$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: lJAGHT4wKfFzv8Ydcn7IHyUSNVWqjPyWKnDzQlQSaJQ= Subject key identifier: 3C:D8:7A:06:CD:06:72:DE:9E:D3:85:A8:B5:4C:5F:E5:DC:1A:5A:9A Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 04B6 Signing time: Sun 05 May 2024 01:38:19 +0000 Manifest this update: Sun 05 May 2024 01:38:19 +0000 Manifest next update: Sun 12 May 2024 01:38:19 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: trYGc7pwBKw3F+V+iWdGLGLFe6Wnk1pPLFHx4pbpyig=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: 1FB+xGGfJFBtYkIcTivZWRxeSxbgKD7RpqSre6ctfDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: May 5 01:38:19 2024 GMT Not After : May 12 01:38:19 2024 GMT Subject: CN=6636e30b-e87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:d0:6f:34:bd:24:ae:0f:83:b8:b5:ac:37: 3c:34:fb:d8:d5:89:c3:c2:33:16:ad:d4:52:f7:cc: 87:d6:f9:cd:d5:b2:0a:c8:b6:6c:32:91:8b:87:20: 7e:bd:6a:9f:1e:0c:e9:39:b2:13:9c:c6:b0:db:57: 69:9a:4f:da:37:11:0b:26:d2:23:e7:e9:67:f4:b8: d0:3c:37:d2:79:03:3f:0d:bd:74:2d:33:e9:89:ba: 71:02:18:71:36:53:7d:1f:33:64:c6:5f:e6:cb:a2: af:1e:30:84:28:f0:3a:fa:15:ca:1d:99:e6:f2:8f: 5a:31:19:09:99:58:77:56:ad:e9:26:d4:d9:b6:fb: b4:ca:c8:b4:49:9c:79:d5:90:4d:e5:87:cd:33:00: 91:87:50:c4:d5:10:ea:8d:e3:40:40:70:94:52:e8: 8f:85:7d:65:93:65:c5:0b:4d:2a:d7:d8:77:3b:fb: df:48:6f:79:e7:86:97:12:e2:eb:d9:5c:69:33:63: 8e:46:be:f3:b9:4a:1d:59:ae:54:14:4a:cb:2d:86: 76:c7:70:bd:b6:ca:bb:75:d8:7d:49:1a:dc:32:83: 5d:d7:d2:6d:75:08:d1:30:13:71:d2:7f:b5:fa:31: 33:d0:a9:af:cc:51:43:94:c9:7f:7d:a0:bf:c9:fe: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:7A:06:CD:06:72:DE:9E:D3:85:A8:B5:4C:5F:E5:DC:1A:5A:9A X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f9:9b:dd:04:27:fb:66:97:b1:b8:27:6c:72:a7:56:e5:65: 67:db:67:1a:c9:7b:93:de:c1:17:db:1b:a8:7f:1f:ec:da:27: dc:53:4c:0e:f0:4b:39:a1:d0:2c:f4:2c:f2:4c:90:8f:dd:67: 25:38:44:02:75:40:f4:56:55:f3:be:bf:91:ec:64:86:d5:75: 10:7e:5f:8a:e2:61:9a:f3:c2:83:6e:85:d3:e3:f6:84:3b:7d: 26:5b:ce:7a:d5:e2:99:d0:28:11:e6:56:7b:aa:ce:a6:1a:eb: fe:16:c1:4a:78:d7:ae:13:65:fe:b0:7f:ca:91:04:da:ff:01: ae:fc:27:39:1a:02:4b:83:2c:c0:71:1d:99:5e:77:27:2b:39: c3:ca:12:5d:6d:6b:3e:d7:d2:0a:c9:cc:ee:e2:bc:15:18:52: d0:43:d8:d7:6f:ac:3f:a6:92:e5:03:2a:ec:a8:38:a4:78:f0: ca:5d:2c:5a:01:a2:88:a1:88:24:1b:50:ce:5b:ff:46:09:00: ae:97:d5:f8:c3:4c:22:90:01:65:9e:2c:fa:c3:a3:70:06:56: 2a:e9:08:4f:55:50:e6:3e:b8:56:c6:f6:7a:6d:8a:e8:b0:5c: 7f:16:af:da:4b:f3:35:de:cb:47:b4:f2:02:e7:2c:45:e0:73: e1:d5:cf:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjQwNTA1MDEzODE5WhcNMjQwNTEyMDEzODE5WjAYMRYwFAYD VQQDEw02NjM2ZTMwYi1lODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27HQbzS9JK4Pg7i1rDc8NPvY1YnDwjMWrdRS98yH1vnN1bIKyLZsMpGLhyB+ vWqfHgzpObITnMaw21dpmk/aNxELJtIj5+ln9LjQPDfSeQM/Db10LTPpibpxAhhx NlN9HzNkxl/my6KvHjCEKPA6+hXKHZnm8o9aMRkJmVh3Vq3pJtTZtvu0ysi0SZx5 1ZBN5YfNMwCRh1DE1RDqjeNAQHCUUuiPhX1lk2XFC00q19h3O/vfSG9554aXEuLr 2VxpM2OORr7zuUodWa5UFErLLYZ2x3C9tsq7ddh9SRrcMoNd19JtdQjRMBNx0n+1 +jEz0KmvzFFDlMl/faC/yf6G3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzYegbN BnLentOFqLVMX+XcGlqaMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN+ZvdBCf7ZpexuCdscqdW5WVn22cayXuT3sEX2xuofx/s2ifcU0wO 8Es5odAs9CzyTJCP3WclOEQCdUD0VlXzvr+R7GSG1XUQfl+K4mGa88KDboXT4/aE O30mW8561eKZ0CgR5lZ7qs6mGuv+FsFKeNeuE2X+sH/KkQTa/wGu/Cc5GgJLgyzA cR2ZXncnKznDyhJdbWs+19IKyczu4rwVGFLQQ9jXb6w/ppLlAyrsqDikePDKXSxa AaKIoYgkG1DOW/9GCQCul9X4w0wikAFlniz6w6NwBlYq6QhPVVDmPrhWxvZ6bYro sFx/Fq/aS/M13stHtPIC5yxF4HPh1c9v -----END CERTIFICATE-----Generated at Sun May 5 02:33:36 2024 by rpki-client on console-fra.rpki-client.org