$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json) Hash identifier: +rw8Mh8ciohRV+fcrIBL9tpfddk1di3mC1RXyrHeVq0= Subject key identifier: FF:D6:27:0E:E8:F1:A2:6B:75:05:BF:DF:9A:1F:33:6D:64:31:6C:CE Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft Manifest number: 33CB Signing time: Thu 02 May 2024 14:29:43 +0000 Manifest this update: Thu 02 May 2024 14:29:43 +0000 Manifest next update: Thu 09 May 2024 14:29:43 +0000 Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: ZuKFKXUycs57GceT5jfNHezW6b+ZnK6oR9JuNYYNx54=) 2: CFAE1776E7C811ECA2BF6554C4F9AE02.roa (hash: 5i/4+dLE44lXkgUIAVwucw3fJE9dZKimTSLAjpgaaeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: May 2 14:29:43 2024 GMT Not After : May 9 14:29:43 2024 GMT Subject: CN=6633a357-fbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:b6:ea:32:33:c4:db:85:55:1f:ca:69:48: 43:78:83:b1:36:95:37:46:70:4f:77:21:bb:f2:d7: 9c:86:42:1e:18:e9:df:48:93:16:bb:79:bf:ab:e4: cc:f0:ec:80:bb:27:c3:68:0e:58:73:2d:17:42:ac: 59:e3:d2:6f:bb:ef:92:6e:f2:68:d1:98:92:4d:4b: 46:74:ef:67:43:41:2c:c4:73:a4:27:11:31:9b:e3: e0:e3:3f:53:46:32:68:03:31:38:86:c2:fd:dc:e8: c5:3d:09:61:3a:1c:0c:da:56:1c:a4:2b:4c:6f:69: 65:74:92:9a:f4:4e:56:47:40:c5:9e:6b:3f:7c:5f: 54:af:1f:50:05:33:2a:11:cc:c0:00:2b:1d:12:92: e7:5c:d9:e5:41:d0:bc:e8:4f:fa:f2:cf:90:47:c4: ea:1e:3f:7b:1e:25:c7:59:07:2d:0d:6c:81:15:e5: 95:e4:6f:dd:e9:f3:34:aa:8f:a9:63:bf:56:3f:1f: 90:8a:f8:2a:fd:2b:bb:d5:26:06:90:a5:49:00:af: 5f:35:9d:16:87:0c:a4:18:42:79:59:e0:59:6c:77: ec:a3:93:9f:cc:7b:53:77:14:1a:bd:f9:38:33:8d: 99:66:9c:a3:fd:93:fa:e7:47:93:e5:0d:43:3f:94: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:27:0E:E8:F1:A2:6B:75:05:BF:DF:9A:1F:33:6D:64:31:6C:CE X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:97:74:0c:b8:cb:48:73:9d:27:ae:db:8e:cd:99:a4:9e:68: b0:14:d0:b5:98:f2:dc:68:69:74:37:f9:6f:c2:fb:8a:38:48: 30:af:3c:03:b0:dd:b4:b5:8e:f5:fc:1c:ab:4f:c8:40:ab:0c: 48:b5:e5:00:cc:b5:59:a7:75:02:e8:a3:a2:e5:ea:01:7c:04: 55:fa:fa:96:da:18:c2:ae:55:4c:82:c5:f7:97:ad:38:fd:0c: 6c:c8:64:51:74:2d:b4:35:3f:b6:ae:1c:ea:d2:ac:f3:54:d7: e4:8c:e9:d5:1b:ee:6c:32:5a:fd:d4:84:49:99:c1:e6:94:bc: ae:2c:b3:a0:1f:04:7d:e3:37:12:43:a6:67:d5:0d:a2:82:96: 34:c2:f6:48:42:2e:70:35:58:28:72:47:bd:a8:7c:ed:83:95: 2e:79:46:52:aa:70:50:2a:d1:34:37:10:7f:69:c6:58:52:9e: 22:74:c4:d5:00:b3:ee:68:03:54:ba:f0:48:be:f3:83:9a:71: 3f:72:be:0f:7c:9b:79:83:57:a1:26:e4:9d:b4:6a:d3:c9:a2: 16:01:7b:55:1a:3d:4f:6c:66:5d:57:ac:d5:24:36:87:7e:68: 04:08:bf:ba:17:72:b6:99:6f:eb:5b:62:1a:63:f1:8f:ae:ef: b1:03:fb:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjQwNTAyMTQyOTQzWhcNMjQwNTA5MTQyOTQzWjAYMRYwFAYD VQQDEw02NjMzYTM1Ny1mYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzm26jIzxNuFVR/KaUhDeIOxNpU3RnBPdyG78techkIeGOnfSJMWu3m/q+TM 8OyAuyfDaA5Ycy0XQqxZ49Jvu++SbvJo0ZiSTUtGdO9nQ0EsxHOkJxExm+Pg4z9T RjJoAzE4hsL93OjFPQlhOhwM2lYcpCtMb2lldJKa9E5WR0DFnms/fF9Urx9QBTMq EczAACsdEpLnXNnlQdC86E/68s+QR8TqHj97HiXHWQctDWyBFeWV5G/d6fM0qo+p Y79WPx+Qivgq/Su71SYGkKVJAK9fNZ0WhwykGEJ5WeBZbHfso5OfzHtTdxQavfk4 M42ZZpyj/ZP650eT5Q1DP5S00QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/WJw7o 8aJrdQW/35ofM21kMWzOMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkNGQy9CRjg0QjU3NDFEODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMy SDNFMjhKY1p2ODlNUlROQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBal3QMuMtIc50nrtuOzZmknmiwFNC1mPLcaGl0N/lvwvuKOEgwrzwD sN20tY71/ByrT8hAqwxIteUAzLVZp3UC6KOi5eoBfARV+vqW2hjCrlVMgsX3l604 /QxsyGRRdC20NT+2rhzq0qzzVNfkjOnVG+5sMlr91IRJmcHmlLyuLLOgHwR94zcS Q6Zn1Q2igpY0wvZIQi5wNVgocke9qHztg5UueUZSqnBQKtE0NxB/acZYUp4idMTV ALPuaANUuvBIvvODmnE/cr4PfJt5g1ehJuSdtGrTyaIWAXtVGj1PbGZdV6zVJDaH fmgECL+6F3K2mW/rW2IaY/GPru+xA/vD -----END CERTIFICATE-----Generated at Thu May 2 17:43:11 2024 by rpki-client on console-fra.rpki-client.org