$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: Bx2f6hykSQE+49D2cFHuOc1PoPSkiEBpLgjhvpeKC5w= Subject key identifier: 51:3E:E7:87:0A:98:7C:C9:1D:A0:F0:97:A6:8F:E8:FE:E1:2E:1F:4F Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 03F5 Signing time: Sun 19 May 2024 02:13:50 +0000 Manifest this update: Sun 19 May 2024 02:13:49 +0000 Manifest next update: Sun 26 May 2024 02:13:49 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: NE2OQK4PlC1LWi5XFtVeyWN6+okoJATfMe0ZvK0Mkog=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: p2vPkGvjEZcaFP7aoceARw5cHzy5HDC46h/Fra3/wz4=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: RWhSgJlYgVncBgJIFrKvz73I1MpVqn1hcyQD2Cg2umU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: May 19 02:13:49 2024 GMT Not After : May 26 02:13:49 2024 GMT Subject: CN=6649605e-249a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:d1:43:eb:17:a9:ab:1d:5e:d3:7e:f9:de: b5:1d:98:03:ca:46:e9:a8:1e:85:9b:52:0e:8e:b8: 6a:32:50:2b:5c:1f:c7:34:7d:57:10:1b:54:bc:8a: bc:ea:0b:df:2c:6d:d9:9d:78:57:1b:35:ca:3f:31: 5d:8d:b6:9d:9b:ad:90:10:4d:d6:b7:2b:09:06:52: 49:f0:3e:93:d3:b9:fb:e8:26:be:28:57:73:a5:50: 53:90:21:19:e6:7e:00:a2:7a:f6:69:57:19:19:53: 40:5b:0b:46:ea:13:38:ff:51:32:7c:15:31:dd:1a: 42:dc:62:9e:34:ce:63:9f:0d:e1:5e:89:10:4f:d9: 44:7e:89:95:01:67:cb:ce:14:85:11:11:43:f5:d5: c4:2b:e9:af:6f:1a:88:37:52:04:4c:ea:22:ca:28: 52:0b:ef:d0:b6:11:af:1b:5f:d8:61:94:9c:5d:af: 5d:72:54:c8:1c:f8:82:fe:6a:92:f9:53:56:37:bc: 06:37:3b:9f:c1:31:8b:40:d0:42:1b:90:46:a0:97: 3b:99:bc:26:a1:3e:09:7d:c0:c8:24:1e:0d:6e:f2: 64:3b:dd:9d:d8:a0:9c:32:24:11:3c:ad:4d:36:8c: 94:12:70:cc:f9:8a:e9:6e:b1:da:f6:b4:37:44:75: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3E:E7:87:0A:98:7C:C9:1D:A0:F0:97:A6:8F:E8:FE:E1:2E:1F:4F X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:df:86:60:84:b1:04:1f:03:a1:4d:64:46:81:27:c5:8d:c3: 10:07:b7:5b:58:63:3e:eb:5c:12:39:ac:4e:23:4c:5c:c4:d7: f6:7e:f5:3b:9b:32:dd:03:20:f3:64:95:19:7c:5a:18:da:a1: f5:bd:31:f0:46:26:12:1c:e3:1c:30:d8:d0:8d:1a:45:59:ae: 19:0d:60:4b:63:39:62:cd:9f:dd:ee:06:9e:52:be:0c:b8:dd: 96:7b:51:1f:f1:d9:ae:45:d1:4a:41:41:4e:3b:72:5d:54:11: 39:4d:48:b1:05:2f:32:63:ee:22:93:6e:78:84:22:1a:8d:6c: 21:c5:bd:b7:07:0d:6f:6c:76:31:61:40:66:f0:8b:12:5a:3b: 14:11:96:f4:2f:21:29:8f:0d:39:f6:01:32:3b:fa:55:e7:aa: 38:10:1b:31:4a:35:3c:b9:13:38:49:ff:4d:fa:09:90:01:43: 75:3f:33:6b:6a:8c:63:c7:6b:1f:94:82:91:76:c8:61:53:58: 88:76:5f:ec:53:ca:a9:8e:fc:ec:a7:82:6f:44:89:f5:80:72: b8:d4:d2:3a:0f:98:82:23:2a:d5:27:19:ce:f3:03:4a:d3:21: 21:a0:1d:00:5b:ad:dd:e8:fe:4a:d6:c9:4c:91:83:d7:21:2c: d2:1f:b0:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjQwNTE5MDIxMzQ5WhcNMjQwNTI2MDIxMzQ5WjAYMRYwFAYD VQQDEw02NjQ5NjA1ZS0yNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE/RQ+sXqasdXtN++d61HZgDykbpqB6Fm1IOjrhqMlArXB/HNH1XEBtUvIq8 6gvfLG3ZnXhXGzXKPzFdjbadm62QEE3WtysJBlJJ8D6T07n76Ca+KFdzpVBTkCEZ 5n4Aonr2aVcZGVNAWwtG6hM4/1EyfBUx3RpC3GKeNM5jnw3hXokQT9lEfomVAWfL zhSFERFD9dXEK+mvbxqIN1IETOoiyihSC+/QthGvG1/YYZScXa9dclTIHPiC/mqS +VNWN7wGNzufwTGLQNBCG5BGoJc7mbwmoT4JfcDIJB4NbvJkO92d2KCcMiQRPK1N NoyUEnDM+YrpbrHa9rQ3RHXEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE+54cK mHzJHaDwl6aP6P7hLh9PMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx34ZghLEEHwOhTWRGgSfFjcMQB7dbWGM+61wSOaxOI0xcxNf2fvU7 mzLdAyDzZJUZfFoY2qH1vTHwRiYSHOMcMNjQjRpFWa4ZDWBLYzlizZ/d7gaeUr4M uN2We1Ef8dmuRdFKQUFOO3JdVBE5TUixBS8yY+4ik254hCIajWwhxb23Bw1vbHYx YUBm8IsSWjsUEZb0LyEpjw059gEyO/pV56o4EBsxSjU8uRM4Sf9N+gmQAUN1PzNr aoxjx2sflIKRdshhU1iIdl/sU8qpjvzsp4JvRIn1gHK41NI6D5iCIyrVJxnO8wNK 0yEhoB0AW63d6P5K1slMkYPXISzSH7Bg -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org