$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: 960R5Ln/2ZStVKu33yRW+aBs7WqzP9B9oAYcI2Khg7k= Subject key identifier: CC:80:79:B1:CA:F9:4D:F9:90:22:EE:28:FB:AA:0C:8D:E0:09:46:BD Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 74 Signing time: Fri 17 May 2024 07:33:23 +0000 Manifest this update: Fri 17 May 2024 07:33:22 +0000 Manifest next update: Fri 24 May 2024 07:33:22 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: HlOixWe9H2GnwtL5OODtpXRuKurXHtjdFLuJV2yEq6k=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: GQbESOYUtUaZ94Yc1FDzYQHcOOIJVDWv/UCKcDQ3h8E=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: C6IOSqMBs7kTWp1we70WGZOOA4Xdc736nWfod1Q0yd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: May 17 07:33:22 2024 GMT Not After : May 24 07:33:22 2024 GMT Subject: CN=66470843-1b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:aa:19:b4:44:9f:18:ae:1c:bd:1e:b2:28: 27:91:72:76:4c:99:e5:bb:80:3b:f3:d9:61:06:ae: 95:90:1e:08:5f:cc:77:17:10:b0:00:bd:24:8b:8c: 20:28:af:7e:c8:b3:38:27:c2:ea:78:a5:8c:79:09: 25:d3:84:dc:fb:6e:31:a3:26:9a:f8:dd:b7:2e:47: b3:48:e3:eb:81:80:80:7b:b6:55:ea:82:07:39:39: 2f:d9:8b:ea:ef:43:0c:7d:7a:07:f0:9b:20:33:48: cc:56:69:bf:79:f0:20:5d:be:eb:c4:17:8a:f8:37: de:42:dd:81:09:fa:02:6a:e9:16:8b:91:4b:b2:54: 34:34:cc:54:26:4f:f1:03:20:f0:8c:97:c0:29:a2: d8:21:d7:b0:ce:73:ba:bf:e4:ea:1b:ab:68:2f:3d: 74:91:3a:38:63:25:6a:1c:f8:05:6b:ba:50:ab:30: d0:87:3e:0a:a7:1e:79:ad:cc:6d:27:5e:f7:94:de: 3a:09:2a:16:32:43:bd:57:2e:68:57:87:85:d6:f2: 99:ff:32:8b:42:8e:75:47:fb:3f:1f:a3:fd:a6:fd: 61:85:71:0b:c8:39:63:c5:64:82:9a:f9:02:81:67: 22:ef:5e:6a:52:7d:86:dd:c9:d2:4e:7f:30:1c:1b: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:80:79:B1:CA:F9:4D:F9:90:22:EE:28:FB:AA:0C:8D:E0:09:46:BD X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:c9:b2:0d:56:75:db:74:f4:c3:22:89:f3:df:79:94:02: 69:3e:10:a8:81:f6:d1:01:3c:b2:d9:09:e8:09:e8:81:ca:7b: 1c:0b:5c:81:18:c1:df:67:67:a2:ad:03:8c:1a:1e:5d:ac:11: 3b:37:ba:fc:9c:a5:12:03:8f:ed:ec:a3:47:e0:ca:2f:00:f8: 6e:79:3d:ce:c8:f4:5d:71:8c:e7:65:b6:8d:ef:04:59:f7:4f: 8d:46:c9:60:ca:62:26:a7:b8:0f:6e:4f:50:79:72:f6:dd:ff: 97:98:59:d0:f1:7e:f1:8b:52:42:19:fa:76:f7:76:fb:45:ba: 41:58:38:7b:5d:31:da:93:1c:6c:d6:37:9a:ae:56:a9:1b:69: 5d:61:ba:e5:d0:eb:03:fa:95:e5:2d:7d:7e:c9:14:b0:98:94: b2:f9:c3:b4:cb:e1:31:cd:bc:72:b9:22:30:41:88:5a:5a:59: 1c:29:6a:ea:3d:d8:8e:34:c3:0a:22:ef:b8:14:72:25:bf:8e: 61:8a:60:8c:39:5d:6c:cc:15:6d:1a:4e:46:1f:fe:1a:2b:bc: 53:70:34:0d:a5:3d:0b:8e:75:06:47:cc:57:93:9c:84:b6:1c: 3f:f9:88:0f:50:f9:9e:d9:f5:07:43:e6:c0:93:4c:3a:06:66: a8:cd:ee:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDc4ODExMC8GA1UEBRMoODIwOUZERjM5QUYwMkMzQjlBRTUwM0YyMjVENzQ3RTY3 QUEzQ0RGMzAeFw0yNDA1MTcwNzMzMjJaFw0yNDA1MjQwNzMzMjJaMBgxFjAUBgNV BAMTDTY2NDcwODQzLTFiNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOmqoZtESfGK4cvR6yKCeRcnZMmeW7gDvz2WEGrpWQHghfzHcXELAAvSSLjCAo r37Iszgnwup4pYx5CSXThNz7bjGjJpr43bcuR7NI4+uBgIB7tlXqggc5OS/Zi+rv Qwx9egfwmyAzSMxWab958CBdvuvEF4r4N95C3YEJ+gJq6RaLkUuyVDQ0zFQmT/ED IPCMl8Apotgh17DOc7q/5Oobq2gvPXSROjhjJWoc+AVrulCrMNCHPgqnHnmtzG0n XveU3joJKhYyQ71XLmhXh4XW8pn/MotCjnVH+z8fo/2m/WGFcQvIOWPFZIKa+QKB ZyLvXmpSfYbdydJOfzAcGx7/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzIB5scr5 TfmQIu4o+6oMjeAJRr0wHwYDVR0jBBgwFoAUggn985rwLDua5QPyJddH5nqjzfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Nzg4LzM3RjAxQjFBNkM5 MTExRUVBNTYwN0IyOUM0RjlBRTAyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2duOTg1cndMRHVhNVFQeUpkZEg1bnFqemZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Nzg4LzM3RjAxQjFBNkM5MTExRUVBNTYwN0IyOUM0RjlBRTAyL2dnbjk4NXJ3TER1 YTVRUHlKZGRINW5xanpmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlIybINVnXbdPTDIonz33mUAmk+EKiB9tEBPLLZCegJ6IHKexwLXIEY wd9nZ6KtA4waHl2sETs3uvycpRIDj+3so0fgyi8A+G55Pc7I9F1xjOdlto3vBFn3 T41GyWDKYianuA9uT1B5cvbd/5eYWdDxfvGLUkIZ+nb3dvtFukFYOHtdMdqTHGzW N5quVqkbaV1huuXQ6wP6leUtfX7JFLCYlLL5w7TL4THNvHK5IjBBiFpaWRwpauo9 2I40wwoi77gUciW/jmGKYIw5XWzMFW0aTkYf/horvFNwNA2lPQuOdQZHzFeTnIS2 HD/5iA9Q+Z7Z9QdD5sCTTDoGZqjN7qA= -----END CERTIFICATE-----Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org