$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: TBTKl9xxeTrB1/uRiThwUc7T3lviR49SveJjyJggEoA= Subject key identifier: 40:F5:98:E7:44:F9:BA:9C:CB:40:AD:96:AD:BE:F8:7F:0D:99:6D:DC Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 037B Signing time: Fri 03 May 2024 02:53:07 +0000 Manifest this update: Fri 03 May 2024 02:53:07 +0000 Manifest next update: Fri 10 May 2024 02:53:07 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: tac4ciX8wxizPjFQ7ATZmj9ow8rywzQ5BTaMptrsFT4=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: xcaFZU4KRRtbojr7EwLnsO9uos4lmB9PWeK2yDny72M=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: 0CFQQuPkMniES7kUDG2th2dFf+/z6LBmnQCmAMjCLSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: May 3 02:53:07 2024 GMT Not After : May 10 02:53:07 2024 GMT Subject: CN=66345193-22fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:13:5b:a2:ff:06:31:a2:1c:9b:49:4f:fb: 56:9b:5f:f6:de:78:ca:13:7c:82:ea:c5:94:84:a1: 6b:9c:13:a9:61:42:96:d8:db:88:c5:7f:1e:cc:e8: 93:24:8b:4c:d3:d7:9d:a6:6d:0f:01:1c:90:9a:97: 1a:3f:91:6a:1e:db:2a:0f:d3:5a:5e:f9:33:1b:80: 3e:ef:3e:36:65:7c:b9:d2:1b:02:7c:15:5a:d1:79: 17:c7:7b:21:1b:7a:db:b6:4e:05:45:a2:e2:7f:e3: 2d:9a:8f:49:d6:28:0d:ed:83:cf:71:d4:32:16:70: 4c:dc:41:e8:b3:b7:d2:05:db:e9:c2:49:a1:76:d5: 53:90:94:fe:2f:fb:10:53:46:00:b6:cf:c2:5f:c4: af:ee:95:a7:1d:38:18:c2:ac:04:7a:0e:8a:81:b4: 31:25:e2:27:90:ef:33:a7:c3:fe:de:c3:b5:3f:d7: da:23:cb:cc:b3:da:79:dc:ed:f2:95:08:0f:b8:5e: fd:8d:91:b6:3d:8b:d9:cd:4a:6c:05:15:20:8b:43: 94:6f:7f:e1:f9:50:db:b8:0c:a5:ef:1b:84:30:4a: b8:06:4a:36:1e:9b:42:b8:67:9c:38:d4:d5:77:fb: 6d:1e:6f:b1:08:0b:b6:69:fa:c2:dc:43:d0:15:21: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:98:E7:44:F9:BA:9C:CB:40:AD:96:AD:BE:F8:7F:0D:99:6D:DC X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:02:6d:eb:6b:ea:1c:a0:57:00:47:4c:a9:03:07:b8:e4:23: b5:6e:1a:99:b2:8f:a1:64:b5:e9:36:5e:9b:74:69:51:19:64: 08:8c:d1:b8:92:f9:df:f0:e1:bb:5c:0b:15:d6:04:a5:11:89: 9f:89:02:a7:e6:ed:f9:7c:e3:bc:4e:e7:6e:a7:c8:4d:aa:ee: 55:f6:e7:b1:bc:b3:97:1d:c8:e6:ed:5b:d1:3d:87:dc:d7:8f: 38:1b:99:64:25:e6:c9:5e:2f:a0:2b:b1:71:cc:32:b9:54:8d: 1a:86:20:d8:d5:df:4d:f7:26:79:74:55:bc:23:24:22:c6:a5: 32:e0:9e:36:3d:ad:67:6b:ba:77:3a:6f:14:4f:4d:66:19:41: e4:6c:45:07:7e:be:ad:df:e9:bc:3f:dc:c4:5a:2e:93:7c:ed: 43:b1:09:97:70:d4:6a:d9:ed:fe:a3:60:d6:e6:3c:56:e9:2d: 0f:f6:8d:3d:23:3d:68:b4:77:44:2f:82:3a:4d:02:89:ac:80: 72:3b:6c:c0:8d:73:4e:de:6f:c6:21:95:27:a6:42:d7:1f:91: 31:74:11:3f:1b:17:c2:f1:97:a4:a4:f7:07:23:36:33:fc:cc: a6:25:3f:e2:c9:bd:a3:f2:44:b9:86:5d:27:d7:66:23:a0:78: 64:3d:15:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjQwNTAzMDI1MzA3WhcNMjQwNTEwMDI1MzA3WjAYMRYwFAYD VQQDEw02NjM0NTE5My0yMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszUTW6L/BjGiHJtJT/tWm1/23njKE3yC6sWUhKFrnBOpYUKW2NuIxX8ezOiT JItM09edpm0PARyQmpcaP5FqHtsqD9NaXvkzG4A+7z42ZXy50hsCfBVa0XkXx3sh G3rbtk4FRaLif+Mtmo9J1igN7YPPcdQyFnBM3EHos7fSBdvpwkmhdtVTkJT+L/sQ U0YAts/CX8Sv7pWnHTgYwqwEeg6KgbQxJeInkO8zp8P+3sO1P9faI8vMs9p53O3y lQgPuF79jZG2PYvZzUpsBRUgi0OUb3/h+VDbuAyl7xuEMEq4Bko2HptCuGecONTV d/ttHm+xCAu2afrC3EPQFSHiYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED1mOdE +bqcy0Ctlq2++H8NmW3cMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Am3ra+ocoFcAR0ypAwe45CO1bhqZso+hZLXpNl6bdGlRGWQIjNG4 kvnf8OG7XAsV1gSlEYmfiQKn5u35fOO8Tudup8hNqu5V9uexvLOXHcjm7VvRPYfc 1484G5lkJebJXi+gK7FxzDK5VI0ahiDY1d9N9yZ5dFW8IyQixqUy4J42Pa1na7p3 Om8UT01mGUHkbEUHfr6t3+m8P9zEWi6TfO1DsQmXcNRq2e3+o2DW5jxW6S0P9o09 Iz1otHdEL4I6TQKJrIByO2zAjXNO3m/GIZUnpkLXH5ExdBE/GxfC8ZekpPcHIzYz /MymJT/iyb2j8kS5hl0n12YjoHhkPRWx -----END CERTIFICATE-----Generated at Fri May 3 04:45:08 2024 by rpki-client on console-fra.rpki-client.org