$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: E4zXiceK9i3NQNj8B+MRgoU7yBdZ/8jJ7gMFHjgfoco= Subject key identifier: EC:D9:D4:4D:85:6B:5F:6F:E8:C7:EB:C9:7A:03:F7:56:64:7F:AA:6F Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: CC Signing time: Fri 17 May 2024 06:19:49 +0000 Manifest this update: Fri 17 May 2024 06:19:49 +0000 Manifest next update: Fri 24 May 2024 06:19:49 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: 4BY8JpiZhHizs9vBqH1y8k907JXr+ZL0aOHnHwyTlWY=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: tpBOafHjcxlWvsxkyGf/tSGmXbmg8u9JQTte1n/Ress=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: May 17 06:19:49 2024 GMT Not After : May 24 06:19:49 2024 GMT Subject: CN=6646f705-dd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:87:69:db:d2:28:35:cf:12:4c:95:f1:06: ea:53:5c:ab:bc:d8:49:0c:26:c2:14:23:e6:85:36: 1f:57:3c:8a:6e:96:c4:95:58:8f:fe:69:f8:db:d0: 53:31:ea:be:78:22:31:1a:44:36:ad:e9:8b:eb:11: be:90:e8:d8:55:8f:4c:83:ee:9f:ac:5d:06:68:2a: f6:a0:a2:96:ca:fa:c5:c2:ff:b8:c4:02:de:5c:dd: 61:2e:9e:20:9f:1c:0c:e1:e9:da:2d:42:b6:90:c2: b8:24:ca:78:c8:42:a3:87:d5:ca:a2:cb:99:6f:e3: 9c:66:7f:43:d3:cf:1a:88:97:24:35:4c:ed:41:85: 1a:84:dd:98:ba:ef:22:09:23:70:86:8f:22:b3:03: ad:c6:5b:ac:f2:a4:8e:ba:0c:13:4b:92:d8:f1:4c: 3a:2b:1c:41:e2:5f:aa:33:e7:d1:05:b0:6e:0f:cc: 37:1f:02:c9:70:1c:95:44:bf:41:bf:8d:ec:4f:87: 46:33:f6:7f:1c:e1:ea:f9:2b:10:7b:91:69:4b:60: c1:ba:5c:e8:00:07:dc:bb:67:2f:32:96:95:3b:2c: ad:e3:39:87:2c:ca:fb:6a:a0:68:c5:cf:12:70:f1: a8:80:3d:cd:67:28:d6:7b:81:d9:93:2b:09:30:9a: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:D4:4D:85:6B:5F:6F:E8:C7:EB:C9:7A:03:F7:56:64:7F:AA:6F X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b2:7e:c5:68:6f:65:f4:8a:9a:54:8a:fb:8d:f8:85:3b:55: 8b:71:21:72:9f:dd:e5:fd:b9:93:3c:f0:b9:8e:94:6a:c8:8d: e7:bb:55:96:2d:26:41:5f:5f:bb:d0:c4:60:58:7e:6f:b4:d7: a7:9d:5d:10:74:b7:69:20:d9:a9:6c:d3:b1:47:47:ba:84:05: 64:5e:f3:14:83:bb:ee:88:b4:8f:3a:c7:df:2c:ca:8c:c2:38: df:83:9e:73:36:40:ed:ca:e4:00:53:60:6a:9c:b3:de:8f:51: 77:ba:47:85:9e:bf:c6:e2:a2:cb:02:e0:ce:09:45:c6:5f:a7: 1d:b9:b6:6d:52:e6:a7:bc:31:3d:71:d9:8e:85:0b:ba:a4:d4: 63:67:52:4a:4a:05:dc:2c:0e:23:ac:e3:d9:4c:45:73:9f:9f: 15:29:6b:bc:0a:65:9b:ce:d2:59:92:8e:e8:7a:02:20:37:22: 48:28:1b:06:19:35:7f:c1:6f:23:83:4c:c9:53:d4:c4:6d:58: 9a:68:31:45:57:cd:3f:2f:f8:b5:28:c1:ec:ef:8b:94:9d:87: f2:2c:a5:a9:b1:a5:23:0a:9f:27:41:4e:d4:1f:40:5f:5a:21: 88:dd:c5:36:70:35:a1:d4:eb:55:5d:0b:4b:e5:c7:e3:7e:d1: ec:a9:a8:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjQwNTE3MDYxOTQ5WhcNMjQwNTI0MDYxOTQ5WjAYMRYwFAYD VQQDEw02NjQ2ZjcwNS1kZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutyHadvSKDXPEkyV8QbqU1yrvNhJDCbCFCPmhTYfVzyKbpbElViP/mn429BT Meq+eCIxGkQ2remL6xG+kOjYVY9Mg+6frF0GaCr2oKKWyvrFwv+4xALeXN1hLp4g nxwM4enaLUK2kMK4JMp4yEKjh9XKosuZb+OcZn9D088aiJckNUztQYUahN2Yuu8i CSNwho8iswOtxlus8qSOugwTS5LY8Uw6KxxB4l+qM+fRBbBuD8w3HwLJcByVRL9B v43sT4dGM/Z/HOHq+SsQe5FpS2DBulzoAAfcu2cvMpaVOyyt4zmHLMr7aqBoxc8S cPGogD3NZyjWe4HZkysJMJpScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzZ1E2F a19v6MfryXoD91Zkf6pvMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYsn7FaG9l9IqaVIr7jfiFO1WLcSFyn93l/bmTPPC5jpRqyI3nu1WW LSZBX1+70MRgWH5vtNennV0QdLdpINmpbNOxR0e6hAVkXvMUg7vuiLSPOsffLMqM wjjfg55zNkDtyuQAU2BqnLPej1F3ukeFnr/G4qLLAuDOCUXGX6cdubZtUuanvDE9 cdmOhQu6pNRjZ1JKSgXcLA4jrOPZTEVzn58VKWu8CmWbztJZko7oegIgNyJIKBsG GTV/wW8jg0zJU9TEbViaaDFFV80/L/i1KMHs74uUnYfyLKWpsaUjCp8nQU7UH0Bf WiGI3cU2cDWh1OtVXQtL5cfjftHsqaiI -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org