$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: kn2FH3DH+IWbhzuo6PJIlUEPde8g5Cae7n8IyJPK42I= Subject key identifier: 48:93:C3:BA:91:E3:FB:2A:04:04:08:43:50:70:3D:5F:3A:B7:D0:C3 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 072E Signing time: Thu 02 May 2024 22:41:16 +0000 Manifest this update: Thu 02 May 2024 22:41:16 +0000 Manifest next update: Thu 09 May 2024 22:41:15 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: daIjn0uxfsZks9Ff67YHApVG7PcAff+EmtLUi4eN238=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: nsaH5I08UA9S7pBWJEs95VRVtj6VDnIyoLGMkyvaxCM=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: jtwXRDg4ifzB5YeF9ItYPDeteiV3n1oUq/L6Q79DerA=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: G8R2HGhEO91zZJR3k6r/R5FFkuswRD4+38OOZJqUih0=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: MlL6AakK7qGzM8DE1JwJUAOkQ8rpfwcCeXJ1v0Bdnow=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: 6GaYypzIsDgZggW9KzGhSmmLldD0h0OUbEZlMHiCV0M=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: /t87PANjNW6EpQXUSbODbYse7J1TpUCr6EqoPlENnyw=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: NeWDXo15SqJ2L5IjpW3UHQXI0L4NJwn7CVOw91aHuUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: May 2 22:41:16 2024 GMT Not After : May 9 22:41:15 2024 GMT Subject: CN=6634168c-1c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:ef:b1:1a:c5:db:65:84:0b:62:b4:9f:85: 1c:9a:46:a8:70:4a:78:35:b0:de:2e:af:b6:ee:80: 84:67:91:94:f1:cd:83:9a:54:65:e8:ee:62:75:90: 2d:a3:98:75:e6:70:17:bf:8d:3d:56:0b:72:e6:87: 10:89:41:28:d8:b1:fa:18:76:7c:fb:7a:8f:5b:c6: 88:1e:e4:e3:ef:0f:1b:c3:76:2c:ea:a9:5e:79:51: e4:21:15:c7:36:63:95:5b:49:31:20:87:a8:ec:35: 09:65:ed:fd:4c:57:66:f1:ca:40:e9:02:1d:d4:96: 2c:78:b7:45:58:8a:11:ea:86:3b:97:13:40:b4:b7: b6:8d:2d:f0:ba:52:96:62:74:eb:f0:fe:b4:a3:92: ca:82:38:a8:b9:ff:d4:82:f0:13:3e:9e:f1:34:62: 80:31:49:e6:f5:ab:00:41:6a:a7:25:a5:4b:aa:a8: 27:52:1e:85:bd:e3:b8:2a:a4:b2:7a:43:b9:f9:2d: 5f:e1:08:22:4d:8f:f6:44:42:a0:c3:04:e2:ac:d7: 30:70:0f:6d:20:68:e7:c6:25:3b:b0:59:5b:32:e9: f7:25:8e:79:1b:a3:cb:2d:87:04:73:95:10:fb:9d: 1b:29:9c:7d:5c:2c:f8:c7:a5:23:32:0f:c3:5e:8f: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:C3:BA:91:E3:FB:2A:04:04:08:43:50:70:3D:5F:3A:B7:D0:C3 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bd:20:33:a9:0a:a1:45:46:ea:45:c7:cc:89:71:65:3b:26: 68:a5:56:16:7e:68:e0:df:0d:25:85:52:25:2d:49:70:ce:db: 77:95:be:48:36:01:1d:1f:3a:72:c3:0e:47:09:63:e6:64:30: 5f:7c:b7:82:97:44:e3:a8:6f:51:95:1a:5c:c2:c5:ff:8f:be: 78:76:89:74:3b:07:7c:1b:7a:eb:4c:8b:84:8d:da:a0:1a:b3: be:7c:81:af:15:5d:e4:de:0b:99:ce:13:14:f3:68:36:71:f7: e8:4c:00:43:27:63:d0:63:d6:6b:06:4c:23:0b:63:05:1a:50: 3a:12:0c:76:29:fd:16:c3:9c:3f:c8:3d:81:91:a6:77:99:3b: 2b:37:0e:50:26:88:89:86:15:4f:41:b8:f7:5f:40:5e:55:4e: 35:67:d2:d0:9a:8c:78:ef:b3:ee:72:6b:5c:be:03:25:7d:3e: 51:3c:70:4b:3c:33:54:32:1f:69:27:50:bf:c9:ea:3f:8d:1c: f9:63:bf:f1:f6:56:82:4c:ae:af:22:15:ab:f9:ea:c5:45:b2: 07:dc:3b:8a:13:a6:ec:16:f4:80:07:c6:d3:2f:74:c7:46:f5: 65:fc:e3:61:10:90:ef:0e:51:41:f6:67:7a:0a:e4:82:7f:b3: 21:69:fb:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjQwNTAyMjI0MTE2WhcNMjQwNTA5MjI0MTE1WjAYMRYwFAYD VQQDEw02NjM0MTY4Yy0xYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAPvsRrF22WEC2K0n4UcmkaocEp4NbDeLq+27oCEZ5GU8c2DmlRl6O5idZAt o5h15nAXv409Vgty5ocQiUEo2LH6GHZ8+3qPW8aIHuTj7w8bw3Ys6qleeVHkIRXH NmOVW0kxIIeo7DUJZe39TFdm8cpA6QId1JYseLdFWIoR6oY7lxNAtLe2jS3wulKW YnTr8P60o5LKgjiouf/UgvATPp7xNGKAMUnm9asAQWqnJaVLqqgnUh6FveO4KqSy ekO5+S1f4QgiTY/2REKgwwTirNcwcA9tIGjnxiU7sFlbMun3JY55G6PLLYcEc5UQ +50bKZx9XCz4x6UjMg/DXo90qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiTw7qR 4/sqBAQIQ1BwPV86t9DDMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBvSAzqQqhRUbqRcfMiXFlOyZopVYWfmjg3w0lhVIlLUlwztt3lb5I NgEdHzpyww5HCWPmZDBffLeCl0TjqG9RlRpcwsX/j754dol0Owd8G3rrTIuEjdqg GrO+fIGvFV3k3guZzhMU82g2cffoTABDJ2PQY9ZrBkwjC2MFGlA6Egx2Kf0Ww5w/ yD2BkaZ3mTsrNw5QJoiJhhVPQbj3X0BeVU41Z9LQmox477PucmtcvgMlfT5RPHBL PDNUMh9pJ1C/yeo/jRz5Y7/x9laCTK6vIhWr+erFRbIH3DuKE6bsFvSAB8bTL3TH RvVl/ONhEJDvDlFB9md6CuSCf7Mhaftq -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org