$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: Alh27MuODb/9U3PzLIeaOHDf6uwsi2kCSM3m1GMrqJI= Subject key identifier: C9:0A:7A:4D:AE:69:EF:71:16:4B:94:E0:F9:1D:1E:8B:A5:D9:A6:EA Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 177B Signing time: Sat 18 May 2024 18:12:31 +0000 Manifest this update: Sat 18 May 2024 18:12:31 +0000 Manifest next update: Sat 25 May 2024 18:12:31 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: IyoKlEgz+9nGqjD0KLAYk+IuyLLC08L78NPhRTryccY=) 2: ECDFACE4C6F611EC95352E19C4F9AE02.roa (hash: a5ZaxTKm0g3+6bMrlgoxCh5d5uAK6bM0ukEp5ULHrNk=) 3: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: 0wiokmGEtmj/IuwbmlOpHGusH2+aKsyq7eWY/s6wrJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: May 18 18:12:31 2024 GMT Not After : May 25 18:12:31 2024 GMT Subject: CN=6648ef8f-09fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:3b:d6:df:35:bd:3b:a7:75:47:87:00:84: f5:b4:3d:bc:ac:53:97:07:76:40:81:35:d6:0b:6e: 4d:85:4e:35:24:98:50:96:27:ec:4a:35:7d:1f:81: 1b:fd:c7:d8:46:a9:d1:ba:35:68:4b:7e:2f:f8:84: 58:f2:60:9b:22:f6:a1:02:4d:33:9e:9f:1b:63:13: 99:5b:53:34:d4:58:95:8a:f0:36:02:d6:ca:e9:f9: 99:9f:ca:07:71:b5:48:99:67:2f:cf:05:bc:ca:8b: 62:f7:7e:1b:9c:d3:6e:9a:61:0c:74:2e:ad:4c:f1: 0d:2f:78:53:20:6e:10:f1:8b:f4:48:84:a8:4a:d4: 97:04:d3:e5:95:b1:02:11:c1:68:f6:93:89:b5:79: 69:8c:90:d9:16:a8:69:44:e8:ef:58:86:fa:ea:8f: 03:7f:62:b4:b3:82:fb:75:5d:10:d2:8f:32:86:11: 5c:9f:a3:57:04:2d:2a:a3:ca:e2:4e:48:94:b1:5a: 09:00:58:85:dc:c4:91:ed:a3:22:75:75:43:24:36: c2:b9:19:d8:81:49:0d:75:10:79:7b:32:8e:fc:94: d9:19:e0:d8:6c:3f:2d:1f:e3:6c:1b:bf:f9:5e:ce: 00:26:44:19:81:57:7f:93:67:8e:0b:98:78:ff:11: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:7A:4D:AE:69:EF:71:16:4B:94:E0:F9:1D:1E:8B:A5:D9:A6:EA X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:99:2e:e7:92:fa:3f:8f:55:fa:02:d7:96:5a:cf:3a:af:3c: 2d:0d:0f:e8:aa:a1:a1:61:19:42:7b:65:e6:61:61:5c:98:cc: 59:96:cc:cc:b5:1d:b7:c9:46:90:da:28:a3:62:a9:6d:c6:2a: c7:6f:fc:23:ba:3b:c4:1a:3e:30:89:37:20:ee:ce:cb:fb:0d: 20:91:e6:9e:77:ba:c4:e9:cb:2f:21:05:e7:86:91:76:72:28: ca:69:36:06:a7:93:44:c7:d5:ca:0f:45:c0:ff:ab:3e:22:ad: e9:1e:78:b1:50:48:f1:f0:b5:ea:0e:91:53:95:95:50:a9:41: 98:b2:19:c4:71:52:74:32:60:08:96:b0:27:5a:33:82:1d:6e: 7a:d7:cb:bb:9f:c3:c6:3b:98:bf:00:8b:34:7f:4a:68:26:91: 64:02:28:48:61:d4:ae:e5:94:77:35:85:e2:f4:7f:aa:4b:b7: bb:87:f8:7c:80:af:0d:cf:85:3d:3a:d5:00:b8:ea:f8:71:bd: be:a5:40:66:7f:71:ec:86:99:bd:06:36:93:89:da:6a:f9:8e: 21:15:ba:be:7f:0e:43:2e:71:94:e1:fd:31:b2:80:c5:3b:a5: 1d:e5:ab:a3:01:5b:21:77:6a:b8:c4:f1:c2:ec:34:ee:73:be: 5d:ee:ad:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjQwNTE4MTgxMjMxWhcNMjQwNTI1MTgxMjMxWjAYMRYwFAYD VQQDEw02NjQ4ZWY4Zi0wOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ek71t81vTundUeHAIT1tD28rFOXB3ZAgTXWC25NhU41JJhQlifsSjV9H4Eb /cfYRqnRujVoS34v+IRY8mCbIvahAk0znp8bYxOZW1M01FiVivA2AtbK6fmZn8oH cbVImWcvzwW8yoti934bnNNummEMdC6tTPENL3hTIG4Q8Yv0SISoStSXBNPllbEC EcFo9pOJtXlpjJDZFqhpROjvWIb66o8Df2K0s4L7dV0Q0o8yhhFcn6NXBC0qo8ri TkiUsVoJAFiF3MSR7aMidXVDJDbCuRnYgUkNdRB5ezKO/JTZGeDYbD8tH+NsG7/5 Xs4AJkQZgVd/k2eOC5h4/xEtJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkKek2u ae9xFkuU4PkdHoul2abqMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwmS7nkvo/j1X6AteWWs86rzwtDQ/oqqGhYRlCe2XmYWFcmMxZlszM tR23yUaQ2iijYqltxirHb/wjujvEGj4wiTcg7s7L+w0gkeaed7rE6csvIQXnhpF2 cijKaTYGp5NEx9XKD0XA/6s+Iq3pHnixUEjx8LXqDpFTlZVQqUGYshnEcVJ0MmAI lrAnWjOCHW5618u7n8PGO5i/AIs0f0poJpFkAihIYdSu5ZR3NYXi9H+qS7e7h/h8 gK8Nz4U9OtUAuOr4cb2+pUBmf3Hshpm9BjaTidpq+Y4hFbq+fw5DLnGU4f0xsoDF O6Ud5aujAVshd2q4xPHC7DTuc75d7q2e -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org