$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: ImfXT+keAsL+yAwpGrMtF9IQk/0iGOk2nr1pK99Svfs= Subject key identifier: 6E:70:8D:0F:AC:83:77:8A:36:80:DC:41:F4:DB:92:D5:38:CF:EE:60 Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1B74 Signing time: Thu 02 May 2024 16:41:18 +0000 Manifest this update: Thu 02 May 2024 16:41:17 +0000 Manifest next update: Thu 09 May 2024 16:41:17 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: ZZ9HC4uvVrARnF/PrTVpTJom31O3uhUP1wHuNPAG1Zg=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: U3IpEIQd/Tw2xubAYPeBmnwW+xhdoTFgtE7qEfwYvec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7043 (0x1b83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: May 2 16:41:17 2024 GMT Not After : May 9 16:41:17 2024 GMT Subject: CN=6633c22e-cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:ee:1d:ee:43:d3:46:17:2a:37:28:f3:cb: e1:3d:ba:31:72:c4:f5:dd:70:8d:10:4a:fc:98:c8: d5:2a:8b:1e:48:2d:fc:1c:06:97:5a:42:46:e0:92: 48:32:3f:3e:8d:0c:12:ed:0c:e1:56:ce:13:ad:4d: 2b:d9:f8:d8:56:44:2f:79:50:35:bf:d0:db:24:91: 9e:9a:93:9d:93:e0:f5:c1:a4:fd:8f:8d:10:30:f5: 4e:b4:75:0b:c5:eb:a2:2b:a2:02:c7:61:f6:78:06: 68:23:d5:f8:0b:d0:d0:ef:03:23:97:a3:f8:ae:f3: da:70:57:1e:0e:3d:8c:8e:24:ee:3d:5d:9e:4c:1a: c0:bd:65:dd:23:91:04:ee:c2:d0:f8:74:40:d9:41: 67:c1:50:d2:11:1a:93:8f:9a:aa:36:bc:8f:14:a4: 34:cf:c2:4c:ba:8f:da:ce:f9:48:58:55:64:89:38: 69:88:f7:c3:a3:cb:c5:be:7d:15:7b:2d:a1:79:c0: 5c:f8:86:03:dc:29:1b:e4:9b:26:2d:f2:ea:63:6f: 0d:3c:a2:54:58:06:11:b8:4f:ee:b8:5d:d4:a1:88: ab:48:3f:5f:89:09:b7:5d:c9:17:b5:45:45:33:53: 57:39:26:be:b6:0f:f1:79:4a:2f:44:86:8a:e3:18: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:8D:0F:AC:83:77:8A:36:80:DC:41:F4:DB:92:D5:38:CF:EE:60 X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d0:d0:70:5e:49:05:22:12:44:a2:e6:2c:e6:5e:3d:87:ae: 05:b9:6e:0d:65:74:25:78:c3:17:6d:22:fd:02:97:c0:07:db: 58:f3:21:23:64:01:39:ff:72:4c:78:1f:e2:58:2f:8b:ce:d2: 7e:7c:81:d9:04:17:7b:11:58:54:cd:25:cc:1b:b3:5c:79:6f: 55:c1:d8:89:a4:75:36:5a:4e:d6:59:b1:e4:09:14:d5:85:6c: 7c:db:21:40:28:87:2d:5f:58:05:67:0c:c7:1b:a7:0a:95:70: f8:a2:b2:38:f2:fa:9b:a2:45:c5:27:fb:d3:77:0e:49:be:0b: b3:29:53:62:b2:52:02:8d:0d:40:6d:5f:cc:16:12:df:19:07: 50:c0:75:d8:04:c9:94:48:52:35:31:3b:e8:4d:c1:29:a9:2a: 4f:53:b7:16:84:09:73:94:be:a2:2d:b6:53:1a:21:69:f9:a3: 5f:b5:02:e3:38:6b:a9:02:7a:5e:a4:66:7d:c6:26:83:fb:de: 2e:85:ca:13:4a:d9:c5:45:8d:b9:c8:84:2f:72:f3:58:7a:91: 8c:39:dc:a7:b5:fe:bc:d5:c5:22:d0:db:9d:db:9e:12:89:98: 09:22:31:cd:6d:cd:bd:2f:74:88:29:27:5a:63:4a:ca:31:35: 3d:1d:a7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjQwNTAyMTY0MTE3WhcNMjQwNTA5MTY0MTE3WjAYMRYwFAYD VQQDEw02NjMzYzIyZS1jYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZPuHe5D00YXKjco88vhPboxcsT13XCNEEr8mMjVKoseSC38HAaXWkJG4JJI Mj8+jQwS7QzhVs4TrU0r2fjYVkQveVA1v9DbJJGempOdk+D1waT9j40QMPVOtHUL xeuiK6ICx2H2eAZoI9X4C9DQ7wMjl6P4rvPacFceDj2MjiTuPV2eTBrAvWXdI5EE 7sLQ+HRA2UFnwVDSERqTj5qqNryPFKQ0z8JMuo/azvlIWFVkiThpiPfDo8vFvn0V ey2hecBc+IYD3Ckb5JsmLfLqY28NPKJUWAYRuE/uuF3UoYirSD9fiQm3XckXtUVF M1NXOSa+tg/xeUovRIaK4xhCBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5wjQ+s g3eKNoDcQfTbktU4z+5gMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS0NBwXkkFIhJEouYs5l49h64FuW4NZXQleMMXbSL9ApfAB9tY8yEj ZAE5/3JMeB/iWC+LztJ+fIHZBBd7EVhUzSXMG7NceW9VwdiJpHU2Wk7WWbHkCRTV hWx82yFAKIctX1gFZwzHG6cKlXD4orI48vqbokXFJ/vTdw5JvguzKVNislICjQ1A bV/MFhLfGQdQwHXYBMmUSFI1MTvoTcEpqSpPU7cWhAlzlL6iLbZTGiFp+aNftQLj OGupAnpepGZ9xiaD+94uhcoTStnFRY25yIQvcvNYepGMOdyntf681cUi0Nud254S iZgJIjHNbc29L3SIKSdaY0rKMTU9HafY -----END CERTIFICATE-----Generated at Thu May 2 17:18:27 2024 by rpki-client on console-ams.rpki-client.org