$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: zV2jAhRvy5X+Gqk65EsZYhS4CjCkY79/40uJos5TPnc= Subject key identifier: F6:8F:36:E1:73:C1:36:41:E5:FE:60:4D:9E:AD:66:34:A3:6D:C6:05 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 032F Signing time: Sat 25 May 2024 03:16:53 +0000 Manifest this update: Sat 25 May 2024 03:16:52 +0000 Manifest next update: Sat 01 Jun 2024 03:16:52 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: vbx6OB/68sFEqV6bMMs2+K8Hjffl454GOULSC4Vu+7I=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: XYAlCpJ7mzvp/cofGi5NvPIKtbxLdre0l8+aO1T1+jg=) 3: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 1/c265I61z81RbwUjN+/+ktuTISDdU6AGxRGRBwwFGQ=) 4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: zT5o3xGQl3eggTa0HGvpU0sVsYrZsqPQ9mpieJGNY8E=) 5: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: ZX3EFF6YPYsvFLMNAm4Da6miOiuOSCWVNa70Njpa5XM=) 6: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: DWvrRFsnIPoLKEJMzAK4aBrg0Gv8BJj/6fbSi0CsC/o=) 7: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 5W5E+3mSkVgIcfD5D9nwVRXpAej/2LIvbq7hJHUIIQs=) 8: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: 0bYsYs837SFgGZweeq9bSFBIzROTTbuMX0UkDBxpW3g=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: RdvlkapM35MRJfHVT6ITjiEohu/282iaA5oNrFH45uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: May 25 03:16:52 2024 GMT Not After : Jun 1 03:16:52 2024 GMT Subject: CN=66515825-a4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:ef:81:7e:c9:0d:58:6e:b0:e7:bf:b8:46: e3:6a:fa:05:11:98:6e:7f:7b:3e:31:93:7b:d9:34: 6d:40:5b:d5:0e:54:09:79:5b:64:36:a2:e9:eb:9e: 29:4f:99:61:db:f7:7b:82:9c:af:24:09:43:82:18: 0e:8c:66:51:0b:8b:d7:c3:dc:0d:48:49:cf:1d:00: 71:9b:86:0c:92:7e:b4:a4:57:a7:66:01:2a:c3:17: 19:01:af:09:b5:fb:cf:41:f9:cd:be:88:67:cf:62: 50:d3:36:8b:2a:b6:2d:66:66:35:2d:ec:b3:43:7e: e3:69:8b:fe:22:49:90:5a:24:e3:bd:5c:2c:3e:cd: c1:6f:35:4c:9e:1b:a3:57:17:ee:20:8d:e5:ef:f4: ff:32:3d:0d:03:17:a4:cf:68:19:04:85:de:be:91: de:57:0f:90:2e:61:e1:75:c9:78:fc:34:be:f9:24: 4f:a9:2e:3c:ae:1a:54:d5:30:3b:ee:96:ac:79:2a: a1:10:c7:6e:87:39:88:7f:09:ef:74:1a:7c:23:3c: 15:61:03:70:be:a9:2a:c6:97:d4:63:bb:92:fc:28: f9:d1:14:76:d9:38:b0:be:9c:4e:01:63:d4:dd:96: e4:8a:ce:09:8b:5c:d1:54:42:0b:e9:d4:68:f9:d5: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8F:36:E1:73:C1:36:41:E5:FE:60:4D:9E:AD:66:34:A3:6D:C6:05 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e7:ae:50:22:26:8a:be:47:fe:c8:a2:ce:81:09:09:1f:10: c8:35:2a:56:93:8e:8b:84:f0:05:f1:42:39:22:2f:9f:06:5d: 8b:e1:d4:a4:f2:15:e6:35:be:82:b4:6d:7b:32:92:be:87:a5: 26:30:8e:e2:98:0f:59:e6:b9:eb:5d:ef:d1:29:4e:26:d6:a3: db:2a:ec:52:fd:86:21:bf:14:5c:6e:69:43:ae:20:e7:3a:16: 66:36:a8:ff:f7:67:0e:42:03:c2:13:35:41:06:85:08:a5:56: 3f:a1:b4:43:cc:1a:7b:62:94:03:e1:61:3a:09:18:17:ad:1e: f7:b8:c5:bb:a4:b8:9d:a1:c9:99:bd:23:3b:51:76:b1:26:ae: 9c:95:4d:a8:6b:4e:40:e5:1a:67:98:e6:2d:29:e9:63:78:a3: ea:4a:4b:e3:53:58:21:c3:ce:65:a1:a4:de:93:a6:ae:2e:1b: 06:45:79:6b:07:f9:4b:ff:57:41:be:bf:44:9b:b7:39:b3:ea: 2b:ec:8d:86:b5:e2:fc:0c:6a:a1:01:5c:84:9e:0b:93:b5:25: d3:1d:f8:12:74:8e:a1:e7:67:21:40:d7:cd:63:b3:e9:b0:b2: 1d:ab:ec:94:0f:90:24:64:a0:3c:ce:2e:1b:7f:f4:3e:46:6d: 59:8b:e0:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjQwNTI1MDMxNjUyWhcNMjQwNjAxMDMxNjUyWjAYMRYwFAYD VQQDEw02NjUxNTgyNS1hNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MjvgX7JDVhusOe/uEbjavoFEZhuf3s+MZN72TRtQFvVDlQJeVtkNqLp654p T5lh2/d7gpyvJAlDghgOjGZRC4vXw9wNSEnPHQBxm4YMkn60pFenZgEqwxcZAa8J tfvPQfnNvohnz2JQ0zaLKrYtZmY1LeyzQ37jaYv+IkmQWiTjvVwsPs3BbzVMnhuj VxfuII3l7/T/Mj0NAxekz2gZBIXevpHeVw+QLmHhdcl4/DS++SRPqS48rhpU1TA7 7paseSqhEMduhzmIfwnvdBp8IzwVYQNwvqkqxpfUY7uS/Cj50RR22TiwvpxOAWPU 3Zbkis4Ji1zRVEIL6dRo+dW+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaPNuFz wTZB5f5gTZ6tZjSjbcYFMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN565QIiaKvkf+yKLOgQkJHxDINSpWk46LhPAF8UI5Ii+fBl2L4dSk 8hXmNb6CtG17MpK+h6UmMI7imA9Z5rnrXe/RKU4m1qPbKuxS/YYhvxRcbmlDriDn OhZmNqj/92cOQgPCEzVBBoUIpVY/obRDzBp7YpQD4WE6CRgXrR73uMW7pLidocmZ vSM7UXaxJq6clU2oa05A5RpnmOYtKeljeKPqSkvjU1ghw85loaTek6auLhsGRXlr B/lL/1dBvr9Em7c5s+or7I2GteL8DGqhAVyEnguTtSXTHfgSdI6h52chQNfNY7Pp sLIdq+yUD5AkZKA8zi4bf/Q+Rm1Zi+Bb -----END CERTIFICATE-----Generated at Sat May 25 04:35:19 2024 by rpki-client on console-ams.rpki-client.org