69:85:60:f1:27:cd:55:b6:97:e3:0e:bf:80:2e:a2:7a: fc:5d:22:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjQwNTA1MDA0MjE1WhcNMjQwNTEyMDA0MjE1WjAYMRYwFAYD VQQDEw02NjM2ZDVlNy1iYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+3hOJFSqq+aJqJGHfqR2DBTzHswoIXwuviygZx9ndlBV8afNAFdbYyU0vYQZ DgtKs6gDswcsf2JS3UGUOE3kB3kLQ2hsdXPVtp96G5xqm/Kb+J2eBhz8jAdbhvI3 2554HTP5JEFRP/oplzU0J+LewklTnAWggBDfoCM8dsl0oWbU/FjLu7dVY36n2Tv7 ZeZaz6M35AK6NkAk0BmQ2DBL89FuJPx38qJmhKsyUZ75+7zEjO3A/coLhE675jXe RA5kSVp8eGkjDpbip3oFet62zj0CSar+D8k4mFo40KVUariV+kGh/iTqfcdyp1mC iPoV7dqPYRvdW3zyMD4sRAPpdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6q1l+1 ZcPHIqPBYwpRe0k3nwf0MB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4/1KWJcFZhSoNeQ8ECfqWJ5KlWW/oSz9GXntBdp+B+HcfgRj3U6J GkawLFDUb/TXwK2UQO6m8vhAW1GCCtWVXn51m+DaCgU4Ij0ZbjILxEe1BBl8ONCf LmqtoTEtHDskL8vZ37cxeVRo4klEvBhcI3srLY3UF8v5paElhHwjPbW4Hz4tBs51 KwfHfzXL8mOE5M8bdlHH4JvNHCYSY/y9YbMtAAxhVtGE+HsrnpTRqBNFeVShTgTO g2iRF3cztmy7F1klfjeM7q6zoFcHV1O4kAKeB5nzOQdDhwhh4lIyHl/z7kniv3Ed Hc3dX2mFYPEnzVW2l+MOv4Auonr8XSKG -----END CERTIFICATE-----Generated at Sun May 5 01:13:17 2024 by rpki-client on console-ams.rpki-client.org