$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft File: GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json) Hash identifier: aL37xP+efW2wgVGOAePIGvmFRmvCikAaL87qq0QKmn8= Subject key identifier: EA:04:12:69:B3:11:80:C5:9D:ED:6B:74:41:29:86:C5:B4:A8:C3:D3 Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 Certificate issuer: /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft Manifest number: 04FE Signing time: Sun 19 May 2024 01:11:43 +0000 Manifest this update: Sun 19 May 2024 01:11:43 +0000 Manifest next update: Sun 26 May 2024 01:11:43 +0000 Files and hashes: 1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: WKq7XJ+DhPcLMNAm0WIztTTj9pX+6pHdtz8K4hES01I=) 2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: 90bR+/wh4ZPxDRyG4IG++UAcEriR+pBvVndBoqrIMrU=) 3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: Y1y58DmYhw9xJKo4Lvp6Q3H+ZlQ36hROy0cpSNRmy5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Validity Not Before: May 19 01:11:43 2024 GMT Not After : May 26 01:11:43 2024 GMT Subject: CN=664951cf-7b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:29:f2:91:61:b4:ec:97:a9:91:a2:30:b7: 70:e4:92:9a:1c:56:82:3e:c2:19:f6:b5:80:ce:56: f6:9e:5c:19:6d:68:f2:66:1b:17:68:36:f4:c0:38: d7:3f:d9:28:a0:a8:fe:d6:81:26:c6:7f:e2:cc:9b: a5:ae:de:6f:3d:17:01:54:46:83:cf:3c:ad:41:7e: bf:ef:ad:8e:b2:67:02:b9:38:f6:13:39:4c:0f:aa: 32:21:6a:d3:b3:34:fb:28:ce:d5:78:72:a1:46:32: 85:e4:e8:1c:aa:f4:06:74:f6:a5:72:cf:c4:47:5b: e3:a1:d4:d2:b3:1e:76:d3:6e:6c:db:42:2a:90:63: 67:b0:07:74:e3:cf:af:20:08:f1:89:ff:c1:14:d4: 45:72:d7:db:f0:ea:5c:bc:fe:0b:e3:ab:0f:f3:1b: 27:58:67:bb:20:99:4a:7e:a2:a0:9b:b2:be:89:7a: af:85:06:67:ea:32:0a:c4:e1:10:bb:29:c6:1e:97: f7:47:77:c6:60:d9:9c:40:ad:19:3d:28:ad:7a:45: d3:29:7b:d1:07:0b:00:f7:a0:39:ec:02:1e:72:25: e3:4b:a8:5c:7d:af:b0:f2:a1:da:82:08:2b:66:55: e2:91:49:d1:38:fe:e5:a7:9b:88:27:e7:29:0e:a0: f4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:12:69:B3:11:80:C5:9D:ED:6B:74:41:29:86:C5:B4:A8:C3:D3 X509v3 Authority Key Identifier: keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:60:43:0b:69:3f:18:91:0e:6d:fa:7b:b0:15:93:95:31:0d: a8:88:73:e3:5e:fc:e6:0d:ad:4f:fb:2a:ad:cd:af:c1:e5:2a: da:c5:0a:df:d7:63:54:c9:2b:57:c8:3a:df:3c:94:ed:84:0c: 9d:a4:bd:de:af:7b:1a:34:3a:57:19:64:c2:1b:a4:81:fe:c0: f5:39:9c:3f:31:2d:a4:04:b7:23:a6:5e:77:58:2e:3f:86:b8: 65:a2:99:5e:08:8f:9d:7f:32:10:a2:90:76:05:e7:31:c5:1d: 3a:b9:c7:01:fd:1d:2e:1a:d1:4e:04:5f:dd:57:52:39:52:19: a4:15:f8:cd:f3:52:92:16:7b:b0:1e:20:5d:df:53:02:2c:24: 28:c0:89:07:cc:37:08:ce:d6:a6:03:40:08:19:68:b6:21:52: 38:33:f6:7f:96:fb:bf:4a:d3:5b:f0:bb:a7:76:c8:f0:39:18: c6:bc:5a:ac:c6:39:4e:4f:69:6e:65:0b:34:39:a0:89:ea:c3: 5f:b5:c0:50:6e:72:03:79:67:01:d7:21:28:1d:05:61:d0:07: 3b:ac:48:01:67:10:3c:98:d3:15:0f:af:98:fb:f1:3d:51:a7: ba:c2:d8:ae:90:67:57:ae:13:63:d0:39:98:cb:61:74:ee:62: 73:6c:23:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez RUUzRjM3NDMwHhcNMjQwNTE5MDExMTQzWhcNMjQwNTI2MDExMTQzWjAYMRYwFAYD VQQDEw02NjQ5NTFjZi03YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTkp8pFhtOyXqZGiMLdw5JKaHFaCPsIZ9rWAzlb2nlwZbWjyZhsXaDb0wDjX P9kooKj+1oEmxn/izJulrt5vPRcBVEaDzzytQX6/762OsmcCuTj2EzlMD6oyIWrT szT7KM7VeHKhRjKF5OgcqvQGdPalcs/ER1vjodTSsx52025s20IqkGNnsAd048+v IAjxif/BFNRFctfb8OpcvP4L46sP8xsnWGe7IJlKfqKgm7K+iXqvhQZn6jIKxOEQ uynGHpf3R3fGYNmcQK0ZPSitekXTKXvRBwsA96A57AIeciXjS6hcfa+w8qHagggr ZlXikUnROP7lp5uIJ+cpDqD02wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoEEmmz EYDFne1rdEEphsW0qMPTMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZBNy9BN0ZBRDRGNkMyQjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsy THFlYmVZSnJJY28tNF9OME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcYEMLaT8YkQ5t+nuwFZOVMQ2oiHPjXvzmDa1P+yqtza/B5SraxQrf 12NUyStXyDrfPJTthAydpL3er3saNDpXGWTCG6SB/sD1OZw/MS2kBLcjpl53WC4/ hrhlopleCI+dfzIQopB2BecxxR06uccB/R0uGtFOBF/dV1I5UhmkFfjN81KSFnuw HiBd31MCLCQowIkHzDcIztamA0AIGWi2IVI4M/Z/lvu/StNb8LundsjwORjGvFqs xjlOT2luZQs0OaCJ6sNftcBQbnIDeWcB1yEoHQVh0Ac7rEgBZxA8mNMVD6+Y+/E9 Uae6wtiukGdXrhNj0DmYy2F07mJzbCP0 -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org