$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: nERNttX+M7N6KHpYR1Nm4fueloLKIMNidjIYCaatIv4= Subject key identifier: 5D:A1:DC:2A:44:CD:6F:60:30:19:2A:F2:B3:23:CA:33:B9:F2:D8:32 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: D4 Signing time: Mon 03 Jun 2024 02:11:37 +0000 Manifest this update: Mon 03 Jun 2024 02:11:36 +0000 Manifest next update: Mon 10 Jun 2024 02:11:36 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: 3K/K1pi6rp/ZUub1GYlBY9VCIGxI/69OpVaMpVqkxsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 02:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Jun 3 02:11:36 2024 GMT Not After : Jun 10 02:11:36 2024 GMT Subject: CN=665d2658-ec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:cd:db:ae:f3:1c:65:1a:c3:5d:aa:3f:6f: c9:13:b8:28:37:32:f9:72:41:89:5c:b9:e2:fa:6a: cd:b3:39:44:6f:f9:77:fd:8a:80:c0:f7:b9:23:d4: 66:dc:d5:a4:c8:d3:bb:d0:f0:be:fa:3a:0f:16:c4: 6c:d0:9d:77:71:c0:78:a8:0e:22:90:f6:2b:2b:98: 97:b4:9b:6f:df:66:49:8c:49:d0:34:0f:ea:ed:7b: bb:91:b1:5b:c1:eb:62:29:8c:42:43:d1:dc:2e:e5: 99:68:00:a4:c6:2e:96:fb:52:61:e9:77:a0:a5:1b: 08:17:49:d1:30:0b:10:40:a4:5b:0c:61:18:fa:40: c2:b4:cb:06:64:2a:f1:39:1e:fb:ee:59:dd:00:48: 19:46:42:d3:c0:f9:83:fe:44:b1:c8:df:42:b0:4b: 4e:3a:11:cb:8d:6b:a9:eb:dc:ab:26:c5:82:ee:de: 74:9e:6d:e9:68:c8:d4:22:b3:7a:1d:83:41:47:6a: fa:53:cf:fa:60:38:a5:6c:9a:80:c4:5b:24:e7:7f: a4:7a:56:1a:ba:fc:66:e2:ae:24:23:f7:62:01:99: 28:9a:12:f9:e6:b9:19:e2:a6:9b:2e:04:82:a5:ca: 86:1d:62:ef:d8:55:e9:01:bc:7f:80:5c:d0:0e:32: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A1:DC:2A:44:CD:6F:60:30:19:2A:F2:B3:23:CA:33:B9:F2:D8:32 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fd:44:be:2e:bc:7b:47:ff:7a:01:c6:e4:de:42:ea:f9:75: 36:eb:3f:a4:8b:7c:cc:f7:e1:87:39:f2:ca:30:2b:43:dc:63: 46:97:b8:09:44:06:4a:4c:97:0e:89:d7:59:d3:27:f6:80:cb: 54:cd:ba:4e:ed:e0:a8:06:60:6b:b1:2e:c0:95:5b:2c:fa:46: da:e4:79:4a:33:6f:e3:6e:22:2a:2a:2d:7d:54:ee:38:9b:9c: d4:3c:fb:14:98:56:bf:e3:e6:3b:26:3a:fc:11:64:ac:f0:c2: 1a:89:69:30:19:4e:a5:ce:a8:f3:86:ff:40:77:3a:34:60:c7: 9f:14:77:54:7a:58:4c:32:b6:ce:2d:0e:27:e9:da:fc:dd:ea: f6:72:34:1a:69:20:82:c2:98:68:8b:d8:27:72:7f:14:40:7b: ed:63:f1:46:16:96:eb:b5:3a:07:4c:b9:b6:77:4b:39:5b:d6: 05:b7:6c:0d:63:a0:57:f4:97:e9:5c:f7:d0:92:ad:4a:f3:2e: 00:f0:5c:dc:bf:52:78:72:76:40:74:48:d4:e5:d8:71:c6:25: 29:75:38:5c:e9:f7:a6:33:4c:48:f7:89:e4:90:b3:a8:b9:91: 83:22:4a:99:41:51:66:fb:ed:26:3e:04:32:62:2e:26:53:71: a8:f5:32:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjQwNjAzMDIxMTM2WhcNMjQwNjEwMDIxMTM2WjAYMRYwFAYD VQQDEw02NjVkMjY1OC1lYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MjN267zHGUaw12qP2/JE7goNzL5ckGJXLni+mrNszlEb/l3/YqAwPe5I9Rm 3NWkyNO70PC++joPFsRs0J13ccB4qA4ikPYrK5iXtJtv32ZJjEnQNA/q7Xu7kbFb wetiKYxCQ9HcLuWZaACkxi6W+1Jh6XegpRsIF0nRMAsQQKRbDGEY+kDCtMsGZCrx OR777lndAEgZRkLTwPmD/kSxyN9CsEtOOhHLjWup69yrJsWC7t50nm3paMjUIrN6 HYNBR2r6U8/6YDilbJqAxFsk53+kelYauvxm4q4kI/diAZkomhL55rkZ4qabLgSC pcqGHWLv2FXpAbx/gFzQDjKI6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2h3CpE zW9gMBkq8rMjyjO58tgyMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk/US+Lrx7R/96Acbk3kLq+XU26z+ki3zM9+GHOfLKMCtD3GNGl7gJ RAZKTJcOiddZ0yf2gMtUzbpO7eCoBmBrsS7AlVss+kba5HlKM2/jbiIqKi19VO44 m5zUPPsUmFa/4+Y7Jjr8EWSs8MIaiWkwGU6lzqjzhv9Adzo0YMefFHdUelhMMrbO LQ4n6dr83er2cjQaaSCCwphoi9gncn8UQHvtY/FGFpbrtToHTLm2d0s5W9YFt2wN Y6BX9JfpXPfQkq1K8y4A8Fzcv1J4cnZAdEjU5dhxxiUpdThc6femM0xI94nkkLOo uZGDIkqZQVFm++0mPgQyYi4mU3Go9TJm -----END CERTIFICATE-----Generated at Mon Jun 3 03:37:19 2024 by rpki-client on console-fra.rpki-client.org