$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft File: GhmPmhfws17bhJVg-1-YUBw8nK8.mft (raw, json) Hash identifier: 6xpSBNpmNycEnwK9R6774rSYOlgiW2rz29klx4mXcX8= Subject key identifier: 2B:57:83:C4:3A:B9:22:D6:9D:7A:93:62:F4:4F:AE:64:E8:A1:F2:F7 Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF Certificate issuer: /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF Certificate serial: 0F25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft Manifest number: 0F1A Signing time: Sat 18 May 2024 18:13:24 +0000 Manifest this update: Sat 18 May 2024 18:13:24 +0000 Manifest next update: Sat 25 May 2024 18:13:24 +0000 Files and hashes: 1: GhmPmhfws17bhJVg-1-YUBw8nK8.crl (hash: Dhlhi6fNS8sKlBCL42XCqBqpxLnH9frctoVWMR/6dUo=) 2: A49557ACC92711EDAE3AB84EC4F9AE02.roa (hash: 2GLuUDISP7XCVIWVK4ZamgqbWy/4na3soEPgzjzNpiU=) 3: 795616EA506211E9850D8886C4F9AE02.roa (hash: v/5ZVayT0eIx90VxzsCq3iZIOHx5GgcVItdU+TqTpCo=) 4: 32D02AAABCC711EDB96C8F81C4F9AE02.roa (hash: IrfHjheNvTuPMD7I9ldpimJ8qAmUjhrI44OUWV5QK7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3877 (0xf25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF Validity Not Before: May 18 18:13:24 2024 GMT Not After : May 25 18:13:24 2024 GMT Subject: CN=6648efc4-fa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:77:93:01:f7:73:c5:d7:db:79:0a:ff:a5: ab:ab:b6:f4:1c:9c:8a:24:fe:a8:e7:0a:50:03:bf: 36:de:87:89:3f:6f:ac:6b:36:42:c8:47:50:29:64: 8f:b6:af:e3:de:09:6e:f8:49:1e:9f:fb:35:13:76: 95:10:d0:8c:5a:45:75:0b:43:25:bf:f1:5d:c4:26: 81:c9:2b:05:4c:fe:f0:33:93:48:ae:89:ab:ff:5c: e7:f1:b1:c1:0b:a3:76:5e:84:0a:19:14:8a:e1:16: 4e:c5:c8:a9:11:ec:65:c6:b9:f7:02:1e:b3:3b:e2: 67:0e:13:c3:de:6a:f5:65:07:36:a2:18:78:bb:1c: 20:bb:e8:fd:eb:35:6a:89:73:f1:b2:94:ca:e8:35: e4:fc:a1:54:3d:c3:b6:42:db:6f:e2:bb:2c:03:db: 41:d4:1c:ba:3f:41:d3:8e:25:c5:c1:d8:84:58:3c: 42:fb:af:81:e3:d9:10:45:7a:fd:64:70:0a:45:8e: 5b:1d:ed:75:63:42:27:d6:0b:b6:48:24:62:84:6c: fa:f4:40:27:2b:7c:e2:fb:f3:70:40:47:c4:d0:b2: a4:02:e4:40:f3:6e:b3:a8:25:76:8f:b6:00:3f:f0: 07:76:05:f8:ad:4d:00:bb:5d:5e:90:db:43:d4:03: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:83:C4:3A:B9:22:D6:9D:7A:93:62:F4:4F:AE:64:E8:A1:F2:F7 X509v3 Authority Key Identifier: keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2d:8c:f4:10:d6:32:d9:c5:c2:bd:eb:8a:a9:eb:a5:d7:15: