$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: 2Vco11pIVxC/CIydrhyspErNfeR0jV0PBl0XmCfCMac= Subject key identifier: FF:EC:5B:7E:D0:91:02:52:51:F3:F0:81:0F:A6:EE:A8:47:73:AE:62 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: 11 Signing time: Wed 15 May 2024 09:00:05 +0000 Manifest this update: Wed 15 May 2024 09:00:05 +0000 Manifest next update: Wed 22 May 2024 09:00:05 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: jVljR/7unziR9rsru+ZLQ11N7aJjlfBnzvwyt0tJ/HM=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: BGOd98PUeVhCajtNKxl03gfnN9UakYRrbRlF2SGG5p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 09:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: May 15 09:00:05 2024 GMT Not After : May 22 09:00:05 2024 GMT Subject: CN=66447995-3085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:7d:3b:a5:0b:c7:a1:8e:46:19:96:a0:a9: 7f:67:a9:81:0d:56:08:24:80:d6:4c:18:95:94:88: 7c:74:57:6b:59:f7:db:76:3e:71:dd:61:2f:c1:51: 9a:ad:02:87:e7:c4:da:54:f9:ba:59:6e:45:bb:af: 5e:db:b5:45:71:e8:10:38:b0:8d:3a:17:d4:d8:78: e8:cd:c0:a1:27:71:f7:ae:a2:33:b2:61:c5:c9:0f: 05:d9:70:94:27:8e:f9:a8:56:b3:1d:08:d0:24:16: 60:9b:1f:55:8e:6b:cc:b4:2f:72:4d:49:d6:02:5a: 28:23:06:e7:86:3b:93:7d:7e:8e:7a:b3:2e:b4:66: 5b:0b:89:04:f1:b2:e0:ba:1b:2e:46:37:42:01:9c: da:d0:39:8d:76:be:e9:7c:7a:41:31:45:56:20:5f: 12:2d:df:9e:b9:b0:a9:2a:83:70:86:45:64:7b:76: c5:5c:90:6e:70:dd:09:74:94:a6:8b:cd:eb:e1:dd: 10:d6:6f:48:70:b1:ee:40:31:cc:ca:cf:e9:dc:8f: 90:29:f8:db:ed:d1:82:5c:87:22:10:fa:c1:81:57: fe:6d:ae:f0:0e:ba:cd:c0:ac:61:a6:c4:f2:76:01: 24:8f:d1:83:2e:cf:10:86:32:9f:0c:b0:23:3c:77: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:5B:7E:D0:91:02:52:51:F3:F0:81:0F:A6:EE:A8:47:73:AE:62 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:78:4a:5a:1a:3c:30:ee:d6:f0:00:0d:69:fe:cd:b9:dc:8b: 4d:dc:0c:0d:32:4c:b6:3a:33:5b:9d:9b:9a:5f:4b:4f:e7:a2: 79:4f:fa:88:fe:9a:15:16:b7:2c:1d:5e:a1:40:b5:11:f8:3c: 86:e8:7e:e8:27:70:85:5d:c4:59:3f:fc:c0:f8:e9:9a:61:ce: a1:56:4b:62:ea:fc:3a:f8:57:53:e6:76:37:e0:4e:ed:2f:9a: 8e:e7:37:70:9e:67:58:6d:4f:a5:e1:2a:a9:ad:01:11:f5:ab: fe:e9:3a:7d:9f:13:e3:b5:27:6f:f6:d6:01:16:0d:31:b0:0a: 4c:4f:d7:16:f8:b6:30:25:6e:69:98:2a:19:26:85:73:e6:79: 54:69:6e:29:57:07:8c:cd:29:3c:08:4d:98:31:22:34:c9:04: 51:d1:f8:81:b5:ff:22:86:1a:cb:38:ff:a2:83:1d:06:4d:54: 72:c8:34:96:81:6a:45:9c:a8:75:34:9b:7c:81:86:6d:15:74: 73:87:b7:ee:b8:df:0e:7d:6f:45:f2:cb:a4:1b:c9:5c:53:57: 47:33:be:cd:33:e8:fd:4d:50:db:10:60:9f:b1:cd:94:06:1a: 57:8c:e2:d8:2c:66:40:0f:4d:af:c6:99:6d:15:26:06:43:f2: 7e:c2:70:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTk4NzExMC8GA1UEBRMoQjA2MUJDNDhBMTQ0MTAwMEFCRUI4QzQ0OEEwOUYxOTVG OTEzOUUxQTAeFw0yNDA1MTUwOTAwMDVaFw0yNDA1MjIwOTAwMDVaMBgxFjAUBgNV BAMTDTY2NDQ3OTk1LTMwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcsH07pQvHoY5GGZagqX9nqYENVggkgNZMGJWUiHx0V2tZ99t2PnHdYS/BUZqt AofnxNpU+bpZbkW7r17btUVx6BA4sI06F9TYeOjNwKEncfeuojOyYcXJDwXZcJQn jvmoVrMdCNAkFmCbH1WOa8y0L3JNSdYCWigjBueGO5N9fo56sy60ZlsLiQTxsuC6 Gy5GN0IBnNrQOY12vul8ekExRVYgXxIt3565sKkqg3CGRWR7dsVckG5w3Ql0lKaL zevh3RDWb0hwse5AMczKz+ncj5Ap+Nvt0YJchyIQ+sGBV/5trvAOus3ArGGmxPJ2 ASSP0YMuzxCGMp8MsCM8d+13AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/+xbftCR AlJR8/CBD6buqEdzrmIwHwYDVR0jBBgwFoAUsGG8SKFEEACr64xEignxlfkTnhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5OTg3L0YwRkE0RkE2RkMy MjExRUU4QkJGRUM2QUM0RjlBRTAyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5o by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0dHOFNLRkVFQUNyNjR4RWlnbnhsZmtUbmhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 OTg3L0YwRkE0RkE2RkMyMjExRUU4QkJGRUM2QUM0RjlBRTAyL3NHRzhTS0ZFRUFD cjY0eEVpZ254bGZrVG5oby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAR4SloaPDDu1vAADWn+zbnci03cDA0yTLY6M1udm5pfS0/nonlP+oj+ mhUWtywdXqFAtRH4PIbofugncIVdxFk//MD46ZphzqFWS2Lq/Dr4V1PmdjfgTu0v mo7nN3CeZ1htT6XhKqmtARH1q/7pOn2fE+O1J2/21gEWDTGwCkxP1xb4tjAlbmmY KhkmhXPmeVRpbilXB4zNKTwITZgxIjTJBFHR+IG1/yKGGss4/6KDHQZNVHLINJaB akWcqHU0m3yBhm0VdHOHt+643w59b0Xyy6QbyVxTV0czvs0z6P1NUNsQYJ+xzZQG GleM4tgsZkAPTa/GmW0VJgZD8n7CcCU= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org