$ rpki-client -vvf rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft File: GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft (raw, json) Hash identifier: adr7FH/1brvtlOua2i/yH0heNjDubJfWwaG6jkgEX4U= Subject key identifier: 06:9E:31:4F:A8:BA:FC:40:16:5E:90:D2:51:3F:94:8D:C0:49:54:7B Authority key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 Certificate issuer: /CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006 Certificate serial: 1DDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft Manifest number: 1DD6 Signing time: Sat 18 May 2024 16:26:59 +0000 Manifest this update: Sat 18 May 2024 16:26:59 +0000 Manifest next update: Sat 25 May 2024 16:26:59 +0000 Files and hashes: 1: GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl (hash: AGlV7UnNTr7Tv/tc4mnb8cXG3zP0SYC9+2oF9q1oT7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7643 (0x1ddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006 Validity Not Before: May 18 16:26:59 2024 GMT Not After : May 25 16:26:59 2024 GMT Subject: CN=6648d6d3-ac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:df:4d:49:5f:20:77:76:37:ba:89:d8:00: 39:4e:eb:63:60:66:d6:b3:b8:91:02:b3:f6:9a:b7: c7:43:fd:b5:96:4c:13:c9:e7:ab:14:2d:39:2e:1c: a6:e8:fb:f2:b4:2a:4e:94:d8:b1:60:f6:aa:76:58: 7c:1d:88:15:31:a5:dc:5e:f9:03:35:1d:06:cf:c6: f6:39:53:3a:e0:a8:64:63:c8:11:c1:24:64:d2:f8: 80:c2:d5:10:04:ff:28:47:ff:68:40:6b:93:15:3b: 90:f0:48:e9:91:1f:bf:a5:84:64:fb:27:a6:8b:ac: b0:06:6d:36:e7:8e:67:1b:74:19:d7:ac:82:1f:6e: f9:a2:62:bf:a6:8a:62:f1:3d:87:c0:f1:95:d1:bc: c1:15:0f:6c:ee:1c:3b:03:40:2a:5f:ef:96:e5:ce: 64:0a:2a:fe:52:76:2b:c6:c5:c9:92:27:18:d1:88: 86:5c:26:c2:82:75:1f:c8:b1:ac:36:2a:82:e3:04: 69:a3:3b:cc:62:6b:ab:0d:af:d6:3f:4b:d7:00:97: 1e:56:8e:2c:21:b1:99:b4:09:d9:c6:aa:95:2f:35: 55:0e:44:9e:34:4d:2f:a4:b2:24:f2:c0:18:9c:ec: b5:f7:a0:d3:df:93:a5:43:14:0a:2a:0e:b4:46:f0: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:31:4F:A8:BA:FC:40:16:5E:90:D2:51:3F:94:8D:C0:49:54:7B X509v3 Authority Key Identifier: keyid:19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:94:33:cf:34:92:4b:72:69:fd:7c:a3:33:c0:2a:f1:1d:a9: ef:30:d8:0a:5e:f2:e6:83:1c:e5:1d:aa:f7:16:d1:6b:bb:32: 1b:27:a6:37:84:66:38:39:e7:51:dc:9a:4a:31:60:4c:b4:ab: 30:39:51:a3:a9:c9:71:fc:82:10:50:78:e8:51:3b:f7:d2:42: 38:ca:16:9f:7c:b5:e2:46:47:b7:29:8e:b6:0a:ac:ce:6d:00: f7:ef:4a:5d:05:92:22:a7:29:ad:2a:06:b3:6d:a1:ed:9d:5a: bb:bc:c1:2e:dd:d8:15:bf:8e:8a:b3:83:79:56:01:3d:43:95: 2d:f6:4f:1e:a3:9a:2f:71:c1:66:9b:20:c7:f8:98:f9:0c:a7: 22:f9:63:d7:43:ad:e0:43:11:60:9b:47:a7:c5:97:85:8e:45: d0:26:a0:55:b5:17:71:3d:87:9a:a6:ca:8a:9b:ce:e6:1f:36: 70:6b:7f:a3:c0:39:7b:9f:fe:f9:bf:d2:69:e7:ab:69:e4:2f: c4:a3:9d:14:9d:37:c8:8f:59:29:57:f9:89:14:a9:b1:13:45: d4:b8:c1:05:65:17:a4:53:fc:29:52:0a:89:1a:b3:ae:06:62: ac:d8:72:bc:64:60:eb:c0:c6:5a:de:60:19:f4:1a:89:e0:99: 9e:b8:22:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4MjcxMTAvBgNVBAUTKDE5MzNGNjJCOTEwNjMxRDA0OTRDQUNDNDdDQjE2N0M1 ODEwNDUwMDYwHhcNMjQwNTE4MTYyNjU5WhcNMjQwNTI1MTYyNjU5WjAYMRYwFAYD VQQDEw02NjQ4ZDZkMy1hYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvozfTUlfIHd2N7qJ2AA5TutjYGbWs7iRArP2mrfHQ/21lkwTyeerFC05Lhym 6PvytCpOlNixYPaqdlh8HYgVMaXcXvkDNR0Gz8b2OVM64KhkY8gRwSRk0viAwtUQ BP8oR/9oQGuTFTuQ8EjpkR+/pYRk+yemi6ywBm02545nG3QZ16yCH275omK/popi 8T2HwPGV0bzBFQ9s7hw7A0AqX++W5c5kCir+UnYrxsXJkicY0YiGXCbCgnUfyLGs NiqC4wRpozvMYmurDa/WP0vXAJceVo4sIbGZtAnZxqqVLzVVDkSeNE0vpLIk8sAY nOy196DT35OlQxQKKg60RvD0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaeMU+o uvxAFl6Q0lE/lI3ASVR7MB8GA1UdIwQYMBaAFBkz9iuRBjHQSUysxHyxZ8WBBFAG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDgyNy85NjUzQ0NCQzZC OEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01kQkpUS3pFZkxGbnhZRUVV QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUUDJLNUVHTWRCSlRLekVmTEZueFlFRVVBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDgyNy85NjUzQ0NCQzZCOEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01k QkpUS3pFZkxGbnhZRUVVQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASlDPPNJJLcmn9fKMzwCrxHanvMNgKXvLmgxzlHar3FtFruzIbJ6Y3 hGY4OedR3JpKMWBMtKswOVGjqclx/IIQUHjoUTv30kI4yhaffLXiRke3KY62CqzO bQD370pdBZIipymtKgazbaHtnVq7vMEu3dgVv46Ks4N5VgE9Q5Ut9k8eo5ovccFm myDH+Jj5DKci+WPXQ63gQxFgm0enxZeFjkXQJqBVtRdxPYeapsqKm87mHzZwa3+j wDl7n/75v9Jp56tp5C/Eo50UnTfIj1kpV/mJFKmxE0XUuMEFZRekU/wpUgqJGrOu BmKs2HK8ZGDrwMZa3mAZ9BqJ4JmeuCKh -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org