$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: wRi/RWQ3Q2Cj8E0bb1pkAESam+xp7gZfbCk8FIlOFiM= Subject key identifier: A8:50:C8:4A:9B:49:81:FB:AD:EC:7F:F3:97:1D:60:C5:77:74:CB:B9 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 178A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1773 Signing time: Sun 28 Apr 2024 17:00:56 +0000 Manifest this update: Sun 28 Apr 2024 17:00:56 +0000 Manifest next update: Sun 05 May 2024 17:00:56 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: DfakZiPaNVtZjuO7h82gKYsnBbAyreExkIZL0SZEz9g=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: UPE4ONUYiB9IUbFVoX9t6zmAjIxAIbTylnVeyGAVzwA=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: ZHOFogEh1vpLTCZhDm8iBsCQdlJRg0r2JfS1aS+eOH8=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: iYePZzkNGjjPL+JbYS9SYTvdUeMFDphoW+4L0Y9Rl8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6026 (0x178a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Apr 28 17:00:56 2024 GMT Not After : May 5 17:00:56 2024 GMT Subject: CN=662e80c8-82cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:90:4f:e4:74:7f:79:d7:a1:d2:50:5c:a2: 1a:9f:49:55:e1:c3:9e:73:75:f8:f5:9f:fd:3e:9d: 00:88:f6:f2:a3:9b:aa:3b:91:b9:81:08:e2:fe:29: 03:2a:8c:ac:1e:a6:56:28:b9:ee:f8:d3:97:61:f3: c6:87:09:4e:42:42:fa:0b:16:ca:6c:0a:39:32:3d: 13:47:d5:ce:cc:80:21:80:90:96:53:97:d8:77:17: c5:25:4f:2f:84:9b:db:b4:b7:ae:96:7d:03:8a:4b: c7:8e:59:fc:73:b6:26:55:96:b7:0d:e7:d8:84:48: 9b:f1:8d:b3:be:d2:b6:7a:fa:66:18:55:37:14:1f: 8a:10:31:94:c1:72:4c:c9:ea:c4:9f:93:4d:68:f8: ac:02:9c:d4:f0:f1:eb:c1:2f:62:01:13:8c:d6:69: 2c:52:5d:34:b6:30:a7:ee:f6:41:16:81:04:02:94: b2:5c:0f:38:87:66:57:e8:3e:85:64:d3:b7:d1:c6: da:a9:82:3d:f9:40:b8:db:d4:ed:9e:43:f2:94:54: 27:50:52:81:eb:b7:6b:54:28:7e:d6:ad:38:7b:9f: 00:39:2f:02:9f:8b:87:51:6b:9b:5f:42:ab:83:e4: d4:f0:d2:7f:ee:f8:b2:5b:ac:cf:9c:bb:fd:98:7b: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:C8:4A:9B:49:81:FB:AD:EC:7F:F3:97:1D:60:C5:77:74:CB:B9 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:06:9c:86:12:6d:5b:29:02:04:76:b1:63:b7:9e:d9:24:07: 32:a4:fe:d3:f7:92:7b:cd:74:c7:4f:f3:4a:11:ee:1c:8f:21: 6b:33:af:2f:b8:15:4c:56:23:35:ce:3f:93:2d:7e:a9:70:8f: 4d:24:8d:62:29:fd:e1:da:17:81:e8:d7:80:ce:b5:6e:3b:6d: d3:18:20:22:29:52:59:fa:9e:1d:8d:86:49:b2:4e:7b:4e:bc: eb:ae:df:02:af:a9:8a:7a:39:9b:f0:2c:f8:a3:b3:aa:ce:1c: 7f:40:94:49:8d:b5:ca:94:db:65:87:a0:5f:b9:e3:12:1e:78: 1e:3b:c0:d1:9e:0e:00:32:73:95:f1:76:d0:92:ef:cf:d9:28: 51:64:d9:39:29:35:20:3e:c3:37:e1:62:c1:12:98:ef:a5:55: da:42:36:40:ef:09:48:c5:7a:6e:26:9e:06:f9:de:84:91:ba: c6:79:d9:25:74:31:c5:ec:72:a0:9c:88:24:70:d6:d2:07:29: 39:ae:63:99:86:d5:5b:7c:40:ef:bd:e9:da:a0:e0:6e:cb:9d: 33:f3:cb:d2:cc:1a:66:18:d4:ac:d0:ba:ac:e9:99:67:1f:b1: 6f:9d:65:61:51:d4:cd:ff:80:e6:a8:9c:20:94:a6:b3:eb:7a: 87:14:41:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjQwNDI4MTcwMDU2WhcNMjQwNTA1MTcwMDU2WjAYMRYwFAYD VQQDEw02NjJlODBjOC04MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK6QT+R0f3nXodJQXKIan0lV4cOec3X49Z/9Pp0AiPbyo5uqO5G5gQji/ikD KoysHqZWKLnu+NOXYfPGhwlOQkL6CxbKbAo5Mj0TR9XOzIAhgJCWU5fYdxfFJU8v hJvbtLeuln0DikvHjln8c7YmVZa3DefYhEib8Y2zvtK2evpmGFU3FB+KEDGUwXJM yerEn5NNaPisApzU8PHrwS9iAROM1mksUl00tjCn7vZBFoEEApSyXA84h2ZX6D6F ZNO30cbaqYI9+UC429TtnkPylFQnUFKB67drVCh+1q04e58AOS8Cn4uHUWubX0Kr g+TU8NJ/7viyW6zPnLv9mHtjCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhQyEqb SYH7rex/85cdYMV3dMu5MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZBpyGEm1bKQIEdrFjt57ZJAcypP7T95J7zXTHT/NKEe4cjyFrM68v uBVMViM1zj+TLX6pcI9NJI1iKf3h2heB6NeAzrVuO23TGCAiKVJZ+p4djYZJsk57 Trzrrt8Cr6mKejmb8Cz4o7Oqzhx/QJRJjbXKlNtlh6BfueMSHngeO8DRng4AMnOV 8XbQku/P2ShRZNk5KTUgPsM34WLBEpjvpVXaQjZA7wlIxXpuJp4G+d6EkbrGedkl dDHF7HKgnIgkcNbSByk5rmOZhtVbfEDvvenaoOBuy50z88vSzBpmGNSs0Lqs6Zln H7FvnWVhUdTN/4DmqJwglKaz63qHFEF+ -----END CERTIFICATE-----Generated at Sun Apr 28 19:00:51 2024 by rpki-client on console-fra.rpki-client.org