$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: a+Y6OGGOwE9uRds6W06L6yiDGyWMNjJYRmBTzL924Ck= Subject key identifier: 4F:B4:97:BB:C8:E4:62:CA:A7:9E:96:EF:7E:D8:C2:65:55:DC:A0:AC Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0A4E Signing time: Sat 18 May 2024 20:27:06 +0000 Manifest this update: Sat 18 May 2024 20:27:05 +0000 Manifest next update: Sat 25 May 2024 20:27:05 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: wu1FZrFz5uiLz4bpxp7U7t/62Z6ZFYDR15/z0jqnurM=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: NIZMmo0NuHhn6nD3NdRcv7nYc0S58OkPUhvDUedEdrM=) 3: FDA839F8B5E011EEA4B1F86BC4F9AE02.roa (hash: X/8UoQFrC2J9lERqBw1AFgqgz2Eb+ZxKkLi9QZCaFSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: May 18 20:27:05 2024 GMT Not After : May 25 20:27:05 2024 GMT Subject: CN=66490f19-a2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:ba:c5:1f:e8:f4:48:d9:af:f8:be:4e:35: 6d:10:91:d2:9d:cf:fd:a4:da:d7:19:1f:8b:9f:36: 4e:a0:5c:63:a5:a7:1c:07:3a:3c:99:47:af:6f:5f: a6:c4:30:ba:1e:29:16:45:90:b8:3f:37:89:ad:36: 08:33:9c:20:6a:7d:3c:6f:7d:83:da:bc:55:df:1f: 44:b4:96:96:f6:9d:0b:1b:15:2d:b7:3c:85:00:41: b5:1d:1c:02:ca:83:ea:fc:9b:63:e2:d5:68:78:18: 68:42:4b:40:1e:22:81:3c:c1:46:3d:be:c1:aa:9d: df:20:77:ee:ae:22:69:41:35:bc:e1:96:5b:10:8c: ab:67:9f:49:7b:56:30:2c:35:90:34:4b:8e:70:4e: a2:13:f6:3b:62:24:29:2e:ee:bc:80:d6:17:ae:b6: 36:dc:30:f5:24:8c:13:af:a2:c0:8d:38:0f:08:16: 96:f3:6a:be:f0:f4:c1:de:b3:d9:07:a6:e2:91:fd: 63:8d:d9:bc:e9:10:14:15:29:20:9f:43:ee:97:8e: 87:54:17:a0:79:42:3e:92:73:99:c7:aa:be:78:5e: 5b:fe:3f:be:2d:29:de:9b:84:52:5a:aa:11:51:97: aa:9c:fa:8c:f4:e8:85:6b:d9:04:38:0a:05:c2:09: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:97:BB:C8:E4:62:CA:A7:9E:96:EF:7E:D8:C2:65:55:DC:A0:AC X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a8:f5:81:2b:a5:b4:a0:37:cf:e7:b3:84:24:94:8e:31:06: 87:fb:1b:d6:c0:e6:a3:9e:76:f8:0a:84:4b:87:2d:c4:42:d8: 7f:0e:10:22:0a:ac:1c:fc:3d:86:cc:26:d9:1d:10:a3:5e:39: db:4b:68:f9:5b:98:b0:a8:a6:c9:1d:ea:f8:f8:8d:47:69:f2: 81:98:b8:b3:68:bd:a3:ed:78:59:ce:29:1e:55:62:84:fd:44: 41:7d:7a:07:51:a9:2b:96:a4:25:9d:e1:5d:2e:64:d6:ae:50: a3:d2:95:ec:47:3c:eb:95:ab:3c:34:82:c0:d4:68:e5:ac:c1: 33:ea:98:62:f0:7e:38:af:65:69:33:bf:7e:4e:83:aa:99:dd: 83:85:12:27:95:bd:46:02:c5:32:6e:aa:cb:aa:b1:fa:32:41: 7c:71:ce:94:0d:04:7e:4f:55:f4:f9:28:f9:4d:04:5c:b6:67: 2f:02:a3:cc:7e:ea:cb:8e:fa:d1:65:df:04:a1:35:10:27:ae: fa:96:d7:5d:8d:0e:8b:78:ac:0d:0b:29:88:cd:d0:3e:ca:d5: 97:35:e7:ff:ee:79:ee:00:23:80:c4:af:0e:49:09:cf:7b:68: 00:d0:17:29:b3:8d:af:43:a6:36:4b:17:cd:0e:ce:d3:52:a4: 24:52:2a:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjQwNTE4MjAyNzA1WhcNMjQwNTI1MjAyNzA1WjAYMRYwFAYD VQQDEw02NjQ5MGYxOS1hMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYS6xR/o9EjZr/i+TjVtEJHSnc/9pNrXGR+LnzZOoFxjpaccBzo8mUevb1+m xDC6HikWRZC4PzeJrTYIM5wgan08b32D2rxV3x9EtJaW9p0LGxUttzyFAEG1HRwC yoPq/Jtj4tVoeBhoQktAHiKBPMFGPb7Bqp3fIHfuriJpQTW84ZZbEIyrZ59Je1Yw LDWQNEuOcE6iE/Y7YiQpLu68gNYXrrY23DD1JIwTr6LAjTgPCBaW82q+8PTB3rPZ B6bikf1jjdm86RAUFSkgn0Pul46HVBegeUI+knOZx6q+eF5b/j++LSnem4RSWqoR UZeqnPqM9OiFa9kEOAoFwgmHSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+0l7vI 5GLKp56W737YwmVV3KCsMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7qPWBK6W0oDfP57OEJJSOMQaH+xvWwOajnnb4CoRLhy3EQth/DhAi Cqwc/D2GzCbZHRCjXjnbS2j5W5iwqKbJHer4+I1HafKBmLizaL2j7XhZzikeVWKE /URBfXoHUakrlqQlneFdLmTWrlCj0pXsRzzrlas8NILA1GjlrMEz6phi8H44r2Vp M79+ToOqmd2DhRInlb1GAsUybqrLqrH6MkF8cc6UDQR+T1X0+Sj5TQRctmcvAqPM furLjvrRZd8EoTUQJ676ltddjQ6LeKwNCymIzdA+ytWXNef/7nnuACOAxK8OSQnP e2gA0Bcps42vQ6Y2SxfNDs7TUqQkUirE -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org