$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: 4v+oCY/o+1voTwUhUQfbdTmKGGwVo6jqttfPVu6W9a4= Subject key identifier: F0:A1:1A:98:0E:15:02:6C:A2:07:E4:C0:59:74:84:0A:17:FC:C5:B4 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0964 Signing time: Thu 02 May 2024 21:09:50 +0000 Manifest this update: Thu 02 May 2024 21:09:50 +0000 Manifest next update: Thu 09 May 2024 21:09:50 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: KqIuQS4gOHEJV98fBdK6y19zyTmJ8zTYiP6GxQ2a+Qg=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: S22G9QDkwGKayGVHAQugfVJP+lzVsoqHSJVwM0lQLI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: May 2 21:09:50 2024 GMT Not After : May 9 21:09:50 2024 GMT Subject: CN=6634011e-e4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:72:49:9d:c1:ab:62:96:c6:85:27:b7:af:50: cb:7b:79:00:ae:41:d9:93:59:30:d8:88:f4:f2:2b: 24:97:65:9e:0c:69:04:96:3c:33:dc:24:78:e3:94: 20:dc:f0:5c:07:82:5d:00:bf:58:b2:65:3c:f7:f5: 94:12:a7:a2:c5:51:06:18:7e:cf:87:26:5f:fd:54: 4d:9a:83:67:1c:18:35:85:b7:92:87:73:b4:16:b9: 18:d9:50:2a:41:22:1f:6d:50:7d:3e:e8:05:4f:9b: 70:7c:5e:da:f2:1f:69:f5:34:40:ab:48:c5:87:af: f4:77:d9:c2:8b:cc:2b:b0:8a:16:e8:1f:4c:6d:54: d7:55:fc:b4:fa:b6:27:c3:95:54:b1:85:66:50:30: ac:6e:72:aa:97:54:5f:af:4e:84:ee:33:e1:d2:85: 93:90:f0:b9:88:d9:7b:93:36:b0:d8:83:bd:97:ef: bf:75:bd:ae:e9:6b:e5:fc:9b:19:0c:be:8a:04:f4: ef:c8:fd:11:67:74:13:99:53:43:16:0c:41:ad:c9: cb:e8:c2:28:1f:75:98:c5:d4:da:f0:f5:a5:64:69: 91:6d:10:11:09:28:50:81:6e:c6:c3:49:64:7b:05: f9:6d:59:a2:a2:62:da:e0:d6:63:43:b6:31:8e:7f: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A1:1A:98:0E:15:02:6C:A2:07:E4:C0:59:74:84:0A:17:FC:C5:B4 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1b:a1:e7:e3:28:af:16:3f:d8:05:1c:4d:db:6e:23:c5:db: 23:0e:cb:f9:79:53:17:4d:ca:6e:ac:eb:05:4b:89:4c:a6:59: fb:63:71:1c:94:30:88:10:fd:82:54:90:7e:08:4f:2a:d8:3a: 84:0e:68:27:39:2e:d6:10:1b:01:6b:c7:79:4a:1b:88:e4:6c: 81:a8:4d:26:e0:7e:74:aa:c9:12:73:07:3d:cc:65:2a:d5:fb: e9:9f:4c:42:97:5c:ab:5f:39:37:04:25:fa:85:be:9f:d5:ef: bc:91:c1:1a:0b:a7:a9:44:4e:12:b5:5e:eb:e6:5d:95:87:6c: cd:3d:76:6c:d7:d8:5b:61:f2:a2:f9:63:e0:9e:34:43:24:a5: c8:5c:01:0b:2a:2c:e8:9a:e9:b1:96:81:6f:9b:c1:05:ec:a8: 20:97:29:57:42:fa:a2:47:39:71:fd:13:13:71:04:b1:b3:00: e8:de:ff:69:bc:58:c3:4b:84:3a:38:54:c0:4e:6c:23:21:e6: 7e:6c:1a:07:9f:86:3c:eb:6d:82:e6:f1:7b:aa:34:89:c3:84: d0:93:29:65:b3:22:3a:4e:2d:0b:41:11:6f:35:d2:97:00:fa: 8b:de:32:5f:3f:89:5d:f9:f8:93:e5:40:39:08:6f:b1:0d:23: 01:67:58:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjQwNTAyMjEwOTUwWhcNMjQwNTA5MjEwOTUwWjAYMRYwFAYD VQQDEw02NjM0MDExZS1lNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HJJncGrYpbGhSe3r1DLe3kArkHZk1kw2Ij08iskl2WeDGkEljwz3CR445Qg 3PBcB4JdAL9YsmU89/WUEqeixVEGGH7PhyZf/VRNmoNnHBg1hbeSh3O0FrkY2VAq QSIfbVB9PugFT5twfF7a8h9p9TRAq0jFh6/0d9nCi8wrsIoW6B9MbVTXVfy0+rYn w5VUsYVmUDCsbnKql1Rfr06E7jPh0oWTkPC5iNl7kzaw2IO9l++/db2u6Wvl/JsZ DL6KBPTvyP0RZ3QTmVNDFgxBrcnL6MIoH3WYxdTa8PWlZGmRbRARCShQgW7Gw0lk ewX5bVmiomLa4NZjQ7Yxjn/1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPChGpgO FQJsogfkwFl0hAoX/MW0MB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTG6Hn4yivFj/YBRxN224jxdsjDsv5eVMXTcpurOsFS4lMpln7Y3Ec lDCIEP2CVJB+CE8q2DqEDmgnOS7WEBsBa8d5ShuI5GyBqE0m4H50qskScwc9zGUq 1fvpn0xCl1yrXzk3BCX6hb6f1e+8kcEaC6epRE4StV7r5l2Vh2zNPXZs19hbYfKi +WPgnjRDJKXIXAELKizomumxloFvm8EF7KgglylXQvqiRzlx/RMTcQSxswDo3v9p vFjDS4Q6OFTATmwjIeZ+bBoHn4Y8622C5vF7qjSJw4TQkyllsyI6Ti0LQRFvNdKX APqL3jJfP4ld+fiT5UA5CG+xDSMBZ1jI -----END CERTIFICATE-----Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org