$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft File: gUKKAcUWkeeoxdhD7Lax09muQk4.mft (raw, json) Hash identifier: 8Gii/aLqGI5xtRgE3Xf4KU1mOfWSZD3Z/xNFcY9nfkY= Subject key identifier: D9:F1:F2:D0:4C:8B:7F:CE:FA:96:B5:D2:6B:1F:BF:28:0F:C7:28:2D Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft Manifest number: 0B35 Signing time: Sun 02 Jun 2024 20:11:08 +0000 Manifest this update: Sun 02 Jun 2024 20:11:07 +0000 Manifest next update: Sun 09 Jun 2024 20:11:07 +0000 Files and hashes: 1: gUKKAcUWkeeoxdhD7Lax09muQk4.crl (hash: 84YN9pDiJ3n/Bzt45urs/AeXR2cuzHrtaQ/iNpwVUzI=) 2: 1DA7074E94AC11EE9DC7D24AC4F9AE02.roa (hash: p/1tF2/ilvemUOVEPtMudUJxCOZQyGRW0Ck2u46HSpo=) 3: 81EB4A8E47A911EA80B8633AC4F9AE02.roa (hash: G5Ak8TX3+eeBzOkbzLop/v8HwMO/hdELq8urNXz/RJs=) 4: 220BB95647A811EAB74E6635C4F9AE02.roa (hash: xzTGNm+bjyicQUIZ4sTnQPbZ0kR33wMzQnPtwHu4444=) 5: D8F9E264CA3D11EBA982F140C4F9AE02.roa (hash: TeiHm+tWOZxJ0BwaFMPGNNwylndpfoYPBBWK0VrgKyI=) 6: 1E8E348E94AC11EE9DC7D24AC4F9AE02.roa (hash: u/c9m2EvxXRq1q/Pb9LaUIktNo1bXTmNZnS1p4xkJio=) 7: 20F4644647A811EAB74E6635C4F9AE02.roa (hash: WV0iaT4o4mWVunpYKv9lK4g2zUj7MAoL1rXYJ9vhunc=) 8: 38C200523FFE11EB9AE7EE80C4F9AE02.roa (hash: dyQhki+SNLmRg+AAVTc90r70ss3AX+2HiGAnGYOMrmY=) 9: 37988C283FFE11EB9AE7EE80C4F9AE02.roa (hash: 8/lD/Au1/YW1CflKA22bOBOMBwKpdkUGD3WKmGIPAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 20:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Validity Not Before: Jun 2 20:11:07 2024 GMT Not After : Jun 9 20:11:07 2024 GMT Subject: CN=665cd1db-4274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:07:21:28:8b:18:32:89:f1:46:fd:90:65: d5:ca:22:03:ee:1f:e7:6c:19:58:f9:ab:fe:e4:84: 14:6a:6a:65:78:be:ae:a2:a9:82:6b:9c:7e:cf:20: 89:de:f2:c5:ac:bc:43:a3:d6:2c:bd:80:5c:4d:88: 59:ca:92:a4:28:c5:77:51:20:8a:dd:73:38:0a:60: 1e:20:ba:74:a7:0b:61:d2:0d:25:5a:f9:a4:d3:ae: 12:03:4a:fb:f1:9a:8b:57:af:68:4c:7b:ee:2c:25: 16:7d:d3:6e:cf:0a:ac:2d:cd:d3:8b:cf:70:1d:44: f9:39:bd:78:6e:2f:56:03:15:5a:66:4a:e7:29:14: 37:9c:2e:47:96:8a:ba:d5:80:ae:21:f5:1a:67:c3: e7:cb:a5:ee:08:e1:a9:76:66:8f:5a:ac:32:6e:79: 63:ab:b0:b1:11:dc:0d:97:76:a5:7a:f2:b0:2b:24: f3:ed:e9:d8:b8:a5:24:d0:36:2a:0c:da:71:74:a7: f2:61:d3:d5:dd:15:b5:59:e3:60:47:4c:a2:17:3f: 07:92:a2:24:9d:50:35:0d:0c:b2:9a:50:58:f3:08: 15:7f:f2:ea:39:5b:21:68:a7:79:a0:6a:7c:75:34: 18:1f:a4:08:aa:0d:c8:8b:98:3e:34:47:c0:29:d7: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F1:F2:D0:4C:8B:7F:CE:FA:96:B5:D2:6B:1F:BF:28:0F:C7:28:2D