$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: blCWdSSfnyqKx5SQqxPGZl/0qEMhrW4S5Z1DcE32XOM= Subject key identifier: B4:BF:2A:3F:3D:94:65:30:3A:71:88:50:6D:E6:B4:6F:D9:19:BA:8A Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 0F5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 0F56 Signing time: Sat 18 May 2024 18:09:50 +0000 Manifest this update: Sat 18 May 2024 18:09:49 +0000 Manifest next update: Sat 25 May 2024 18:09:49 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: ugi8/RUSPr0vRSG9JT7ZxV2Ep52rFvRAv+cWFtQxoZM=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: 2cswc8ccZRhVU5bL6M5psNjHIIqT6RTHSRyOhGf9+Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3932 (0xf5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: May 18 18:09:49 2024 GMT Not After : May 25 18:09:49 2024 GMT Subject: CN=6648eeee-d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:f0:d1:1a:7e:8a:a3:56:f9:41:19:52:6e: 68:57:55:91:6f:6e:54:75:b3:88:fe:09:db:0f:d7: 3b:8d:38:05:bf:62:d6:7a:ce:24:eb:97:7c:c5:23: ee:f5:e7:62:a9:02:9e:cb:f8:e5:c0:e2:7e:d2:65: bd:20:c3:52:d1:b5:bd:89:d2:0a:74:2a:bd:db:57: 67:0b:c1:c6:36:4c:5a:66:18:1b:44:a0:01:df:02: 06:b0:14:60:ef:4e:96:fc:ce:84:15:d7:f5:c0:ce: c5:4e:3c:cc:61:45:4a:ba:e4:21:34:e6:c1:9e:0f: 59:71:6d:0e:a5:02:b1:2b:ee:f8:e1:6f:21:71:ac: 6d:f3:65:93:1b:51:c4:16:c1:af:74:bb:d8:eb:c1: a1:c7:05:42:04:ca:f2:f8:9b:15:d5:c1:1a:db:66: c8:31:e4:d8:8f:c7:7f:8b:70:0d:17:22:35:01:58: 6a:09:10:74:15:81:94:ae:8a:aa:9a:b3:98:81:c4: 80:3d:17:bf:05:cc:c2:d9:bc:5b:71:9f:be:29:fd: 19:a9:64:a0:d6:95:84:b8:f8:59:b4:c4:2d:8f:70: af:86:bf:fb:54:2f:cb:7d:2d:a9:4d:29:b0:64:a1: 71:d0:ce:c6:44:4b:25:13:ea:af:41:ee:ef:6e:7c: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:2A:3F:3D:94:65:30:3A:71:88:50:6D:E6:B4:6F:D9:19:BA:8A X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:54:48:c3:34:f1:d1:d0:38:39:25:79:43:3a:c0:d9:d4:12: d9:92:f6:b6:f6:e4:b7:f5:2f:9b:02:56:a2:94:a4:2f:19:21: d1:94:d6:97:17:52:9c:3e:9b:c5:0c:df:9b:02:2e:7c:14:6c: a5:bb:fb:3e:71:4c:a0:a6:84:8c:27:b7:d4:fd:59:e8:d4:c4: 93:0e:f3:37:ba:16:cc:59:c8:7f:a1:8e:fe:10:b9:ab:b8:df: b5:9c:0b:5e:94:30:d6:38:ab:67:fc:c5:05:0a:b8:b0:15:64: 28:a0:bc:41:07:29:b0:be:c7:d2:92:c3:21:53:ed:cb:6b:be: 0a:72:69:04:d9:34:42:b1:d1:0e:69:07:a3:f0:ff:b8:63:84: 60:c5:b0:39:09:6b:54:6e:fe:1c:6a:ed:a9:a8:bb:39:7c:ea: 68:e5:1b:de:6d:97:70:92:27:3f:a6:f4:45:66:76:e0:4a:b3: bb:ce:f9:8e:20:f6:78:b1:71:ff:46:7f:a0:d8:ac:0b:4f:20: 3e:52:e9:b4:83:dd:7d:08:6e:c1:77:d1:d9:19:3f:04:88:06: 23:6e:5d:10:6e:0a:86:5f:8e:38:e2:62:ba:c9:b1:18:4b:3f: 5e:64:ba:07:9f:53:81:8b:17:5e:0d:f2:a6:77:3e:1e:5d:85: 9d:26:05:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjQwNTE4MTgwOTQ5WhcNMjQwNTI1MTgwOTQ5WjAYMRYwFAYD VQQDEw02NjQ4ZWVlZS1kMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lfw0Rp+iqNW+UEZUm5oV1WRb25UdbOI/gnbD9c7jTgFv2LWes4k65d8xSPu 9ediqQKey/jlwOJ+0mW9IMNS0bW9idIKdCq921dnC8HGNkxaZhgbRKAB3wIGsBRg 706W/M6EFdf1wM7FTjzMYUVKuuQhNObBng9ZcW0OpQKxK+744W8hcaxt82WTG1HE FsGvdLvY68GhxwVCBMry+JsV1cEa22bIMeTYj8d/i3ANFyI1AVhqCRB0FYGUroqq mrOYgcSAPRe/BczC2bxbcZ++Kf0ZqWSg1pWEuPhZtMQtj3Cvhr/7VC/LfS2pTSmw ZKFx0M7GREslE+qvQe7vbnzAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLS/Kj89 lGUwOnGIUG3mtG/ZGbqKMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYVEjDNPHR0Dg5JXlDOsDZ1BLZkva29uS39S+bAlailKQvGSHRlNaX F1KcPpvFDN+bAi58FGylu/s+cUygpoSMJ7fU/Vno1MSTDvM3uhbMWch/oY7+ELmr uN+1nAtelDDWOKtn/MUFCriwFWQooLxBBymwvsfSksMhU+3La74KcmkE2TRCsdEO aQej8P+4Y4RgxbA5CWtUbv4cau2pqLs5fOpo5RvebZdwkic/pvRFZnbgSrO7zvmO IPZ4sXH/Rn+g2KwLTyA+Uum0g919CG7Bd9HZGT8EiAYjbl0QbgqGX4444mK6ybEY Sz9eZLoHn1OBixdeDfKmdz4eXYWdJgUA -----END CERTIFICATE-----Generated at Sat May 18 19:15:23 2024 by rpki-client on console-ams.rpki-client.org