$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json) Hash identifier: 3VG8A2bMHMCkaNWneRIQXaeNfUG4blOZ7GPe5K12ovs= Subject key identifier: 53:05:00:AA:A7:3A:C1:56:57:77:13:40:B1:D4:77:AA:50:AE:37:3C Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft Manifest number: 0596 Signing time: Sun 05 May 2024 00:34:17 +0000 Manifest this update: Sun 05 May 2024 00:34:17 +0000 Manifest next update: Sun 12 May 2024 00:34:17 +0000 Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: DdNsPxraLqcuNfZUpAX3z/2shHHdQ+cntjsKGeZLyjA=) 2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: OfUesfXUMR3a7DJ3hJw2td4vk6wNH0IY4SKhrpALFIM=) 3: 9BAE526A83FB11EBB159507AC4F9AE02.roa (hash: Ey0osIR23qN0LL5MqG3hp1UnHadLjG/qFcl9KhR11LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: May 5 00:34:17 2024 GMT Not After : May 12 00:34:17 2024 GMT Subject: CN=6636d409-3b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:2e:e6:ad:a7:d6:23:74:b0:00:76:ce:dc: 8f:c9:e7:ae:7c:bd:95:22:40:6a:f2:2a:36:04:3c: 94:71:b7:d3:94:98:82:71:a3:e4:5d:ce:da:8c:38: d1:d9:6b:32:51:06:a0:4f:6e:15:ff:79:c0:78:76: 7e:40:f4:4d:5a:93:5a:ab:3b:ff:42:24:e9:f5:e0: 7b:7c:a0:b3:70:0f:f3:54:a2:1d:57:aa:d9:47:f7: 22:12:9e:e6:c2:8a:7a:46:3a:b7:83:3d:01:10:72: 2f:3b:4f:4c:f5:a4:f4:6a:07:4d:e1:e9:6b:70:0f: b9:a2:b3:82:9c:c9:14:0e:b6:f3:d2:1b:ac:4e:66: 4f:fd:d2:09:1b:85:14:a3:56:b3:d0:17:3f:be:3c: 1f:1d:fe:05:28:35:41:5b:b3:63:1e:85:32:df:91: 86:14:8c:fa:41:2b:9d:10:ca:ae:33:84:09:1d:bf: 7d:4f:d3:bb:7e:be:cb:d8:ca:4f:a1:0b:05:9d:b7: 77:9b:78:ed:fe:48:41:16:ec:94:e4:81:7b:62:bf: c8:fc:c3:4d:0e:2b:58:c7:97:a2:4f:a4:60:b9:22: 40:d9:00:6b:53:3d:cb:a9:8d:fe:bf:e0:f1:44:73: 70:16:45:0c:5c:a5:dc:4b:43:ad:37:c4:5c:19:86: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:00:AA:A7:3A:C1:56:57:77:13:40:B1:D4:77:AA:50:AE:37:3C X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f3:47:c0:28:15:72:5d:3a:b1:17:c1:fb:20:59:df:fa:a6: 8d:e9:d4:81:8f:f4:3f:b7:da:a4:c2:b0:27:7c:2a:bc:eb:54: fb:b7:f3:1e:0e:d2:03:c2:c8:2e:49:00:45:66:68:5b:65:c7: 27:ac:f8:de:38:d0:3b:b1:7b:7e:11:89:a3:26:9a:bf:76:b2: 60:07:9b:22:d2:52:d6:03:3a:30:7d:91:22:62:cd:80:bb:a6: 56:0c:dd:46:8b:b2:8b:2c:3b:bf:2f:6d:a0:76:b6:62:00:ac: e3:12:d2:ae:e3:8c:ba:b4:8b:be:77:6b:f2:53:5c:3d:83:69: 47:ff:bd:84:2a:aa:1c:92:ff:d3:62:c1:5e:fc:32:03:df:c9: d1:d7:e6:89:12:1b:2c:84:2d:97:10:95:09:32:af:5e:17:97: 72:87:af:7a:c9:e7:69:93:01:2c:e8:26:d9:9a:71:af:47:cc: c3:63:2c:54:45:b2:de:9c:e3:16:cd:75:9a:9c:20:43:e8:e6: 01:58:b8:ea:d6:ac:ac:b4:00:67:5a:b9:c8:25:83:3d:ae:d8: b2:e8:be:b9:fd:d1:54:f0:97:6d:37:94:c6:0f:0b:2d:32:f0: 88:e7:96:a4:ff:91:77:8e:ac:b2:68:dc:ab:51:e9:05:08:bc: f0:cd:f0:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjQwNTA1MDAzNDE3WhcNMjQwNTEyMDAzNDE3WjAYMRYwFAYD VQQDEw02NjM2ZDQwOS0zYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ4u5q2n1iN0sAB2ztyPyeeufL2VIkBq8io2BDyUcbfTlJiCcaPkXc7ajDjR 2WsyUQagT24V/3nAeHZ+QPRNWpNaqzv/QiTp9eB7fKCzcA/zVKIdV6rZR/ciEp7m wop6Rjq3gz0BEHIvO09M9aT0agdN4elrcA+5orOCnMkUDrbz0husTmZP/dIJG4UU o1az0Bc/vjwfHf4FKDVBW7NjHoUy35GGFIz6QSudEMquM4QJHb99T9O7fr7L2MpP oQsFnbd3m3jt/khBFuyU5IF7Yr/I/MNNDitYx5eiT6RguSJA2QBrUz3LqY3+v+Dx RHNwFkUMXKXcS0OtN8RcGYajlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMFAKqn OsFWV3cTQLHUd6pQrjc8MB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83 Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB380fAKBVyXTqxF8H7IFnf+qaN6dSBj/Q/t9qkwrAnfCq861T7t/Me DtIDwsguSQBFZmhbZccnrPjeONA7sXt+EYmjJpq/drJgB5si0lLWAzowfZEiYs2A u6ZWDN1Gi7KLLDu/L22gdrZiAKzjEtKu44y6tIu+d2vyU1w9g2lH/72EKqockv/T YsFe/DID38nR1+aJEhsshC2XEJUJMq9eF5dyh696yedpkwEs6CbZmnGvR8zDYyxU RbLenOMWzXWanCBD6OYBWLjq1qystABnWrnIJYM9rtiy6L65/dFU8JdtN5TGDwst MvCI55ak/5F3jqyyaNyrUekFCLzwzfDe -----END CERTIFICATE-----Generated at Sun May 5 01:22:26 2024 by rpki-client on console-fra.rpki-client.org