$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 0MEthDrqtJMAaHx90UhcBeHOynhv9NxBApGx+CCTUBw= Subject key identifier: 49:D9:6E:85:45:1B:3C:A4:EE:8F:13:F6:9E:05:F9:7C:83:37:DE:DA Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0B55 Signing time: Thu 02 May 2024 19:44:18 +0000 Manifest this update: Thu 02 May 2024 19:44:18 +0000 Manifest next update: Thu 09 May 2024 19:44:18 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: IpIqZMHnO2A0jcylv1nOWsEJl9iM3sfcVpBqGQPOvpw=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: VRmHXrHlhaCKUbL1s5J+kTbfWxiTr3Ph5grEKfZn0BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: May 2 19:44:18 2024 GMT Not After : May 9 19:44:18 2024 GMT Subject: CN=6633ed12-c821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:7b:a6:b6:22:66:52:2a:8c:de:df:45:db: 27:ea:4f:63:6b:06:85:95:9c:91:34:dd:35:c0:be: 3c:0d:c4:df:8f:5a:d4:eb:80:41:d1:ee:1a:39:ba: 92:dc:5f:ca:d7:b8:e8:d5:6e:ab:2e:24:9c:c0:cf: d6:15:d6:f9:2a:b2:02:db:c7:69:5c:ac:a1:9d:47: ba:e3:7d:2d:63:7f:b7:4a:5a:f0:ff:1e:bd:5d:f9: 11:0e:c5:76:fe:e4:93:87:12:76:64:e0:87:46:64: 41:9c:e5:8b:04:04:9d:60:77:53:6f:83:f4:ef:39: a3:1b:dd:9d:64:d0:31:c6:ee:7d:a5:e6:cc:e1:0f: 05:d8:b2:11:5c:88:51:26:d4:03:d1:8c:7d:e2:db: c4:74:45:0a:e9:79:40:94:4e:fc:d7:60:87:72:4a: 6a:e7:08:4b:07:2b:e3:f4:1f:53:2a:fc:c0:19:0d: 52:e0:c0:8c:1f:88:e2:05:b1:26:f3:cf:d6:29:29: 5b:8b:28:ba:65:d9:a3:9a:99:ae:6d:44:21:3a:60: 19:f7:45:21:1e:bb:77:cc:de:52:25:d0:88:9e:91: 13:80:18:1f:b4:fc:cf:cb:96:6e:dc:d9:df:de:67: b9:57:fe:28:d1:83:4c:21:cf:76:d1:69:f8:55:5a: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D9:6E:85:45:1B:3C:A4:EE:8F:13:F6:9E:05:F9:7C:83:37:DE:DA X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ec:11:f8:4c:b6:34:d1:76:ae:8d:0c:a5:ea:29:31:8c:b5: 27:f2:12:0e:2e:02:dc:9b:0c:d9:72:46:a6:ed:5f:c7:06:26: 07:76:b6:bb:20:58:13:5c:9f:4d:70:05:30:e8:f3:bb:95:d3: 53:d5:53:9f:37:c5:ce:e4:29:c0:ab:76:a5:07:8d:61:e9:69: 5b:f9:d6:ce:7c:f3:a6:90:60:ac:39:a4:a9:07:74:4a:fe:5d: 9a:2e:04:38:33:a7:d1:7c:55:89:38:14:1a:56:b7:3e:a3:54: a4:2d:dc:87:51:98:9a:f6:20:5e:e3:9b:23:de:3a:75:3f:d1: 22:00:7a:31:d6:9e:62:e8:5b:cd:af:fb:7c:56:d3:6e:85:e7: ce:78:7a:37:52:c3:a1:46:84:1e:0a:36:80:eb:98:11:1f:6a: 1f:3e:12:4f:dd:1d:8d:7c:a4:e2:92:7a:b5:85:7f:30:41:45: f6:11:ca:b4:55:dc:e3:d3:c4:f0:c3:21:ed:c2:f5:77:2a:5e: 5e:aa:bc:b6:41:87:6b:0d:6b:ad:50:fc:6b:38:2b:f3:9b:26: 67:eb:1b:63:c4:d1:06:7c:eb:83:80:a1:72:f6:98:82:f2:5f: a7:cd:b5:88:57:57:36:3d:dd:ee:79:44:ff:3e:30:69:84:57: 5a:d8:fc:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjQwNTAyMTk0NDE4WhcNMjQwNTA5MTk0NDE4WjAYMRYwFAYD VQQDEw02NjMzZWQxMi1jODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/97prYiZlIqjN7fRdsn6k9jawaFlZyRNN01wL48DcTfj1rU64BB0e4aObqS 3F/K17jo1W6rLiScwM/WFdb5KrIC28dpXKyhnUe6430tY3+3Slrw/x69XfkRDsV2 /uSThxJ2ZOCHRmRBnOWLBASdYHdTb4P07zmjG92dZNAxxu59pebM4Q8F2LIRXIhR JtQD0Yx94tvEdEUK6XlAlE7812CHckpq5whLByvj9B9TKvzAGQ1S4MCMH4jiBbEm 88/WKSlbiyi6ZdmjmpmubUQhOmAZ90UhHrt3zN5SJdCInpETgBgftPzPy5Zu3Nnf 3me5V/4o0YNMIc920Wn4VVoO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnZboVF Gzyk7o8T9p4F+XyDN97aMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY7BH4TLY00XaujQyl6ikxjLUn8hIOLgLcmwzZckam7V/HBiYHdra7 IFgTXJ9NcAUw6PO7ldNT1VOfN8XO5CnAq3alB41h6Wlb+dbOfPOmkGCsOaSpB3RK /l2aLgQ4M6fRfFWJOBQaVrc+o1SkLdyHUZia9iBe45sj3jp1P9EiAHox1p5i6FvN r/t8VtNuhefOeHo3UsOhRoQeCjaA65gRH2ofPhJP3R2NfKTiknq1hX8wQUX2Ecq0 Vdzj08TwwyHtwvV3Kl5eqry2QYdrDWutUPxrOCvzmyZn6xtjxNEGfOuDgKFy9piC 8l+nzbWIV1c2Pd3ueUT/PjBphFda2PzE -----END CERTIFICATE-----Generated at Thu May 2 22:28:51 2024 by rpki-client on console-ams.rpki-client.org