$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: qRpEdyDITvBTF7woz5udwM1qL6XA36sBqyK4fugPu4I= Subject key identifier: 45:6E:C6:AD:B0:FE:4B:F8:DF:3E:9E:A0:78:97:DB:B0:B8:5C:E6:C9 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: 2E Signing time: Thu 19 Sep 2024 05:55:56 +0000 Manifest this update: Thu 19 Sep 2024 05:55:55 +0000 Manifest next update: Thu 26 Sep 2024 05:55:55 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: qf5DephAj+u0HN+/aTJzc4VitrVHkZdjy51z3DWatik=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Sep 19 05:55:55 2024 GMT Not After : Sep 26 05:55:55 2024 GMT Subject: CN=66ebbcec-a076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:ff:64:8a:40:94:b4:6a:8b:c2:9d:89:e7: 80:23:13:64:c7:0b:75:4a:d8:44:60:49:ec:50:ad: 22:4c:10:a9:10:71:9b:d1:65:66:c8:ee:b1:90:cb: 02:68:78:f5:6c:d5:f0:dd:46:49:3f:14:a2:ac:47: 92:0b:dc:be:e3:5e:96:f5:95:28:33:97:24:8e:e6: 01:01:75:59:8f:ec:b6:1b:59:85:b5:63:72:71:e8: 85:e9:58:de:6f:07:f8:46:81:b1:b9:59:ca:84:e2: 2e:c8:dc:27:6f:bb:01:64:00:50:cd:c7:9f:13:a4: f8:91:9a:5a:8f:6a:7b:69:f2:aa:98:0c:2e:be:7b: 42:36:a5:32:bd:83:e7:47:c2:90:53:94:56:f6:7e: 10:7f:97:cf:09:a8:db:5e:1c:46:fd:45:00:45:5c: f7:96:f8:f8:68:cf:12:d8:76:b4:76:07:59:bc:a5: fa:da:97:83:f7:61:b4:a5:3f:14:fc:28:31:c1:5d: 92:08:57:2f:d5:fb:6e:a8:9f:fb:b2:6a:be:1f:e4: 63:d2:5b:58:1e:94:25:1f:8e:f0:d3:fb:47:a4:b1: 40:de:c0:9f:23:35:80:af:18:0d:4a:23:b4:0f:d7: 85:64:e5:7b:88:e1:1f:96:60:53:fa:e1:d9:26:b4: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:C6:AD:B0:FE:4B:F8:DF:3E:9E:A0:78:97:DB:B0:B8:5C:E6:C9 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:a4:ac:be:e0:8a:13:7e:10:6f:86:56:42:21:4a:a6:ae: c0:97:5f:5e:f1:22:66:85:61:18:18:34:b1:47:3e:9a:92:26: 50:f2:72:28:68:2d:5e:b6:1e:a6:6c:f1:06:1c:0b:76:21:58: f1:89:5b:6b:79:5f:06:34:e4:b9:c8:17:b7:d4:99:5e:22:21: 69:ff:ae:cc:17:18:4f:8f:69:42:9d:77:be:f3:56:9b:14:1a: db:c1:fb:f7:56:5c:7d:15:b9:b3:00:87:72:2e:4b:6c:9b:44: c0:7e:77:42:d3:c9:d9:a6:5b:80:83:da:0b:a2:d1:f6:3a:77: dd:04:e3:26:bc:77:10:18:51:a4:15:a1:d0:81:25:0f:50:73: 70:f7:8a:69:dd:17:04:fd:03:2f:55:49:c2:7f:57:46:d2:4e: 98:a7:09:7d:47:b5:dc:89:ab:1d:ab:9f:7a:36:53:e9:ff:f6: 41:8a:4e:d8:90:27:4c:24:cd:ea:00:6c:8a:53:5f:8c:f2:3d: a0:34:d1:9b:53:e6:0d:44:d8:a8:4d:7a:65:93:1e:ed:11:6a: 83:6f:ee:30:59:1c:63:d2:f8:52:57:43:44:6c:db:fd:47:79: b4:2e:b0:0f:7b:78:ef:e8:17:52:aa:ec:67:18:ab:be:82:e3: 80:8e:a4:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDQ3MjExMC8GA1UEBRMoMTg5RjJERUM1QTcwM0Y3RDZDRkQ1Rjk2QUFCNUEyRThB OEREOTQwNjAeFw0yNDA5MTkwNTU1NTVaFw0yNDA5MjYwNTU1NTVaMBgxFjAUBgNV BAMTDTY2ZWJiY2VjLWEwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8T/9kikCUtGqLwp2J54AjE2THC3VK2ERgSexQrSJMEKkQcZvRZWbI7rGQywJo ePVs1fDdRkk/FKKsR5IL3L7jXpb1lSgzlySO5gEBdVmP7LYbWYW1Y3Jx6IXpWN5v B/hGgbG5WcqE4i7I3CdvuwFkAFDNx58TpPiRmlqPantp8qqYDC6+e0I2pTK9g+dH wpBTlFb2fhB/l88JqNteHEb9RQBFXPeW+PhozxLYdrR2B1m8pfral4P3YbSlPxT8 KDHBXZIIVy/V+26on/uyar4f5GPSW1gelCUfjvDT+0eksUDewJ8jNYCvGA1KI7QP 14Vk5XuI4R+WYFP64dkmtPsJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURW7GrbD+ S/jfPp6geJfbsLhc5skwHwYDVR0jBBgwFoAUGJ8t7FpwP31s/V+WqrWi6KjdlAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDcyLzEzQThGQjQ0MzFF NjExRUZBRTlFRTQ2MEM0RjlBRTAyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0o4dDdGcHdQMzFzX1YtV3FyV2k2S2pkbEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE NDcyLzEzQThGQjQ0MzFFNjExRUZBRTlFRTQ2MEM0RjlBRTAyL0dKOHQ3RnB3UDMx c19WLVdxcldpNktqZGxBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzppKy+4IoTfhBvhlZCIUqmrsCXX17xImaFYRgYNLFHPpqSJlDyciho LV62HqZs8QYcC3YhWPGJW2t5XwY05LnIF7fUmV4iIWn/rswXGE+PaUKdd77zVpsU GtvB+/dWXH0VubMAh3IuS2ybRMB+d0LTydmmW4CD2gui0fY6d90E4ya8dxAYUaQV odCBJQ9Qc3D3imndFwT9Ay9VScJ/V0bSTpinCX1HtdyJqx2rn3o2U+n/9kGKTtiQ J0wkzeoAbIpTX4zyPaA00ZtT5g1E2KhNemWTHu0RaoNv7jBZHGPS+FJXQ0Rs2/1H ebQusA97eO/oF1Kq7GcYq76C44COpFE= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:53 2024 by rpki-client on console-fra.rpki-client.org