$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json) Hash identifier: gq6rXFMT98Xmfj+ZfQmQ4FIwRI+9mmQOzVuK1+XZlug= Subject key identifier: 03:F2:E7:50:B6:73:47:AA:03:D8:A1:F6:EC:DB:D3:7C:F1:E1:86:0A Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 0FA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft Manifest number: 0F8F Signing time: Thu 02 May 2024 18:12:25 +0000 Manifest this update: Thu 02 May 2024 18:12:24 +0000 Manifest next update: Thu 09 May 2024 18:12:24 +0000 Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: p7YQANeh7jHflBhmPI4TOeKSLUdJ4d5jV8C880HgCEY=) 2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: djH0DEstrjY1MlI/KGVSozlxQ/scosHYDHl38KhovH4=) 3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: JmtzVr9gglmzWYD320C9vJdh/yOVfgM+na2sd2lwcAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4007 (0xfa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: May 2 18:12:24 2024 GMT Not After : May 9 18:12:24 2024 GMT Subject: CN=6633d789-9298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:59:22:91:7d:41:1a:76:1e:d7:83:34:12: 79:8a:d1:e6:ad:c7:bc:bd:5d:f2:da:2e:fa:ff:11: 7b:41:f5:3a:52:80:c1:05:9d:79:f4:c8:5c:51:cf: 3d:53:21:7c:53:07:71:71:d9:05:85:a1:2d:9a:20: f8:df:9c:fd:20:f8:bb:69:35:05:c8:67:b3:b8:a3: 61:2b:d1:0a:3a:4d:7f:7d:c0:7c:5b:1d:65:6b:41: 14:61:8c:13:b7:a3:72:95:25:48:01:39:d4:3d:2f: cc:8f:42:02:5e:c7:5b:69:74:6f:5b:cd:2e:d4:78: a0:4c:bc:4c:5c:29:e2:52:a7:a1:f7:cf:be:33:b6: 6e:16:86:5e:f2:4d:b3:1b:ec:e6:85:0d:b9:a8:52: 42:8d:92:d0:c8:89:96:b6:99:c3:32:92:7b:bd:22: 12:a2:43:0f:ec:c2:24:38:ac:ff:8f:ca:4a:0c:86: 4e:25:56:36:d9:2f:6c:66:a9:54:68:a5:02:e3:35: 74:28:d4:ae:5e:a9:33:f1:f9:42:e8:95:ca:09:bc: fc:87:c1:7d:25:48:04:69:9a:f8:4a:4b:18:12:39: 4c:bf:eb:4b:0b:ff:94:0b:78:a2:a9:55:5b:78:e9: 95:c3:5d:06:a9:23:91:fb:36:41:76:03:37:26:28: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F2:E7:50:B6:73:47:AA:03:D8:A1:F6:EC:DB:D3:7C:F1:E1:86:0A X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:02:8f:4c:8d:67:fb:2b:10:ee:8b:22:d6:d0:dc:4f:88:2f: c9:e2:e8:c3:d9:bb:9f:2c:f7:67:45:64:1a:c0:03:a1:54:34: b6:79:e7:87:a6:b7:d8:f2:22:15:8d:f6:64:50:3e:5b:ca:18: f1:fe:2d:42:76:0d:af:fe:d6:bf:3c:9d:70:14:08:fb:68:f4: 41:8d:64:0c:15:99:1e:98:83:f0:77:43:8e:27:3e:7a:13:4d: 7d:81:28:1c:73:cf:95:d3:fb:32:51:75:18:92:e3:b3:20:e0: 8e:78:4a:3a:8c:e9:45:52:e9:48:80:af:af:73:a2:eb:98:e3: 1d:a1:0f:b2:a3:68:70:28:18:89:60:ed:f0:16:5b:4d:76:00: 12:a6:8c:f4:73:a0:9b:bc:b6:cb:5b:c0:9a:3c:cd:e8:16:86: aa:e0:0a:81:0f:c1:02:99:36:12:be:72:e7:e1:2f:92:ba:17: f7:ea:f5:71:5e:47:77:26:0f:7f:c9:39:34:6c:cb:9a:42:c4: 72:cd:e8:ac:65:24:f7:c1:2c:ba:2e:34:9f:69:0c:78:79:35: 59:bc:e3:e2:4c:62:3f:58:29:cb:e6:0a:30:70:fe:50:dd:be: 86:ff:ca:f1:5c:75:f8:c5:2b:eb:1b:d1:e5:8e:3d:0a:ac:ff: fb:41:b9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjQwNTAyMTgxMjI0WhcNMjQwNTA5MTgxMjI0WjAYMRYwFAYD VQQDEw02NjMzZDc4OS05Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVNZIpF9QRp2HteDNBJ5itHmrce8vV3y2i76/xF7QfU6UoDBBZ159MhcUc89 UyF8UwdxcdkFhaEtmiD435z9IPi7aTUFyGezuKNhK9EKOk1/fcB8Wx1la0EUYYwT t6NylSVIATnUPS/Mj0ICXsdbaXRvW80u1HigTLxMXCniUqeh98++M7ZuFoZe8k2z G+zmhQ25qFJCjZLQyImWtpnDMpJ7vSISokMP7MIkOKz/j8pKDIZOJVY22S9sZqlU aKUC4zV0KNSuXqkz8flC6JXKCbz8h8F9JUgEaZr4SksYEjlMv+tLC/+UC3iiqVVb eOmVw10GqSOR+zZBdgM3JigBNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPy51C2 c0eqA9ih9uzb03zx4YYKMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIAo9MjWf7KxDuiyLW0NxPiC/J4ujD2bufLPdnRWQawAOhVDS2eeeH prfY8iIVjfZkUD5byhjx/i1Cdg2v/ta/PJ1wFAj7aPRBjWQMFZkemIPwd0OOJz56 E019gSgcc8+V0/syUXUYkuOzIOCOeEo6jOlFUulIgK+vc6LrmOMdoQ+yo2hwKBiJ YO3wFltNdgASpoz0c6CbvLbLW8CaPM3oFoaq4AqBD8ECmTYSvnLn4S+Suhf36vVx Xkd3Jg9/yTk0bMuaQsRyzeisZST3wSy6LjSfaQx4eTVZvOPiTGI/WCnL5gowcP5Q 3b6G/8rxXHX4xSvrG9Hljj0KrP/7Qbnj -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org