$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft File: gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json) Hash identifier: M9EZFUSA3Jf0tlCAadELn7PDq07odIEcT/Y3IBkjS8o= Subject key identifier: 66:1C:6B:9E:40:E2:2C:7B:80:37:AD:50:E2:D2:39:9A:06:01:F4:CA Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft Manifest number: 066A Signing time: Sat 04 May 2024 23:40:45 +0000 Manifest this update: Sat 04 May 2024 23:40:44 +0000 Manifest next update: Sat 11 May 2024 23:40:44 +0000 Files and hashes: 1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: lGTpbOqNS5nGGRwjqdJcA5R+r3Ye/09TU3FRod+k+Uc=) 2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: 7qpwqcGg55sm7EBaJ/SHtK1pcuydHet9/2flStIeXg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Validity Not Before: May 4 23:40:44 2024 GMT Not After : May 11 23:40:44 2024 GMT Subject: CN=6636c77c-de92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ee:17:a2:74:d0:5d:d4:83:5d:0d:ab:bf:42: f6:0f:e8:43:e6:8c:32:44:ac:16:d3:6f:c5:b9:cd: 4c:36:57:99:80:d0:17:76:e1:e6:d6:bb:02:df:3a: 3b:40:4a:05:c9:cd:43:39:fc:34:0c:cb:b9:c9:53: 4e:c2:cb:cc:e2:95:de:25:84:2c:6f:b6:31:6c:4a: b3:59:41:24:f3:79:83:35:8f:e2:c4:dc:8d:1c:20: ab:b1:60:a9:7c:6e:b3:28:b0:a5:86:c7:4f:c6:00: 55:8c:9a:33:99:8b:e6:a8:f2:d8:30:47:d4:b1:b8: f8:4a:65:99:1c:4d:0a:19:04:4b:d0:5b:c7:ae:fa: 33:9b:04:cc:0d:94:1a:46:b4:8c:5f:49:92:f3:d9: 80:62:06:1a:3d:4e:96:f4:09:a6:d9:9b:1a:4a:ab: 6e:39:1b:d4:7b:5e:5d:10:69:05:fd:bf:f8:85:b2: 2b:7c:54:e9:c6:3d:fd:5d:52:ff:68:dc:23:b0:03: c2:f2:6a:04:54:0e:3d:a3:98:6c:5d:f3:80:ca:70: 03:0e:46:f6:78:fe:08:2c:27:fc:4f:a4:be:5f:c7: ff:13:2d:8b:19:d0:37:1c:8f:4d:55:a1:b6:8a:37: d1:73:ba:14:0e:70:50:1a:76:21:af:69:40:2d:a3: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:6B:9E:40:E2:2C:7B:80:37:AD:50:E2:D2:39:9A:06:01:F4:CA X509v3 Authority Key Identifier: keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:92:85:ab:a6:06:b0:df:4f:fe:7a:2b:81:d5:75:84:db:c7: 5f:72:d5:0a:87:73:1e:37:ed:02:e9:d5:db:4d:50:38:89:a5: d3:b7:88:66:75:16:b5:a3:16:e6:76:01:db:d8:28:98:97:dd: af:2f:68:3f:3f:f9:d2:59:36:09:67:06:47:bc:26:c3:fe:76: 09:18:68:66:9a:8f:d8:d2:d1:f1:46:0c:b3:49:e3:6a:9f:2d: cf:55:c0:8d:5a:df:6c:b1:dd:23:ba:ba:33:3e:f1:80:d8:ee: ae:e5:e7:70:af:c4:d2:5c:34:1d:66:5a:ff:8f:0e:8e:d3:99: 09:c5:84:4d:53:98:a4:fe:a8:08:aa:79:6c:3f:69:9c:0d:98: c3:94:b9:1c:85:90:4a:bd:48:62:c9:2b:27:27:1c:df:42:1f: bf:d9:5d:a2:41:2f:58:08:45:7e:ee:00:b9:22:a6:4f:aa:8d: 08:67:f3:27:01:27:d3:e6:6f:00:6f:4c:15:1c:cb:0c:82:06: 30:57:e6:82:a0:6e:be:f8:90:28:28:cf:75:3b:46:1c:bd:67: 47:ed:63:ed:32:a5:82:f9:02:fc:eb:c8:50:78:ee:11:e7:f9: bc:f1:0f:6c:10:87:bf:e2:e2:29:5b:19:43:4a:81:9e:8e:42: 02:1a:25:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwMjkxMTAvBgNVBAUTKDgzMkNDMDU2RTIzRTM4OEFFMzc4MUE1MjBCREQ5MTE2 OTYzNkU1OUIwHhcNMjQwNTA0MjM0MDQ0WhcNMjQwNTExMjM0MDQ0WjAYMRYwFAYD VQQDEw02NjM2Yzc3Yy1kZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+4XonTQXdSDXQ2rv0L2D+hD5owyRKwW02/Fuc1MNleZgNAXduHm1rsC3zo7 QEoFyc1DOfw0DMu5yVNOwsvM4pXeJYQsb7YxbEqzWUEk83mDNY/ixNyNHCCrsWCp fG6zKLClhsdPxgBVjJozmYvmqPLYMEfUsbj4SmWZHE0KGQRL0FvHrvozmwTMDZQa RrSMX0mS89mAYgYaPU6W9Amm2ZsaSqtuORvUe15dEGkF/b/4hbIrfFTpxj39XVL/ aNwjsAPC8moEVA49o5hsXfOAynADDkb2eP4ILCf8T6S+X8f/Ey2LGdA3HI9NVaG2 ijfRc7oUDnBQGnYhr2lALaOq9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYca55A 4ix7gDetUOLSOZoGAfTKMB8GA1UdIwQYMBaAFIMswFbiPjiK43gaUgvdkRaWNuWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTAyOS8xMDg5N0IzMjJG QjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9JcmplQnBTQzkyUkZwWTI1 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5ekFWdUktT0lyamVCcFNDOTJSRnBZMjVacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTAyOS8xMDg5N0IzMjJGQjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9J cmplQnBTQzkyUkZwWTI1WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJkoWrpgaw30/+eiuB1XWE28dfctUKh3MeN+0C6dXbTVA4iaXTt4hm dRa1oxbmdgHb2CiYl92vL2g/P/nSWTYJZwZHvCbD/nYJGGhmmo/Y0tHxRgyzSeNq ny3PVcCNWt9ssd0jurozPvGA2O6u5edwr8TSXDQdZlr/jw6O05kJxYRNU5ik/qgI qnlsP2mcDZjDlLkchZBKvUhiySsnJxzfQh+/2V2iQS9YCEV+7gC5IqZPqo0IZ/Mn ASfT5m8Ab0wVHMsMggYwV+aCoG6++JAoKM91O0YcvWdH7WPtMqWC+QL868hQeO4R 5/m88Q9sEIe/4uIpWxlDSoGejkICGiVN -----END CERTIFICATE-----Generated at Sun May 5 00:14:47 2024 by rpki-client on console-ams.rpki-client.org