$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: Zm+HMN1hjeVhkZAsJTyscKXl516ABUgI6gNfl6UwiPk= Subject key identifier: 14:33:F6:DD:5C:B8:8A:A0:B3:48:2C:58:F1:C4:71:20:6B:DC:89:BD Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0C4C Signing time: Sat 04 May 2024 19:05:24 +0000 Manifest this update: Sat 04 May 2024 19:05:23 +0000 Manifest next update: Sat 11 May 2024 19:05:23 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: OrUKSCPyG17e6nIq1mRxDDivSmVWqf6rwx+c2kaQX6I=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: A2YBkWEP+Lww3svYd83hufssxMOWQeSP06SnyKnu3DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 4 19:05:23 2024 GMT Not After : May 11 19:05:23 2024 GMT Subject: CN=663686f4-559c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:3e:c8:fd:4a:c5:22:fa:58:be:6d:37:1f: 58:13:69:99:9d:29:53:ac:77:c6:45:64:23:09:80: a9:ac:42:5b:af:d1:17:68:bf:b7:ef:4b:09:32:17: 56:5a:5a:32:bc:5d:1b:56:ba:7a:14:da:29:39:b0: 09:77:07:89:bf:17:b8:c9:eb:ef:f4:1a:7e:19:31: cb:ad:9d:53:23:f3:a1:41:69:fa:84:ab:bc:88:59: 91:bb:30:ce:c2:24:e4:2c:3c:16:1e:57:37:cc:02: d9:8b:f2:c2:e9:48:ba:ec:38:63:60:9e:db:9a:46: 08:8e:3a:3f:a7:01:02:4c:20:62:a6:78:8c:60:cb: bf:04:6c:fa:78:54:1c:af:3b:76:db:fb:3c:7b:10: e0:33:46:e9:df:ad:a7:b3:e8:a6:20:e1:89:0f:f1: 4a:74:ea:6c:9e:52:99:bc:55:f8:c0:eb:e1:9b:ca: f1:95:03:41:a2:25:68:7a:00:b6:a6:8f:4e:80:86: 52:59:6a:ad:39:40:ef:6c:0b:c2:c4:af:86:6d:94: 36:5b:70:c4:64:ad:c7:8d:1c:28:4f:cd:c0:bb:99: 84:21:ef:03:a3:29:48:e4:24:db:1b:84:fe:62:1d: 47:be:2b:c9:2a:34:60:46:74:33:b9:99:5f:18:92: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:F6:DD:5C:B8:8A:A0:B3:48:2C:58:F1:C4:71:20:6B:DC:89:BD X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:23:ad:0b:e0:1e:f1:07:b4:cb:e6:67:3c:b0:c6:6d:1a:bb: de:b0:ca:e0:b6:8c:4b:96:23:23:fe:1e:ca:aa:38:98:38:ff: 00:e2:f8:b0:54:dc:12:5e:eb:8d:5e:89:f9:0c:34:aa:b4:8f: ca:8a:6d:2d:78:74:6f:7c:46:9e:e7:47:0c:1e:99:d2:7e:6c: 44:f2:e0:ab:b5:b8:41:7b:fb:61:0b:37:ba:74:79:89:a6:11: cd:9b:57:10:00:1c:c2:fe:5b:df:90:e4:b6:0e:49:41:e4:32: 64:48:7b:55:65:ca:af:02:00:1a:79:06:82:43:f5:c5:70:01: 4c:b9:d3:8a:9f:f2:dd:2d:c4:bf:17:a8:b2:64:8f:60:ba:e8: 94:e0:fa:ff:5a:f3:6c:c2:d7:3e:ba:55:22:26:27:47:4b:1b: d4:d9:bf:16:d5:1f:77:60:d2:8d:6b:a9:e0:3a:04:64:5a:fe: 70:c0:33:89:87:09:8c:15:61:0c:2f:89:8b:0b:37:7d:d7:b5: 83:86:0c:ed:23:4c:84:d7:71:ed:dd:83:ec:85:2a:57:a2:50: 73:e2:35:c3:2e:65:18:1b:c1:f3:75:d2:07:3b:d8:07:68:6f: a8:f3:e3:d4:53:b8:7b:97:13:4c:ba:13:cd:7e:e1:00:a9:8c: 10:e3:eb:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjQwNTA0MTkwNTIzWhcNMjQwNTExMTkwNTIzWjAYMRYwFAYD VQQDEw02NjM2ODZmNC01NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT4+yP1KxSL6WL5tNx9YE2mZnSlTrHfGRWQjCYCprEJbr9EXaL+370sJMhdW WloyvF0bVrp6FNopObAJdweJvxe4yevv9Bp+GTHLrZ1TI/OhQWn6hKu8iFmRuzDO wiTkLDwWHlc3zALZi/LC6Ui67DhjYJ7bmkYIjjo/pwECTCBipniMYMu/BGz6eFQc rzt22/s8exDgM0bp362ns+imIOGJD/FKdOpsnlKZvFX4wOvhm8rxlQNBoiVoegC2 po9OgIZSWWqtOUDvbAvCxK+GbZQ2W3DEZK3HjRwoT83Au5mEIe8DoylI5CTbG4T+ Yh1HvivJKjRgRnQzuZlfGJIZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQz9t1c uIqgs0gsWPHEcSBr3Im9MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABI60L4B7xB7TL5mc8sMZtGrvesMrgtoxLliMj/h7KqjiYOP8A4viw VNwSXuuNXon5DDSqtI/Kim0teHRvfEae50cMHpnSfmxE8uCrtbhBe/thCze6dHmJ phHNm1cQABzC/lvfkOS2DklB5DJkSHtVZcqvAgAaeQaCQ/XFcAFMudOKn/LdLcS/ F6iyZI9guuiU4Pr/WvNswtc+ulUiJidHSxvU2b8W1R93YNKNa6ngOgRkWv5wwDOJ hwmMFWEML4mLCzd917WDhgztI0yE13Ht3YPshSpXolBz4jXDLmUYG8HzddIHO9gH aG+o8+PUU7h7lxNMuhPNfuEAqYwQ4+tg -----END CERTIFICATE-----Generated at Sat May 4 19:58:40 2024 by rpki-client on console-ams.rpki-client.org