$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json) Hash identifier: n5RlrwdiQs/SOUEI6yAh3xpQQXc+5PHX7evRfukA4/w= Subject key identifier: C5:10:F4:C4:A7:AA:EA:14:2C:E8:9A:44:5C:3E:62:2B:BC:54:6A:AD Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft Manifest number: 0208 Signing time: Tue 07 May 2024 04:10:08 +0000 Manifest this update: Tue 07 May 2024 04:10:08 +0000 Manifest next update: Tue 14 May 2024 04:10:08 +0000 Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: ZQZxWJLyzr1gqV2utv4RwfqLICm1A0a9hyay/bK0yMM=) 2: 2D719B24024B11EEB782E936C4F9AE02.roa (hash: nvRr0b/dErhHb84pTtigoeE2B65F9nayzoNf7PMlgiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Validity Not Before: May 7 04:10:08 2024 GMT Not After : May 14 04:10:08 2024 GMT Subject: CN=6639a9a0-c806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:d6:f0:b9:a1:72:8f:43:10:a7:0e:e8:39: 4e:09:20:e3:af:d7:f2:34:46:36:fa:2c:e4:6f:43: 37:8c:fb:43:c4:c3:45:0a:46:9a:65:ab:ab:75:76: 89:69:3c:16:d3:54:84:86:c4:47:8c:3c:28:2e:4e: b8:97:63:e8:95:01:17:4a:74:98:0e:e7:3a:28:13: cf:20:68:ca:a0:85:91:b7:a6:ad:88:82:75:8b:68: 5f:bf:e2:75:b3:3e:37:3a:61:ab:df:51:34:ad:29: 6e:91:df:4f:10:73:d2:3e:df:14:bc:4c:be:19:19: 47:b6:cf:e2:a9:fd:23:ba:1c:56:ef:c4:6a:b7:a5: 17:15:95:6f:82:ed:88:c4:cd:58:8a:7c:2a:7d:0f: 6e:8d:a1:e4:bd:4c:27:a4:dc:ce:87:d8:92:08:87: 15:41:57:f4:42:29:82:95:75:d9:5c:e3:66:9e:60: e2:0b:7c:16:02:5b:56:0b:43:bc:07:17:5d:16:7f: fe:fc:46:1b:c7:62:d9:79:eb:f0:dc:b5:ed:ad:62: b9:82:d9:47:a7:6f:55:84:76:2c:ad:b4:05:e6:fe: f9:65:cd:8d:4a:ba:b7:2c:01:c1:e2:f7:14:11:f3: ba:3f:03:0d:41:64:34:9f:9d:a4:86:b4:65:0c:71: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:10:F4:C4:A7:AA:EA:14:2C:E8:9A:44:5C:3E:62:2B:BC:54:6A:AD X509v3 Authority Key Identifier: keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d5:bd:e7:3c:c5:82:62:f6:0c:77:c1:b1:58:72:fa:a0:ed: 85:7d:96:06:4c:ad:41:ee:eb:53:fc:87:0a:57:e4:65:7f:0f: 8e:5d:97:9e:be:08:f4:98:49:27:f2:18:70:56:8d:4a:54:77: 95:76:dc:e9:7d:c2:59:db:c7:37:cf:af:23:d2:29:2c:8c:15: 79:51:17:5b:01:93:d0:14:93:5e:2f:1f:0f:a5:a5:a6:2c:6f: 93:fe:8c:b7:3b:34:61:68:72:61:c1:4c:67:c5:4b:45:8b:61: de:0f:c2:61:40:ff:5e:94:d3:83:58:b8:ec:56:53:9e:95:5e: 8a:77:05:08:fa:85:ab:1c:e2:f0:30:23:ec:7a:1b:00:68:16: 68:7e:42:6d:90:c6:2d:f0:84:bc:a2:0e:b3:7c:14:f6:a7:2c: 55:62:ad:78:25:ec:30:a5:4d:92:0f:95:10:a4:5b:d8:d2:7b: f3:b3:9a:26:4c:bd:04:37:ab:36:8b:f5:6f:cb:0c:cc:88:64: ad:90:b6:b2:84:ca:58:a4:a7:80:85:f5:9b:ef:8b:c4:f4:9a: a0:82:92:5b:75:f4:66:63:e7:3e:79:c5:c8:28:cb:89:9e:2b: f6:ef:09:a1:80:a1:d5:7f:12:1d:b4:27:65:9a:30:b3:b1:96: 61:2f:25:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw QTc0NUMyRTAwHhcNMjQwNTA3MDQxMDA4WhcNMjQwNTE0MDQxMDA4WjAYMRYwFAYD VQQDEw02NjM5YTlhMC1jODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowfW8Lmhco9DEKcO6DlOCSDjr9fyNEY2+izkb0M3jPtDxMNFCkaaZaurdXaJ aTwW01SEhsRHjDwoLk64l2PolQEXSnSYDuc6KBPPIGjKoIWRt6atiIJ1i2hfv+J1 sz43OmGr31E0rSlukd9PEHPSPt8UvEy+GRlHts/iqf0juhxW78Rqt6UXFZVvgu2I xM1YinwqfQ9ujaHkvUwnpNzOh9iSCIcVQVf0QimClXXZXONmnmDiC3wWAltWC0O8 BxddFn/+/EYbx2LZeevw3LXtrWK5gtlHp29VhHYsrbQF5v75Zc2NSrq3LAHB4vcU EfO6PwMNQWQ0n52khrRlDHE+twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUQ9MSn quoULOiaRFw+Yiu8VGqtMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK VkxUWmVsMDNySUlLZEZ3dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1b3nPMWCYvYMd8GxWHL6oO2FfZYGTK1B7utT/IcKV+Rlfw+OXZee vgj0mEkn8hhwVo1KVHeVdtzpfcJZ28c3z68j0iksjBV5URdbAZPQFJNeLx8PpaWm LG+T/oy3OzRhaHJhwUxnxUtFi2HeD8JhQP9elNODWLjsVlOelV6KdwUI+oWrHOLw MCPsehsAaBZofkJtkMYt8IS8og6zfBT2pyxVYq14JewwpU2SD5UQpFvY0nvzs5om TL0EN6s2i/VvywzMiGStkLayhMpYpKeAhfWb74vE9JqggpJbdfRmY+c+ecXIKMuJ niv27wmhgKHVfxIdtCdlmjCzsZZhLyV8 -----END CERTIFICATE-----Generated at Tue May 7 05:39:53 2024 by rpki-client on console-fra.rpki-client.org