$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft File: GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json) Hash identifier: fB+31VR07r4dsVsLD7C2kiJ+nBLyXR+KcaZhhFAmcv4= Subject key identifier: 7B:94:35:EB:3C:52:FC:8E:AC:3C:CB:68:5B:35:26:B4:04:0A:8C:65 Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft Manifest number: 06B0 Signing time: Sat 18 May 2024 23:10:27 +0000 Manifest this update: Sat 18 May 2024 23:10:26 +0000 Manifest next update: Sat 25 May 2024 23:10:26 +0000 Files and hashes: 1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: MzK2/BnKUQzn3jsGyKMPvbO10AhVbYnn0HHO4bVNDJQ=) 2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: C2i/RiLJBzEbP0nZIg2KE+fWatL836He7UvLKqX2hU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Validity Not Before: May 18 23:10:26 2024 GMT Not After : May 25 23:10:26 2024 GMT Subject: CN=66493563-dbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:74:09:6e:d2:e5:52:b0:f2:b1:e1:85:0b: 55:d3:38:16:c3:f4:ab:e9:da:ec:84:2c:d5:57:67: a3:49:3f:c5:48:e0:0e:f7:f6:42:0e:49:c2:6f:50: ca:24:42:0c:eb:4c:27:e7:1d:12:5b:31:c3:93:17: cf:dd:a7:3c:93:33:ed:a7:99:36:bd:77:c6:b0:be: a6:9f:b5:38:92:5e:5e:9f:62:42:48:05:61:6c:9a: 06:70:8f:f8:ef:82:f1:57:c2:a8:1c:de:bc:6f:d8: 1a:2d:c0:9a:4c:93:da:c4:f0:d3:91:12:e1:93:b1: 5a:0a:65:f7:a0:e3:32:83:79:f2:0c:50:c3:84:1a: 0f:9c:af:48:9a:1d:89:63:cb:8a:86:37:79:70:5e: bc:bb:bb:03:8d:44:cd:bd:34:b4:3f:26:d8:43:77: 32:61:01:7e:be:8a:c0:91:42:88:48:1a:58:bb:a9: 7c:65:1e:5e:c3:4e:74:22:61:41:e9:1a:5f:9a:6c: 13:5e:5d:e3:67:5c:69:a3:d5:2c:1d:bd:9f:3f:a1: 1f:20:5e:3f:61:e3:b0:c4:58:ef:fd:b8:08:9a:e7: 77:5b:d5:84:aa:34:82:6f:90:85:c9:83:96:0b:10: 82:f5:e3:cf:97:7f:77:b3:bb:e9:88:ee:0d:6b:56: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:35:EB:3C:52:FC:8E:AC:3C:CB:68:5B:35:26:B4:04:0A:8C:65 X509v3 Authority Key Identifier: keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:09:a0:97:9f:5e:13:7a:d8:b6:a4:90:cd:d9:fc:d4:19:36: 45:29:f9:06:34:cf:e5:fd:0c:32:06:88:be:97:5d:4b:1e:94: ed:68:29:ec:a7:cb:4a:bd:12:66:2f:42:3f:fb:59:06:5d:6d: eb:0b:6d:05:c4:7a:5b:e6:6d:2d:77:1a:26:2f:39:71:3e:7f: e5:37:2e:bd:57:5b:cd:00:ff:a9:61:13:56:85:de:b5:b8:58: 98:ad:47:a0:30:6a:0b:28:93:fe:2d:96:23:f8:c0:f7:2d:d1: 5f:5c:3a:5b:60:aa:4c:5c:c9:da:b5:12:58:46:22:db:38:a8: ec:a6:a0:d6:eb:bc:39:20:c9:8e:6b:fc:fc:a3:c7:48:b7:8a: cf:27:78:27:a7:aa:49:5c:17:bf:d5:dd:70:19:2a:b9:ed:be: 49:85:95:16:08:05:0b:22:7a:ab:63:c7:fb:31:00:53:e0:02: 14:f9:5e:22:da:d7:95:28:52:21:03:12:3c:c2:dc:6d:38:0e: 17:b0:de:81:05:ba:08:af:a7:4b:16:68:a0:04:22:dd:ae:ac: c3:46:cb:2b:8e:90:f4:47:28:2a:df:32:2b:ad:ce:45:6d:59: 6c:80:11:ac:c2:27:de:28:fd:be:23:75:89:4b:cc:0e:58:ab: f8:bb:f5:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF Njc0MkYyMjEwHhcNMjQwNTE4MjMxMDI2WhcNMjQwNTI1MjMxMDI2WjAYMRYwFAYD VQQDEw02NjQ5MzU2My1kYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiR0CW7S5VKw8rHhhQtV0zgWw/Sr6drshCzVV2ejST/FSOAO9/ZCDknCb1DK JEIM60wn5x0SWzHDkxfP3ac8kzPtp5k2vXfGsL6mn7U4kl5en2JCSAVhbJoGcI/4 74LxV8KoHN68b9gaLcCaTJPaxPDTkRLhk7FaCmX3oOMyg3nyDFDDhBoPnK9Imh2J Y8uKhjd5cF68u7sDjUTNvTS0PybYQ3cyYQF+vorAkUKISBpYu6l8ZR5ew050ImFB 6RpfmmwTXl3jZ1xpo9UsHb2fP6EfIF4/YeOwxFjv/bgImud3W9WEqjSCb5CFyYOW CxCC9ePPl393s7vpiO4Na1auJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuUNes8 UvyOrDzLaFs1JrQECoxlMB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4 MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RC8xOERDNTc0MjE4MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdM NEtkdHpheVpKcmJtZEM4aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOCaCXn14Teti2pJDN2fzUGTZFKfkGNM/l/QwyBoi+l11LHpTtaCns p8tKvRJmL0I/+1kGXW3rC20FxHpb5m0tdxomLzlxPn/lNy69V1vNAP+pYRNWhd61 uFiYrUegMGoLKJP+LZYj+MD3LdFfXDpbYKpMXMnatRJYRiLbOKjspqDW67w5IMmO a/z8o8dIt4rPJ3gnp6pJXBe/1d1wGSq57b5JhZUWCAULInqrY8f7MQBT4AIU+V4i 2teVKFIhAxI8wtxtOA4XsN6BBboIr6dLFmigBCLdrqzDRssrjpD0Rygq3zIrrc5F bVlsgBGswifeKP2+I3WJS8wOWKv4u/VV -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org