$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: Z8DYCH3CN6955oajTQc87ytYzH3N5EIAEbAi6AgqnKk= Subject key identifier: 18:19:6C:B5:AC:EC:B1:23:D7:2F:9A:4F:03:AF:1E:CE:40:63:FB:E0 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 0468 Signing time: Fri 03 May 2024 01:56:46 +0000 Manifest this update: Fri 03 May 2024 01:56:45 +0000 Manifest next update: Fri 10 May 2024 01:56:45 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: oGTtHIJiwDdiaN0baiqr7fmFuUDhLJQO6HS992ZSrSY=) 2: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: t7wmrbOvwFwLSkqJgU+kAVhFLVcKGi0gcZzz5oa5sgA=) 3: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: Ntq4Q6os1LHO/XreRvyhQ2Ota+l3KZ/nEW4wrnjFxLA=) 4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: z40l3Y4ZPaYj99JG5EJYSqDXKo2gtrnHUJ4Y3bMptkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: May 3 01:56:45 2024 GMT Not After : May 10 01:56:45 2024 GMT Subject: CN=6634445e-d8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:eb:43:5a:a2:08:3c:d3:58:21:d1:95:42: 46:d3:f0:c8:98:f1:ff:84:5f:c3:c5:89:88:ff:fa: b4:ec:af:bc:2e:4d:68:2d:15:c7:d9:a9:69:d1:2b: 16:d4:74:29:ff:17:fb:70:06:a1:17:0d:95:c5:80: 4c:fb:bc:8d:9f:c8:0b:cc:dc:6c:36:bc:77:22:22: d1:ae:2b:34:80:43:7c:c1:37:92:ee:c4:a2:07:6d: 0b:79:e5:1e:f1:2d:3b:47:76:c2:09:d3:35:b9:3a: ed:db:0b:97:71:a4:29:17:ae:7d:64:22:fe:9a:06: 66:e3:36:1a:7c:4b:82:1d:5c:68:0c:8f:bc:33:67: 73:06:ca:f0:24:ff:c3:bc:d5:d5:62:c9:b9:f1:70: 3b:11:2a:10:9b:41:eb:2b:57:4f:23:da:3d:18:66: de:c9:fd:77:d1:5e:23:11:40:c0:1a:77:5e:c6:1a: a3:b6:ce:28:31:bd:8d:86:79:a0:8e:68:19:7c:4e: 59:11:07:33:f7:af:91:05:f5:28:e5:1c:17:1e:ce: fa:8f:ef:e1:68:0c:86:98:18:05:86:34:0c:ad:25: 91:13:66:9f:85:38:8e:b6:b5:52:90:6a:87:4c:09: 0b:b6:7d:51:31:0f:3a:f2:47:7e:34:d5:45:de:08: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:6C:B5:AC:EC:B1:23:D7:2F:9A:4F:03:AF:1E:CE:40:63:FB:E0 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3d:cf:ff:89:50:d6:3f:78:08:31:49:11:87:e1:aa:83:64: 3c:49:8c:eb:30:38:2d:fd:ad:77:a5:e2:3a:ee:6b:8a:ed:b5: cc:bf:47:2d:75:b5:75:b0:25:d1:e5:75:e8:46:79:2a:fe:91: 56:7c:bb:a4:6a:d1:a8:49:a8:76:5e:d6:50:4d:ae:66:4a:14: 8e:0b:31:09:39:9f:6a:78:98:e1:22:aa:87:3b:75:be:1e:43: e2:f8:d2:ef:01:85:c5:bd:4d:33:2c:14:64:4b:41:a5:eb:ef: 76:96:f7:4e:31:0b:12:6b:62:b1:30:aa:f5:ec:61:bf:5f:ef: 5f:7b:ca:3b:82:ca:6e:ba:15:88:a7:50:90:44:22:cc:4c:b0: a8:ff:07:00:48:bd:0c:9a:a3:c9:f3:db:8f:1b:ea:16:47:4e: ea:39:e1:49:6b:ac:ae:83:17:9f:20:62:cc:a5:6b:e8:ca:6b: 34:73:aa:83:a9:6a:a6:2e:24:08:10:31:13:8b:06:28:1d:95: 80:7e:2f:e5:dd:78:80:91:95:cd:62:e2:f4:1b:fb:6e:1d:64: d3:d1:45:65:01:78:b2:6f:1b:35:a6:64:5e:7f:b2:c8:73:6b: d9:a3:ca:f0:e7:64:8b:cc:13:aa:7d:dd:aa:40:f4:af:29:65: 0b:94:36:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjQwNTAzMDE1NjQ1WhcNMjQwNTEwMDE1NjQ1WjAYMRYwFAYD VQQDEw02NjM0NDQ1ZS1kOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmbrQ1qiCDzTWCHRlUJG0/DImPH/hF/DxYmI//q07K+8Lk1oLRXH2alp0SsW 1HQp/xf7cAahFw2VxYBM+7yNn8gLzNxsNrx3IiLRris0gEN8wTeS7sSiB20LeeUe 8S07R3bCCdM1uTrt2wuXcaQpF659ZCL+mgZm4zYafEuCHVxoDI+8M2dzBsrwJP/D vNXVYsm58XA7ESoQm0HrK1dPI9o9GGbeyf130V4jEUDAGndexhqjts4oMb2Nhnmg jmgZfE5ZEQcz96+RBfUo5RwXHs76j+/haAyGmBgFhjQMrSWRE2afhTiOtrVSkGqH TAkLtn1RMQ868kd+NNVF3gjQCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgZbLWs 7LEj1y+aTwOvHs5AY/vgMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Pc//iVDWP3gIMUkRh+Gqg2Q8SYzrMDgt/a13peI67muK7bXMv0ct dbV1sCXR5XXoRnkq/pFWfLukatGoSah2XtZQTa5mShSOCzEJOZ9qeJjhIqqHO3W+ HkPi+NLvAYXFvU0zLBRkS0Gl6+92lvdOMQsSa2KxMKr17GG/X+9fe8o7gspuuhWI p1CQRCLMTLCo/wcASL0MmqPJ89uPG+oWR07qOeFJa6yugxefIGLMpWvoyms0c6qD qWqmLiQIEDETiwYoHZWAfi/l3XiAkZXNYuL0G/tuHWTT0UVlAXiybxs1pmRef7LI c2vZo8rw52SLzBOqfd2qQPSvKWULlDaH -----END CERTIFICATE-----Generated at Fri May 3 03:10:51 2024 by rpki-client on console-ams.rpki-client.org