$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: L6WUNwlA98OEkUO+BPVkOz4TEAak7dr7ugqSUEEjRjA= Subject key identifier: F0:0A:37:1C:60:68:F6:5F:62:C2:32:48:03:9E:4A:06:B3:64:C5:65 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1D4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1D44 Signing time: Sat 18 May 2024 16:29:34 +0000 Manifest this update: Sat 18 May 2024 16:29:33 +0000 Manifest next update: Sat 25 May 2024 16:29:33 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: 3xqPI90pDs3K9+tUiwvumEP1PlxncuCineDBv/1XlpY=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: LRWvTtYikJeeVBMhJG8Jnv9JOZtUpM468k7wuutlizY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7503 (0x1d4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: May 18 16:29:33 2024 GMT Not After : May 25 16:29:33 2024 GMT Subject: CN=6648d76d-c1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:17:10:47:3a:d4:12:76:2b:46:5a:4b:3d: dc:8b:98:95:50:b5:cc:74:c6:d0:2f:09:4b:eb:5b: 84:e1:91:fa:bd:a6:d3:a2:2d:02:4d:78:e0:96:25: eb:dd:6c:c2:e5:6e:01:1e:ce:04:87:4c:d5:7d:7c: 0f:96:5c:58:a2:73:2e:87:06:64:5a:7a:dd:71:95: ff:39:9f:4b:84:9a:95:e1:3e:62:98:b2:75:09:2e: 7b:fa:3b:53:f0:a5:c8:57:d0:65:c5:13:9f:65:bd: 21:32:44:8d:8a:05:4d:30:e8:ff:42:7d:c5:5e:ed: 54:f9:2c:c9:10:13:ce:21:83:69:50:45:ac:49:24: 22:a2:18:37:84:92:ce:2b:51:cc:bc:bb:0b:b0:81: 99:7e:d8:80:19:10:5b:b1:54:a4:ab:31:dd:4a:5e: c3:f7:43:d5:c3:81:ff:7b:fc:9c:6f:e2:e8:c0:1f: 4b:28:7a:4e:a6:9b:ed:c3:03:8d:ce:d1:50:dd:b7: 3d:94:c7:79:5f:9c:c2:9d:86:9a:29:31:4c:ea:a1: fe:4e:f0:02:3f:ad:b6:54:3a:fd:2a:ec:06:2a:8c: 78:d8:83:d8:04:fd:ab:3b:c0:12:db:21:f1:d7:25: e3:28:0f:40:32:19:69:90:8b:06:6a:fe:04:c2:3a: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0A:37:1C:60:68:F6:5F:62:C2:32:48:03:9E:4A:06:B3:64:C5:65 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b6:25:cd:a6:64:ac:be:ce:df:a8:c4:9b:ea:31:ed:71:f6: 7e:98:dc:21:7f:71:dc:f0:ee:8e:b7:f2:d6:ea:a3:3c:f0:d9: bf:84:ec:06:ad:9d:1c:72:cd:bd:fe:85:44:00:5a:3a:ee:d9: 38:eb:d5:5a:bf:c5:4a:44:5d:f2:f4:e8:ea:05:58:2d:e6:41: 4a:12:05:55:5c:bc:f3:a7:9c:43:ee:a4:3c:46:c0:04:73:cf: 3d:fd:79:81:04:81:02:f7:1d:89:59:19:00:49:62:ee:5a:23: f7:03:d9:cd:67:fc:01:78:8e:5c:22:ff:e0:38:88:ca:59:88: 63:54:1d:db:31:d9:2b:81:47:b7:1e:9c:69:a5:fa:b2:3c:5a: d4:79:67:21:1b:2b:52:fb:a4:ec:f4:59:f2:1e:f7:7f:2b:21: 59:ed:3c:7b:8f:7e:46:4c:1d:b6:be:a6:24:a6:7a:43:76:21: 48:f1:1a:d9:db:4f:6c:f4:c5:42:93:b7:ed:67:bd:a9:5e:60: 4b:b0:be:ab:64:5f:8b:29:cf:4d:b1:71:9c:2e:11:17:81:8a: 24:9c:56:f9:73:fd:03:63:c6:2d:b4:e6:1d:a2:2b:77:90:34: 39:65:96:f2:b9:65:85:7f:f2:df:39:1b:47:b5:8a:6e:7d:17: 7b:94:96:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjQwNTE4MTYyOTMzWhcNMjQwNTI1MTYyOTMzWjAYMRYwFAYD VQQDEw02NjQ4ZDc2ZC1jMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu4XEEc61BJ2K0ZaSz3ci5iVULXMdMbQLwlL61uE4ZH6vabToi0CTXjgliXr 3WzC5W4BHs4Eh0zVfXwPllxYonMuhwZkWnrdcZX/OZ9LhJqV4T5imLJ1CS57+jtT 8KXIV9BlxROfZb0hMkSNigVNMOj/Qn3FXu1U+SzJEBPOIYNpUEWsSSQiohg3hJLO K1HMvLsLsIGZftiAGRBbsVSkqzHdSl7D90PVw4H/e/ycb+LowB9LKHpOppvtwwON ztFQ3bc9lMd5X5zCnYaaKTFM6qH+TvACP622VDr9KuwGKox42IPYBP2rO8AS2yHx 1yXjKA9AMhlpkIsGav4EwjpeZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAKNxxg aPZfYsIySAOeSgazZMVlMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdtiXNpmSsvs7fqMSb6jHtcfZ+mNwhf3Hc8O6Ot/LW6qM88Nm/hOwG rZ0ccs29/oVEAFo67tk469Vav8VKRF3y9OjqBVgt5kFKEgVVXLzzp5xD7qQ8RsAE c889/XmBBIEC9x2JWRkASWLuWiP3A9nNZ/wBeI5cIv/gOIjKWYhjVB3bMdkrgUe3 HpxppfqyPFrUeWchGytS+6Ts9FnyHvd/KyFZ7Tx7j35GTB22vqYkpnpDdiFI8RrZ 209s9MVCk7ftZ72pXmBLsL6rZF+LKc9NsXGcLhEXgYoknFb5c/0DY8YttOYdoit3 kDQ5ZZbyuWWFf/LfORtHtYpufRd7lJbU -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org