$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: 7AS9Eh2ThDBS2ISiNdICjMxb/97rWUF0BA9KPMzPd1I= Subject key identifier: 68:51:2D:E9:C8:E4:AD:7F:7C:D6:D7:44:D5:64:4B:94:2F:6E:25:AB Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 176D Signing time: Sat 04 May 2024 18:22:33 +0000 Manifest this update: Sat 04 May 2024 18:22:33 +0000 Manifest next update: Sat 11 May 2024 18:22:33 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: Bd+6Tuipa7krIOhTqMy3uMos70UJ0XPQGv6PlVTtDr4=) 2: ECDFACE4C6F611EC95352E19C4F9AE02.roa (hash: a5ZaxTKm0g3+6bMrlgoxCh5d5uAK6bM0ukEp5ULHrNk=) 3: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: 0wiokmGEtmj/IuwbmlOpHGusH2+aKsyq7eWY/s6wrJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: May 4 18:22:33 2024 GMT Not After : May 11 18:22:33 2024 GMT Subject: CN=66367ce9-601a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:ab:a1:14:d5:07:44:66:a9:c8:ad:04:cf: ba:78:5f:b6:a4:b5:6e:71:04:6e:16:04:84:0a:6d: db:ab:ba:e5:a2:bb:fb:71:81:12:63:bd:18:ae:90: 46:7e:2f:cf:c2:53:34:8c:8b:79:0f:37:06:2a:c0: 88:03:68:3e:f9:bf:be:4c:83:a5:f0:20:2c:82:c4: 84:86:20:f0:ad:c3:26:69:37:b4:67:84:78:5c:94: 26:7a:55:62:4f:bd:3e:ab:a1:b5:e2:f2:e6:f3:b2: 8f:07:84:ed:e5:14:d3:d9:93:bf:71:b8:2f:8d:d9: f8:c7:d7:ac:b5:bd:ed:4c:54:76:9f:f2:5d:c5:62: e0:5c:eb:07:88:10:4a:84:71:83:2a:e5:3d:47:05: 3f:f4:da:f3:54:9b:e5:39:60:41:3e:70:1d:00:40: 93:9f:58:23:bb:79:37:80:2c:a5:49:57:0c:58:e0: b2:74:7b:0b:ea:a2:e9:02:21:f9:25:87:83:56:f1: 4c:77:a3:3a:93:75:18:bd:e6:fd:24:0b:d3:1e:85: e2:23:3c:76:6b:d0:f8:98:f2:e1:ae:44:87:0f:67: d9:60:80:e0:3e:89:cb:69:db:84:c2:01:04:25:6f: 17:cb:75:e1:86:a4:7c:a8:85:8b:0b:d1:d9:55:2a: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:2D:E9:C8:E4:AD:7F:7C:D6:D7:44:D5:64:4B:94:2F:6E:25:AB X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:66:bc:c9:6b:16:a7:43:c6:3b:71:5b:32:c1:0d:ca:4c:18: 7b:35:8d:7d:26:82:3f:6d:90:ca:13:de:32:67:46:82:ea:ca: c8:0f:3a:f9:8f:b0:da:27:69:8e:8d:a8:0a:1d:7a:f6:f8:2b: 87:23:e7:c8:99:8e:bf:0c:08:62:bf:4c:cf:de:94:22:95:34: 22:2a:b9:b2:b5:c2:72:73:92:00:eb:58:b0:ff:4c:55:69:39: e7:d9:ce:55:28:5f:71:90:eb:74:61:70:e8:ab:46:07:3b:5c: b5:80:65:70:38:2d:6f:ec:a9:f4:8a:09:e9:9a:52:90:f9:a3: 07:12:aa:a6:9c:35:1e:f3:d9:6e:06:52:59:10:a2:8f:08:50: 7d:45:70:01:19:4c:17:23:b9:5b:8e:c5:60:94:eb:c8:d0:45: a3:97:ae:bd:5c:90:ce:6c:b8:a4:48:a8:02:8e:44:77:2c:f1: 3d:66:25:a2:79:1b:4b:90:d2:db:c2:c8:a3:14:2b:c7:a1:e3: 28:f7:17:96:32:93:46:f0:d4:5b:7e:ca:cd:3d:17:95:42:7d: 87:d0:a1:b7:62:c8:9a:f6:b2:77:1f:06:5e:59:c1:cc:25:e6: 06:ad:f0:3e:c8:a1:ff:78:e9:f8:4f:56:51:69:d1:ab:38:4e: 9b:c3:96:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjQwNTA0MTgyMjMzWhcNMjQwNTExMTgyMjMzWjAYMRYwFAYD VQQDEw02NjM2N2NlOS02MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0buroRTVB0RmqcitBM+6eF+2pLVucQRuFgSECm3bq7rlorv7cYESY70YrpBG fi/PwlM0jIt5DzcGKsCIA2g++b++TIOl8CAsgsSEhiDwrcMmaTe0Z4R4XJQmelVi T70+q6G14vLm87KPB4Tt5RTT2ZO/cbgvjdn4x9estb3tTFR2n/JdxWLgXOsHiBBK hHGDKuU9RwU/9NrzVJvlOWBBPnAdAECTn1gju3k3gCylSVcMWOCydHsL6qLpAiH5 JYeDVvFMd6M6k3UYveb9JAvTHoXiIzx2a9D4mPLhrkSHD2fZYIDgPonLaduEwgEE JW8Xy3XhhqR8qIWLC9HZVSo0KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhRLenI 5K1/fNbXRNVkS5QvbiWrMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfZrzJaxanQ8Y7cVsywQ3KTBh7NY19JoI/bZDKE94yZ0aC6srIDzr5 j7DaJ2mOjagKHXr2+CuHI+fImY6/DAhiv0zP3pQilTQiKrmytcJyc5IA61iw/0xV aTnn2c5VKF9xkOt0YXDoq0YHO1y1gGVwOC1v7Kn0ignpmlKQ+aMHEqqmnDUe89lu BlJZEKKPCFB9RXABGUwXI7lbjsVglOvI0EWjl669XJDObLikSKgCjkR3LPE9ZiWi eRtLkNLbwsijFCvHoeMo9xeWMpNG8NRbfsrNPReVQn2H0KG3Ysia9rJ3HwZeWcHM JeYGrfA+yKH/eOn4T1ZRadGrOE6bw5Yh -----END CERTIFICATE-----Generated at Sat May 4 20:37:05 2024 by rpki-client on console-fra.rpki-client.org