$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 1cNWfiFBM2458rs/49N6HIEK/W6irI3GtWrKAsF2fBQ= Subject key identifier: 9B:7E:DB:27:5E:64:CF:5C:AC:4B:56:BB:2D:F9:79:08:62:4C:34:C6 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0B5C Signing time: Sat 18 May 2024 19:37:39 +0000 Manifest this update: Sat 18 May 2024 19:37:38 +0000 Manifest next update: Sat 25 May 2024 19:37:38 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: Rt55J1uqANmRpEWNSEYYO+26HTDFcDCLtELU1K1EDJs=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: VRmHXrHlhaCKUbL1s5J+kTbfWxiTr3Ph5grEKfZn0BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: May 18 19:37:38 2024 GMT Not After : May 25 19:37:38 2024 GMT Subject: CN=66490383-5a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:3f:3c:bf:81:24:51:00:f0:33:6f:77:0b: bf:4c:7e:9f:33:74:68:9b:96:6b:57:26:97:78:c2: 7d:2b:d5:14:ef:3e:30:7e:7b:71:01:bb:f0:ee:38: 5f:f5:4b:71:6d:02:7f:3c:95:8e:fb:f5:df:5b:f4: d5:a1:9c:68:ae:49:61:0c:37:02:c2:de:24:c5:ba: 57:4c:33:0a:95:52:ef:8f:c0:75:56:49:0b:ba:3d: 57:8e:d2:1d:7b:07:a2:12:e9:a4:35:f6:57:8f:b0: 6f:43:c0:d7:58:a7:a6:0b:8f:04:fb:78:bf:39:1b: 69:ac:0e:c6:1a:3f:41:ff:0f:51:d6:b4:56:3c:5d: a9:70:97:2f:42:e5:24:82:ae:1a:24:8f:ed:6a:24: 03:f5:29:b6:9d:51:82:f0:80:c2:06:eb:b7:ed:bf: 48:88:58:1b:a5:91:2c:17:8e:0d:f4:bb:9f:f8:6b: c1:69:f3:6d:85:82:ea:90:a4:db:eb:e8:1b:32:5e: 5e:a3:f5:82:af:8d:f8:2a:8b:f4:e2:6a:e9:4c:34: 3f:74:f8:ec:f2:78:ed:ef:e7:08:f0:c2:3f:85:6a: 18:9d:48:8d:9d:a9:9f:81:b2:a1:b9:5b:8e:5b:3f: 4b:0c:87:b7:48:02:66:11:fe:a8:74:62:be:a6:0b: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7E:DB:27:5E:64:CF:5C:AC:4B:56:BB:2D:F9:79:08:62:4C:34:C6 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:46:67:6d:39:0b:30:e0:9b:8a:6b:d5:d9:ec:51:37:1b:00: bd:6a:20:ee:78:e0:95:89:0f:7b:6b:70:20:8b:fd:66:6e:7b: 17:13:2a:81:ce:6a:f1:7c:3c:95:62:3f:10:90:78:65:e6:3d: 7b:4a:f3:1b:bb:bc:a1:af:0f:e1:f4:ba:0e:da:4c:f3:06:9d: 2f:c6:65:d0:59:47:9b:fa:e2:62:95:49:25:9b:cf:4b:18:09: 59:94:f8:46:ff:34:2b:1b:14:eb:7e:b4:c5:7f:aa:dd:dd:80: 70:62:b2:37:43:60:ea:b7:a3:8b:b0:c3:33:8f:19:68:ab:0c: f1:af:12:95:30:87:9b:c6:e0:c6:54:b6:18:f2:e1:bf:35:31: 9b:ee:30:8d:49:ef:74:63:99:14:50:a8:7f:3c:95:71:ad:70: 51:21:09:82:25:59:37:99:04:b1:23:50:f7:d9:6b:a0:a0:24: 97:af:84:b6:6e:76:ed:18:20:18:2b:0f:5b:29:58:78:86:8f: 10:c6:59:7e:1f:4f:88:a6:9b:7b:c2:b8:5f:f4:41:42:78:84: f8:c8:25:72:09:d6:5c:d2:94:40:29:ab:e9:f5:df:c3:da:99: 01:63:7a:20:39:5d:d4:0b:2b:94:10:12:9b:86:60:44:9d:5b: 96:b4:49:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjQwNTE4MTkzNzM4WhcNMjQwNTI1MTkzNzM4WjAYMRYwFAYD VQQDEw02NjQ5MDM4My01YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwM/PL+BJFEA8DNvdwu/TH6fM3Rom5ZrVyaXeMJ9K9UU7z4wfntxAbvw7jhf 9UtxbQJ/PJWO+/XfW/TVoZxorklhDDcCwt4kxbpXTDMKlVLvj8B1VkkLuj1XjtId eweiEumkNfZXj7BvQ8DXWKemC48E+3i/ORtprA7GGj9B/w9R1rRWPF2pcJcvQuUk gq4aJI/taiQD9Sm2nVGC8IDCBuu37b9IiFgbpZEsF44N9Luf+GvBafNthYLqkKTb 6+gbMl5eo/WCr434Kov04mrpTDQ/dPjs8njt7+cI8MI/hWoYnUiNnamfgbKhuVuO Wz9LDIe3SAJmEf6odGK+pgt7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt+2yde ZM9crEtWuy35eQhiTDTGMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsRmdtOQsw4JuKa9XZ7FE3GwC9aiDueOCViQ97a3Agi/1mbnsXEyqB zmrxfDyVYj8QkHhl5j17SvMbu7yhrw/h9LoO2kzzBp0vxmXQWUeb+uJilUklm89L GAlZlPhG/zQrGxTrfrTFf6rd3YBwYrI3Q2Dqt6OLsMMzjxloqwzxrxKVMIebxuDG VLYY8uG/NTGb7jCNSe90Y5kUUKh/PJVxrXBRIQmCJVk3mQSxI1D32WugoCSXr4S2 bnbtGCAYKw9bKVh4ho8Qxll+H0+Ippt7wrhf9EFCeIT4yCVyCdZc0pRAKavp9d/D 2pkBY3ogOV3UCyuUEBKbhmBEnVuWtEmv -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org