$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft File: GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json) Hash identifier: GbwtXBR5UO1nZm8zu4QcpXn/hUtgID/Du4poV55rvGg= Subject key identifier: FD:16:6B:EC:D7:85:63:B0:72:18:23:3C:C9:7F:83:E0:31:5C:07:E4 Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 Certificate issuer: /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft Manifest number: 04F7 Signing time: Fri 03 May 2024 01:21:26 +0000 Manifest this update: Fri 03 May 2024 01:21:25 +0000 Manifest next update: Fri 10 May 2024 01:21:25 +0000 Files and hashes: 1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: alhCYhWbDOZgczE/Uby9Ijwu9uPARcfumlxYlIV1fGw=) 2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: 90bR+/wh4ZPxDRyG4IG++UAcEriR+pBvVndBoqrIMrU=) 3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: Y1y58DmYhw9xJKo4Lvp6Q3H+ZlQ36hROy0cpSNRmy5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Validity Not Before: May 3 01:21:25 2024 GMT Not After : May 10 01:21:25 2024 GMT Subject: CN=66343c15-e40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:49:0d:83:0d:d3:9c:e7:bb:e8:f9:d7:1a: f8:0a:05:30:05:7c:30:e0:62:67:04:07:97:4a:ce: 7b:2e:52:6d:65:91:e1:93:29:2d:d5:05:54:31:f7: ad:74:b6:39:c3:62:18:50:79:70:f1:38:bc:24:00: 5c:5e:fd:6b:0d:fa:38:66:ec:72:51:fe:9b:86:c7: e3:3f:35:1d:85:43:93:3d:9d:07:ae:ca:4e:a0:10: 4f:da:24:15:c0:8d:33:61:c9:d5:f4:90:2c:d4:5e: 85:90:e0:e8:9b:d3:c5:2d:db:bd:3d:a4:60:27:2b: d2:0c:61:98:1e:2b:a7:15:84:a6:42:3f:e2:24:d4: aa:cc:12:3d:fd:7c:ad:cf:b3:07:64:a1:fe:3c:39: a9:3c:d1:10:41:98:5b:2a:15:ec:7d:75:24:c1:01: 12:af:45:5b:b4:81:b5:40:39:9b:53:80:e6:54:58: f4:dd:6a:af:cb:04:e5:c5:67:c4:ed:7b:ba:d2:14: b5:be:63:06:9e:da:68:10:93:5f:5b:09:25:7f:59: 39:43:d2:09:d1:39:7a:04:9f:29:72:e3:c9:c2:da: aa:6c:08:71:16:58:b9:b7:f0:f9:94:25:26:09:19: 9b:ef:62:8a:ac:d6:37:96:64:45:a5:b1:b7:fa:7b: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:16:6B:EC:D7:85:63:B0:72:18:23:3C:C9:7F:83:E0:31:5C:07:E4 X509v3 Authority Key Identifier: keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:74:33:52:f0:57:dc:0f:9c:43:2c:d1:ae:ae:a0:63:9c: 94:bf:dc:c2:80:68:1d:8e:26:d2:32:bb:3e:6d:4a:43:1a:8f: 1e:5b:ca:a6:d6:4a:91:36:f8:77:ea:99:02:51:b4:f9:83:e6: 6e:06:9d:b5:77:9f:46:7c:08:d4:86:4d:37:96:2d:92:34:b1: 7a:d3:71:b1:21:ec:26:bb:3a:07:ef:9c:05:82:61:50:27:38: 56:71:dc:f0:fc:02:48:68:70:8a:cc:73:0e:3d:e6:76:29:b6: 7a:17:e5:f4:f3:50:c2:2e:d6:84:f9:4b:13:90:65:83:50:ba: 61:89:68:02:0a:64:fc:13:dc:bf:67:a5:ae:21:e2:f9:98:dc: 8b:03:6d:bd:12:19:7a:41:2d:5b:14:1a:f5:6d:31:58:83:2c: dc:c4:47:01:88:1f:aa:31:80:b4:d1:53:31:25:4b:dd:bc:49: 27:ed:f8:cb:00:61:4f:17:05:8d:55:bc:82:39:d1:c4:15:34: 45:de:ef:b5:5a:e0:bd:5d:91:71:a4:f8:71:b2:6e:29:1f:5c: 3c:1f:3e:2c:d4:3c:d7:93:76:e0:03:36:3d:f9:07:bd:37:dd: e9:75:4d:93:cc:dd:bf:43:3a:dd:00:20:f9:6b:b9:29:b4:e6: 96:7b:45:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez RUUzRjM3NDMwHhcNMjQwNTAzMDEyMTI1WhcNMjQwNTEwMDEyMTI1WjAYMRYwFAYD VQQDEw02NjM0M2MxNS1lNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MRJDYMN05znu+j51xr4CgUwBXww4GJnBAeXSs57LlJtZZHhkykt1QVUMfet dLY5w2IYUHlw8Ti8JABcXv1rDfo4ZuxyUf6bhsfjPzUdhUOTPZ0HrspOoBBP2iQV wI0zYcnV9JAs1F6FkODom9PFLdu9PaRgJyvSDGGYHiunFYSmQj/iJNSqzBI9/Xyt z7MHZKH+PDmpPNEQQZhbKhXsfXUkwQESr0VbtIG1QDmbU4DmVFj03WqvywTlxWfE 7Xu60hS1vmMGntpoEJNfWwklf1k5Q9IJ0Tl6BJ8pcuPJwtqqbAhxFli5t/D5lCUm CRmb72KKrNY3lmRFpbG3+nsvpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0Wa+zX hWOwchgjPMl/g+AxXAfkMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZBNy9BN0ZBRDRGNkMyQjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsy THFlYmVZSnJJY28tNF9OME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkgnQzUvBX3A+cQyzRrq6gY5yUv9zCgGgdjibSMrs+bUpDGo8eW8qm 1kqRNvh36pkCUbT5g+ZuBp21d59GfAjUhk03li2SNLF603GxIewmuzoH75wFgmFQ JzhWcdzw/AJIaHCKzHMOPeZ2KbZ6F+X081DCLtaE+UsTkGWDULphiWgCCmT8E9y/ Z6WuIeL5mNyLA229Ehl6QS1bFBr1bTFYgyzcxEcBiB+qMYC00VMxJUvdvEkn7fjL AGFPFwWNVbyCOdHEFTRF3u+1WuC9XZFxpPhxsm4pH1w8Hz4s1DzXk3bgAzY9+Qe9 N93pdU2TzN2/QzrdACD5a7kptOaWe0Vy -----END CERTIFICATE-----Generated at Fri May 3 03:10:51 2024 by rpki-client on console-ams.rpki-client.org