e6:21:a5:05:a4:16:d8:d8:51:1c:2b:92:10:f2:e9:2d:7f:31: 57:ff:a9:83:b4:32:b1:02:b7:57:5a:75:1d:ff:b4:48:65:4d: 60:b8:0e:cf:3b:99:3e:14:96:7c:32:ba:4c:fc:1a:1b:25:83: 15:05:58:63:90:2d:a8:20:42:34:fe:d5:ee:e8:8f:a3:bd:0f: fb:89:7f:7f:88:52:78:53:72:75:a8:57:92:e4:31:50:0b:9e: c5:c3:e3:5c:0c:f2:86:72:85:f9:f4:74:f1:9a:54:e5:4b:7b: 68:39:2e:3a:5f:a2:79:5c:5a:18:15:ad:46:74:3c:95:73:c0: 2c:fc:f9:a5:eb:34:74:c6:59:0a:59:34:75:ae:a3:6e:f8:1e: f3:c9:9d:49:5f:ce:2a:73:8c:57:3c:de:02:a8:26:95:e7:4f: 5c:ff:1a:55:6b:b5:b4:52:bf:58:89:d4:0a:e6:f5:d7:70:a4: 4c:dd:90:29:6e:f1:44:78:8a:05:04:32:3a:49:e0:5c:ae:4a: 37:18:fd:b0:82:33:fa:9a:85:4e:a1:58:ae:02:5d:3b:7d:87: 93:f5:29:56:ec:d3:d5:b3:55:7b:7c:f1:c7:7b:df:bf:0e:12: 69:ea:5d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzMDAxMTAvBgNVBAUTKDFBMTk4RjlBMTdGMEIzNUVEQjg0OTU2MEZCNUY5ODUw MUMzQzlDQUYwHhcNMjQwNTE4MTgxMzI0WhcNMjQwNTI1MTgxMzI0WjAYMRYwFAYD VQQDEw02NjQ4ZWZjNC1mYTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0l3kwH3c8XX23kK/6Wrq7b0HJyKJP6o5wpQA7823oeJP2+sazZCyEdQKWSP tq/j3glu+Eken/s1E3aVENCMWkV1C0Mlv/FdxCaBySsFTP7wM5NIromr/1zn8bHB C6N2XoQKGRSK4RZOxcipEexlxrn3Ah6zO+JnDhPD3mr1ZQc2ohh4uxwgu+j96zVq iXPxspTK6DXk/KFUPcO2Qttv4rssA9tB1By6P0HTjiXFwdiEWDxC+6+B49kQRXr9 ZHAKRY5bHe11Y0In1gu2SCRihGz69EAnK3zi+/NwQEfE0LKkAuRA826zqCV2j7YA P/AHdgX4rU0Au11ekNtD1APsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtXg8Q6 uSLWnXqTYvRPrmToofL3MB8GA1UdIwQYMBaAFBoZj5oX8LNe24SVYPtfmFAcPJyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjMwMC9FMUE2Q0IxNDUw NjExMUU5QURCNkZBODVDNEY5QUUwMi9HaG1QbWhmd3MxN2JoSlZnLTEtWVVCdzhu SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dobVBtaGZ3czE3YmhKVmctMS1ZVUJ3OG5LOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjMwMC9FMUE2Q0IxNDUwNjExMUU5QURCNkZBODVDNEY5QUUwMi9HaG1QbWhmd3Mx N2JoSlZnLTEtWVVCdzhuSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnLYz0ENYy2cXCveuKqeul1xXmIaUFpBbY2FEcK5IQ8uktfzFX/6mD tDKxArdXWnUd/7RIZU1guA7PO5k+FJZ8MrpM/BobJYMVBVhjkC2oIEI0/tXu6I+j vQ/7iX9/iFJ4U3J1qFeS5DFQC57Fw+NcDPKGcoX59HTxmlTlS3toOS46X6J5XFoY Fa1GdDyVc8As/Pml6zR0xlkKWTR1rqNu+B7zyZ1JX84qc4xXPN4CqCaV509c/xpV a7W0Ur9YidQK5vXXcKRM3ZApbvFEeIoFBDI6SeBcrko3GP2wgjP6moVOoViuAl07 fYeT9SlW7NPVs1V7fPHHe9+/DhJp6l0Y -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org