$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft File: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json) Hash identifier: N/WVixSJ8Xe9b12oe94jOwE32zSGYYD/xR0eFgrjxts= Subject key identifier: 6F:1A:32:3D:D0:43:F6:DC:16:52:6E:5A:7E:5F:EA:AA:AA:11:A5:4F Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 Certificate issuer: /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft Manifest number: 21 Signing time: Fri 17 May 2024 08:48:18 +0000 Manifest this update: Fri 17 May 2024 08:48:17 +0000 Manifest next update: Fri 24 May 2024 08:48:17 +0000 Files and hashes: 1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: kL36C1vZVnwyF8QGEM3FaO6077L0N32zbl8f9rEc/HU=) 2: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: o8veLlQ9shDH1ccvHhkwopJ92rLYRnjZ4hoJWn9PAqI=) 3: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: a3MeylSZnD5xF8q0gldyOxTnGkf7fN0BYlb4k3Xij/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1 Validity Not Before: May 17 08:48:17 2024 GMT Not After : May 24 08:48:17 2024 GMT Subject: CN=664719d1-5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:9f:75:34:f0:f3:cd:c4:bb:98:f8:ac:e2: b7:7b:0d:1b:4c:ff:80:85:b8:91:19:02:e7:07:94: d9:f6:9f:b4:81:0f:66:51:43:a5:13:c1:d5:07:a6: df:c6:37:79:cd:a6:6d:7e:02:68:ac:65:17:14:47: e1:d9:be:70:2a:9f:b0:08:1b:90:e9:31:eb:92:dc: 66:f3:44:3d:b2:75:87:c2:72:bc:99:45:13:5d:f5: 96:98:f7:9f:1a:40:a9:63:df:78:23:9e:e9:73:1c: e0:d8:58:dc:86:1f:3c:63:6c:a6:be:6d:06:06:2b: 47:6b:88:8e:81:ea:04:70:57:4f:86:7e:fe:89:76: 5d:78:c5:3c:5f:66:75:c5:a6:88:1b:ea:53:db:4e: 46:f4:e8:42:ec:7d:1d:51:41:e6:73:c2:f3:97:6d: d7:c3:f2:48:94:67:10:ca:66:ce:76:31:be:be:9c: e2:1f:ee:eb:2d:8b:78:46:f2:82:ae:87:57:87:1f: 5c:b0:f6:e1:8f:10:05:31:75:0b:91:8f:a5:93:0d: 03:59:1b:7e:29:0f:eb:76:f8:44:31:76:a7:b4:36: d0:3e:12:cd:f4:cc:10:28:87:34:39:52:ed:91:3b: 34:83:81:78:27:bd:0e:2c:c1:46:c6:d9:47:78:8f: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:32:3D:D0:43:F6:DC:16:52:6E:5A:7E:5F:EA:AA:AA:11:A5:4F X509v3 Authority Key Identifier: keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ed:b0:17:ad:cf:df:1a:b3:de:08:a7:6e:28:06:32:c1:8d: 1e:b7:d5:c5:f2:d1:79:35:3d:e3:8b:b2:56:a5:fd:57:ec:e0: 8e:73:f0:67:e8:a9:33:da:54:8a:05:6d:16:44:1a:e3:a1:24: b5:82:22:f4:62:4a:a4:24:b9:b4:38:f3:14:02:9c:fb:6e:0d: 64:97:82:68:b4:b4:63:7c:c5:64:42:aa:c5:c4:90:ed:f0:9b: c5:9a:d1:6a:52:6b:4f:71:2a:84:a7:28:44:15:b4:bc:73:ad: 01:57:7f:f2:78:4c:3f:a4:43:dd:de:b7:72:18:e7:d0:fd:58: 8b:90:c8:b6:8b:c4:b4:34:c5:64:c1:97:4e:5d:4d:c5:b2:c1: f4:37:db:a9:fe:ef:1c:18:97:7e:09:4a:f2:d7:c0:8f:8d:14: eb:39:bb:f4:57:4a:5d:fe:d8:95:80:28:d3:a8:d6:e7:95:c0: 00:70:3a:30:8b:25:27:a2:5d:20:c9:7b:65:e4:34:2f:cd:15: e2:e1:64:d8:af:ab:fa:80:5b:fa:2f:20:1a:e1:15:2e:52:2f: aa:fd:c6:ee:8e:31:78:1b:0f:d2:d6:7a:34:72:29:27:3f:8f: aa:ea:c9:ba:ac:7b:aa:9a:42:41:30:75:22:8a:e2:75:33:12: b1:13:55:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODgxMTExMC8GA1UEBRMoMUJBMDUxREExOTNDMDEzMUI2MUEwQTc4ODA2RTJGMzc4 NkNFRDBDMTAeFw0yNDA1MTcwODQ4MTdaFw0yNDA1MjQwODQ4MTdaMBgxFjAUBgNV BAMTDTY2NDcxOWQxLTVkYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk4591NPDzzcS7mPis4rd7DRtM/4CFuJEZAucHlNn2n7SBD2ZRQ6UTwdUHpt/G N3nNpm1+AmisZRcUR+HZvnAqn7AIG5DpMeuS3GbzRD2ydYfCcryZRRNd9ZaY958a QKlj33gjnulzHODYWNyGHzxjbKa+bQYGK0driI6B6gRwV0+Gfv6Jdl14xTxfZnXF pogb6lPbTkb06ELsfR1RQeZzwvOXbdfD8kiUZxDKZs52Mb6+nOIf7usti3hG8oKu h1eHH1yw9uGPEAUxdQuRj6WTDQNZG34pD+t2+EQxdqe0NtA+Es30zBAohzQ5Uu2R OzSDgXgnvQ4swUbG2Ud4j7DnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbxoyPdBD 9twWUm5afl/qqqoRpU8wHwYDVR0jBBgwFoAUG6BR2hk8ATG2Ggp4gG4vN4bO0MEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4ODExL0UwM0NDNjU0RTgy NjExRUU5NUJFNzE0RUM0RjlBRTAyL0c2QlIyaGs4QVRHMkdncDRnRzR2TjRiTzBN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZCUjJoazhBVEcyR2dwNGdHNHZONGJPME1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 ODExL0UwM0NDNjU0RTgyNjExRUU5NUJFNzE0RUM0RjlBRTAyL0c2QlIyaGs4QVRH MkdncDRnRzR2TjRiTzBNRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIztsBetz98as94Ip24oBjLBjR631cXy0Xk1PeOLslal/Vfs4I5z8Gfo qTPaVIoFbRZEGuOhJLWCIvRiSqQkubQ48xQCnPtuDWSXgmi0tGN8xWRCqsXEkO3w m8Wa0WpSa09xKoSnKEQVtLxzrQFXf/J4TD+kQ93et3IY59D9WIuQyLaLxLQ0xWTB l05dTcWywfQ326n+7xwYl34JSvLXwI+NFOs5u/RXSl3+2JWAKNOo1ueVwABwOjCL JSeiXSDJe2XkNC/NFeLhZNivq/qAW/ovIBrhFS5SL6r9xu6OMXgbD9LWejRyKSc/ j6rqybqse6qaQkEwdSKK4nUzErETVac= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org