$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: C7cI5RCsicnI6fqlQkOkXSCUVnDHUdN6JYH7gQdXguQ= Subject key identifier: CF:F2:C1:67:E6:00:9A:92:05:72:46:CE:5F:4F:F4:02:FF:6B:C6:48 Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 0118 Signing time: Wed 01 May 2024 05:32:39 +0000 Manifest this update: Wed 01 May 2024 05:32:38 +0000 Manifest next update: Wed 08 May 2024 05:32:38 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: iCRd1aqu5BB8LMLRjuUdtklenIy38h821PGnAKNeq8s=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: YAXA02U3eZrR0Yjns12Z2nAWMDc+7YprNjgj1meJyJM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: L7qLWgmtFTBW+bZWQgEGFlOf1bK7ALDRsuEjN3YGqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: May 1 05:32:38 2024 GMT Not After : May 8 05:32:38 2024 GMT Subject: CN=6631d3f6-8cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:f2:7b:a7:61:f3:d6:0f:21:8c:5e:ce:c0: 4a:e6:e2:ea:93:2b:06:d5:b8:ca:29:e0:d4:7b:ee: 9a:29:91:d6:59:fd:01:53:3d:48:53:bb:fb:1b:55: 0a:ca:9c:c0:1f:ba:03:dd:27:14:5a:89:d3:a6:b1: f3:50:b7:88:31:ec:10:f1:22:45:b1:a8:1d:c2:52: 27:ff:e5:58:b7:fa:3b:83:8e:f2:95:2e:c0:c9:60: 98:f5:0d:34:b8:2a:1b:3f:57:ce:0b:0b:70:91:77: 98:92:5d:4d:89:21:4d:c9:90:7d:45:95:58:ab:eb: 01:f0:8e:f9:ed:9b:07:65:22:7f:70:e8:1a:bf:54: a8:57:61:09:20:c6:04:44:12:44:25:04:9a:b8:d3: f7:4a:c3:5e:e4:3f:80:88:8a:39:73:a3:49:4b:18: 24:15:79:54:eb:1d:f5:59:d8:4d:19:92:bc:c2:69: ad:99:3e:10:a4:6b:f1:61:55:9e:45:08:2e:2d:26: 97:fc:2a:07:33:51:7e:c6:0a:fd:e6:12:14:98:b2: 38:5a:af:f0:13:9d:10:f5:27:85:0b:f0:12:cd:04: 9b:4c:71:25:cf:5e:33:e0:e9:b2:18:54:9b:40:78: 8b:49:f9:59:4b:26:7a:92:0c:45:1e:39:f8:5c:ea: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:C1:67:E6:00:9A:92:05:72:46:CE:5F:4F:F4:02:FF:6B:C6:48 X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:26:4e:05:32:f4:bb:9b:de:a8:cd:dd:40:ab:a8:f7:c1:9e: bd:3a:29:f2:dd:09:0a:52:49:b4:0f:7d:fd:6d:69:18:62:dc: ab:30:39:bd:58:0b:27:9f:24:7b:96:b8:74:77:68:ef:6b:57: 13:21:5b:17:27:f8:3e:7f:ae:06:a1:79:c6:ba:5f:2b:d5:4f: af:bf:21:1b:34:60:f5:57:3d:2f:8a:3b:8a:0c:b5:5f:50:7e: 00:e2:26:cd:b6:9d:8c:8c:23:62:99:fa:1a:59:50:ca:3a:53: 3e:a5:57:35:1f:43:85:6b:09:fd:49:af:ff:c1:b5:c1:2b:50: 18:6a:a7:28:b9:f1:65:61:dc:4b:00:67:fe:20:1a:61:da:27: e5:33:26:d9:22:8a:8a:0c:57:d2:b7:0d:1d:73:ac:5a:2e:34: 8e:99:20:5b:70:c3:7a:90:95:2a:6d:ad:23:55:d9:9a:50:09: eb:cb:07:5d:52:ec:51:fa:f0:15:49:f1:e9:89:33:e1:a2:b2: e4:a3:dd:40:12:72:cf:70:37:c3:c2:4d:52:63:65:72:67:b9: 64:fa:3b:26:cf:32:73:3e:7f:5f:f9:c0:98:df:fb:4e:4f:62: f0:18:2e:3c:5b:cd:dd:d9:79:a2:a5:c6:53:df:64:36:70:78: d0:c4:d4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjQwNTAxMDUzMjM4WhcNMjQwNTA4MDUzMjM4WjAYMRYwFAYD VQQDEw02NjMxZDNmNi04Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeLye6dh89YPIYxezsBK5uLqkysG1bjKKeDUe+6aKZHWWf0BUz1IU7v7G1UK ypzAH7oD3ScUWonTprHzULeIMewQ8SJFsagdwlIn/+VYt/o7g47ylS7AyWCY9Q00 uCobP1fOCwtwkXeYkl1NiSFNyZB9RZVYq+sB8I757ZsHZSJ/cOgav1SoV2EJIMYE RBJEJQSauNP3SsNe5D+AiIo5c6NJSxgkFXlU6x31WdhNGZK8wmmtmT4QpGvxYVWe RQguLSaX/CoHM1F+xgr95hIUmLI4Wq/wE50Q9SeFC/ASzQSbTHElz14z4OmyGFSb QHiLSflZSyZ6kgxFHjn4XOrFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/ywWfm AJqSBXJGzl9P9AL/a8ZIMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClJk4FMvS7m96ozd1Aq6j3wZ69Oiny3QkKUkm0D339bWkYYtyrMDm9 WAsnnyR7lrh0d2jva1cTIVsXJ/g+f64GoXnGul8r1U+vvyEbNGD1Vz0vijuKDLVf UH4A4ibNtp2MjCNimfoaWVDKOlM+pVc1H0OFawn9Sa//wbXBK1AYaqcoufFlYdxL AGf+IBph2iflMybZIoqKDFfStw0dc6xaLjSOmSBbcMN6kJUqba0jVdmaUAnrywdd UuxR+vAVSfHpiTPhorLko91AEnLPcDfDwk1SY2VyZ7lk+jsmzzJzPn9f+cCY3/tO T2LwGC48W83d2XmipcZT32Q2cHjQxNSA -----END CERTIFICATE-----Generated at Wed May 1 06:34:28 2024 by rpki-client on console-ams.rpki-client.org