$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: AwMDOGon8BGYttqVQfwM2g2h42x/MVwCFwqUc9iUbUc= Subject key identifier: 7D:91:FD:CC:17:83:31:33:DE:45:46:1A:BF:78:42:3C:67:50:9D:CE Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 116C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 1161 Signing time: Mon 06 May 2024 17:52:56 +0000 Manifest this update: Mon 06 May 2024 17:52:56 +0000 Manifest next update: Mon 13 May 2024 17:52:56 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: RGRiO9LfJK4yXxxsuzug0jLycFGQRmyRjml8uUWWF38=) 2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: xAAO6itcprSh+8gb3Y6zviRgaXnWwWSK7iIacRpKf1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4460 (0x116c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: May 6 17:52:56 2024 GMT Not After : May 13 17:52:56 2024 GMT Subject: CN=663918f8-836b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:ea:41:fc:85:10:f9:b8:d6:18:48:25:cd: 3d:56:28:9f:1d:bf:e7:c0:5f:72:4a:bd:0b:ed:34: d4:ea:b4:04:cd:9c:39:83:45:93:e7:70:39:62:a6: 26:25:92:7a:91:ed:6b:db:01:8e:74:fd:bf:44:07: ad:9c:9c:28:55:00:45:27:5a:a1:de:68:10:c4:66: 37:67:8d:98:56:b6:56:36:91:a5:27:ce:d8:1a:60: ff:fe:66:c7:f8:a1:98:27:61:d5:f4:e8:41:b5:83: e6:3c:6d:db:a2:a6:4e:88:53:6f:84:8c:c8:4f:67: ca:e7:f3:7b:ce:72:3f:0d:bb:bc:fb:ee:58:09:c1: 4f:70:d8:de:91:1e:77:71:5c:f0:52:d6:43:20:a0: f2:aa:2f:c0:a1:f9:36:da:94:6f:db:58:4c:98:9b: 19:fb:b9:f0:51:ac:8d:c4:d2:d4:83:6f:32:1d:9b: 3a:0b:d6:9e:63:2d:25:e7:94:08:cc:1f:70:7e:c9: fe:c4:f2:56:da:c5:43:e1:61:b5:aa:08:ee:74:20: 85:92:2d:36:7e:13:e1:7f:04:da:d1:84:93:4c:bc: e3:8a:d9:b6:04:2b:55:78:8f:9d:09:1e:68:61:19: cd:45:95:c3:c5:80:f2:8d:6b:19:15:31:45:7f:c4: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:91:FD:CC:17:83:31:33:DE:45:46:1A:BF:78:42:3C:67:50:9D:CE X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:60:1e:10:b7:ad:0e:35:0e:7d:63:51:d6:69:bb:02:64:95: 22:c0:d2:99:8d:26:de:80:70:7f:8d:d6:d4:30:91:d8:38:e0: 95:49:f3:37:c5:ca:7a:05:53:9b:cc:87:a9:d9:61:64:cf:fb: 74:7d:7f:f1:9c:55:48:c3:2a:4c:15:1a:84:85:94:86:c8:98: 09:1d:76:f7:34:13:42:06:63:32:92:d6:4a:66:d1:ff:c0:d6: 38:d0:00:df:e7:79:8a:67:e7:ad:cb:9c:c4:6b:fe:8a:58:05: c5:d4:bf:3c:f7:8f:bd:2f:42:c2:59:0b:1b:4a:88:49:45:66: ae:f2:ff:53:2a:9b:34:e3:83:2f:e2:5a:45:a7:45:ad:25:1d: dd:29:7a:43:43:ca:8e:94:85:18:3d:06:fb:70:6e:30:2e:b8: 79:9e:4f:23:5b:38:d1:6e:fc:78:4d:16:44:d7:8c:68:28:96: 23:f7:6b:37:4f:13:7f:e0:08:d9:10:b0:68:02:60:12:8a:f0: 60:47:7b:48:b0:87:36:ed:f0:5e:25:8f:37:48:bc:1f:72:a8: 0a:e6:c6:9e:61:85:19:21:fb:0d:73:1b:b4:e0:dd:4e:c7:63: ba:00:b2:49:70:8e:96:d6:33:af:0e:f7:3b:0a:29:cb:9a:26: e7:9e:0b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjQwNTA2MTc1MjU2WhcNMjQwNTEzMTc1MjU2WjAYMRYwFAYD VQQDEw02NjM5MThmOC04MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFTqQfyFEPm41hhIJc09ViifHb/nwF9ySr0L7TTU6rQEzZw5g0WT53A5YqYm JZJ6ke1r2wGOdP2/RAetnJwoVQBFJ1qh3mgQxGY3Z42YVrZWNpGlJ87YGmD//mbH +KGYJ2HV9OhBtYPmPG3boqZOiFNvhIzIT2fK5/N7znI/Dbu8++5YCcFPcNjekR53 cVzwUtZDIKDyqi/Aofk22pRv21hMmJsZ+7nwUayNxNLUg28yHZs6C9aeYy0l55QI zB9wfsn+xPJW2sVD4WG1qgjudCCFki02fhPhfwTa0YSTTLzjitm2BCtVeI+dCR5o YRnNRZXDxYDyjWsZFTFFf8RNDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2R/cwX gzEz3kVGGr94QjxnUJ3OMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDYB4Qt60ONQ59Y1HWabsCZJUiwNKZjSbegHB/jdbUMJHYOOCVSfM3 xcp6BVObzIep2WFkz/t0fX/xnFVIwypMFRqEhZSGyJgJHXb3NBNCBmMyktZKZtH/ wNY40ADf53mKZ+ety5zEa/6KWAXF1L8894+9L0LCWQsbSohJRWau8v9TKps044Mv 4lpFp0WtJR3dKXpDQ8qOlIUYPQb7cG4wLrh5nk8jWzjRbvx4TRZE14xoKJYj92s3 TxN/4AjZELBoAmASivBgR3tIsIc27fBeJY83SLwfcqgK5saeYYUZIfsNcxu04N1O x2O6ALJJcI6W1jOvDvc7CinLmibnngtD -----END CERTIFICATE-----Generated at Mon May 6 20:19:41 2024 by rpki-client on console-ams.rpki-client.org