$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: q2tKhPb1v7bohu3Xd/B4plnBZFObjvkDttJzbjoweJY= Subject key identifier: AE:2A:14:53:21:10:A9:AB:A3:BE:D3:E2:FA:46:86:30:3C:69:BC:EC Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0A44 Signing time: Fri 26 Apr 2024 20:27:29 +0000 Manifest this update: Fri 26 Apr 2024 20:27:29 +0000 Manifest next update: Fri 03 May 2024 20:27:29 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: MhDimL/OC+2eMnYxyczf03IV58bneig1CHWVFXT4dyY=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: NIZMmo0NuHhn6nD3NdRcv7nYc0S58OkPUhvDUedEdrM=) 3: FDA839F8B5E011EEA4B1F86BC4F9AE02.roa (hash: X/8UoQFrC2J9lERqBw1AFgqgz2Eb+ZxKkLi9QZCaFSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Apr 26 20:27:29 2024 GMT Not After : May 3 20:27:29 2024 GMT Subject: CN=662c0e31-56e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:cb:e7:9e:ce:74:63:75:14:60:c7:7b:cc: 64:c3:ce:2b:53:98:92:c7:23:43:7d:eb:1b:e1:b0: d1:97:3d:b1:d1:29:ac:dd:9c:72:e5:c6:e2:33:b1: 54:94:8d:d0:61:1c:af:f4:1b:76:d9:c5:d8:7c:4f: d9:c6:5e:9b:7b:7b:5f:52:80:f4:c0:69:3f:e0:60: 35:fd:7e:d0:28:32:8c:34:82:4b:d7:13:45:4f:dd: e6:45:b4:45:8d:7d:38:c5:ef:82:93:48:21:f0:cc: 01:8b:f9:5c:08:48:fd:a2:e7:47:24:f1:48:af:39: c0:4c:f9:25:a4:88:b6:4d:3f:e3:7c:60:42:33:f8: ff:98:1d:4c:d4:ee:8f:64:0f:2d:f6:e6:ab:2f:32: b2:62:b0:c1:16:be:71:ee:77:0d:22:29:bd:83:39: 21:0f:a2:1e:f0:d7:85:05:49:4b:51:1b:81:3b:e4: ae:1a:de:18:42:a2:19:62:64:2c:9c:8e:d3:ff:4f: 0e:63:7e:aa:4c:83:79:2b:3d:cd:8c:e2:a7:bb:a8: e6:49:25:96:17:14:0e:e0:c7:dc:cf:3f:3e:68:4c: 9d:ab:1c:a0:9a:c6:a0:cd:07:fb:cb:b4:18:62:ec: 43:71:27:58:2e:82:e7:7d:23:6d:03:24:ca:c4:52: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2A:14:53:21:10:A9:AB:A3:BE:D3:E2:FA:46:86:30:3C:69:BC:EC X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:39:22:ff:ae:69:a8:72:3b:98:ef:a3:7c:93:b4:07:38: 3c:6d:09:76:5b:28:b1:ba:66:b0:f4:01:93:57:6c:c8:63:f9: 1a:9a:69:9b:98:7f:5e:2f:4c:02:64:8b:b8:54:99:90:fb:ff: 84:39:4f:ad:ce:55:cf:da:c7:9c:16:19:ac:76:77:f8:08:93: 73:0b:2f:1c:93:b3:77:91:e5:8a:14:3e:b0:7e:0c:95:aa:b6: a3:00:90:cf:52:25:54:7a:cc:2a:1e:5c:bc:ee:84:cf:32:a3: 17:56:d2:37:95:ee:8f:53:4b:2d:23:8d:bc:79:f6:90:d0:67: 7f:ec:3e:b5:e5:15:75:14:c9:35:bb:45:9d:2e:55:82:b4:dc: 21:84:3c:1c:e2:80:4f:bd:f0:98:f3:2e:da:53:17:a6:c0:2c: a1:15:77:b3:d8:32:4b:a0:70:33:a7:9d:00:a3:d5:47:b4:ab: 2c:fe:3e:d9:fd:b4:f2:9c:b4:ab:e4:fc:a9:db:a9:d3:a8:ab: 3a:16:3e:11:47:e4:7d:14:fc:a0:b9:4e:3c:e2:a7:64:b7:48: af:34:e8:8d:e5:00:c0:de:18:a1:66:bd:e4:c6:bb:bd:e9:0d: 59:b7:cb:92:db:f6:dc:74:3d:26:93:0f:ed:31:78:c9:3d:aa: 2c:ce:6b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjQwNDI2MjAyNzI5WhcNMjQwNTAzMjAyNzI5WjAYMRYwFAYD VQQDEw02NjJjMGUzMS01NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FLL557OdGN1FGDHe8xkw84rU5iSxyNDfesb4bDRlz2x0Sms3Zxy5cbiM7FU lI3QYRyv9Bt22cXYfE/Zxl6be3tfUoD0wGk/4GA1/X7QKDKMNIJL1xNFT93mRbRF jX04xe+Ck0gh8MwBi/lcCEj9oudHJPFIrznATPklpIi2TT/jfGBCM/j/mB1M1O6P ZA8t9uarLzKyYrDBFr5x7ncNIim9gzkhD6Ie8NeFBUlLURuBO+SuGt4YQqIZYmQs nI7T/08OY36qTIN5Kz3NjOKnu6jmSSWWFxQO4Mfczz8+aEydqxygmsagzQf7y7QY YuxDcSdYLoLnfSNtAyTKxFIyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4qFFMh EKmro77T4vpGhjA8abzsMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY/zki/65pqHI7mO+jfJO0Bzg8bQl2Wyixumaw9AGTV2zIY/kammmb mH9eL0wCZIu4VJmQ+/+EOU+tzlXP2secFhmsdnf4CJNzCy8ck7N3keWKFD6wfgyV qrajAJDPUiVUeswqHly87oTPMqMXVtI3le6PU0stI428efaQ0Gd/7D615RV1FMk1 u0WdLlWCtNwhhDwc4oBPvfCY8y7aUxemwCyhFXez2DJLoHAzp50Ao9VHtKss/j7Z /bTynLSr5Pyp26nTqKs6Fj4RR+R9FPyguU484qdkt0ivNOiN5QDA3hihZr3kxru9 6Q1Zt8uS2/bcdD0mkw/tMXjJPaoszmtH -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:11 2024 by rpki-client on console-ams.rpki-client.org