$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: Hotkk77eYzM3pg+WKgr18LPAdi1xonixGkw//cavFlY= Subject key identifier: 89:58:C4:A2:0F:86:03:B2:60:C2:1D:C8:C2:6A:6E:28:77:E0:50:E7 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 1C Signing time: Wed 15 May 2024 08:52:17 +0000 Manifest this update: Wed 15 May 2024 08:52:17 +0000 Manifest next update: Wed 22 May 2024 08:52:17 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: vAo9479X0dGzy1tecDxm7hUSQAFmquRt2+ymtFb0qE4=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: owuYl2f9BSGVA0/70enqvT/0aH6Gh7FL60SNuEqExK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: May 15 08:52:17 2024 GMT Not After : May 22 08:52:17 2024 GMT Subject: CN=664477c1-2284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:95:a0:e6:89:2b:bb:eb:0a:cf:e7:64:1b: fc:bb:9c:a6:72:50:45:38:57:8a:d6:fa:7d:ae:f7: d3:2f:22:04:ef:d8:63:76:b5:f9:53:51:d3:bc:7f: d9:be:28:fb:3e:78:63:b1:cb:3f:94:e3:ac:d2:e8: 3d:0f:9f:db:6b:bf:00:08:fc:05:9c:83:cc:b7:26: 8c:f2:a7:81:8b:e9:2f:68:6d:fb:f9:0a:ce:b3:fe: c5:c7:c5:dd:af:e2:d2:08:69:73:2a:44:8d:f0:4d: 22:1b:d9:82:9b:c1:4e:8d:4a:d5:89:d1:dc:db:d8: b2:3e:27:10:4b:b5:ef:79:40:9c:d6:3f:9b:b9:bb: ea:4b:e6:ea:00:ad:c2:a0:69:2e:98:be:11:e4:64: e9:5c:00:79:5a:c7:3d:ed:73:61:b8:c3:03:68:e6: ac:b7:ac:d0:74:9b:9e:8d:53:92:50:0a:57:13:fa: de:44:8e:93:41:4b:fe:93:ef:b7:df:c9:b6:5f:19: ae:e5:e5:c6:d4:c9:96:8d:a0:30:12:7f:aa:41:2f: 97:47:22:e5:05:d6:ff:0e:1a:fa:a7:92:2b:1c:89: ed:29:b8:30:84:00:2c:24:65:88:a3:22:cd:92:af: 7f:05:1a:94:0a:33:24:11:4d:87:a0:09:94:89:da: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:C4:A2:0F:86:03:B2:60:C2:1D:C8:C2:6A:6E:28:77:E0:50:E7 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:43:e9:34:92:56:8d:a8:48:8f:70:e2:07:e4:39:d6:aa:53: 9a:a7:ff:68:35:6e:21:ac:d9:54:0b:02:cc:79:da:85:10:38: b1:ef:b2:56:17:31:07:8c:d6:74:ac:05:38:32:ab:8d:5d:1a: 77:1c:81:15:1b:36:21:42:f1:fe:b5:ac:83:98:f1:a3:0e:88: 0c:98:4c:ca:9c:ad:b4:9c:1a:84:83:04:ae:98:ba:70:0e:48: 55:37:4c:d3:13:9e:c5:6d:6b:37:36:3a:ed:3d:13:ec:aa:29: f8:ff:ca:e8:cd:8b:d2:e5:34:22:6e:7f:64:a7:48:ee:22:b8: 7c:ac:21:83:ce:0d:4a:54:93:9e:55:b0:3f:36:b6:d5:34:5a: d7:77:f3:44:6b:66:ee:7f:45:79:d1:bc:64:9d:a5:94:d1:54: 43:1d:0b:14:b6:36:c0:90:a6:f2:3a:4e:a2:dc:28:66:03:b1: 91:42:6f:9d:ed:0c:e1:40:8b:e4:86:a6:07:0d:f8:f2:48:2a: 28:bb:fb:bd:39:11:20:5c:4a:c7:52:fc:e1:9a:e5:54:5e:18: eb:98:73:76:63:c0:2b:96:cb:24:24:db:53:9f:14:38:ac:f9: 5b:5f:bf:e1:66:0e:ba:c9:d2:67:fb:02:3d:98:64:e2:c5:a6: 41:63:d2:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEEzQTExMC8GA1UEBRMoODNFNEJDQjc2M0I4Q0VEMDM2NTE5MEU3MjgwRjBBNkEz NEIzNUI1MTAeFw0yNDA1MTUwODUyMTdaFw0yNDA1MjIwODUyMTdaMBgxFjAUBgNV BAMTDTY2NDQ3N2MxLTIyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3BZWg5okru+sKz+dkG/y7nKZyUEU4V4rW+n2u99MvIgTv2GN2tflTUdO8f9m+ KPs+eGOxyz+U46zS6D0Pn9trvwAI/AWcg8y3Jozyp4GL6S9obfv5Cs6z/sXHxd2v 4tIIaXMqRI3wTSIb2YKbwU6NStWJ0dzb2LI+JxBLte95QJzWP5u5u+pL5uoArcKg aS6YvhHkZOlcAHlaxz3tc2G4wwNo5qy3rNB0m56NU5JQClcT+t5EjpNBS/6T77ff ybZfGa7l5cbUyZaNoDASf6pBL5dHIuUF1v8OGvqnkiscie0puDCEACwkZYijIs2S r38FGpQKMyQRTYegCZSJ2hB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiVjEog+G A7Jgwh3IwmpuKHfgUOcwHwYDVR0jBBgwFoAUg+S8t2O4ztA2UZDnKA8KajSzW1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QTNBLzE4MTRGMzY2RUNC NTExRUVBNDY1MDMzN0M0RjlBRTAyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZy1TOHQyTzR6dEEyVVpEbktBOEthalN6VzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QTNBLzE4MTRGMzY2RUNCNTExRUVBNDY1MDMzN0M0RjlBRTAyL2ctUzh0Mk80enRB MlVaRG5LQThLYWpTelcxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1D6TSSVo2oSI9w4gfkOdaqU5qn/2g1biGs2VQLAsx52oUQOLHvslYX MQeM1nSsBTgyq41dGnccgRUbNiFC8f61rIOY8aMOiAyYTMqcrbScGoSDBK6YunAO SFU3TNMTnsVtazc2Ou09E+yqKfj/yujNi9LlNCJuf2SnSO4iuHysIYPODUpUk55V sD82ttU0Wtd380RrZu5/RXnRvGSdpZTRVEMdCxS2NsCQpvI6TqLcKGYDsZFCb53t DOFAi+SGpgcN+PJIKii7+705ESBcSsdS/OGa5VReGOuYc3ZjwCuWyyQk21OfFDis +Vtfv+FmDrrJ0mf7Aj2YZOLFpkFj0oY= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org