$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: CweQAgPL0ujXxKxhUiq900q+NOFeEGR4zkbyiTRqen0= Subject key identifier: 65:1E:29:2A:CB:A4:61:50:50:3A:AC:B8:50:BA:FC:41:60:B5:A4:72 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: B3 Signing time: Sun 19 May 2024 06:48:40 +0000 Manifest this update: Sun 19 May 2024 06:48:39 +0000 Manifest next update: Sun 26 May 2024 06:48:39 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: 2SW8GXwW+pnca1y4SSLWOXfdNrLdWsDEQmaYk+VbUPw=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: hTk/lRLlQBviCYjhXy1epTHYshfben0qR2IckEw1iPY=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: wQI5YxsE/Ugf6uses1V+/cxJDgapH749N4ib0nvozl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: May 19 06:48:39 2024 GMT Not After : May 26 06:48:39 2024 GMT Subject: CN=6649a0c8-7d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:01:a5:4b:47:e6:d0:3d:48:a3:0c:bf:d0: c9:54:52:03:19:81:85:2f:bc:1b:6f:56:80:f9:22: 1b:0e:78:92:0b:b8:22:f6:48:51:26:41:37:ce:85: 28:c4:cb:68:fc:b0:83:20:5c:5b:02:f1:d1:f7:76: b9:11:ef:04:19:c6:30:10:62:c8:cd:f3:eb:d1:23: 4a:73:be:ef:02:82:86:69:01:66:de:c9:42:d1:d4: c5:0a:77:b3:7d:96:0d:37:72:9c:2d:67:fb:11:19: 1c:6c:10:1f:08:67:4f:a4:2a:6d:c6:97:84:70:fa: b9:d8:8d:ad:f7:27:84:63:55:fa:98:8b:f3:1d:ba: e9:05:43:27:2e:3e:69:88:db:d4:09:7c:59:b9:39: 69:77:10:de:bf:d3:0a:42:99:03:fc:64:00:6b:37: df:ae:88:5f:28:89:e2:f6:20:c2:cc:ee:f9:58:9e: 78:ef:75:20:e0:0d:39:5d:58:a8:ed:8d:53:db:17: 74:91:f1:4d:65:e9:79:59:e2:22:ac:e0:7a:41:23: dd:07:39:65:03:fd:a2:cf:70:5c:3b:44:28:db:d8: ad:02:6a:a0:60:c0:14:95:2a:a8:98:b2:44:e5:61: 81:ff:59:a5:bf:f5:df:2a:fc:07:7f:c3:5e:9d:4c: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1E:29:2A:CB:A4:61:50:50:3A:AC:B8:50:BA:FC:41:60:B5:A4:72 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7b:3c:73:8b:36:e9:8a:5d:52:45:a1:52:8a:52:c6:87:89: 6e:db:46:20:4c:36:7c:85:05:ad:cf:b2:56:5a:b2:31:43:b2: 36:99:55:9c:25:1e:48:c4:10:48:85:3d:67:e6:12:0d:14:d4: 4f:5e:e2:c9:ff:83:03:64:77:56:58:fb:b5:c8:a9:c9:d9:15: 7b:b7:4a:4a:4d:60:97:69:01:7d:65:e9:12:29:5b:d6:ec:51: dd:a7:fd:ac:ec:6c:41:d5:ab:23:91:3c:d9:38:7a:5b:d7:f4: d6:3a:26:c1:28:07:7a:9d:4a:af:c3:8c:1b:78:a5:33:cb:2b: 67:45:32:e1:e6:05:3f:90:cc:25:d5:9b:36:36:2b:17:8e:e4: d7:cd:4d:85:3b:ab:25:47:b1:e1:8b:1b:ad:d9:1f:d4:b7:99: 39:45:9c:5f:18:84:8c:72:e3:dd:e6:ac:c8:f8:be:a8:88:8d: af:8f:63:61:6c:58:e3:ca:23:03:cd:ab:8a:d3:13:0d:c0:6f: 32:9b:2c:9c:5c:6c:36:e2:05:57:92:8e:2b:b4:57:1f:e1:49: c2:8e:bf:e9:07:be:f6:29:cd:32:16:12:c9:48:b5:0d:03:31: 9b:9a:5c:23:23:0c:23:87:0c:a2:71:5d:0c:3a:cf:98:63:09: f5:5f:f8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjQwNTE5MDY0ODM5WhcNMjQwNTI2MDY0ODM5WjAYMRYwFAYD VQQDEw02NjQ5YTBjOC03ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6sBpUtH5tA9SKMMv9DJVFIDGYGFL7wbb1aA+SIbDniSC7gi9khRJkE3zoUo xMto/LCDIFxbAvHR93a5Ee8EGcYwEGLIzfPr0SNKc77vAoKGaQFm3slC0dTFCnez fZYNN3KcLWf7ERkcbBAfCGdPpCptxpeEcPq52I2t9yeEY1X6mIvzHbrpBUMnLj5p iNvUCXxZuTlpdxDev9MKQpkD/GQAazffrohfKIni9iDCzO75WJ5473Ug4A05XVio 7Y1T2xd0kfFNZel5WeIirOB6QSPdBzllA/2iz3BcO0Qo29itAmqgYMAUlSqomLJE 5WGB/1mlv/XfKvwHf8NenUxwfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUeKSrL pGFQUDqsuFC6/EFgtaRyMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXezxzizbpil1SRaFSilLGh4lu20YgTDZ8hQWtz7JWWrIxQ7I2mVWc JR5IxBBIhT1n5hINFNRPXuLJ/4MDZHdWWPu1yKnJ2RV7t0pKTWCXaQF9ZekSKVvW 7FHdp/2s7GxB1asjkTzZOHpb1/TWOibBKAd6nUqvw4wbeKUzyytnRTLh5gU/kMwl 1Zs2NisXjuTXzU2FO6slR7Hhixut2R/Ut5k5RZxfGISMcuPd5qzI+L6oiI2vj2Nh bFjjyiMDzauK0xMNwG8ymyycXGw24gVXko4rtFcf4UnCjr/pB772Kc0yFhLJSLUN AzGbmlwjIwwjhwyicV0MOs+YYwn1X/iN -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org