$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: Z4nHxfIOchxd0UnhQzXhDaxw5sBVf9sadrDReLy9mPs= Subject key identifier: F8:0B:1B:C4:8B:65:A6:35:B0:C9:8C:7A:0C:E0:A7:57:55:26:BA:35 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: 1F Signing time: Wed 15 May 2024 08:46:13 +0000 Manifest this update: Wed 15 May 2024 08:46:12 +0000 Manifest next update: Wed 22 May 2024 08:46:12 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: EtMOXm+lfbUQ7daFOKbyF50lN8JirahzBsaQGQnOiXM=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: y03lKIB42nw4jlkFQ7G75iFQPvcCfwFRDTzAnmoLg+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: May 15 08:46:12 2024 GMT Not After : May 22 08:46:12 2024 GMT Subject: CN=66447655-138f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:e7:91:4e:9b:c2:d3:7c:2d:57:81:9c:1f: eb:fa:f0:71:ff:8c:52:f4:52:17:45:e2:55:bc:ad: 18:a6:bc:af:fb:c3:4b:92:89:e0:7d:56:74:98:e8: 86:77:7a:a7:d0:0e:60:cd:4c:3f:26:fb:51:57:1f: 95:f3:b0:26:7e:75:5b:70:4a:22:13:cd:0e:1b:51: 94:ef:de:e8:d3:94:2e:6a:0f:5b:27:e7:9e:21:bf: 52:6e:fa:c7:ef:37:5e:3a:be:04:fc:9f:35:d3:82: ef:db:81:be:64:50:02:0a:8e:4b:66:cc:84:a8:b2: 48:20:68:45:f0:8a:bd:ab:c8:b3:5e:2f:cb:e8:21: c3:9c:42:1c:d2:23:a1:9c:0d:0c:2d:fb:a6:38:08: 9e:1f:a9:71:ee:27:80:d3:cb:c6:2a:f1:c5:fe:7f: 4e:90:11:6e:8e:44:fc:57:fa:ef:2c:1c:8e:bc:84: 53:48:8f:4b:aa:12:70:3e:83:81:0a:7c:d3:54:f2: 09:80:e1:65:19:41:38:51:74:10:2e:63:05:97:6e: fc:41:df:18:13:77:52:a7:9f:26:7e:60:19:58:00: db:8f:ac:65:2c:87:10:c6:8e:e1:fd:48:66:9b:42: eb:33:70:6e:b0:36:8d:41:db:03:ce:e9:2c:c1:81: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:1B:C4:8B:65:A6:35:B0:C9:8C:7A:0C:E0:A7:57:55:26:BA:35 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b3:5b:a3:0f:d9:e5:db:e0:5c:d4:c4:7e:e8:f8:97:50:b7: 1e:81:75:d5:17:33:9a:05:e2:6d:77:1d:9e:38:b1:b8:55:c1: 47:0f:b7:7e:6f:83:8f:20:20:be:eb:11:f3:17:81:25:7e:07: 22:03:8f:f0:5e:d9:6a:46:8f:ba:54:a1:9b:5c:5f:75:90:6e: 3b:f3:1e:ce:b6:57:96:57:2c:62:12:8e:c5:37:6d:61:0f:41: 28:c7:37:2c:f0:b7:8a:af:ea:bb:b7:40:fc:bf:87:06:1f:c1: d3:ae:d6:52:47:fe:bb:26:48:43:4f:16:66:08:be:00:2a:61: b0:49:b4:82:13:b1:3c:da:10:34:11:44:a5:dd:33:c2:f8:ba: 92:6b:bc:ef:a1:51:4f:19:fc:b3:66:66:5a:ba:bf:56:f0:49: 22:0e:26:14:ae:a3:b3:61:17:c4:6e:d7:36:4d:e3:8b:b2:2b: 6d:7f:a2:3a:c2:c9:e4:94:14:02:52:97:f6:2d:fc:da:f9:1b: 8b:5f:7d:71:60:02:5a:c7:72:a2:f6:b0:7a:69:95:af:77:62: 30:96:35:8c:a2:e0:4e:5f:1d:02:f4:80:17:5a:38:2d:11:cc: 35:9b:fa:bb:f5:51:49:c1:04:85:7e:4e:be:7d:c9:6d:f4:9d: 8d:23:b0:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzcyRjExMC8GA1UEBRMoMUJGOTc2RUZFQUIyMzEyRUEyREFDODZCOThBMzk4Q0Yw QzVCRDZGMDAeFw0yNDA1MTUwODQ2MTJaFw0yNDA1MjIwODQ2MTJaMBgxFjAUBgNV BAMTDTY2NDQ3NjU1LTEzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8AueRTpvC03wtV4GcH+v68HH/jFL0UhdF4lW8rRimvK/7w0uSieB9VnSY6IZ3 eqfQDmDNTD8m+1FXH5XzsCZ+dVtwSiITzQ4bUZTv3ujTlC5qD1sn554hv1Ju+sfv N146vgT8nzXTgu/bgb5kUAIKjktmzISoskggaEXwir2ryLNeL8voIcOcQhzSI6Gc DQwt+6Y4CJ4fqXHuJ4DTy8Yq8cX+f06QEW6ORPxX+u8sHI68hFNIj0uqEnA+g4EK fNNU8gmA4WUZQThRdBAuYwWXbvxB3xgTd1KnnyZ+YBlYANuPrGUshxDGjuH9SGab QuszcG6wNo1B2wPO6SzBgbW3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+AsbxItl pjWwyYx6DOCnV1UmujUwHwYDVR0jBBgwFoAUG/l27+qyMS6i2shrmKOYzwxb1vAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3NzJGLzFFNzdFNzMyRTJF QjExRUVBRDZFOUEwQkM0RjlBRTAyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR19sMjctcXlNUzZpMnNocm1LT1l6d3hiMXZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 NzJGLzFFNzdFNzMyRTJFQjExRUVBRDZFOUEwQkM0RjlBRTAyL0dfbDI3LXF5TVM2 aTJzaHJtS09Zend4YjF2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmzW6MP2eXb4FzUxH7o+JdQtx6BddUXM5oF4m13HZ44sbhVwUcPt35v g48gIL7rEfMXgSV+ByIDj/Be2WpGj7pUoZtcX3WQbjvzHs62V5ZXLGISjsU3bWEP QSjHNyzwt4qv6ru3QPy/hwYfwdOu1lJH/rsmSENPFmYIvgAqYbBJtIITsTzaEDQR RKXdM8L4upJrvO+hUU8Z/LNmZlq6v1bwSSIOJhSuo7NhF8Ru1zZN44uyK21/ojrC yeSUFAJSl/Yt/Nr5G4tffXFgAlrHcqL2sHppla93YjCWNYyi4E5fHQL0gBdaOC0R zDWb+rv1UUnBBIV+Tr59yW30nY0jsPw= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org