$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: 1NwHWbebVptZiZ9A/ynpXSzsuMz6IDsokb9DCjz/3Q4= Subject key identifier: 17:75:2A:0C:53:63:8C:F6:B8:62:F9:88:FA:08:81:F7:87:5D:CC:07 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0107 Signing time: Wed 01 May 2024 05:46:50 +0000 Manifest this update: Wed 01 May 2024 05:46:49 +0000 Manifest next update: Wed 08 May 2024 05:46:49 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: hCakZYhVqJm+1eO71hAEiGysrYxkF/7QmCTVhhiSMK0=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: ORL7FHyYLhjfJDRD1dwarcJ8totXTOHWHFx2ct/UEgg=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: xteyM1ldAXrwafcfzmBqJmUUzlYunq+2AYhyMDtlM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: May 1 05:46:49 2024 GMT Not After : May 8 05:46:49 2024 GMT Subject: CN=6631d749-e40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:7e:74:a2:b7:28:43:e4:d3:cc:a2:30:91: 0c:2c:3b:23:bb:af:cc:c7:d3:7a:17:cd:44:a9:cf: f7:ab:55:0c:0b:ca:cb:29:3e:b0:10:b7:54:bf:07: ce:60:65:89:58:2d:59:05:36:44:f1:e5:78:ef:d7: 7a:6b:33:55:cf:4c:e4:d9:a1:be:3d:14:9f:f8:9e: ff:e9:e4:87:98:87:1f:6c:36:8b:7b:ec:da:f6:42: 54:c4:91:a4:87:6f:28:e5:99:e6:01:24:15:f0:67: 0b:1d:72:37:1e:bf:19:09:1d:af:0a:fd:e2:4f:e1: 22:bd:f9:1e:a5:2d:fb:cc:bd:b3:46:eb:11:27:41: 66:dd:e4:9b:0e:bd:4c:dd:4c:53:3d:27:bf:1a:a8: da:4a:58:5f:5e:99:9a:a1:1b:69:7e:a8:94:2c:05: 44:1c:35:98:a9:26:6d:86:5a:37:ce:7a:cb:f5:2d: bd:12:d1:07:6d:ea:bf:39:da:b2:f1:60:dc:40:53: cd:18:da:f6:62:f1:6e:3c:0e:ae:58:e7:88:38:9a: 99:95:6d:20:fc:5f:f6:c4:be:ad:29:72:33:38:40: 92:fa:34:19:4b:42:de:53:d7:b3:b6:0e:fd:94:60: 97:e2:87:8f:8b:8a:35:a7:38:f3:5a:ff:a4:0f:38: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:2A:0C:53:63:8C:F6:B8:62:F9:88:FA:08:81:F7:87:5D:CC:07 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:37:f4:a0:75:97:fa:23:18:13:98:15:fb:9a:4d:9f:3e:fe: 64:33:88:6e:43:9b:aa:57:36:da:ce:3e:c2:e2:53:92:0f:8b: 73:ca:be:aa:12:c1:59:a6:eb:78:62:b5:d8:d9:43:cd:48:fe: 92:ba:4c:f8:eb:a0:48:86:40:8b:65:4c:01:34:22:bc:71:db: 06:a7:cc:ea:78:b5:e5:1b:a8:d8:4f:0b:6b:28:37:8a:aa:18: b8:de:43:c1:a8:1a:ec:de:c7:a0:2d:ed:fb:f8:a3:fd:ed:27: 4e:9c:3a:ed:07:71:44:e3:71:c3:f8:18:d0:8b:94:d7:5d:53: c7:f7:9f:7d:a4:da:c2:03:5c:1e:f7:6b:5a:07:a9:ff:ed:06: 03:3a:56:ca:d0:ef:a6:be:b3:8b:ce:7e:ad:d4:c0:17:76:bd: 39:d1:ff:81:59:b7:2e:cd:2c:da:1d:73:f4:32:c0:9c:f1:c3: 2f:cf:c3:13:5f:1b:fd:8e:f3:6b:6b:13:b6:5e:ff:51:6d:1e: 2e:66:2f:ed:1d:17:2e:65:e3:14:35:ef:26:a3:e4:55:90:84: 3d:fb:87:81:65:55:d6:dc:06:7b:e7:0c:ce:10:c1:ff:f7:63: cf:8d:c8:f7:ee:06:d7:b7:17:50:33:ea:fc:6a:cf:a8:a1:45: 24:54:98:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjQwNTAxMDU0NjQ5WhcNMjQwNTA4MDU0NjQ5WjAYMRYwFAYD VQQDEw02NjMxZDc0OS1lNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKV+dKK3KEPk08yiMJEMLDsju6/Mx9N6F81Eqc/3q1UMC8rLKT6wELdUvwfO YGWJWC1ZBTZE8eV479d6azNVz0zk2aG+PRSf+J7/6eSHmIcfbDaLe+za9kJUxJGk h28o5ZnmASQV8GcLHXI3Hr8ZCR2vCv3iT+EivfkepS37zL2zRusRJ0Fm3eSbDr1M 3UxTPSe/GqjaSlhfXpmaoRtpfqiULAVEHDWYqSZthlo3znrL9S29EtEHbeq/Odqy 8WDcQFPNGNr2YvFuPA6uWOeIOJqZlW0g/F/2xL6tKXIzOECS+jQZS0LeU9eztg79 lGCX4oePi4o1pzjzWv+kDzhQJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd1KgxT Y4z2uGL5iPoIgfeHXcwHMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFN/SgdZf6IxgTmBX7mk2fPv5kM4huQ5uqVzbazj7C4lOSD4tzyr6q EsFZput4YrXY2UPNSP6Sukz466BIhkCLZUwBNCK8cdsGp8zqeLXlG6jYTwtrKDeK qhi43kPBqBrs3segLe37+KP97SdOnDrtB3FE43HD+BjQi5TXXVPH9599pNrCA1we 92taB6n/7QYDOlbK0O+mvrOLzn6t1MAXdr050f+BWbcuzSzaHXP0MsCc8cMvz8MT Xxv9jvNraxO2Xv9RbR4uZi/tHRcuZeMUNe8mo+RVkIQ9+4eBZVXW3AZ75wzOEMH/ 92PPjcj37gbXtxdQM+r8as+ooUUkVJil -----END CERTIFICATE-----Generated at Wed May 1 07:07:04 2024 by rpki-client on console-fra.rpki-client.org