$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: eJFtu7ngy/qCOJ/KaAj0efn3NohO7yaUAMvCzBAKVGQ= Subject key identifier: 97:B0:3F:AF:F3:4F:0E:DC:D7:AD:8D:C8:46:1E:C0:02:AD:52:37:3D Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 042B Signing time: Wed 01 May 2024 02:20:55 +0000 Manifest this update: Wed 01 May 2024 02:20:55 +0000 Manifest next update: Wed 08 May 2024 02:20:55 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: APdx+sWfDidQu1POtWAfInkZwHriA1C3A0Z/Vh7tTDc=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: RUb4fveS6KNpdqQZ3iK34TgQh1XppIjAE8PLiJx+i58=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: oV2v23VyIR5s0kEFyHz3FmFpgbo4gZtQ6jb48hoRfTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: May 1 02:20:55 2024 GMT Not After : May 8 02:20:55 2024 GMT Subject: CN=6631a707-4bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:52:54:94:3d:0c:4a:03:1b:74:10:97:a1:12: 42:a6:0c:45:28:7d:19:34:60:a6:49:54:be:b9:ea: bc:83:b0:d0:e3:c2:26:2e:f2:2f:b5:4e:9c:f6:27: 56:9d:94:dc:a3:9c:ab:a2:85:30:58:70:e9:97:39: 43:e1:43:b0:7c:fa:6a:42:12:84:2c:0f:51:fc:01: 32:83:4a:1d:c2:eb:c2:f6:11:1e:19:a8:9b:fc:ab: 82:c4:3c:74:a3:31:e4:98:62:35:56:0a:6f:6f:7b: 7d:45:0c:b5:8e:f6:a2:11:8e:ab:4f:fb:58:43:ab: 29:99:4c:47:3f:6b:1f:08:25:8b:a1:d9:bd:09:66: ce:f2:c7:0b:45:e0:4d:30:36:68:1e:5d:53:da:b4: c8:5c:71:e0:26:c3:aa:84:57:6b:e4:9c:2f:2a:b3: 29:02:72:53:ed:6d:e2:3d:dd:e7:63:1b:01:73:fb: 7e:c0:5c:21:c4:40:a8:2d:05:01:89:bd:fb:22:8f: 18:4e:a4:47:fb:8f:b6:78:1f:28:2a:f4:82:ba:dd: 8f:08:d1:1b:15:76:b1:28:c0:ac:71:11:12:d4:56: 84:99:e6:16:ea:07:ea:1a:88:14:b2:5d:2d:7d:50: 04:51:6a:62:ac:7f:8c:3c:b5:87:11:c0:17:f7:6d: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B0:3F:AF:F3:4F:0E:DC:D7:AD:8D:C8:46:1E:C0:02:AD:52:37:3D X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d4:0d:4b:3e:a7:32:42:e4:36:80:3b:79:bc:6a:71:a2:eb: 5b:4c:62:f4:23:d2:72:f7:4b:f4:54:6a:d6:ff:41:8b:8c:b3: cc:6f:5e:42:45:c8:90:7e:85:7e:97:77:d9:b6:97:56:48:3f: d6:6b:f0:7b:8d:b9:41:0e:8c:78:0a:0d:85:55:90:d0:a6:69: c1:e0:f8:37:c9:4a:eb:f1:d6:a1:c8:df:b5:24:21:9a:18:c7: 2d:d3:bc:0f:eb:e4:57:e3:77:d6:39:60:a2:e7:77:08:8a:03: 83:30:b4:02:5c:ff:0c:92:a5:e9:be:60:f2:ad:b7:e9:d4:89: dc:50:f1:d5:0c:b1:ee:0d:a9:a4:18:ec:74:bb:3b:09:0e:ad: ca:c9:b9:5c:29:29:b9:41:09:03:d1:0f:76:b5:82:26:fa:00: 5a:ca:78:9a:63:e1:6e:30:f3:b4:f2:ab:a8:90:60:e1:6d:89: 17:92:3b:88:3c:ff:4e:d9:7b:d0:bc:d5:0b:48:23:b2:32:86: 46:17:98:d4:ad:b5:e6:8d:ce:7f:e5:5a:9c:bd:7b:96:81:44: 71:79:05:94:0f:64:21:50:05:8e:7c:a5:8a:a2:2e:f3:b1:63: 2b:1b:ee:71:5d:95:79:ff:5d:3c:53:86:37:f9:5a:cb:7a:23: 59:43:50:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjQwNTAxMDIyMDU1WhcNMjQwNTA4MDIyMDU1WjAYMRYwFAYD VQQDEw02NjMxYTcwNy00YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFJUlD0MSgMbdBCXoRJCpgxFKH0ZNGCmSVS+ueq8g7DQ48ImLvIvtU6c9idW nZTco5yrooUwWHDplzlD4UOwfPpqQhKELA9R/AEyg0odwuvC9hEeGaib/KuCxDx0 ozHkmGI1Vgpvb3t9RQy1jvaiEY6rT/tYQ6spmUxHP2sfCCWLodm9CWbO8scLReBN MDZoHl1T2rTIXHHgJsOqhFdr5JwvKrMpAnJT7W3iPd3nYxsBc/t+wFwhxECoLQUB ib37Io8YTqRH+4+2eB8oKvSCut2PCNEbFXaxKMCscRES1FaEmeYW6gfqGogUsl0t fVAEUWpirH+MPLWHEcAX921EnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJewP6/z Tw7c162NyEYewAKtUjc9MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa1A1LPqcyQuQ2gDt5vGpxoutbTGL0I9Jy90v0VGrW/0GLjLPMb15C RciQfoV+l3fZtpdWSD/Wa/B7jblBDox4Cg2FVZDQpmnB4Pg3yUrr8dahyN+1JCGa GMct07wP6+RX43fWOWCi53cIigODMLQCXP8MkqXpvmDyrbfp1IncUPHVDLHuDamk GOx0uzsJDq3KyblcKSm5QQkD0Q92tYIm+gBayniaY+FuMPO08quokGDhbYkXkjuI PP9O2XvQvNULSCOyMoZGF5jUrbXmjc5/5VqcvXuWgURxeQWUD2QhUAWOfKWKoi7z sWMrG+5xXZV5/108U4Y3+VrLeiNZQ1AL -----END CERTIFICATE-----Generated at Wed May 1 04:49:22 2024 by rpki-client on console-ams.rpki-client.org