$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: 0MDhargHsIdKJj9lYs9UQx/D2+UbMfOUAaQ66KhkduU= Subject key identifier: 3A:F4:F3:61:13:EF:DD:9B:8E:22:33:C7:CC:77:76:23:09:15:A0:7A Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0B09 Signing time: Thu 30 May 2024 20:22:08 +0000 Manifest this update: Thu 30 May 2024 20:22:08 +0000 Manifest next update: Thu 06 Jun 2024 20:22:08 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: 1Ah8/qI05WJ24M0/B+ls1uejZLJxDEEY3lx7QLkBXFU=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: I8psl3OpDxbo3n9gZh/juhyAlsyW/dePCQ3DhqauDwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: May 30 20:22:08 2024 GMT Not After : Jun 6 20:22:08 2024 GMT Subject: CN=6658dff0-1469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dc:53:dc:38:10:40:0a:ab:b7:a9:c1:30:3b: 23:b3:68:be:c0:10:4b:54:f9:0c:ed:ab:5a:e7:97: 9d:57:90:b1:87:bd:92:82:12:8d:cf:e1:af:6f:b0: 76:e9:52:21:30:b2:47:09:f1:18:b6:13:65:c0:e7: 9e:ce:89:40:ea:7d:61:86:d9:94:90:41:0d:3e:7e: d4:db:bb:e0:99:28:17:8f:61:e3:07:6d:a6:92:6f: 09:14:f6:04:e1:72:ed:2c:bc:95:a5:e1:6b:fd:6b: 53:2d:8a:7f:c3:1a:26:0a:ab:6d:5f:1c:44:aa:d2: e0:2e:2c:b5:de:91:94:43:f6:79:de:09:0c:2b:93: 29:e8:84:1c:4a:9f:77:33:ed:a5:e1:96:fb:9e:d5: 98:5b:9f:eb:96:49:4f:70:01:1d:df:4d:19:cb:67: 58:41:f6:de:33:fd:58:39:4c:05:cb:d6:29:27:2d: 8a:1d:4b:8c:87:99:c5:aa:c2:23:b5:e1:3f:8c:39: 1e:e0:47:1a:23:51:d4:2e:0a:b0:c0:7b:a3:6a:e8: 4a:5f:0f:4c:b0:26:2e:98:c9:eb:3a:d3:61:bf:61: 50:40:62:80:2a:a7:89:4a:d0:70:34:2f:5a:61:45: f8:4a:40:5b:f0:6b:6b:45:97:c4:58:ff:80:81:e4: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:F3:61:13:EF:DD:9B:8E:22:33:C7:CC:77:76:23:09:15:A0:7A X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4e:6f:0b:6f:76:3e:b0:a0:84:27:2c:f1:50:e5:d8:2f:2c: 6a:e7:ca:8b:d7:bc:fe:c9:24:91:83:1a:90:45:49:27:60:cc: 3c:97:a6:12:29:fc:99:b5:52:75:fe:6f:cd:98:c7:43:6a:f2: 88:3e:67:5d:12:e1:ab:fa:f6:7a:0a:6d:56:c5:a6:19:b6:50: 88:36:cf:9b:c5:a0:79:bb:9e:d2:85:02:34:d4:4d:56:16:56: 33:d9:d2:a1:19:de:38:8c:31:46:59:a7:e6:12:2e:7a:f8:01: 42:e8:33:29:97:60:b2:77:55:b6:a7:f3:fc:c3:8a:a2:c6:81: 28:7a:b4:fb:a7:a0:e7:b8:bf:84:a4:2a:8b:e4:b7:d6:53:34: c4:8e:af:3f:97:94:d4:40:78:08:54:33:74:74:d7:4b:86:b3: 06:6e:0f:83:15:a4:44:34:58:65:78:4c:46:f2:55:1c:05:2a: 8e:13:a3:1a:aa:1f:de:97:1e:da:f0:5a:7a:a7:53:50:72:17: e8:fb:31:d5:70:22:af:71:61:ae:01:93:8a:33:d8:58:9b:5d: cb:45:4b:a8:cd:44:ff:93:5c:59:04:dc:69:30:ef:71:26:8b: e6:2c:90:b1:c8:97:80:8b:e7:f4:a2:5c:b1:bb:7a:77:05:16: 0c:29:db:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjQwNTMwMjAyMjA4WhcNMjQwNjA2MjAyMjA4WjAYMRYwFAYD VQQDEw02NjU4ZGZmMC0xNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dxT3DgQQAqrt6nBMDsjs2i+wBBLVPkM7ata55edV5Cxh72SghKNz+Gvb7B2 6VIhMLJHCfEYthNlwOeezolA6n1hhtmUkEENPn7U27vgmSgXj2HjB22mkm8JFPYE 4XLtLLyVpeFr/WtTLYp/wxomCqttXxxEqtLgLiy13pGUQ/Z53gkMK5Mp6IQcSp93 M+2l4Zb7ntWYW5/rlklPcAEd300Zy2dYQfbeM/1YOUwFy9YpJy2KHUuMh5nFqsIj teE/jDke4EcaI1HULgqwwHujauhKXw9MsCYumMnrOtNhv2FQQGKAKqeJStBwNC9a YUX4SkBb8GtrRZfEWP+AgeRSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr082ET 792bjiIzx8x3diMJFaB6MB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvTm8Lb3Y+sKCEJyzxUOXYLyxq58qL17z+ySSRgxqQRUknYMw8l6YS KfyZtVJ1/m/NmMdDavKIPmddEuGr+vZ6Cm1WxaYZtlCINs+bxaB5u57ShQI01E1W FlYz2dKhGd44jDFGWafmEi56+AFC6DMpl2Cyd1W2p/P8w4qixoEoerT7p6DnuL+E pCqL5LfWUzTEjq8/l5TUQHgIVDN0dNdLhrMGbg+DFaRENFhleExG8lUcBSqOE6Ma qh/elx7a8Fp6p1NQchfo+zHVcCKvcWGuAZOKM9hYm13LRUuozUT/k1xZBNxpMO9x JovmLJCxyJeAi+f0olyxu3p3BRYMKdvJ -----END CERTIFICATE-----Generated at Thu May 30 21:37:29 2024 by rpki-client on console-fra.rpki-client.org