$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: XXbV34dN7jW/asCMS3Vtmx2aowuuEWYCSslu3Ll2Aq4= Subject key identifier: 68:1E:FD:21:EA:EE:76:40:E1:1E:7E:B0:97:0E:BD:C4:10:06:29:8E Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: DB Signing time: Fri 03 May 2024 06:17:59 +0000 Manifest this update: Fri 03 May 2024 06:17:58 +0000 Manifest next update: Fri 10 May 2024 06:17:58 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: 2+cog0chdDTkaq1qQNg7I3PyEB8sFX2GgkuuimEsfD4=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: Ui/QnP01hpvTt4Kwc9g4FJqYkxBDeQTtmQ9yVgJx8bM=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: i03lBnfDNHY/sYmQfX16IPVZCxFCGwznGSQxDY92raY=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: z0EtLWEQp9O+xeRsHBz+7LlglO6xcn6/HeB52vSAbyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: May 3 06:17:58 2024 GMT Not After : May 10 06:17:58 2024 GMT Subject: CN=66348197-62a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:0c:a9:5f:c6:cd:13:bd:51:ed:05:3c:75: 1a:03:29:e0:41:2f:ea:16:cb:63:6b:37:36:37:6f: 58:22:fc:a2:e8:33:00:38:35:53:af:53:40:d5:9f: 14:33:6b:b4:08:ec:65:d0:0d:b0:cd:e2:2c:85:ab: 10:ea:fd:cf:ce:af:9e:1b:4f:7b:96:2c:43:89:29: 72:96:39:7e:0d:2e:00:64:8a:f3:ca:97:57:42:c0: f6:c7:87:f3:22:f1:0c:b8:90:70:70:f1:e1:20:f6: 64:fa:de:fa:50:3d:1a:f1:01:2d:30:a7:c5:5a:62: 69:e3:7b:27:4e:f8:73:c4:03:ff:2d:60:3a:a7:90: ff:16:c6:79:36:ea:7a:f8:30:06:62:16:05:48:64: a7:6d:cf:2f:9e:a5:16:2d:29:94:e7:1a:4d:19:2a: dd:57:e1:b4:3b:07:e0:58:af:d2:8a:b3:51:68:95: 2a:6f:c2:fa:36:f3:03:a9:b1:5f:8b:4c:ac:a3:36: 79:1c:69:2b:f3:c6:79:09:be:fd:1a:6b:c2:0f:8d: dc:2c:be:46:e3:71:2f:b4:65:fa:93:1d:5e:35:89: bc:69:b4:57:b7:e8:33:ce:2c:38:6d:c7:1e:81:ba: 21:69:ab:c5:7e:7f:ec:ea:9b:fe:f5:61:c0:ca:7b: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:FD:21:EA:EE:76:40:E1:1E:7E:B0:97:0E:BD:C4:10:06:29:8E X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:03:e7:0d:59:8d:36:49:32:60:24:ee:77:2c:e3:60:c0:89: e1:17:96:df:7c:5a:22:75:a2:b9:2d:5c:21:b1:f3:67:68:93: 80:b9:c3:66:e2:a5:66:cc:62:a8:d1:a3:54:d9:b7:fb:be:4e: 65:e3:66:c1:80:c1:a2:9d:73:2b:a6:88:bb:d4:0e:7c:6b:d5: 03:21:34:e2:a2:43:6f:5b:eb:3d:12:c8:b9:9e:b2:02:cc:72: c5:09:49:d4:b3:38:83:6d:3f:eb:0e:71:01:81:03:65:fe:9a: fe:24:45:05:16:6a:92:eb:d6:fa:9b:6c:90:1f:ff:3c:b4:ba: ce:14:8b:d0:57:3c:73:ec:cd:8e:39:6f:93:8d:d8:47:a5:62: a2:7b:05:a0:9a:31:97:21:b3:87:4d:8d:8e:4d:52:1c:6e:26: 98:61:60:0c:08:a8:a3:ee:36:55:4d:da:cd:58:de:45:0d:e7: fa:c3:61:5a:8e:5b:32:d2:76:8d:fc:2e:e4:4f:9a:f8:90:92: 8e:55:99:ef:49:67:14:a4:58:32:6f:55:af:41:24:0d:f1:dd: 23:c9:46:3c:91:17:7a:c1:a5:84:c2:3e:c0:44:b5:e6:96:ea: 9b:d8:a6:6e:6a:84:20:6f:b7:7b:fe:f6:29:a4:f3:b3:3e:11: 31:96:08:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjQwNTAzMDYxNzU4WhcNMjQwNTEwMDYxNzU4WjAYMRYwFAYD VQQDEw02NjM0ODE5Ny02MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DMMqV/GzRO9Ue0FPHUaAyngQS/qFstjazc2N29YIvyi6DMAODVTr1NA1Z8U M2u0COxl0A2wzeIshasQ6v3Pzq+eG097lixDiSlyljl+DS4AZIrzypdXQsD2x4fz IvEMuJBwcPHhIPZk+t76UD0a8QEtMKfFWmJp43snTvhzxAP/LWA6p5D/FsZ5Nup6 +DAGYhYFSGSnbc8vnqUWLSmU5xpNGSrdV+G0OwfgWK/SirNRaJUqb8L6NvMDqbFf i0ysozZ5HGkr88Z5Cb79GmvCD43cLL5G43EvtGX6kx1eNYm8abRXt+gzziw4bcce gbohaavFfn/s6pv+9WHAynvp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGge/SHq 7nZA4R5+sJcOvcQQBimOMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoA+cNWY02STJgJO53LONgwInhF5bffFoidaK5LVwhsfNnaJOAucNm 4qVmzGKo0aNU2bf7vk5l42bBgMGinXMrpoi71A58a9UDITTiokNvW+s9Esi5nrIC zHLFCUnUsziDbT/rDnEBgQNl/pr+JEUFFmqS69b6m2yQH/88tLrOFIvQVzxz7M2O OW+TjdhHpWKiewWgmjGXIbOHTY2OTVIcbiaYYWAMCKij7jZVTdrNWN5FDef6w2Fa jlsy0naN/C7kT5r4kJKOVZnvSWcUpFgyb1WvQSQN8d0jyUY8kRd6waWEwj7ARLXm luqb2KZuaoQgb7d7/vYppPOzPhExlggy -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org