X509v3 Authority Key Identifier: keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c6:ee:93:7f:8a:21:22:20:2a:3c:93:44:80:81:5c:af:7a: 0f:97:2a:ef:d7:2f:8a:df:70:8c:d3:ed:4d:0c:cd:8a:6e:0d: 93:bf:05:b6:a5:51:25:da:aa:3b:2b:d5:03:a2:8d:b8:54:f2: 24:29:b4:43:a5:1d:c7:cd:0a:35:f4:95:9d:b5:b8:d0:eb:79: 37:35:15:9a:e3:9b:2f:5e:ae:6c:37:b6:cb:0a:9b:6a:c6:66: 12:ba:49:14:11:78:40:bd:48:db:ea:81:2a:d3:fc:14:68:4f: 4a:3d:8c:1f:7d:fa:29:a0:7f:39:b6:5c:d9:da:67:ab:66:48: a5:3a:47:83:a4:31:2d:ae:c6:95:2c:41:fc:f3:cb:67:1e:7b: c1:85:c5:be:8e:3a:ee:8b:c5:bc:c7:14:1d:11:b9:3b:dc:1c: 4a:c7:c1:68:a6:43:1a:fc:16:81:4e:09:36:27:91:88:c6:bd: 5e:45:69:34:00:a9:99:c4:bc:ba:06:ac:49:22:db:af:39:26: f7:18:de:a2:c8:4f:0f:6a:67:e3:92:9a:d9:5b:4b:2b:09:ff: cf:37:76:82:d3:33:54:46:e0:65:3e:12:12:39:eb:01:b6:c9: 06:25:8c:94:22:53:9c:98:09:69:9b:22:4c:3f:67:d4:21:4b: 9d:84:1c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJGNTIxMTAvBgNVBAUTKDgxNDI4QTAxQzUxNjkxRTdBOEM1RDg0M0VDQjZCMUQz RDlBRTQyNEUwHhcNMjQwNjAyMjAxMTA3WhcNMjQwNjA5MjAxMTA3WjAYMRYwFAYD VQQDEw02NjVjZDFkYi00Mjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjQHISiLGDKJ8Ub9kGXVyiID7h/nbBlY+av+5IQUampleL6uoqmCa5x+zyCJ 3vLFrLxDo9YsvYBcTYhZypKkKMV3USCK3XM4CmAeILp0pwth0g0lWvmk064SA0r7 8ZqLV69oTHvuLCUWfdNuzwqsLc3Ti89wHUT5Ob14bi9WAxVaZkrnKRQ3nC5Hloq6 1YCuIfUaZ8Pny6XuCOGpdmaPWqwybnljq7CxEdwNl3alevKwKyTz7enYuKUk0DYq DNpxdKfyYdPV3RW1WeNgR0yiFz8HkqIknVA1DQyymlBY8wgVf/LqOVshaKd5oGp8 dTQYH6QIqg3Ii5g+NEfAKdfdxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnx8tBM i3/O+pa10msfvygPxygtMB8GA1UdIwQYMBaAFIFCigHFFpHnqMXYQ+y2sdPZrkJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkY1Mi84OEVCQ0ZEQzFE NDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tlZW94ZGhEN0xheDA5bXVR azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVS0tBY1VXa2Vlb3hkaEQ3TGF4MDltdVFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkY1Mi84OEVCQ0ZEQzFENDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tl ZW94ZGhEN0xheDA5bXVRazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLxu6Tf4ohIiAqPJNEgIFcr3oPlyrv1y+K33CM0+1NDM2Kbg2TvwW2 pVEl2qo7K9UDoo24VPIkKbRDpR3HzQo19JWdtbjQ63k3NRWa45svXq5sN7bLCptq xmYSukkUEXhAvUjb6oEq0/wUaE9KPYwfffopoH85tlzZ2merZkilOkeDpDEtrsaV LEH888tnHnvBhcW+jjrui8W8xxQdEbk73BxKx8FopkMa/BaBTgk2J5GIxr1eRWk0 AKmZxLy6BqxJItuvOSb3GN6iyE8PamfjkprZW0srCf/PN3aC0zNURuBlPhISOesB tskGJYyUIlOcmAlpmyJMP2fUIUudhBxc -----END CERTIFICATE-----Generated at Sun Jun 2 21:14:20 2024 by rpki-client on console-ams.rpki-client.org