$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: LZa/qDLZKEiGxrIvrF5HW3LNcMwg3KpfV1aTvzCPWjA= Subject key identifier: C2:FB:BF:4F:21:7A:D1:D0:77:FE:54:32:55:A9:08:3D:96:05:2B:89 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 0134 Signing time: Sun 19 May 2024 04:59:06 +0000 Manifest this update: Sun 19 May 2024 04:59:06 +0000 Manifest next update: Sun 26 May 2024 04:59:06 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: 1I4NJrYcNAI/Aahp1PZk5LOc7TY1j+u9PnrnIS8PdqU=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 68UhoesYGikbuVbpG1LhadzOBhmFT6P9iM2ISJXE1AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: May 19 04:59:06 2024 GMT Not After : May 26 04:59:06 2024 GMT Subject: CN=6649871a-d297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:50:ab:c7:1f:77:40:6d:13:ab:46:23:21: c2:10:e0:ca:ae:3f:3a:b5:5e:f3:03:87:59:b6:3b: 7e:8a:77:74:b8:d3:b7:e7:94:21:fd:b6:46:62:0c: 43:12:a3:3c:e6:55:f6:20:27:18:e5:86:fc:fc:ac: f6:c7:55:8d:67:3b:ee:11:6d:08:47:93:df:6f:05: 09:a7:4d:18:55:f8:50:53:2e:6f:e4:a6:fd:51:f8: 68:31:f1:5d:d7:b6:00:a7:9c:7c:b8:5b:bf:19:a0: cc:ad:97:b3:30:7d:a9:40:16:71:bb:c8:32:9f:6e: 61:4b:ed:15:ef:47:69:dc:9b:f2:44:aa:37:70:91: 47:68:83:ef:d4:f8:f5:4d:fc:01:c5:07:85:0c:7e: 33:fa:ec:71:18:c1:10:0b:87:d1:11:ba:ae:0f:92: eb:e8:e0:ca:45:27:cb:0c:65:87:c9:01:ff:39:0a: 58:e8:c6:cf:9b:1d:6c:74:b0:6f:50:8b:ba:ef:ff: 12:4a:25:0e:c1:3c:56:82:35:b8:af:5a:b7:1a:6e: 21:f5:90:eb:2f:98:a3:4b:5f:aa:3a:c6:07:27:ba: 52:3f:26:29:12:bf:a5:8e:a0:03:0a:82:d2:1c:05: 7c:9a:64:26:4a:1a:6a:eb:b7:26:88:e8:e1:c7:18: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FB:BF:4F:21:7A:D1:D0:77:FE:54:32:55:A9:08:3D:96:05:2B:89 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:73:e4:8b:16:f5:e7:f3:46:de:80:25:0e:ca:d6:09:29: 4e:c9:f9:53:23:f5:9c:48:82:1a:34:a7:b1:f1:94:5a:76:e2: 81:3b:46:36:4f:4f:ea:6a:5c:21:95:f2:d3:5e:9f:8b:41:8a: 09:74:34:83:91:73:b6:f9:d9:f4:c0:7e:a1:64:1e:aa:bb:ed: 8f:50:30:7e:54:d9:f4:e5:2e:b8:51:f6:14:e4:a6:ce:e7:b5: b3:c8:80:83:7c:b4:3f:27:9a:d2:69:e5:b2:a9:a5:8f:ba:93: 95:94:91:87:fa:f4:c5:38:e4:85:a8:54:0f:39:7a:0d:4d:e7: 43:97:89:e1:d3:3c:d8:07:6a:a4:36:45:d4:68:18:65:17:73: 8e:4b:ee:73:9a:0e:d2:71:5c:a4:6e:84:0e:c4:28:e0:43:d0: 3f:85:de:50:cf:ab:55:ec:e5:dd:29:da:e3:4e:75:9c:d8:bd: ea:91:3e:e4:14:56:8e:d4:3a:1d:d8:84:1c:bf:ef:80:4d:f5: 0f:58:93:cd:2f:0e:3f:3e:15:66:c2:94:9a:0a:db:55:33:47: 4a:fe:f4:9b:d6:84:70:e2:94:cb:6c:a5:83:0e:c3:d7:4c:74: dc:9a:ef:34:1b:2f:17:64:d4:6c:9d:be:ce:4b:5b:94:fd:b2: 7e:ac:2a:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjQwNTE5MDQ1OTA2WhcNMjQwNTI2MDQ1OTA2WjAYMRYwFAYD VQQDEw02NjQ5ODcxYS1kMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SZQq8cfd0BtE6tGIyHCEODKrj86tV7zA4dZtjt+ind0uNO355Qh/bZGYgxD EqM85lX2ICcY5Yb8/Kz2x1WNZzvuEW0IR5PfbwUJp00YVfhQUy5v5Kb9UfhoMfFd 17YAp5x8uFu/GaDMrZezMH2pQBZxu8gyn25hS+0V70dp3JvyRKo3cJFHaIPv1Pj1 TfwBxQeFDH4z+uxxGMEQC4fREbquD5Lr6ODKRSfLDGWHyQH/OQpY6MbPmx1sdLBv UIu67/8SSiUOwTxWgjW4r1q3Gm4h9ZDrL5ijS1+qOsYHJ7pSPyYpEr+ljqADCoLS HAV8mmQmShpq67cmiOjhxxhJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML7v08h etHQd/5UMlWpCD2WBSuJMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCac3Pkixb15/NG3oAlDsrWCSlOyflTI/WcSIIaNKex8ZRaduKBO0Y2 T0/qalwhlfLTXp+LQYoJdDSDkXO2+dn0wH6hZB6qu+2PUDB+VNn05S64UfYU5KbO 57WzyICDfLQ/J5rSaeWyqaWPupOVlJGH+vTFOOSFqFQPOXoNTedDl4nh0zzYB2qk NkXUaBhlF3OOS+5zmg7ScVykboQOxCjgQ9A/hd5Qz6tV7OXdKdrjTnWc2L3qkT7k FFaO1Dod2IQcv++ATfUPWJPNLw4/PhVmwpSaCttVM0dK/vSb1oRw4pTLbKWDDsPX THTcmu80Gy8XZNRsnb7OS1uU/bJ+rCoh -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org