$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft File: g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json) Hash identifier: +Js4VlC8oHLJztDToE0rWd7zP5MtKCYdCUAHu7nT4UA= Subject key identifier: 18:72:2F:BA:F8:E3:BA:7C:0C:DC:E0:CC:D2:5A:96:77:6D:A6:6C:13 Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft Manifest number: 04AB Signing time: Fri 03 May 2024 02:53:30 +0000 Manifest this update: Fri 03 May 2024 02:53:30 +0000 Manifest next update: Fri 10 May 2024 02:53:30 +0000 Files and hashes: 1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: ysIqLxCD802DaY3a54eZLnuC19XGj7vXMz3aygTmb7U=) 2: AB42AD0EE50811EE9CCB8069C4F9AE02.roa (hash: HL78DFeMs7KZ/mfAMMK8JORY4ohIFhpmiMrHPpufuBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Validity Not Before: May 3 02:53:30 2024 GMT Not After : May 10 02:53:30 2024 GMT Subject: CN=663451aa-d1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:d7:2c:87:2f:11:3d:2e:69:f0:c1:a1:3b: b8:e3:9c:ea:db:45:31:86:54:7a:3f:91:fb:16:7a: 8d:85:d6:c3:29:5c:fa:26:2b:46:12:e5:8f:e5:50: 2f:93:18:2b:dc:13:c7:29:44:93:8a:90:c3:7a:a1: 93:be:f9:e7:a9:79:0d:e1:db:0c:c9:4c:51:d2:de: 68:5b:0b:6e:dd:da:48:f2:53:a4:ed:23:68:f0:a4: ea:d9:d3:7e:5d:4f:59:53:79:bc:6e:e9:23:c0:07: 79:3b:df:5c:cc:1c:8e:c4:39:59:cc:29:08:57:41: 32:ba:6f:c7:00:27:b4:2d:68:4c:40:ce:2d:90:33: 6f:7a:10:1a:c6:bb:3d:51:bc:0a:34:4c:b8:7d:2c: 47:17:07:c7:f3:47:d5:e4:4c:25:a6:5d:f9:4f:7d: 10:07:0f:30:47:8f:77:56:29:04:9d:76:44:96:d3: a4:43:ee:09:89:0b:73:13:ad:59:97:ee:2f:5f:9b: 69:40:ff:34:d6:55:fe:f4:de:1b:cf:64:a7:b0:b8: 87:47:81:c9:fa:e2:ba:c5:5b:af:b3:1b:5d:1f:55: 93:02:07:d2:79:80:3b:35:78:5c:d4:8f:af:e8:4a: 18:92:9c:83:3f:84:7b:d9:dc:a0:20:fb:2d:c7:9f: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:2F:BA:F8:E3:BA:7C:0C:DC:E0:CC:D2:5A:96:77:6D:A6:6C:13 X509v3 Authority Key Identifier: keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1e:e1:ca:7c:2a:df:94:99:f0:93:47:dc:11:27:40:0c:90: 0a:86:97:d2:33:33:da:e6:8f:7f:bc:2f:ce:d9:14:1e:72:a0: 4c:de:a3:1d:cc:3a:21:cc:a6:ab:69:fb:a0:2d:d6:1d:13:af: dd:90:a5:e2:0f:89:73:3b:ac:94:d3:96:3f:7f:e8:74:7c:9a: 75:62:d2:68:4e:b1:07:99:65:63:ab:a4:36:e7:87:4b:ed:af: 47:a5:24:f4:9d:35:0e:75:dc:ee:6a:6a:f6:9e:0c:62:89:c7: f8:14:83:23:de:f5:76:3f:11:83:a5:7a:e5:52:c1:5f:62:b1: 98:72:f9:9b:fc:34:d6:ae:83:bf:c6:fa:7f:24:fe:98:cc:01: 2d:ea:f6:27:73:d4:5a:62:3c:06:62:77:fc:cf:bf:5b:6b:d4: 5e:23:27:10:8b:aa:ec:69:99:fd:1c:af:fe:c4:48:c1:55:81: 0e:47:40:3d:b3:e0:22:d1:0c:94:69:4e:ca:41:35:c9:c6:66: 37:87:fa:dd:76:84:ba:88:4f:0e:8e:05:02:28:b9:f1:9c:65: f4:b4:51:b2:bf:f4:4f:b7:ee:3b:3a:2e:e1:e5:c3:29:eb:80: a3:41:7f:6a:e4:a0:a9:2d:e3:31:e5:b6:fc:81:7c:a2:a0:8f: cf:d8:f8:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB MzNENzIyNTYwHhcNMjQwNTAzMDI1MzMwWhcNMjQwNTEwMDI1MzMwWjAYMRYwFAYD VQQDEw02NjM0NTFhYS1kMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlfXLIcvET0uafDBoTu445zq20UxhlR6P5H7FnqNhdbDKVz6JitGEuWP5VAv kxgr3BPHKUSTipDDeqGTvvnnqXkN4dsMyUxR0t5oWwtu3dpI8lOk7SNo8KTq2dN+ XU9ZU3m8bukjwAd5O99czByOxDlZzCkIV0Eyum/HACe0LWhMQM4tkDNvehAaxrs9 UbwKNEy4fSxHFwfH80fV5Ewlpl35T30QBw8wR493VikEnXZEltOkQ+4JiQtzE61Z l+4vX5tpQP801lX+9N4bz2SnsLiHR4HJ+uK6xVuvsxtdH1WTAgfSeYA7NXhc1I+v 6EoYkpyDP4R72dygIPstx59ZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhyL7r4 47p8DNzgzNJalndtpmwTMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQ TWl4UXR5aWs5MldqUFhJbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfHuHKfCrflJnwk0fcESdADJAKhpfSMzPa5o9/vC/O2RQecqBM3qMd zDohzKarafugLdYdE6/dkKXiD4lzO6yU05Y/f+h0fJp1YtJoTrEHmWVjq6Q254dL 7a9HpST0nTUOddzuamr2ngxiicf4FIMj3vV2PxGDpXrlUsFfYrGYcvmb/DTWroO/ xvp/JP6YzAEt6vYnc9RaYjwGYnf8z79ba9ReIycQi6rsaZn9HK/+xEjBVYEOR0A9 s+Ai0QyUaU7KQTXJxmY3h/rddoS6iE8OjgUCKLnxnGX0tFGyv/RPt+47Oi7h5cMp 64CjQX9q5KCpLeMx5bb8gXyioI/P2Pio -----END CERTIFICATE-----Generated at Fri May 3 04:36:51 2024 by rpki-client on console-ams.rpki-client.org