$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: Qrx1Jg1hKrGMLbXwZAYFWsxzXoojA+kXq/HpmOhqvaU= Subject key identifier: ED:FA:B4:D8:F8:80:30:A1:BB:78:22:6F:3C:D8:48:63:9C:1F:8B:5E Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0BDD Signing time: Tue 30 Apr 2024 19:20:19 +0000 Manifest this update: Tue 30 Apr 2024 19:20:18 +0000 Manifest next update: Tue 07 May 2024 19:20:18 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: 6nBr/SZlUx3Rnd5wMG6roP+Dv7iyM4OyoO4T3sViWoc=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: OUM6xIiVFIOh+aNHeNW4rfpQ1L1FG6j6FDFz4bgTri8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Apr 30 19:20:18 2024 GMT Not After : May 7 19:20:18 2024 GMT Subject: CN=66314472-3797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:92:de:13:42:08:50:50:55:56:25:88:20: 54:4f:43:f2:72:ed:c8:76:a6:56:5c:77:4b:49:eb: 6d:93:bf:02:50:68:58:28:f2:16:8a:44:e7:49:72: 29:10:23:82:04:8c:0d:09:0a:b9:30:eb:1e:de:81: 34:39:4e:58:df:15:00:7e:12:ee:35:76:11:54:b5: 90:46:77:55:7c:87:37:32:9a:24:0d:4a:7a:fa:97: 11:69:b3:08:08:37:c6:28:63:9c:cb:4a:48:a5:70: 1b:90:bf:74:aa:0b:ee:32:b0:1a:1e:c2:ab:13:3b: 99:3c:91:97:3b:e0:cc:25:c6:ec:f9:45:d2:36:07: 47:33:34:14:a8:0a:b7:16:56:70:d6:f4:07:ff:ad: 6e:a4:dc:98:98:3e:7b:d6:df:16:1e:e0:a2:a2:ff: 79:32:c3:48:e0:3b:5e:c4:d1:58:6f:89:d6:6f:a4: 0b:f5:57:58:ef:39:4e:e5:9a:15:c7:56:cc:c1:b0: 81:93:c2:0b:38:d7:3a:4c:c1:f3:13:c7:2d:5b:14: 1f:22:16:30:d6:9d:16:7f:0f:97:1f:08:23:ed:4d: 32:5b:f6:f5:ee:31:47:8c:8d:f6:5a:5f:a3:82:d0: a1:6b:e0:93:a8:4d:a8:6a:f1:26:f9:ac:34:4b:c2: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:B4:D8:F8:80:30:A1:BB:78:22:6F:3C:D8:48:63:9C:1F:8B:5E X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c5:e8:26:c2:8e:aa:a6:4c:53:58:02:ed:70:60:ad:b3:f3: cc:61:83:07:98:bf:16:80:a6:73:63:07:f7:39:32:e7:b4:66: 0d:06:b1:49:cd:de:6a:b6:9f:27:98:de:9b:e5:44:5a:f3:75: f2:34:bd:f1:14:9a:ee:a2:ec:01:63:4b:55:ef:5d:1b:f1:1d: 15:b2:70:3c:38:64:ab:62:ce:a9:3f:71:36:f0:2e:6e:25:3d: b4:5a:e2:a3:71:0a:cf:24:37:72:c4:1b:5b:9f:d1:12:91:0a: 7e:ed:8e:65:d0:f0:e9:6f:b7:d3:f7:26:c5:8e:e8:8e:d3:80: 67:5c:0e:6a:07:e0:76:90:51:ed:3a:70:62:84:e2:cb:5b:8e: 2c:72:9f:cb:d0:bf:f6:c9:b6:53:f5:3a:01:54:8e:25:2e:d1: ac:dc:eb:1d:e7:91:85:c2:4e:b0:dc:c6:c9:6f:a6:14:a4:15: b5:74:25:3b:39:9e:68:16:0a:88:d6:46:14:3d:6a:9f:64:22: 23:85:0c:55:9c:03:82:70:97:e1:74:19:b9:4d:1d:44:8c:31: 42:ea:4a:47:53:c0:d5:ae:d7:09:c3:4d:7e:85:79:62:3e:af: e7:89:b2:01:a5:6e:01:36:a3:07:1f:53:33:be:87:7f:39:e6: 2e:9e:c9:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjQwNDMwMTkyMDE4WhcNMjQwNTA3MTkyMDE4WjAYMRYwFAYD VQQDEw02NjMxNDQ3Mi0zNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTSS3hNCCFBQVVYliCBUT0Pycu3IdqZWXHdLSettk78CUGhYKPIWikTnSXIp ECOCBIwNCQq5MOse3oE0OU5Y3xUAfhLuNXYRVLWQRndVfIc3MpokDUp6+pcRabMI CDfGKGOcy0pIpXAbkL90qgvuMrAaHsKrEzuZPJGXO+DMJcbs+UXSNgdHMzQUqAq3 FlZw1vQH/61upNyYmD571t8WHuCiov95MsNI4DtexNFYb4nWb6QL9VdY7zlO5ZoV x1bMwbCBk8ILONc6TMHzE8ctWxQfIhYw1p0Wfw+XHwgj7U0yW/b17jFHjI32Wl+j gtCha+CTqE2oavEm+aw0S8K/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO36tNj4 gDChu3gibzzYSGOcH4teMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHxegmwo6qpkxTWALtcGCts/PMYYMHmL8WgKZzYwf3OTLntGYNBrFJ zd5qtp8nmN6b5URa83XyNL3xFJruouwBY0tV710b8R0VsnA8OGSrYs6pP3E28C5u JT20WuKjcQrPJDdyxBtbn9ESkQp+7Y5l0PDpb7fT9ybFjuiO04BnXA5qB+B2kFHt OnBihOLLW44scp/L0L/2ybZT9ToBVI4lLtGs3Osd55GFwk6w3MbJb6YUpBW1dCU7 OZ5oFgqI1kYUPWqfZCIjhQxVnAOCcJfhdBm5TR1EjDFC6kpHU8DVrtcJw01+hXli Pq/nibIBpW4BNqMHH1Mzvod/OeYunsk1 -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:07 2024 by rpki-client on console-ams.rpki-client.org