$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: gblFJCA+HVh3OQYdLJjqBUqNKxd6c5wE5Rrd1ME6WK0= Subject key identifier: B8:49:01:9B:80:4E:EF:84:72:AD:43:95:BF:A9:08:72:BF:8D:CC:DE Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: BB Signing time: Fri 17 May 2024 06:31:14 +0000 Manifest this update: Fri 17 May 2024 06:31:13 +0000 Manifest next update: Fri 24 May 2024 06:31:13 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: Oldfm4uBddV/bScY4L57D9xIv3eZ/0SkO27HydXUytE=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: VOFQT/A85G7ejOlbJrTPJEP9gzT4RIbiS8v9oGv3OB0=) 3: 1B89820E029711EEB8410455C4F9AE02.roa (hash: EynPpN2WjeRLFInu6svoBsqkxQC0xcv1LjKfkU7YkG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: May 17 06:31:13 2024 GMT Not After : May 24 06:31:13 2024 GMT Subject: CN=6646f9b1-92ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:56:5a:62:c9:1d:8b:03:a9:1d:be:8e:45: 22:90:11:7a:78:cc:00:a9:bc:4a:44:af:a1:2a:04: 4a:5a:fc:e6:7f:2e:69:0e:3e:a7:2a:2a:71:3f:4f: 5c:90:71:e5:03:71:9a:50:24:22:49:8b:37:74:e9: de:67:66:c7:b6:d0:48:24:26:9f:b1:a5:c8:ab:47: 0b:bd:22:b6:9a:95:89:97:59:10:cc:45:03:58:74: fe:53:ce:81:8a:6a:d8:87:47:47:a2:ab:1d:f9:97: b0:76:46:47:ac:b0:2c:4d:4c:ca:04:ae:ca:87:29: 77:ac:12:fc:09:cd:f6:7b:c9:a1:75:6e:8a:a3:c9: dd:c2:c9:4d:ca:3a:d5:76:47:4f:f8:06:16:93:a8: cc:e9:4e:0d:ee:92:ab:e9:65:6b:bb:8f:8c:db:d2: ce:8d:b5:88:c3:34:58:b0:28:5a:11:61:48:d5:10: 63:9f:0a:07:31:c2:ca:79:72:f8:93:db:60:a4:80: 78:3d:a6:c8:39:f7:ec:18:82:03:27:d9:6a:9a:8a: 22:e3:68:c2:ef:e3:2f:8a:54:e6:a2:49:d2:e0:54: 92:ac:12:7e:b8:4d:3e:44:5e:8c:ba:b9:99:13:98: a6:bd:dd:18:2b:39:f6:85:bd:06:70:47:58:94:07: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:01:9B:80:4E:EF:84:72:AD:43:95:BF:A9:08:72:BF:8D:CC:DE X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d4:ff:15:1f:ed:8d:14:28:8b:34:b0:37:1a:74:34:fd:d5: 8f:43:6b:7f:56:4d:34:88:00:cb:22:01:8d:95:76:ee:c4:42: 6b:1e:6f:c8:e9:b0:35:42:be:b8:c0:8b:e9:17:06:57:b1:0c: f1:f2:a8:69:60:a1:03:02:99:d5:3e:60:e7:eb:2e:0e:08:63: 44:3b:8f:38:d5:9d:0e:73:65:27:e2:76:e6:65:cb:cc:cf:3b: 85:de:c4:94:dc:dd:b8:66:63:d3:c6:95:b6:9a:a9:d7:f9:0b: 41:f8:5e:0d:58:0c:7f:2d:40:68:42:fd:5f:2c:8f:7a:ad:80: ae:52:a1:ef:ad:1e:28:46:15:af:74:b4:c8:03:01:33:da:0e: 2f:45:f6:a3:c6:51:fd:bb:c8:b3:c4:f2:7d:a5:0c:df:e0:34: 0d:0a:a3:cd:77:10:7f:ba:00:e8:cf:9f:a7:41:73:d4:13:f4: d8:7d:0a:3b:98:5a:b2:33:56:08:db:ac:51:67:0f:9a:76:c0: fa:fb:c8:61:f0:d2:74:6f:f9:33:96:35:5d:04:0c:da:00:73: a7:a2:8c:27:52:92:a9:e0:b0:5a:41:bf:f8:8a:60:1f:3a:bf: 9a:35:4d:72:5e:64:8e:9e:71:1b:78:6e:c0:13:5d:f7:ea:c8: 0b:cf:68:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjQwNTE3MDYzMTEzWhcNMjQwNTI0MDYzMTEzWjAYMRYwFAYD VQQDEw02NjQ2ZjliMS05MmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RxWWmLJHYsDqR2+jkUikBF6eMwAqbxKRK+hKgRKWvzmfy5pDj6nKipxP09c kHHlA3GaUCQiSYs3dOneZ2bHttBIJCafsaXIq0cLvSK2mpWJl1kQzEUDWHT+U86B imrYh0dHoqsd+ZewdkZHrLAsTUzKBK7Khyl3rBL8Cc32e8mhdW6Ko8ndwslNyjrV dkdP+AYWk6jM6U4N7pKr6WVru4+M29LOjbWIwzRYsChaEWFI1RBjnwoHMcLKeXL4 k9tgpIB4PabIOffsGIIDJ9lqmooi42jC7+MvilTmoknS4FSSrBJ+uE0+RF6MurmZ E5imvd0YKzn2hb0GcEdYlAf/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhJAZuA Tu+Ecq1Dlb+pCHK/jczeMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY1P8VH+2NFCiLNLA3GnQ0/dWPQ2t/Vk00iADLIgGNlXbuxEJrHm/I 6bA1Qr64wIvpFwZXsQzx8qhpYKEDApnVPmDn6y4OCGNEO4841Z0Oc2Un4nbmZcvM zzuF3sSU3N24ZmPTxpW2mqnX+QtB+F4NWAx/LUBoQv1fLI96rYCuUqHvrR4oRhWv dLTIAwEz2g4vRfajxlH9u8izxPJ9pQzf4DQNCqPNdxB/ugDoz5+nQXPUE/TYfQo7 mFqyM1YI26xRZw+adsD6+8hh8NJ0b/kzljVdBAzaAHOnoownUpKp4LBaQb/4imAf Or+aNU1yXmSOnnEbeG7AE1336sgLz2i6 -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org