$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: vhvmlKceVoS1y8Eq5XQtkmHE9hQHzf3C3Btf6UEwHVg= Subject key identifier: 22:DD:26:CC:E3:75:45:BF:87:C6:EB:94:14:14:D0:EA:D6:3E:DC:1C Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 03EC Signing time: Wed 01 May 2024 02:33:59 +0000 Manifest this update: Wed 01 May 2024 02:33:58 +0000 Manifest next update: Wed 08 May 2024 02:33:58 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: 5BWV8vQmzM3RKsbWe0b6z+inl+518Pub1/qVpiNdUKE=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: p2vPkGvjEZcaFP7aoceARw5cHzy5HDC46h/Fra3/wz4=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: RWhSgJlYgVncBgJIFrKvz73I1MpVqn1hcyQD2Cg2umU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: May 1 02:33:58 2024 GMT Not After : May 8 02:33:58 2024 GMT Subject: CN=6631aa16-cc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:9a:14:ba:d2:50:2a:51:e4:f0:9e:af:0f: d4:b7:4c:37:55:6b:4f:16:7f:b1:e5:3a:6b:9f:61: 6e:23:90:b9:29:d9:bd:6a:ec:bc:17:1b:88:a4:bb: b6:c5:00:bf:dd:b5:fc:19:97:39:a7:45:02:be:c6: 0f:fd:ce:16:ae:6b:33:dc:20:a9:87:19:f3:ac:24: b7:88:93:76:ed:0a:0e:89:d9:62:64:f2:eb:47:a7: d5:a8:f0:98:25:99:41:bc:61:4c:71:d2:0a:e0:ad: 92:9e:e3:ff:bc:b8:fb:95:a5:82:46:ae:3c:55:ef: 04:b7:9c:f3:c5:94:44:fd:2b:08:89:dc:66:29:0d: 0c:d1:1e:2c:06:b8:f5:9f:d7:bc:7d:41:a8:06:e3: 36:ed:fb:96:2e:69:8b:59:83:e8:8b:d6:ce:4d:39: 27:4d:c9:5d:10:f6:96:d8:9a:d1:fb:89:34:8d:4b: 8c:21:ab:5f:bf:fd:21:cb:e9:03:4d:87:27:6c:43: 5e:9c:14:db:57:d4:e5:ee:d9:d0:1b:d2:7e:7c:78: 72:b8:a8:5e:d7:8c:0a:ca:02:1b:67:2e:95:26:42: 73:fb:6a:10:ef:b9:76:21:2f:de:15:6d:ab:bf:f2: 98:68:b8:10:ce:a1:d6:7a:c5:44:b8:9d:82:d3:1f: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DD:26:CC:E3:75:45:BF:87:C6:EB:94:14:14:D0:EA:D6:3E:DC:1C X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fe:2d:d8:eb:69:aa:8c:d9:43:07:ed:b0:e8:d1:ed:96:c7: ce:7c:d9:7c:8e:36:4d:08:fb:84:8e:38:07:c5:67:d4:9b:d4: 8f:26:3e:b0:1e:8d:87:8b:aa:d8:df:3c:4f:bc:49:b8:43:34: d3:10:29:73:1d:0e:19:13:4d:c9:00:f2:92:be:e7:3d:57:4a: 3d:36:2d:f4:e1:69:03:34:85:23:f8:d2:d8:cc:ba:45:03:18: 83:89:93:7c:99:3e:5c:fd:42:f7:1d:a3:56:bd:46:11:84:e9: d6:03:9e:77:68:1a:b7:41:21:d2:b0:2f:b8:d1:5b:65:26:f8: 95:56:d0:61:50:30:b9:d5:50:b6:7d:3d:8f:78:e4:7b:4e:5c: b1:3a:36:1f:99:48:44:06:86:5c:0b:70:72:ea:34:15:cd:4f: 9d:e7:44:42:06:b2:09:5b:98:62:7b:05:02:b9:d0:7b:38:92: 43:ad:1c:c6:62:80:2b:7f:a2:d8:81:ce:b1:45:da:64:ea:f3: 94:29:60:0c:ce:5e:e6:27:e9:19:a7:9e:39:bb:8f:0d:37:82: fe:15:d0:51:93:84:70:68:50:be:f4:1c:bf:b9:54:87:35:10: ea:90:54:e4:77:04:01:b3:ef:d1:b0:1a:95:4f:08:f1:94:26: 8e:fc:e4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjQwNTAxMDIzMzU4WhcNMjQwNTA4MDIzMzU4WjAYMRYwFAYD VQQDEw02NjMxYWExNi1jYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC+aFLrSUCpR5PCerw/Ut0w3VWtPFn+x5Tprn2FuI5C5Kdm9auy8FxuIpLu2 xQC/3bX8GZc5p0UCvsYP/c4Wrmsz3CCphxnzrCS3iJN27QoOidliZPLrR6fVqPCY JZlBvGFMcdIK4K2SnuP/vLj7laWCRq48Ve8Et5zzxZRE/SsIidxmKQ0M0R4sBrj1 n9e8fUGoBuM27fuWLmmLWYPoi9bOTTknTcldEPaW2JrR+4k0jUuMIatfv/0hy+kD TYcnbENenBTbV9Tl7tnQG9J+fHhyuKhe14wKygIbZy6VJkJz+2oQ77l2IS/eFW2r v/KYaLgQzqHWesVEuJ2C0x9wrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLdJszj dUW/h8brlBQU0OrWPtwcMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/i3Y62mqjNlDB+2w6NHtlsfOfNl8jjZNCPuEjjgHxWfUm9SPJj6w Ho2Hi6rY3zxPvEm4QzTTEClzHQ4ZE03JAPKSvuc9V0o9Ni304WkDNIUj+NLYzLpF AxiDiZN8mT5c/UL3HaNWvUYRhOnWA553aBq3QSHSsC+40VtlJviVVtBhUDC51VC2 fT2PeOR7TlyxOjYfmUhEBoZcC3By6jQVzU+d50RCBrIJW5hiewUCudB7OJJDrRzG YoArf6LYgc6xRdpk6vOUKWAMzl7mJ+kZp545u48NN4L+FdBRk4RwaFC+9By/uVSH NRDqkFTkdwQBs+/RsBqVTwjxlCaO/OSk -----END CERTIFICATE-----Generated at Wed May 1 03:20:33 2024 by rpki-client on console-fra.rpki-client.org