$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: CGlad1zytscKyHDmuRUbECSxrrfzsHa6TZk6LiG1lmY= Subject key identifier: 3A:2B:09:F4:7D:95:BD:59:34:0E:8F:5D:F9:59:8A:46:D3:63:DD:EC Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 054A Signing time: Fri 03 May 2024 01:01:23 +0000 Manifest this update: Fri 03 May 2024 01:01:23 +0000 Manifest next update: Fri 10 May 2024 01:01:23 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: KSpX/2zNkKg/XUN+Te54bgFy72jZ2IaEMPNMeTgdpMU=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: znVrzDU0BSkt2ZYFWZRzHnhuZQN/VFjT6FjpKFztMoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: May 3 01:01:23 2024 GMT Not After : May 10 01:01:23 2024 GMT Subject: CN=66343763-e278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:27:a6:33:88:68:c7:01:1f:99:f3:89:5c: 8a:a7:d7:18:2f:af:6e:60:75:d6:ee:da:28:99:74: c2:ac:f6:b8:a8:91:49:3d:f0:c3:2d:cc:a5:40:70: 44:cf:d1:1e:d4:96:d5:3e:68:69:99:38:43:17:60: 07:db:b4:75:5c:00:8a:53:14:22:8f:14:f6:2e:17: 7c:72:ed:58:c6:92:b5:07:40:86:6e:3a:a5:b2:90: 8d:19:b5:20:e5:eb:b6:87:a0:d9:7a:61:51:6b:61: 73:a1:df:58:15:08:89:45:6d:d5:22:83:0d:0d:28: 2d:38:cc:93:0c:cd:e7:eb:0b:6d:86:ad:0e:f7:35: d9:64:57:61:6a:66:1a:63:5d:f0:9f:97:61:ea:3b: 99:9b:64:07:f9:ad:3f:c2:06:08:94:3a:8a:99:eb: eb:41:ff:e3:65:03:b6:a2:86:b8:aa:66:a6:c1:07: 76:fb:d1:e8:85:07:f3:9a:0c:77:73:c0:bd:3f:ba: f9:6c:06:12:3e:56:9f:c3:7b:d5:e5:47:78:ac:75: f0:1d:bf:8e:4f:3b:62:49:59:27:60:f0:e2:38:f6: ef:26:19:ad:e4:77:e5:3c:6f:a3:ae:2c:70:21:71: 97:14:c4:32:9d:9e:88:12:18:72:80:9b:27:a0:8b: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:09:F4:7D:95:BD:59:34:0E:8F:5D:F9:59:8A:46:D3:63:DD:EC X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:11:f7:03:6e:c3:17:6f:4b:bb:a3:45:c9:d7:c7:75:5e:bb: 3d:fe:51:2a:60:29:4d:72:8d:a6:a8:ca:f1:24:34:3c:45:bc: eb:5a:63:83:4f:1f:37:56:a1:24:81:bc:c2:dc:fb:d1:25:96: c1:7d:f1:d1:11:d7:f1:7f:db:0b:ca:5b:1e:4c:cb:db:c3:7a: a0:5c:fc:db:23:da:7c:24:0f:53:20:6e:c8:4e:57:99:e0:37: b6:13:4b:c8:d1:22:2d:cf:5a:69:11:2d:17:b9:fb:5b:e9:e0: 3a:23:f0:c4:1b:ba:5e:65:d9:9a:8f:0a:7d:b5:3b:c2:72:1e: 91:9d:48:07:6d:d0:57:34:09:bc:03:3c:ce:aa:79:c6:ce:fe: f9:42:78:5a:7b:21:ff:2b:5e:7c:13:6f:6e:ee:b1:a3:c6:2c: 9c:a3:bd:df:aa:19:73:51:33:a8:e4:c1:13:58:b9:db:ef:24: b0:3f:81:65:bd:ef:e1:f2:94:94:0a:1f:82:4d:1e:4b:4b:1e: 57:fc:d1:71:1d:49:d1:66:2a:92:8a:0b:67:a1:fe:b6:22:6b: ed:5c:be:90:b5:b2:73:64:c8:fe:d1:ee:f5:45:c6:d0:65:4a: 16:a6:d7:d9:98:83:42:64:4a:70:b2:56:eb:dd:48:3a:d2:8e: 7b:e2:f3:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjQwNTAzMDEwMTIzWhcNMjQwNTEwMDEwMTIzWjAYMRYwFAYD VQQDEw02NjM0Mzc2My1lMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15snpjOIaMcBH5nziVyKp9cYL69uYHXW7toomXTCrPa4qJFJPfDDLcylQHBE z9Ee1JbVPmhpmThDF2AH27R1XACKUxQijxT2Lhd8cu1YxpK1B0CGbjqlspCNGbUg 5eu2h6DZemFRa2Fzod9YFQiJRW3VIoMNDSgtOMyTDM3n6wtthq0O9zXZZFdhamYa Y13wn5dh6juZm2QH+a0/wgYIlDqKmevrQf/jZQO2ooa4qmamwQd2+9HohQfzmgx3 c8C9P7r5bAYSPlafw3vV5Ud4rHXwHb+OTztiSVknYPDiOPbvJhmt5HflPG+jrixw IXGXFMQynZ6IEhhygJsnoIuLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDorCfR9 lb1ZNA6PXflZikbTY93sMB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUEfcDbsMXb0u7o0XJ18d1Xrs9/lEqYClNco2mqMrxJDQ8RbzrWmOD Tx83VqEkgbzC3PvRJZbBffHREdfxf9sLylseTMvbw3qgXPzbI9p8JA9TIG7ITleZ 4De2E0vI0SItz1ppES0Xuftb6eA6I/DEG7peZdmajwp9tTvCch6RnUgHbdBXNAm8 AzzOqnnGzv75QnhaeyH/K158E29u7rGjxiyco73fqhlzUTOo5METWLnb7ySwP4Fl ve/h8pSUCh+CTR5LSx5X/NFxHUnRZiqSigtnof62ImvtXL6QtbJzZMj+0e71RcbQ ZUoWptfZmINCZEpwslbr3Ug60o574vMS -----END CERTIFICATE-----Generated at Fri May 3 03:10:48 2024 by rpki-client on console-ams.rpki-client.org