$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: vTkCT/dihZISZab7s8gW2rFF7kM6stHitViZx27pfE4= Subject key identifier: EA:53:69:C9:09:5B:F1:EC:1B:E3:44:9C:AF:FB:51:8E:FE:60:FD:79 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: BC Signing time: Sun 19 May 2024 06:24:22 +0000 Manifest this update: Sun 19 May 2024 06:24:21 +0000 Manifest next update: Sun 26 May 2024 06:24:21 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: GxwmqCdxFNJsd9BnQGxRUjiX/Q6AysnushUR4qHeWMA=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: VOFQT/A85G7ejOlbJrTPJEP9gzT4RIbiS8v9oGv3OB0=) 3: 1B89820E029711EEB8410455C4F9AE02.roa (hash: EynPpN2WjeRLFInu6svoBsqkxQC0xcv1LjKfkU7YkG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: May 19 06:24:21 2024 GMT Not After : May 26 06:24:21 2024 GMT Subject: CN=66499b15-0e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:c0:52:ea:21:01:9c:48:bf:31:71:bb:c8: ab:27:5a:e8:fb:c4:b0:9e:ed:5e:da:e4:cf:c9:36: af:45:ee:33:1a:97:d8:22:e3:be:14:af:c8:8d:49: 9f:22:a0:f3:e5:0f:d6:dc:21:85:9c:a3:99:9f:24: f8:52:a6:51:29:7d:ca:2a:8b:d2:3b:ae:62:40:ba: ce:0c:c9:9d:e7:a0:d0:d4:f8:90:77:3d:22:36:c7: 4b:42:11:93:75:00:24:1c:13:c0:c6:87:7a:1e:29: e5:f5:b4:3f:43:95:09:bc:53:3c:ad:93:67:f3:d2: 49:02:61:38:47:bd:ff:10:7d:65:8a:b5:cd:cc:fe: 40:c1:b0:8a:9a:66:fe:2c:c8:a0:ac:89:ce:e4:60: c6:a7:64:c8:7e:98:f5:df:18:11:a7:fc:54:a8:14: e2:e5:05:10:3e:dd:01:71:cc:dd:d5:f0:30:1d:bb: 51:83:0b:11:74:ff:66:21:76:d2:be:8e:f4:e7:fb: 49:75:31:31:4a:c2:8b:d6:39:b2:af:3f:f4:52:0e: c7:1c:17:fe:21:ac:ca:c2:7f:64:af:71:a2:54:ca: ce:39:ea:65:ad:51:df:4f:9d:8e:e7:15:05:6f:11: 7d:24:96:2a:94:03:a2:d6:15:09:d1:b7:da:04:d2: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:69:C9:09:5B:F1:EC:1B:E3:44:9C:AF:FB:51:8E:FE:60:FD:79 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:4d:76:e7:ac:5d:22:70:50:9d:49:5b:43:98:17:a9:62: 41:0f:0b:5b:d4:47:88:dd:28:45:f1:8c:fa:2c:15:75:32:8a: e4:49:9e:7a:ab:cf:1d:06:86:7e:d3:12:e8:47:81:3a:0a:3d: 9c:e8:f4:e1:17:b1:ce:10:ba:5a:dc:cf:2d:3b:a8:50:88:aa: af:fc:a3:c9:5b:bb:88:b9:b8:38:ec:27:63:d8:61:11:dc:d6: 0e:2c:62:00:4d:7a:e3:1d:88:b3:59:db:0e:87:c7:1b:8f:04: a2:48:23:18:ae:77:db:89:06:75:26:db:0e:cd:16:e9:d5:2b: 35:28:2c:42:3a:54:1f:a6:d1:e5:e4:a8:8d:f3:4f:cb:fc:00: e8:78:3d:8e:0b:eb:93:a3:ad:10:4e:2e:73:68:71:99:f8:86: 5a:eb:25:07:27:c8:cf:67:57:fa:89:b8:c4:fe:ce:65:74:05: e8:8c:7a:98:fe:92:a0:bb:6a:f0:02:da:bb:8d:1e:cc:7e:dc: c5:fa:58:12:15:2f:c9:8e:c5:22:d5:47:2a:f3:da:5a:cf:24: c2:1b:b5:22:c4:8a:0f:80:b0:31:9e:17:f8:7f:a0:05:cd:df: 10:a6:50:f4:49:3f:9c:7f:aa:a9:4b:7c:99:b1:1d:34:ea:78: 41:f3:b2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjQwNTE5MDYyNDIxWhcNMjQwNTI2MDYyNDIxWjAYMRYwFAYD VQQDEw02NjQ5OWIxNS0wZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpTAUuohAZxIvzFxu8irJ1ro+8Swnu1e2uTPyTavRe4zGpfYIuO+FK/IjUmf IqDz5Q/W3CGFnKOZnyT4UqZRKX3KKovSO65iQLrODMmd56DQ1PiQdz0iNsdLQhGT dQAkHBPAxod6Hinl9bQ/Q5UJvFM8rZNn89JJAmE4R73/EH1lirXNzP5AwbCKmmb+ LMigrInO5GDGp2TIfpj13xgRp/xUqBTi5QUQPt0Bcczd1fAwHbtRgwsRdP9mIXbS vo705/tJdTExSsKL1jmyrz/0Ug7HHBf+IazKwn9kr3GiVMrOOeplrVHfT52O5xUF bxF9JJYqlAOi1hUJ0bfaBNK3LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpTackJ W/HsG+NEnK/7UY7+YP15MB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Gk1256xdInBQnUlbQ5gXqWJBDwtb1EeI3ShF8Yz6LBV1MorkSZ56 q88dBoZ+0xLoR4E6Cj2c6PThF7HOELpa3M8tO6hQiKqv/KPJW7uIubg47Cdj2GER 3NYOLGIATXrjHYizWdsOh8cbjwSiSCMYrnfbiQZ1JtsOzRbp1Ss1KCxCOlQfptHl 5KiN80/L/ADoeD2OC+uTo60QTi5zaHGZ+IZa6yUHJ8jPZ1f6ibjE/s5ldAXojHqY /pKgu2rwAtq7jR7MftzF+lgSFS/JjsUi1Ucq89pazyTCG7UixIoPgLAxnhf4f6AF zd8QplD0ST+cf6qpS3yZsR006nhB87KV -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org