$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: h0MxP5Hu14tmJgGcz/69XNeXdvzwihjes/P1cdgm0jI= Subject key identifier: 9F:78:CB:89:74:6B:29:CC:97:E0:27:16:6C:24:48:32:70:72:46:98 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 0F5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 0F53 Signing time: Thu 02 May 2024 18:14:58 +0000 Manifest this update: Thu 02 May 2024 18:14:58 +0000 Manifest next update: Thu 09 May 2024 18:14:58 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: HyKMmsGI9LQfzgfODD16mrd4QB116a1N8igzksqshlc=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: LmhQsBTb+BuO+Fwea9Qf/BB3cKTPF95IWgnUADqnRaM=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: 4rMhUP1V6/f4KSbXB3ah+ZfQ57lXwXKofHxQEjiCVfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3931 (0xf5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: May 2 18:14:58 2024 GMT Not After : May 9 18:14:58 2024 GMT Subject: CN=6633d822-9f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:97:d7:de:d9:48:80:2a:e0:93:c2:86:d6: a1:16:6a:63:e0:11:c6:a3:af:12:9c:29:cd:00:a8: f8:da:e1:9b:86:a0:4d:44:af:c6:b3:2f:cc:7f:96: b9:d1:ae:1e:39:ab:bc:3b:e3:ec:1e:4a:33:3b:9a: eb:36:dd:d0:9e:a9:cb:cb:b7:3f:4e:14:af:09:43: aa:b4:f3:0d:21:71:2e:a0:89:f8:3d:19:d1:83:05: c6:ec:8d:b2:9e:23:60:97:30:bb:6c:e8:39:b4:03: 43:2b:d6:15:0f:4f:8c:7c:9f:08:9c:3d:d9:90:a0: 08:96:fb:0c:bf:d4:ab:80:d6:60:82:2f:6e:fc:22: 62:cd:e3:1f:1a:97:81:e3:e8:5f:7c:f5:7c:ef:6f: cb:c7:fd:e7:ed:b0:af:16:9c:58:48:91:08:31:6d: 5a:92:d5:68:16:7c:ea:2c:0c:de:70:34:88:ac:32: df:e2:8d:d9:69:8d:59:8f:46:3e:e7:0c:82:3c:52: 8f:38:61:86:8a:29:f2:cd:ba:23:25:d4:5f:f6:f9: cb:90:ba:be:2e:d0:26:78:e0:3a:4b:05:61:83:20: bb:25:15:d4:a6:d8:4f:06:5f:8a:09:8e:b6:23:50: c3:9d:e5:10:55:ed:b8:07:80:16:e8:de:20:97:11: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:78:CB:89:74:6B:29:CC:97:E0:27:16:6C:24:48:32:70:72:46:98 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bf:88:b6:c2:3c:ea:4d:95:ec:75:19:28:84:a3:7c:c7:ac: 7d:e8:e3:e3:66:24:d0:37:2d:6d:e9:01:fc:ed:44:68:fd:bf: d0:5d:25:42:c4:79:f7:7e:a5:4c:68:61:b1:38:d8:f9:6e:4f: 89:04:c5:6a:7e:12:14:c6:d4:96:f2:25:4c:a5:17:21:67:ce: ad:1d:5f:ae:18:66:02:7c:50:09:dc:f6:14:90:61:73:36:87: 15:44:2c:cf:54:dd:c8:e9:6d:83:22:07:3c:ba:c2:0c:94:1f: d0:8b:87:5f:64:3b:16:18:25:a4:31:bd:6b:be:a0:01:e3:f3: 7a:fe:14:66:61:e7:37:35:52:6c:7c:aa:52:cc:ef:77:80:8f: 18:0e:d3:47:41:09:84:72:e1:ee:30:04:60:fb:8e:5c:90:09: 95:4b:a4:b7:3d:31:b7:ea:36:e2:7c:f1:de:f7:29:8c:3c:93: 48:b6:75:5e:74:c6:33:33:53:30:45:23:4a:5c:15:36:23:3a: b2:36:d0:d9:fd:83:ac:21:42:7a:95:8b:5c:8b:3d:cb:a1:e4: 12:cd:da:88:11:29:ef:b4:bd:ca:ed:28:38:19:27:84:8a:00: df:60:da:7c:a6:36:d1:e6:99:47:fd:4e:cf:7b:90:5b:ba:95: c0:d2:99:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjQwNTAyMTgxNDU4WhcNMjQwNTA5MTgxNDU4WjAYMRYwFAYD VQQDEw02NjMzZDgyMi05ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfaX197ZSIAq4JPChtahFmpj4BHGo68SnCnNAKj42uGbhqBNRK/Gsy/Mf5a5 0a4eOau8O+PsHkozO5rrNt3QnqnLy7c/ThSvCUOqtPMNIXEuoIn4PRnRgwXG7I2y niNglzC7bOg5tANDK9YVD0+MfJ8InD3ZkKAIlvsMv9SrgNZggi9u/CJizeMfGpeB 4+hffPV872/Lx/3n7bCvFpxYSJEIMW1aktVoFnzqLAzecDSIrDLf4o3ZaY1Zj0Y+ 5wyCPFKPOGGGiinyzbojJdRf9vnLkLq+LtAmeOA6SwVhgyC7JRXUpthPBl+KCY62 I1DDneUQVe24B4AW6N4glxH8hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ94y4l0 aynMl+AnFmwkSDJwckaYMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/v4i2wjzqTZXsdRkohKN8x6x96OPjZiTQNy1t6QH87URo/b/QXSVC xHn3fqVMaGGxONj5bk+JBMVqfhIUxtSW8iVMpRchZ86tHV+uGGYCfFAJ3PYUkGFz NocVRCzPVN3I6W2DIgc8usIMlB/Qi4dfZDsWGCWkMb1rvqAB4/N6/hRmYec3NVJs fKpSzO93gI8YDtNHQQmEcuHuMARg+45ckAmVS6S3PTG36jbifPHe9ymMPJNItnVe dMYzM1MwRSNKXBU2IzqyNtDZ/YOsIUJ6lYtciz3LoeQSzdqIESnvtL3K7Sg4GSeE igDfYNp8pjbR5plH/U7Pe5BbupXA0pl/ -----END CERTIFICATE-----Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org