$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json) Hash identifier: npUtgplV6+GGRNnp+o9mfroAxTkGajwpm/SDXtPgRi8= Subject key identifier: C1:A9:1B:75:4D:A2:C8:46:F8:61:73:9D:11:23:CC:D6:1B:FE:12:DF Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft Manifest number: 0134 Signing time: Tue 07 May 2024 04:58:39 +0000 Manifest this update: Tue 07 May 2024 04:58:38 +0000 Manifest next update: Tue 14 May 2024 04:58:38 +0000 Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: nVVM9oy1w/vS6p0PmaG8C8nRwvzcR/9N0WzPP5Yz0OA=) 2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: MuB76Lbxbupdwoe9xhayAdd4VVYRzmFU6otiNJ6/kG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: May 7 04:58:38 2024 GMT Not After : May 14 04:58:38 2024 GMT Subject: CN=6639b4ff-4667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:bc:bb:51:66:7e:22:cf:86:13:d2:e0:92: 68:27:38:6d:0a:b2:87:e9:ae:83:19:ee:f6:0f:61: cf:73:8a:87:9f:4d:1f:49:7a:3f:13:52:ea:74:b1: cf:80:94:85:2d:97:c7:e9:be:86:7a:4e:59:e1:a1: 58:d6:13:23:d9:d1:6f:f9:8a:4a:8c:13:7f:5c:5f: e4:a6:8b:f1:aa:56:05:8f:1d:14:30:14:d2:9c:30: c6:35:e7:59:8b:34:60:ba:84:47:e7:a4:bd:65:9d: e6:78:29:79:a0:f9:96:8b:52:46:9b:4d:d9:9f:cb: 06:6e:a7:dd:d8:d8:47:b4:8f:45:c4:66:14:04:e5: d9:9c:96:98:ec:b6:4e:9f:58:a7:c4:c0:10:27:39: 37:fb:a5:55:bd:1a:af:51:af:97:b8:7c:42:16:34: de:1a:8e:92:f0:48:a5:14:14:18:e0:76:8c:3e:9b: 7a:64:6e:2d:e8:79:6c:d0:6e:64:b2:54:33:14:42: c6:d7:77:25:c3:e6:84:d1:ac:62:38:8d:08:3a:9b: 79:8d:49:6f:d8:1a:a3:df:59:dd:7a:cc:39:c9:d6: e8:23:62:94:e9:17:58:64:39:90:0c:a2:17:56:7a: 51:d6:ec:42:77:09:c0:48:c3:a8:86:99:c2:1e:6e: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A9:1B:75:4D:A2:C8:46:F8:61:73:9D:11:23:CC:D6:1B:FE:12:DF X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:12:57:6c:a7:b3:32:36:a3:a7:e9:ec:17:1a:29:45:8b:4f: cc:cd:20:cc:f9:63:1a:f5:62:64:d6:05:f5:ee:5b:96:c3:84: 22:9a:24:77:8c:ad:93:2d:88:b4:80:49:cb:0c:61:4f:d4:77: 81:7e:b0:cc:22:0d:72:9c:1c:15:4c:be:eb:1b:e8:fd:ab:de: 54:b0:33:05:20:b7:50:eb:ee:da:e0:34:30:f3:a1:49:30:39: 75:28:5a:a0:8b:4c:e6:f1:61:05:10:84:a5:18:27:35:7d:54: ba:5a:85:1a:42:30:94:d4:0a:4e:4f:84:c1:02:41:85:95:0b: 4e:d2:8c:f5:83:44:1b:9c:4e:78:5c:58:50:6e:10:fc:19:aa: 76:55:91:d4:57:61:96:88:c9:68:0f:5b:3c:8a:22:6a:de:d7: c7:2c:9b:0c:0b:22:8d:02:53:05:00:a7:d7:f7:7b:2f:08:1c: 76:8f:2d:26:00:a4:a9:9c:19:56:f7:db:c5:17:0e:83:fc:11: fe:fe:38:b3:02:bf:06:53:e0:2f:22:8e:d4:6c:a8:81:30:c2: ab:20:56:00:81:56:0c:ca:fd:0f:11:d9:b0:70:80:87:9a:47: 99:b3:38:2f:32:fc:2d:4a:d6:ce:55:22:a3:99:55:fb:3a:ac: 0d:e7:c4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjQwNTA3MDQ1ODM4WhcNMjQwNTE0MDQ1ODM4WjAYMRYwFAYD VQQDEw02NjM5YjRmZi00NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh+8u1FmfiLPhhPS4JJoJzhtCrKH6a6DGe72D2HPc4qHn00fSXo/E1LqdLHP gJSFLZfH6b6Gek5Z4aFY1hMj2dFv+YpKjBN/XF/kpovxqlYFjx0UMBTSnDDGNedZ izRguoRH56S9ZZ3meCl5oPmWi1JGm03Zn8sGbqfd2NhHtI9FxGYUBOXZnJaY7LZO n1inxMAQJzk3+6VVvRqvUa+XuHxCFjTeGo6S8EilFBQY4HaMPpt6ZG4t6Hls0G5k slQzFELG13clw+aE0axiOI0IOpt5jUlv2Bqj31ndesw5ydboI2KU6RdYZDmQDKIX VnpR1uxCdwnASMOohpnCHm5uvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGpG3VN oshG+GFznREjzNYb/hLfMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Eldsp7MyNqOn6ewXGilFi0/MzSDM+WMa9WJk1gX17luWw4QimiR3 jK2TLYi0gEnLDGFP1HeBfrDMIg1ynBwVTL7rG+j9q95UsDMFILdQ6+7a4DQw86FJ MDl1KFqgi0zm8WEFEISlGCc1fVS6WoUaQjCU1ApOT4TBAkGFlQtO0oz1g0QbnE54 XFhQbhD8Gap2VZHUV2GWiMloD1s8iiJq3tfHLJsMCyKNAlMFAKfX93svCBx2jy0m AKSpnBlW99vFFw6D/BH+/jizAr8GU+AvIo7UbKiBMMKrIFYAgVYMyv0PEdmwcICH mkeZszgvMvwtStbOVSKjmVX7OqwN58QY -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org