$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: NTqlDs21/ONa4mp1hMGmjYtmGmkVDixdGYwK0JaNc+M= Subject key identifier: EF:A0:2B:F3:99:0E:90:D5:CA:2E:73:3F:40:1E:23:9A:91:27:45:CB Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0A6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0A5F Signing time: Thu 02 May 2024 20:27:08 +0000 Manifest this update: Thu 02 May 2024 20:27:08 +0000 Manifest next update: Thu 09 May 2024 20:27:08 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: KzIiEy08oSdYJkC2uFPmiYGo2ZAINNnsUNvce3yhBqA=) 2: B6413BFC536311EAB9ACF938C4F9AE02.roa (hash: QxTD9NXaJSvPw+RH2g16x7DqJjBs7jqovLZJ7UXXsAo=) 3: BAA2B2A83D9611EA916B582DC4F9AE02.roa (hash: hrw9I317xbyiaARzveTD/6FExMIFjTT9axzHYhvr61M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2668 (0xa6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: May 2 20:27:08 2024 GMT Not After : May 9 20:27:08 2024 GMT Subject: CN=6633f71c-61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:6d:d4:60:6f:c9:d1:cd:bf:1b:fc:ea:ff: 9f:84:06:d5:7d:e2:06:2d:bf:8d:f3:7f:0a:b6:43: f1:84:bd:be:df:9c:ee:7c:7e:69:30:ed:13:97:09: b6:55:c0:83:0d:9c:73:d4:3c:cf:f4:11:30:0d:dc: c0:86:ab:0d:ad:42:9d:f2:07:2c:50:f5:d6:d2:96: 2f:e6:af:de:50:30:5b:52:43:1e:0f:d4:dc:51:59: 44:c4:5f:8b:60:1a:54:9f:ab:23:b3:98:5a:8a:7c: 4e:93:94:08:b8:2b:79:d3:7d:27:31:fc:42:3c:ab: a8:ac:b7:d9:ab:85:c0:75:c5:ae:01:19:e7:66:35: 77:d6:a0:20:47:d7:74:d9:1f:72:8f:03:9f:7d:7b: 25:1f:a6:7e:ec:e3:d6:bb:65:19:35:e9:43:a8:d4: 37:e5:91:a3:cb:ef:d0:2d:f5:b8:fd:7e:53:fd:61: 5c:9a:94:11:3c:21:1c:e6:54:e6:42:f5:f8:75:62: fa:5c:c8:9d:70:71:26:bc:06:1c:c3:b5:e7:22:42: 6e:c5:b6:60:10:93:c7:e7:22:71:c1:3d:8a:5e:e5: d4:42:ee:d6:f6:da:52:5b:23:9a:72:a4:68:53:93: 7e:d7:fe:22:0e:68:c9:d6:3f:b7:14:8d:22:9b:bc: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A0:2B:F3:99:0E:90:D5:CA:2E:73:3F:40:1E:23:9A:91:27:45:CB X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4a:d4:0c:e7:9f:55:fb:10:fb:82:a2:a9:da:2b:9b:fb:5e: a2:50:b2:f2:d0:33:93:8d:41:7d:23:f6:d4:c3:d1:12:e1:64: 69:ff:ef:03:13:3f:1f:13:56:92:21:bc:25:28:cf:2d:a7:89: 46:a9:ac:26:f2:25:c2:61:73:0f:20:3f:fc:dc:c3:11:4d:02: 58:69:0d:80:0d:53:3a:b0:14:f1:a9:1a:f4:84:56:e8:22:5d: 3b:4e:d4:15:9a:7c:18:39:5f:fa:54:9b:41:50:9d:05:01:75: 71:6f:42:ff:f7:ce:0a:2c:36:f9:bf:50:7c:8f:5c:d9:70:1e: 6a:32:7f:4c:df:a4:6b:87:5d:d6:0b:16:ba:c7:72:c8:dc:6c: a8:c1:fb:7d:f5:e0:e4:c8:78:e6:3b:d1:86:fd:46:b0:e2:27: 2f:22:81:f5:89:99:04:4a:01:fe:fc:75:b4:80:38:c0:de:73: 77:93:16:07:ba:c2:03:da:b1:07:46:a1:5f:0e:41:63:81:f7: 03:57:63:36:6f:58:35:dc:48:0d:18:f7:c3:ce:17:41:d1:fc: 16:5d:35:9c:5e:ad:0a:35:75:78:1e:61:ea:ad:4d:a3:79:7c: b8:3f:e2:16:2a:bd:11:f7:98:91:52:62:1f:a6:75:90:97:9a: 1b:28:28:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjQwNTAyMjAyNzA4WhcNMjQwNTA5MjAyNzA4WjAYMRYwFAYD VQQDEw02NjMzZjcxYy02MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3adt1GBvydHNvxv86v+fhAbVfeIGLb+N838KtkPxhL2+35zufH5pMO0Tlwm2 VcCDDZxz1DzP9BEwDdzAhqsNrUKd8gcsUPXW0pYv5q/eUDBbUkMeD9TcUVlExF+L YBpUn6sjs5hainxOk5QIuCt5030nMfxCPKuorLfZq4XAdcWuARnnZjV31qAgR9d0 2R9yjwOffXslH6Z+7OPWu2UZNelDqNQ35ZGjy+/QLfW4/X5T/WFcmpQRPCEc5lTm QvX4dWL6XMidcHEmvAYcw7XnIkJuxbZgEJPH5yJxwT2KXuXUQu7W9tpSWyOacqRo U5N+1/4iDmjJ1j+3FI0im7wNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+gK/OZ DpDVyi5zP0AeI5qRJ0XLMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByStQM559V+xD7gqKp2iub+16iULLy0DOTjUF9I/bUw9ES4WRp/+8D Ez8fE1aSIbwlKM8tp4lGqawm8iXCYXMPID/83MMRTQJYaQ2ADVM6sBTxqRr0hFbo Il07TtQVmnwYOV/6VJtBUJ0FAXVxb0L/984KLDb5v1B8j1zZcB5qMn9M36Rrh13W Cxa6x3LI3Gyowft99eDkyHjmO9GG/Uaw4icvIoH1iZkESgH+/HW0gDjA3nN3kxYH usID2rEHRqFfDkFjgfcDV2M2b1g13EgNGPfDzhdB0fwWXTWcXq0KNXV4HmHqrU2j eXy4P+IWKr0R95iRUmIfpnWQl5obKChq -----END CERTIFICATE-----Generated at Thu May 2 22:28:54 2024 by rpki-client on console-ams.rpki-client.org