$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft File: gez_R_JbIULxDfbUmuDiGf7XR_g.mft (raw, json) Hash identifier: ti0Qxmw87VZKjQXD6bNJuWX5ZH99IIuPUlEpC8y8Idw= Subject key identifier: 3C:73:0A:94:F9:76:48:49:D8:0F:68:9C:17:E1:5A:AD:BE:95:AE:6E Authority key identifier: 81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8 Certificate issuer: /CN=A913E5D6/serialNumber=81ECFF47F25B2142F10DF6D49AE0E219FED747F8 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft Manifest number: 0730 Signing time: Sat 18 May 2024 22:28:53 +0000 Manifest this update: Sat 18 May 2024 22:28:52 +0000 Manifest next update: Sat 25 May 2024 22:28:52 +0000 Files and hashes: 1: gez_R_JbIULxDfbUmuDiGf7XR_g.crl (hash: k8Uxy85PYeC8l7xZqiLWCC8TUFcAKtPKX3wo8D3cAao=) 2: B287525CE81011EA926BE66FC4F9AE02.roa (hash: 0yo4rpI4Jk+1akL7kBrCcFa30wmeKWrTV9fA7cVvIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.crl rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5D6/serialNumber=81ECFF47F25B2142F10DF6D49AE0E219FED747F8 Validity Not Before: May 18 22:28:52 2024 GMT Not After : May 25 22:28:52 2024 GMT Subject: CN=66492ba5-b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:0f:24:b8:cd:90:2a:f8:45:3a:a0:d1:58: 19:df:37:c4:6b:8a:ba:1b:a1:74:7e:fd:53:e4:e6: 95:3e:ae:0b:da:36:35:e3:16:03:47:ae:07:47:dd: 7e:83:7e:98:36:41:06:69:39:27:cd:df:b0:b8:5c: 1e:94:0e:df:5a:fc:89:82:59:f7:ae:90:66:06:1c: cc:f7:5c:b7:6c:1a:ef:a6:04:c6:6e:da:be:1f:cc: 55:39:aa:b4:9f:cf:0d:03:83:68:06:68:c9:91:37: d1:d4:f9:5a:5b:cc:6f:4b:95:a2:12:94:f4:93:ad: 75:65:5c:2b:22:45:6e:34:9e:1c:f8:15:e7:c0:47: 48:bc:a2:99:48:48:9c:ba:d0:90:0b:79:79:13:58: 36:94:6d:7a:d2:f1:4a:61:e7:6d:c5:70:c2:33:b8: 4b:d1:2f:a5:e5:0e:ea:a2:67:28:f2:b1:18:f9:57: ec:57:8c:13:76:0c:33:92:d6:8c:01:ca:02:66:b6: 98:de:b1:12:20:60:9a:06:89:75:83:9d:a9:2f:b2: 76:47:a6:a5:ee:cb:c2:d8:69:ab:f0:a0:0f:a6:20: 3b:73:32:f5:c9:34:1b:6d:9b:e6:b3:d9:75:09:d3: 24:34:8d:f9:12:83:7d:8e:6d:ca:25:7e:7e:82:81: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:0A:94:F9:76:48:49:D8:0F:68:9C:17:E1:5A:AD:BE:95:AE:6E X509v3 Authority Key Identifier: keyid:81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:e1:0c:83:17:91:ac:b6:4c:bf:19:3a:e3:f1:c9:1f:ad:cb: cb:34:e8:7b:b2:75:da:27:0e:33:92:03:2c:9c:66:76:b1:65: 04:05:20:cc:a5:b2:d8:bc:33:e9:da:80:3a:df:99:1b:8d:5f: 79:17:d8:56:2a:ce:40:e5:ad:ad:1c:03:62:7d:83:9a:45:9f: 58:d9:82:40:50:2b:2e:1d:3b:f6:e0:32:a9:fa:bc:52:c3:7e: 65:96:1a:f5:21:fe:cc:de:54:3c:24:85:58:f2:72:6b:dd:ce: 08:c0:20:c6:cb:f3:92:32:1a:33:6c:66:20:e0:c8:79:94:19: 50:cb:8c:ab:6d:d8:02:f9:0b:4e:05:e1:37:5f:ce:98:05:4d: 13:94:31:3b:d6:c3:af:0c:e7:4a:9b:81:b7:1e:e1:eb:1b:df: be:ce:95:ac:31:d0:60:c9:78:99:a4:14:58:44:c4:e7:25:7e: 83:e1:06:29:00:0e:ae:d8:b4:57:53:5b:ee:46:a4:f9:d0:c6: dd:3a:15:ef:b2:7d:0e:60:ba:e0:e1:96:17:ba:e9:6c:d5:cf: 97:6c:39:27:db:55:fa:fe:41:24:ef:55:79:b0:00:a9:4b:ea: 02:29:ec:d7:ae:2e:da:6e:79:53:5a:7e:91:62:c2:68:22:dd: f2:92:90:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U1RDYxMTAvBgNVBAUTKDgxRUNGRjQ3RjI1QjIxNDJGMTBERjZENDlBRTBFMjE5 RkVENzQ3RjgwHhcNMjQwNTE4MjIyODUyWhcNMjQwNTI1MjIyODUyWjAYMRYwFAYD VQQDEw02NjQ5MmJhNS1iMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P8PJLjNkCr4RTqg0VgZ3zfEa4q6G6F0fv1T5OaVPq4L2jY14xYDR64HR91+ g36YNkEGaTknzd+wuFwelA7fWvyJgln3rpBmBhzM91y3bBrvpgTGbtq+H8xVOaq0 n88NA4NoBmjJkTfR1PlaW8xvS5WiEpT0k611ZVwrIkVuNJ4c+BXnwEdIvKKZSEic utCQC3l5E1g2lG160vFKYedtxXDCM7hL0S+l5Q7qomco8rEY+VfsV4wTdgwzktaM AcoCZraY3rESIGCaBol1g52pL7J2R6al7svC2Gmr8KAPpiA7czL1yTQbbZvms9l1 CdMkNI35EoN9jm3KJX5+goGb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxzCpT5 dkhJ2A9onBfhWq2+la5uMB8GA1UdIwQYMBaAFIHs/0fyWyFC8Q321Jrg4hn+10f4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTVENi81QTUyRjkxMkU3 NUExMUVBQjk2RjlENjBDNEY5QUUwMi9nZXpfUl9KYklVTHhEZmJVbXVEaUdmN1hS X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dlel9SX0piSVVMeERmYlVtdURpR2Y3WFJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTVENi81QTUyRjkxMkU3NUExMUVBQjk2RjlENjBDNEY5QUUwMi9nZXpfUl9KYklV THhEZmJVbXVEaUdmN1hSX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO4QyDF5Gstky/GTrj8ckfrcvLNOh7snXaJw4zkgMsnGZ2sWUEBSDM pbLYvDPp2oA635kbjV95F9hWKs5A5a2tHANifYOaRZ9Y2YJAUCsuHTv24DKp+rxS w35llhr1If7M3lQ8JIVY8nJr3c4IwCDGy/OSMhozbGYg4Mh5lBlQy4yrbdgC+QtO BeE3X86YBU0TlDE71sOvDOdKm4G3HuHrG9++zpWsMdBgyXiZpBRYRMTnJX6D4QYp AA6u2LRXU1vuRqT50MbdOhXvsn0OYLrg4ZYXuuls1c+XbDkn21X6/kEk71V5sACp S+oCKezXri7abnlTWn6RYsJoIt3ykpCD -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org