$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: OlXt1Hg+EAL6fD8CM5uyjp9Vknw+iqRbEcDic6hJow0= Subject key identifier: F0:AC:8A:68:CF:5E:E4:54:C9:08:AD:17:63:81:E5:35:9D:98:5A:22 Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 96 Signing time: Sun 19 May 2024 07:00:43 +0000 Manifest this update: Sun 19 May 2024 07:00:43 +0000 Manifest next update: Sun 26 May 2024 07:00:43 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: FahqTRY7HW9VphxxHc+8sKfwUcd5KVt5PJA0GZRhMTc=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: TIuWbaEeB6/fyW3cBlBtpxYbQl08iOJf5EHD5BOgsGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: May 19 07:00:43 2024 GMT Not After : May 26 07:00:43 2024 GMT Subject: CN=6649a39b-1a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:0c:cc:e5:39:bd:11:ab:26:1d:43:63:b0: 33:82:6c:86:8e:a7:22:01:83:b2:b8:a1:aa:93:13: ef:fe:80:a4:0f:00:6c:98:5f:9d:90:32:ab:2f:2a: f9:ad:2b:29:1e:2e:6b:fd:48:3d:2a:91:7b:10:15: 0c:91:55:45:d7:b3:53:af:db:78:dd:81:96:73:61: 39:0b:5b:a9:de:59:c4:c9:99:de:c8:99:19:2a:56: ba:aa:76:e5:3a:07:03:ef:e9:c1:78:3a:37:db:d8: fb:67:87:7f:70:93:37:3c:0f:d0:93:56:74:b3:e3: 04:f2:54:f1:e5:55:f4:a0:6e:d2:f5:07:b4:5a:2d: 52:c5:93:ad:18:e7:c4:fc:d9:bf:ba:e4:b1:be:ac: a7:ca:11:b9:e9:72:71:63:78:f4:51:b3:96:b7:34: fb:b4:df:1d:af:9a:a1:88:bf:c6:35:f5:fb:98:f5: 9c:66:aa:ba:12:46:16:bc:62:c1:62:64:77:10:51: 8a:76:c8:71:be:6d:e2:31:7e:8f:61:5e:66:f0:68: 03:78:8b:b6:11:92:c8:bc:9e:4d:62:7b:01:09:ce: ce:62:ad:78:1a:1e:45:ea:fa:9c:be:44:d1:02:ff: eb:4b:3c:64:0b:6b:fd:9e:03:3a:f8:37:18:1a:dc: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:8A:68:CF:5E:E4:54:C9:08:AD:17:63:81:E5:35:9D:98:5A:22 X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d6:db:df:7b:fe:f5:38:ce:cb:d3:a0:6f:c0:2f:6f:06:fe: 78:27:19:e2:87:ac:02:20:63:14:52:ed:40:42:46:36:d5:f6: dd:62:e0:79:33:b9:f8:33:f1:0f:ed:b4:35:41:e3:b8:47:7d: 89:1f:5a:a0:15:85:29:94:21:f6:9d:cd:ba:ce:fd:c1:7d:43: 8c:a2:3c:a0:5d:05:40:f7:8a:18:54:89:da:57:61:3b:4f:dc: 9b:c7:46:f4:42:9f:20:b9:97:15:75:60:71:b9:f3:d9:67:0b: d0:40:b1:84:27:02:65:07:f5:f5:a7:c5:fc:0c:13:20:21:b6: 22:78:b7:b3:4b:e0:f7:cb:c6:38:c0:52:84:df:15:72:90:3a: 8e:73:b5:8b:89:dc:84:33:67:41:1b:14:83:0f:6a:01:65:99: 16:08:08:09:71:c6:81:0d:cc:eb:54:1f:bc:8d:9c:75:1d:0b: 69:2c:9f:85:e4:cc:d1:3c:a2:89:f2:4a:96:f9:1b:c4:07:65: 0d:70:6f:f9:d4:85:5c:1c:61:03:62:61:5e:c6:eb:14:d8:26: 60:7f:ed:0e:98:9c:9d:d0:14:97:28:48:af:d1:71:f5:2c:49: 99:a8:8f:a4:5b:59:02:6a:44:53:13:4e:98:60:63:a9:4e:6a: 02:1b:43:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjQwNTE5MDcwMDQzWhcNMjQwNTI2MDcwMDQzWjAYMRYwFAYD VQQDEw02NjQ5YTM5Yi0xYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0IMzOU5vRGrJh1DY7AzgmyGjqciAYOyuKGqkxPv/oCkDwBsmF+dkDKrLyr5 rSspHi5r/Ug9KpF7EBUMkVVF17NTr9t43YGWc2E5C1up3lnEyZneyJkZKla6qnbl OgcD7+nBeDo329j7Z4d/cJM3PA/Qk1Z0s+ME8lTx5VX0oG7S9Qe0Wi1SxZOtGOfE /Nm/uuSxvqynyhG56XJxY3j0UbOWtzT7tN8dr5qhiL/GNfX7mPWcZqq6EkYWvGLB YmR3EFGKdshxvm3iMX6PYV5m8GgDeIu2EZLIvJ5NYnsBCc7OYq14Gh5F6vqcvkTR Av/rSzxkC2v9ngM6+DcYGtwzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCsimjP XuRUyQitF2OB5TWdmFoiMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa1tvfe/71OM7L06BvwC9vBv54Jxnih6wCIGMUUu1AQkY21fbdYuB5 M7n4M/EP7bQ1QeO4R32JH1qgFYUplCH2nc26zv3BfUOMojygXQVA94oYVInaV2E7 T9ybx0b0Qp8guZcVdWBxufPZZwvQQLGEJwJlB/X1p8X8DBMgIbYieLezS+D3y8Y4 wFKE3xVykDqOc7WLidyEM2dBGxSDD2oBZZkWCAgJccaBDczrVB+8jZx1HQtpLJ+F 5MzRPKKJ8kqW+RvEB2UNcG/51IVcHGEDYmFexusU2CZgf+0OmJyd0BSXKEiv0XH1 LEmZqI+kW1kCakRTE06YYGOpTmoCG0Pp -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org