$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: rZAY3/uct/A+DGEXkDE2oETewtxoju7/CWcu7d/Yihc= Subject key identifier: FF:94:59:9A:99:D0:18:30:5E:23:95:CC:26:75:85:59:BF:29:EC:E8 Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 0122 Signing time: Mon 29 Apr 2024 05:00:30 +0000 Manifest this update: Mon 29 Apr 2024 05:00:30 +0000 Manifest next update: Mon 06 May 2024 05:00:30 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: YyTCd2vkO9cm9cvm5k/fGXIbRwnhpTsEDRsVld3w5Qk=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: v1AbgrTjpoKEWPICN/6NLKI67YPRRco4GM7ZzFjypCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Apr 29 05:00:30 2024 GMT Not After : May 6 05:00:30 2024 GMT Subject: CN=662f296e-23f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:88:42:08:1d:e0:18:19:2e:b0:ff:83:c2: a6:49:63:80:55:6d:d4:6d:aa:a4:5c:fe:d4:e0:fc: 7d:0a:87:e5:4b:d8:fd:89:29:79:f6:16:33:98:c9: 12:48:33:b0:d6:a8:ad:6d:23:45:de:e5:0e:ee:12: 47:32:a9:68:1e:82:cf:2e:d9:cb:55:78:00:b2:08: b6:4f:aa:49:00:65:54:9d:32:8d:75:7e:d5:43:33: 93:3e:d5:d1:18:1f:35:a0:96:ef:52:1b:b2:45:c1: b9:7f:58:50:13:31:60:00:d2:55:e7:59:c3:dc:6c: b3:43:97:87:a3:c1:11:d6:22:ae:01:cf:31:7a:a3: 5a:33:31:a2:76:d4:7d:07:c6:c6:09:04:28:e0:68: 96:b2:4b:91:03:1a:85:c4:4d:c0:a6:fe:3c:91:9d: 60:9d:95:29:9c:47:4c:bd:44:97:8d:67:e1:53:51: 19:b9:ba:10:e7:34:a6:fe:5d:22:35:a9:13:0a:40: ba:3b:1d:2b:8c:ec:22:4f:98:46:f7:0a:70:1b:f1: 04:9d:79:df:65:e9:61:d1:46:2a:ac:e5:27:40:0e: 8b:13:b9:a0:af:95:65:45:b7:49:16:8b:b4:15:65: 4b:13:b2:2c:c2:38:ad:ee:aa:ff:23:56:92:31:8b: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:59:9A:99:D0:18:30:5E:23:95:CC:26:75:85:59:BF:29:EC:E8 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:7c:59:09:6c:26:2e:44:0e:bc:6a:79:3c:db:82:53:15: 2e:b5:5b:45:ba:a7:19:60:df:50:b5:1c:64:77:f3:bc:e3:40: 38:39:06:3c:10:e7:dc:cc:3f:12:bb:a5:6f:1c:28:60:69:e4: 85:71:96:d6:66:52:e1:0a:40:a8:70:18:ec:6e:89:03:56:8b: 14:bc:6d:d4:e1:ff:3f:dc:4f:29:d5:d4:37:81:3b:be:9a:e1: 79:77:6a:6c:c8:37:fd:85:90:70:af:75:7e:e8:8b:0a:7f:5d: 05:b6:ff:d8:d9:5b:77:cc:85:0b:a9:93:a4:2d:e1:78:27:44: 3f:b4:19:10:4f:d0:77:70:af:64:dd:56:b9:15:10:39:02:09: dc:ac:8f:bb:37:56:39:97:36:49:c3:14:69:9b:22:67:e8:56: a6:2d:09:c4:90:84:bd:49:94:a7:4e:b1:9f:de:28:47:95:b3: 4c:1c:18:7b:e3:0f:ee:f8:97:bd:91:64:fe:9d:98:ae:62:df: 74:e0:6c:21:56:26:c4:c5:63:b4:c7:1f:ab:60:01:ee:f0:69: 29:9e:6c:64:88:2b:53:60:b3:a2:5b:31:03:e0:17:3b:04:e3: cc:1f:c1:4e:ad:39:5a:32:58:c2:54:80:0c:cc:17:dc:7d:b5: 78:93:3d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjQwNDI5MDUwMDMwWhcNMjQwNTA2MDUwMDMwWjAYMRYwFAYD VQQDEw02NjJmMjk2ZS0yM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sCIQggd4BgZLrD/g8KmSWOAVW3UbaqkXP7U4Px9CoflS9j9iSl59hYzmMkS SDOw1qitbSNF3uUO7hJHMqloHoLPLtnLVXgAsgi2T6pJAGVUnTKNdX7VQzOTPtXR GB81oJbvUhuyRcG5f1hQEzFgANJV51nD3GyzQ5eHo8ER1iKuAc8xeqNaMzGidtR9 B8bGCQQo4GiWskuRAxqFxE3Apv48kZ1gnZUpnEdMvUSXjWfhU1EZuboQ5zSm/l0i NakTCkC6Ox0rjOwiT5hG9wpwG/EEnXnfZelh0UYqrOUnQA6LE7mgr5VlRbdJFou0 FWVLE7Iswjit7qr/I1aSMYuAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+UWZqZ 0BgwXiOVzCZ1hVm/KezoMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpG3xZCWwmLkQOvGp5PNuCUxUutVtFuqcZYN9QtRxkd/O840A4OQY8 EOfczD8Su6VvHChgaeSFcZbWZlLhCkCocBjsbokDVosUvG3U4f8/3E8p1dQ3gTu+ muF5d2psyDf9hZBwr3V+6IsKf10Ftv/Y2Vt3zIULqZOkLeF4J0Q/tBkQT9B3cK9k 3Va5FRA5AgncrI+7N1Y5lzZJwxRpmyJn6FamLQnEkIS9SZSnTrGf3ihHlbNMHBh7 4w/u+Je9kWT+nZiuYt904GwhVibExWO0xx+rYAHu8GkpnmxkiCtTYLOiWzED4Bc7 BOPMH8FOrTlaMljCVIAMzBfcfbV4kz1K -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:30 2024 by rpki-client on console-ams.rpki-client.org