$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft File: GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json) Hash identifier: 2zGPtCitbxamSd4zW9pP8IdjPLMcFAxBFCpF1yhbF88= Subject key identifier: DF:C9:A8:3F:A1:0E:C7:0D:29:E1:5E:EC:B4:53:48:F6:5D:C7:23:68 Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft Manifest number: 06A9 Signing time: Thu 02 May 2024 23:20:52 +0000 Manifest this update: Thu 02 May 2024 23:20:51 +0000 Manifest next update: Thu 09 May 2024 23:20:51 +0000 Files and hashes: 1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: NS7FqX7mctaTQu6lO8QBbnYpB7fWQqHFYjpAs9V5AGQ=) 2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: C2i/RiLJBzEbP0nZIg2KE+fWatL836He7UvLKqX2hU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Validity Not Before: May 2 23:20:51 2024 GMT Not After : May 9 23:20:51 2024 GMT Subject: CN=66341fd3-d0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:00:4d:56:ed:f9:9a:1b:49:f1:51:dc:78: 4d:4c:33:5c:b1:2c:3b:b2:be:c5:b3:38:bc:80:62: 67:f8:2a:ae:6d:24:2f:12:59:2c:b6:5e:5d:53:6e: 8b:ce:3c:81:8f:0c:d0:4a:6a:29:21:e1:ab:e6:59: 9c:09:c1:c0:83:26:1f:74:91:5c:73:55:51:e4:8c: c8:33:39:67:4a:14:e1:bf:6d:3a:b5:df:43:4c:da: a9:55:a4:e0:73:16:c1:43:52:0e:dd:31:d9:d4:95: 66:db:d9:a7:dc:a3:66:8c:b6:3b:d4:8b:84:f9:f9: 64:13:96:78:fc:90:a8:f1:b5:1b:81:65:80:af:97: dc:f2:3a:c7:ea:27:04:de:63:7a:a4:d9:62:93:cb: 09:8b:3a:6e:34:94:6f:8c:82:23:bc:68:3f:32:76: 15:6c:19:d6:aa:d6:2f:a4:f3:1b:a1:d8:63:5a:8b: e2:05:4c:d1:08:7f:c4:24:db:48:e9:f2:41:eb:a1: d1:e8:bf:47:16:c7:f2:74:68:c5:1d:06:b5:6a:e5: 64:4a:e0:71:d1:44:fd:c1:6b:5a:75:db:37:07:a2: 0a:1e:c3:92:90:0d:e2:f8:3c:6d:aa:b8:a0:e8:1f: d0:01:d1:93:fc:09:ae:a7:76:fa:e3:46:6d:bb:e2: 6b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C9:A8:3F:A1:0E:C7:0D:29:E1:5E:EC:B4:53:48:F6:5D:C7:23:68 X509v3 Authority Key Identifier: keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ee:b6:3b:9c:e4:e7:fc:af:16:53:d2:0f:8e:c7:7d:ea:e8: 92:b0:b2:15:2f:b5:d9:60:94:29:2c:86:23:14:f4:ee:cf:d5: 98:33:c7:8d:07:74:c7:91:69:0b:59:0e:60:ef:e2:4c:83:52: 71:a2:1e:bc:4a:eb:c0:3c:a5:7d:cd:20:61:b9:23:78:a6:bd: 3b:e9:4d:62:f4:68:3c:6e:95:bf:99:28:86:6d:2d:4b:a8:a9: 6d:f8:45:2c:41:2c:00:ce:e6:57:bc:b1:80:5d:c5:c3:e9:91: 1c:1d:da:36:21:e4:c1:cd:d6:69:f2:99:c3:d3:73:8e:7c:0f: 54:93:4a:dc:75:7e:d1:ce:9c:8c:ea:48:79:fe:1c:95:fa:f6: 31:0d:38:bb:7e:b7:9c:78:be:ab:f4:9b:ee:a3:3a:58:1a:22: 5c:be:eb:62:af:84:a6:f4:cb:33:77:5f:69:ce:4b:f1:7f:5c: d8:77:0d:51:b5:77:4a:dc:17:df:31:8d:20:1a:c6:32:cd:f6: 74:b9:1d:3b:62:cb:8e:8f:70:a0:35:98:e7:22:b8:63:b0:22: 1a:9b:7f:74:27:40:f4:39:91:3e:9b:b6:ec:97:ff:83:80:3a: bf:90:46:58:d9:a9:17:c0:c7:8c:af:c1:e3:02:a4:bd:ea:7a: 7a:7e:a1:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF Njc0MkYyMjEwHhcNMjQwNTAyMjMyMDUxWhcNMjQwNTA5MjMyMDUxWjAYMRYwFAYD VQQDEw02NjM0MWZkMy1kMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfIATVbt+ZobSfFR3HhNTDNcsSw7sr7Fszi8gGJn+CqubSQvElkstl5dU26L zjyBjwzQSmopIeGr5lmcCcHAgyYfdJFcc1VR5IzIMzlnShThv206td9DTNqpVaTg cxbBQ1IO3THZ1JVm29mn3KNmjLY71IuE+flkE5Z4/JCo8bUbgWWAr5fc8jrH6icE 3mN6pNlik8sJizpuNJRvjIIjvGg/MnYVbBnWqtYvpPMbodhjWoviBUzRCH/EJNtI 6fJB66HR6L9HFsfydGjFHQa1auVkSuBx0UT9wWtadds3B6IKHsOSkA3i+Dxtqrig 6B/QAdGT/Amup3b640Ztu+JrYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/JqD+h DscNKeFe7LRTSPZdxyNoMB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4 MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RC8xOERDNTc0MjE4MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdM NEtkdHpheVpKcmJtZEM4aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg7rY7nOTn/K8WU9IPjsd96uiSsLIVL7XZYJQpLIYjFPTuz9WYM8eN B3THkWkLWQ5g7+JMg1Jxoh68SuvAPKV9zSBhuSN4pr076U1i9Gg8bpW/mSiGbS1L qKlt+EUsQSwAzuZXvLGAXcXD6ZEcHdo2IeTBzdZp8pnD03OOfA9Uk0rcdX7RzpyM 6kh5/hyV+vYxDTi7freceL6r9JvuozpYGiJcvutir4Sm9Mszd19pzkvxf1zYdw1R tXdK3BffMY0gGsYyzfZ0uR07YsuOj3CgNZjnIrhjsCIam390J0D0OZE+m7bsl/+D gDq/kEZY2akXwMeMr8HjAqS96np6fqFV -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org