$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: G9iW0xWQnMn2tpMRORkH2X+MtJkt5tTe6k5uWNzsaWg= Subject key identifier: CA:A6:7C:62:A8:A3:DD:CE:A9:6C:EC:DA:C3:D0:E5:F0:66:04:D6:BE Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 0772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 076C Signing time: Thu 02 May 2024 22:25:38 +0000 Manifest this update: Thu 02 May 2024 22:25:38 +0000 Manifest next update: Thu 09 May 2024 22:25:38 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: zE0OI/7C9jR7yiMkI8oCDTRRrRLC/knJnkpw5w6HqAE=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: PcHtSCFs8CsjGHDk4jEQixDxTi7zJioN2cF2ayYmLLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: May 2 22:25:38 2024 GMT Not After : May 9 22:25:38 2024 GMT Subject: CN=663412e2-5057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:d4:e5:5e:c6:fb:2f:bd:b3:3c:1d:26:be: 79:06:3c:d5:9c:00:d5:9a:f2:e5:2a:d7:20:f6:bc: d0:73:67:00:1c:2c:87:f1:57:d6:ba:d5:e2:f9:d2: 9b:a6:39:ec:ab:d7:bd:40:a0:77:ea:0a:7b:8d:2d: 1a:88:3e:1c:05:bf:c0:43:03:1f:e7:6e:7d:97:16: 52:cc:e4:0d:ed:cd:3f:4f:22:99:1b:6c:d3:59:6b: 93:b6:c5:bc:c3:d1:31:71:cb:91:e4:e1:78:a4:35: 3e:ae:2c:fc:c3:65:02:28:39:6c:39:e5:f0:b0:6b: 69:3e:3b:23:32:b2:99:3b:38:db:ee:fa:a2:b9:50: 27:cf:d5:e5:d9:95:bd:36:b8:d5:8c:8d:53:a0:ab: 36:54:fe:c4:0c:e7:13:49:d8:26:e1:ea:00:e6:69: 6f:31:ba:29:e2:d8:e3:f1:00:b5:c0:08:c4:5b:e7: 1d:a1:a2:98:62:68:3c:6a:ff:72:2c:67:ca:0a:51: d3:34:f8:89:42:c7:cf:3d:01:c0:ea:ae:a5:8d:5c: c5:9e:83:65:98:b5:99:cf:9c:3b:f7:1d:ce:28:d2: 62:1d:37:54:e4:00:bb:f7:79:75:74:73:b4:64:79: fe:61:db:df:23:0c:e3:4a:39:5e:46:a1:30:e4:65: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:7C:62:A8:A3:DD:CE:A9:6C:EC:DA:C3:D0:E5:F0:66:04:D6:BE X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:ea:c9:75:ee:46:f9:8e:83:d3:e6:12:e3:44:4b:43:87: 53:06:ac:66:6d:68:ea:26:2e:e6:45:9e:5a:af:24:c9:54:8c: dd:e0:e7:1b:97:5c:8e:6e:b7:97:bb:73:c3:81:1b:8d:59:42: d3:ee:6a:2d:6e:a0:81:c5:db:2a:ee:1e:5a:07:b7:12:5f:8d: f0:aa:27:09:d7:f6:06:ed:49:c0:e5:0c:2a:46:33:e3:56:2b: d8:01:14:9e:c3:69:4b:7b:1b:6b:fb:18:c9:bd:3e:a9:9b:51: e6:c2:56:eb:54:bf:fa:bb:9e:e6:5c:fe:c1:43:9a:3d:71:47: 91:22:f8:22:98:56:74:cc:e0:2f:f3:80:db:53:d8:90:36:35: 6c:9d:d7:43:5f:a5:fc:c3:b9:0f:ab:a5:ad:d2:11:a9:ea:5d: c7:4d:1e:59:43:05:f4:cf:63:d7:db:cb:a3:f9:a8:18:0e:22: 4a:70:ab:d8:51:3b:7c:1a:cb:cf:8b:27:d8:a0:78:8c:3f:f1: 8d:21:fa:2d:aa:cf:dc:20:4a:57:b6:46:64:ed:53:e8:a4:4e: 0c:f7:f7:c3:94:cd:61:cc:e4:37:7a:c4:0b:6e:c2:0e:e3:d0: f9:c0:6a:a0:0c:51:ee:67:57:af:ca:1d:52:16:dd:12:e0:a1: 0e:39:e3:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjQwNTAyMjIyNTM4WhcNMjQwNTA5MjIyNTM4WjAYMRYwFAYD VQQDEw02NjM0MTJlMi01MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPLU5V7G+y+9szwdJr55BjzVnADVmvLlKtcg9rzQc2cAHCyH8VfWutXi+dKb pjnsq9e9QKB36gp7jS0aiD4cBb/AQwMf5259lxZSzOQN7c0/TyKZG2zTWWuTtsW8 w9ExccuR5OF4pDU+riz8w2UCKDlsOeXwsGtpPjsjMrKZOzjb7vqiuVAnz9Xl2ZW9 NrjVjI1ToKs2VP7EDOcTSdgm4eoA5mlvMbop4tjj8QC1wAjEW+cdoaKYYmg8av9y LGfKClHTNPiJQsfPPQHA6q6ljVzFnoNlmLWZz5w79x3OKNJiHTdU5AC793l1dHO0 ZHn+YdvfIwzjSjleRqEw5GWWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqmfGKo o93OqWzs2sPQ5fBmBNa+MB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1urJde5G+Y6D0+YS40RLQ4dTBqxmbWjqJi7mRZ5aryTJVIzd4Ocb l1yObreXu3PDgRuNWULT7motbqCBxdsq7h5aB7cSX43wqicJ1/YG7UnA5QwqRjPj VivYARSew2lLextr+xjJvT6pm1HmwlbrVL/6u57mXP7BQ5o9cUeRIvgimFZ0zOAv 84DbU9iQNjVsnddDX6X8w7kPq6Wt0hGp6l3HTR5ZQwX0z2PX28uj+agYDiJKcKvY UTt8GsvPiyfYoHiMP/GNIfotqs/cIEpXtkZk7VPopE4M9/fDlM1hzOQ3esQLbsIO 49D5wGqgDFHuZ1evyh1SFt0S4KEOOeOk -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org