$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: TFxwxJYQntj4KX6Oc1o12JdCDGltQq2KpmKFusen5fk= Subject key identifier: 92:E1:E6:99:FC:1E:63:B4:B6:FE:06:B7:07:F6:B5:E7:79:F9:5F:32 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 0753 Signing time: Fri 31 May 2024 23:09:39 +0000 Manifest this update: Fri 31 May 2024 23:09:38 +0000 Manifest next update: Fri 07 Jun 2024 23:09:38 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: A/eqqLsLB2MSdi9PocOAsFrvFtNtg8bFxHRrGCFDbqk=) 2: 6292F5329B4B11EB9F609750C4F9AE02.roa (hash: 7LeN35kXACeoddwBsjxyEH6oMtiwBHn9D9BXt+GebM0=) 3: 9F555EDC433611EB89B8BE60C4F9AE02.roa (hash: tW+i9wBr8/8fLv6cV5Gm2ZBBX10Z9Nan/TBIigJ8+gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: May 31 23:09:38 2024 GMT Not After : Jun 7 23:09:38 2024 GMT Subject: CN=665a58b3-18e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:e3:00:65:36:a0:4b:bb:bd:cd:c4:52:c2: 43:1c:b1:a4:a8:6a:fc:d9:ae:87:b1:ea:84:c6:05: 9e:ca:17:6f:21:9c:ae:4b:43:3c:84:70:ab:80:dd: c0:54:f0:6e:a4:b8:12:13:4d:71:d7:0e:85:77:24: 2e:ac:ad:58:71:bc:03:51:59:84:e7:4d:22:ed:93: 55:0c:eb:86:95:1a:e9:b4:81:8e:8f:63:c1:2e:4e: 9a:6c:a9:f4:b8:76:13:ce:c7:f5:0d:ec:e5:9a:d6: a6:18:15:ff:60:69:bf:2c:04:19:2e:95:e5:1c:b3: 7f:96:3a:23:2d:7c:de:54:c9:c0:8f:12:34:2d:0e: b9:64:94:01:59:cd:d2:2f:f9:6c:81:07:4c:63:5a: 09:93:ea:cb:37:61:bd:73:21:dd:0a:7b:82:c6:b7: ee:8b:46:8d:68:f1:f7:2b:51:19:2a:78:08:8c:b3: bb:30:38:9a:3a:d4:31:df:51:39:d2:45:7c:0b:66: 3c:c2:3b:51:70:d3:ba:c9:34:9b:9c:40:dd:f5:d7: d7:98:25:9d:75:ec:87:39:c6:7e:16:32:3d:ad:b3: ce:c1:b5:b3:83:da:64:ee:e7:79:a8:10:ae:39:d4: c2:0c:60:28:87:b8:30:f6:b1:a1:67:72:7e:59:e9: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:E6:99:FC:1E:63:B4:B6:FE:06:B7:07:F6:B5:E7:79:F9:5F:32 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b8:15:25:92:c2:8f:d3:d9:d7:e2:3c:3f:3b:c9:c2:61:f1: 5e:2b:09:eb:44:53:4b:20:dd:c5:5e:ad:de:3f:56:b1:48:ef: 70:2a:21:1f:b5:31:58:8d:07:53:c1:15:66:ea:af:bc:0d:14: 7d:b4:c0:18:8f:d2:6a:e0:49:4f:75:c9:db:e3:e3:9d:51:ec: f4:da:06:77:79:a8:9a:09:35:53:25:68:a9:48:9e:4e:0f:3d: b3:01:be:09:b1:38:a5:46:0d:38:3e:17:4a:41:12:b4:18:33: 8f:42:d4:f1:cf:69:65:5b:5c:7f:8d:8e:8e:e4:3d:52:cc:cf: dd:2b:73:d5:38:47:fd:2d:ec:47:27:67:a6:19:86:24:27:70: 85:0f:7c:25:0d:24:20:4b:56:78:14:58:57:54:cf:02:cb:4a: b5:9a:9c:7e:c5:fc:94:ec:72:9a:43:14:7a:01:71:1f:b7:81: d4:d0:9a:b1:d2:b5:72:f9:f7:72:d5:da:70:8b:31:6c:e0:08: b4:9e:f4:30:b8:22:66:73:68:02:f0:9e:09:23:b2:85:37:31: 48:23:e0:b4:10:0e:2a:16:a5:28:80:94:06:5e:7c:95:a4:d6: ca:ef:dd:8a:db:df:b2:65:7f:03:05:0e:da:bc:c2:8b:9a:88: 62:83:4d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjQwNTMxMjMwOTM4WhcNMjQwNjA3MjMwOTM4WjAYMRYwFAYD VQQDEw02NjVhNThiMy0xOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y/jAGU2oEu7vc3EUsJDHLGkqGr82a6HseqExgWeyhdvIZyuS0M8hHCrgN3A VPBupLgSE01x1w6FdyQurK1YcbwDUVmE500i7ZNVDOuGlRrptIGOj2PBLk6abKn0 uHYTzsf1DezlmtamGBX/YGm/LAQZLpXlHLN/ljojLXzeVMnAjxI0LQ65ZJQBWc3S L/lsgQdMY1oJk+rLN2G9cyHdCnuCxrfui0aNaPH3K1EZKngIjLO7MDiaOtQx31E5 0kV8C2Y8wjtRcNO6yTSbnEDd9dfXmCWddeyHOcZ+FjI9rbPOwbWzg9pk7ud5qBCu OdTCDGAoh7gw9rGhZ3J+Wel+XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLh5pn8 HmO0tv4Gtwf2ted5+V8yMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2uBUlksKP09nX4jw/O8nCYfFeKwnrRFNLIN3FXq3eP1axSO9wKiEf tTFYjQdTwRVm6q+8DRR9tMAYj9Jq4ElPdcnb4+OdUez02gZ3eaiaCTVTJWipSJ5O Dz2zAb4JsTilRg04PhdKQRK0GDOPQtTxz2llW1x/jY6O5D1SzM/dK3PVOEf9LexH J2emGYYkJ3CFD3wlDSQgS1Z4FFhXVM8Cy0q1mpx+xfyU7HKaQxR6AXEft4HU0Jqx 0rVy+fdy1dpwizFs4Ai0nvQwuCJmc2gC8J4JI7KFNzFII+C0EA4qFqUogJQGXnyV pNbK792K29+yZX8DBQ7avMKLmohig03E -----END CERTIFICATE-----Generated at Fri May 31 23:53:06 2024 by rpki-client on console-fra.rpki-client.org