$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json) Hash identifier: AUljJ2pAXwg9JV4ZSh9oAJ1HbekLNdzqixM0XCgyeX0= Subject key identifier: 42:83:E5:B2:33:D3:F7:E3:E3:0C:62:30:A0:6B:63:43:F0:41:18:17 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 0FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft Manifest number: 0F97 Signing time: Sat 18 May 2024 18:07:35 +0000 Manifest this update: Sat 18 May 2024 18:07:34 +0000 Manifest next update: Sat 25 May 2024 18:07:34 +0000 Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: DDR57G1AjPL2NkElKAgC7IuLfglEigEKtaUt6tego6M=) 2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: djH0DEstrjY1MlI/KGVSozlxQ/scosHYDHl38KhovH4=) 3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: JmtzVr9gglmzWYD320C9vJdh/yOVfgM+na2sd2lwcAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: May 18 18:07:34 2024 GMT Not After : May 25 18:07:34 2024 GMT Subject: CN=6648ee66-ca3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:70:80:e7:db:b6:51:b2:46:88:77:20:de: ea:0b:a2:ca:ea:ec:62:91:d6:4b:af:66:d0:cb:4c: 2e:b1:6c:02:78:9b:c1:57:8f:8c:b9:e7:4a:4d:4c: 39:bb:2b:af:75:89:ac:80:fa:7c:a8:e8:8a:6c:65: 52:ca:14:95:ca:6e:4e:b1:a7:a4:ff:f9:49:a7:19: 69:b3:3e:f5:80:bc:c4:3a:78:88:66:57:07:37:33: d9:52:64:be:71:65:f4:49:1d:e7:5c:41:ed:d3:41: 01:f1:d1:06:8d:83:37:29:18:c4:be:1c:14:fa:7f: 08:ad:2a:d7:06:ea:c2:71:ba:8f:c9:7a:9d:7b:b3: 84:31:c1:00:5b:63:ba:ff:11:5b:8d:4e:3e:56:56: 7f:20:2a:c3:13:0e:35:eb:48:88:8a:71:61:e3:2e: 5c:c6:f9:e1:41:c7:02:75:39:33:35:c2:44:a3:32: 07:6f:3e:f8:37:5a:e6:8c:df:29:d2:47:b3:4f:f5: 04:e4:a3:4d:ac:fb:3a:9c:86:0a:f1:7a:68:37:fc: a4:c1:17:d6:b4:78:99:60:b1:91:fc:27:6e:34:61: 88:ff:18:f3:2c:77:aa:19:e1:0c:49:5e:15:50:b0: 5f:9c:fc:31:36:6e:45:d8:24:b4:a1:fe:78:d6:2b: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:E5:B2:33:D3:F7:E3:E3:0C:62:30:A0:6B:63:43:F0:41:18:17 X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e6:84:ef:3c:7c:ec:09:51:be:21:af:ef:12:c0:c7:df:87: 22:52:00:3e:07:5b:6b:a7:db:78:a1:5e:e1:f4:69:67:4b:41: 3a:59:ed:50:95:b8:0c:a0:7f:c2:64:23:40:f6:59:c4:18:d1: d8:b1:a1:5b:95:c4:14:cb:74:54:90:93:10:b6:ff:5c:f9:92: 08:83:33:b6:7c:04:51:0c:92:de:39:ad:c2:9b:35:14:7c:c0: b4:fd:0a:bb:7c:65:f3:53:65:1f:6b:d3:cc:8e:8f:c8:fd:31: 26:c4:23:40:71:7b:58:9e:54:a3:ae:e3:82:d0:4d:81:f3:b3: 37:99:06:c0:fb:a7:1c:ad:43:ff:ba:cb:42:05:29:1f:a6:84: 55:90:1f:b7:a8:91:26:40:38:20:e2:ee:f1:31:75:76:ec:33: 83:f7:f0:6a:84:55:31:5c:66:a9:f8:e7:c7:4a:b0:74:d0:30: a9:ad:65:6d:c6:40:ef:2a:89:41:84:3c:30:c9:7a:3c:98:d7: eb:b1:88:15:6c:09:d9:79:17:a8:f9:f6:eb:c7:d5:42:9b:25: b2:6b:c7:57:9a:83:b5:17:20:11:42:a9:07:e8:6c:16:8f:51: d0:52:61:c7:10:91:72:59:3b:7f:89:8a:7f:ee:10:8d:ea:e4: 2b:da:dd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjQwNTE4MTgwNzM0WhcNMjQwNTI1MTgwNzM0WjAYMRYwFAYD VQQDEw02NjQ4ZWU2Ni1jYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLBwgOfbtlGyRoh3IN7qC6LK6uxikdZLr2bQy0wusWwCeJvBV4+MuedKTUw5 uyuvdYmsgPp8qOiKbGVSyhSVym5Osaek//lJpxlpsz71gLzEOniIZlcHNzPZUmS+ cWX0SR3nXEHt00EB8dEGjYM3KRjEvhwU+n8IrSrXBurCcbqPyXqde7OEMcEAW2O6 /xFbjU4+VlZ/ICrDEw4160iIinFh4y5cxvnhQccCdTkzNcJEozIHbz74N1rmjN8p 0kezT/UE5KNNrPs6nIYK8XpoN/ykwRfWtHiZYLGR/CduNGGI/xjzLHeqGeEMSV4V ULBfnPwxNm5F2CS0of541iuVNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKD5bIz 0/fj4wxiMKBrY0PwQRgXMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA15oTvPHzsCVG+Ia/vEsDH34ciUgA+B1trp9t4oV7h9GlnS0E6We1Q lbgMoH/CZCNA9lnEGNHYsaFblcQUy3RUkJMQtv9c+ZIIgzO2fARRDJLeOa3CmzUU fMC0/Qq7fGXzU2Ufa9PMjo/I/TEmxCNAcXtYnlSjruOC0E2B87M3mQbA+6ccrUP/ ustCBSkfpoRVkB+3qJEmQDgg4u7xMXV27DOD9/BqhFUxXGap+OfHSrB00DCprWVt xkDvKolBhDwwyXo8mNfrsYgVbAnZeReo+fbrx9VCmyWya8dXmoO1FyARQqkH6GwW j1HQUmHHEJFyWTt/iYp/7hCN6uQr2t1T -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org