$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: 8Kb6GEZHZ3SA3NAZw6js0oBIzNSYErcsFKsFR11CNts= Subject key identifier: 17:D6:EE:67:7F:C0:80:32:6F:1A:FF:DF:75:4C:BB:D6:EE:8A:11:61 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: B1 Signing time: Wed 15 May 2024 06:55:35 +0000 Manifest this update: Wed 15 May 2024 06:55:35 +0000 Manifest next update: Wed 22 May 2024 06:55:34 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: BIVrfWJeIabS8ahlROE5S0d7IsBnX/x9NKfuy9Jfyic=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: hTk/lRLlQBviCYjhXy1epTHYshfben0qR2IckEw1iPY=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: wQI5YxsE/Ugf6uses1V+/cxJDgapH749N4ib0nvozl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: May 15 06:55:35 2024 GMT Not After : May 22 06:55:34 2024 GMT Subject: CN=66445c67-72d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:51:26:33:0b:cf:06:99:c6:bb:4d:2a:9f: b9:fa:36:99:13:db:4d:24:ea:47:d4:eb:89:d1:5c: 36:20:a6:61:e6:d7:17:73:ff:36:34:f5:f7:ee:ce: 24:1f:86:c4:bb:5c:81:a0:76:e7:81:94:2a:12:6c: 7e:a5:c9:12:60:14:59:21:e8:30:f1:d6:e0:e9:68: 56:c3:65:65:8f:c4:13:87:e5:6a:97:bc:a3:40:8e: a0:5c:71:71:72:b6:55:95:d0:4e:aa:54:d2:e8:ca: 80:63:10:37:f1:ce:32:8b:e2:51:58:7a:5b:c4:92: e5:9a:e2:6b:c0:79:be:60:9a:bb:c7:8a:39:76:10: 09:7c:a7:8f:1b:83:c4:d6:9f:b6:20:2e:ed:2a:a8: 67:e6:89:81:85:8a:54:6f:68:38:57:4c:07:07:10: e9:1f:1e:f4:46:c9:b8:fa:5a:00:d6:39:9c:be:02: 71:d9:6f:d9:74:d2:3b:ec:e1:f6:1c:51:73:7d:cd: 54:c2:69:ba:3f:c3:72:95:34:df:57:c1:86:e4:b7: c4:2b:d5:c7:4b:c9:21:69:06:c5:1e:a7:07:8e:ce: 07:be:07:47:54:25:c9:f0:ad:61:8d:30:24:96:e1: 0a:8b:85:05:85:c1:58:1d:d5:f6:0e:19:50:bf:7f: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:EE:67:7F:C0:80:32:6F:1A:FF:DF:75:4C:BB:D6:EE:8A:11:61 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:20:f7:ec:b9:a8:e9:3f:db:d9:1c:80:13:1d:8b:fd:9c:0b: 41:7d:38:46:c8:d4:13:28:a2:1e:24:2f:91:5b:cd:df:cc:57: e8:7c:44:d0:57:c1:a6:0a:27:44:34:5e:d9:1e:32:db:b9:be: 51:84:8e:2f:48:3d:a7:cd:87:8c:e0:a1:8c:6f:bf:6f:44:67: 10:94:52:4c:c7:b8:5b:ad:d4:9b:25:6e:50:98:d3:52:8c:f7: f0:d2:a5:e0:dd:45:e7:10:3a:a1:1c:eb:c7:d2:75:2b:28:e7: 10:ea:0c:47:55:16:cb:11:54:42:da:63:71:da:d0:57:7f:64: af:ea:fe:b4:08:22:8c:86:31:81:aa:88:09:c0:95:63:07:ab: e1:38:32:d1:a7:6d:47:f0:55:f8:42:12:1f:3b:78:ce:c6:74: a7:98:0d:98:05:96:ab:d8:57:eb:d3:6b:c1:d2:e3:ea:66:28: b2:da:15:c5:e4:46:c7:47:45:bf:67:dc:26:dc:47:21:0f:33: 45:94:54:02:ee:4d:eb:37:8a:eb:77:92:61:96:da:7c:25:f4: f4:d0:50:52:e9:f1:9f:e6:58:39:23:d1:3a:f9:10:3f:44:53: 12:eb:9d:3a:28:35:a3:45:6a:d2:a6:b0:36:a1:6d:cd:5c:3b: c8:c1:d9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjQwNTE1MDY1NTM1WhcNMjQwNTIyMDY1NTM0WjAYMRYwFAYD VQQDEw02NjQ0NWM2Ny03MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuORRJjMLzwaZxrtNKp+5+jaZE9tNJOpH1OuJ0Vw2IKZh5tcXc/82NPX37s4k H4bEu1yBoHbngZQqEmx+pckSYBRZIegw8dbg6WhWw2Vlj8QTh+Vql7yjQI6gXHFx crZVldBOqlTS6MqAYxA38c4yi+JRWHpbxJLlmuJrwHm+YJq7x4o5dhAJfKePG4PE 1p+2IC7tKqhn5omBhYpUb2g4V0wHBxDpHx70Rsm4+loA1jmcvgJx2W/ZdNI77OH2 HFFzfc1Uwmm6P8NylTTfV8GG5LfEK9XHS8khaQbFHqcHjs4HvgdHVCXJ8K1hjTAk luEKi4UFhcFYHdX2DhlQv392lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfW7md/ wIAybxr/33VMu9buihFhMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdIPfsuajpP9vZHIATHYv9nAtBfThGyNQTKKIeJC+RW83fzFfofETQ V8GmCidENF7ZHjLbub5RhI4vSD2nzYeM4KGMb79vRGcQlFJMx7hbrdSbJW5QmNNS jPfw0qXg3UXnEDqhHOvH0nUrKOcQ6gxHVRbLEVRC2mNx2tBXf2Sv6v60CCKMhjGB qogJwJVjB6vhODLRp21H8FX4QhIfO3jOxnSnmA2YBZar2Ffr02vB0uPqZiiy2hXF 5EbHR0W/Z9wm3EchDzNFlFQC7k3rN4rrd5Jhltp8JfT00FBS6fGf5lg5I9E6+RA/ RFMS6506KDWjRWrSprA2oW3NXDvIwdnV -----END CERTIFICATE-----Generated at Wed May 15 09:04:14 2024 by rpki-client on console-ams.rpki-client.org