$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: dV2Te3mwo3ziovTBOwgmryNS6xFU5n24D+er6Gz+mcQ= Subject key identifier: 74:8E:2C:AB:67:EA:09:0D:5A:B3:7E:C0:10:BA:72:59:63:E7:1E:75 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 08AC Signing time: Fri 31 May 2024 22:16:59 +0000 Manifest this update: Fri 31 May 2024 22:16:58 +0000 Manifest next update: Fri 07 Jun 2024 22:16:58 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: NBQs6pgRQBw/P5evW71Kf7McJj/T34IwbhOQwQjjQyY=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 5NJNOx8hKsZ/n2lsqH6TSwk6s0TV/KvXa5g4FKROVZE=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: zgBZvuEhEZmLL+2N9meHPjo9N8bwibNf/BFL27F0otg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 31 22:16:58 2024 GMT Not After : Jun 7 22:16:58 2024 GMT Subject: CN=665a4c5b-e2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7d:1d:d0:ce:74:9e:c1:83:2b:79:c4:ac:ca: 6e:a6:20:a4:da:ff:e2:5c:40:e1:0b:90:05:d3:af: ef:a1:a1:76:38:3d:e1:c3:ad:a2:c4:3d:6b:3c:13: 49:96:44:db:2b:5b:7a:aa:6b:40:bc:26:ae:b1:25: 9d:ae:77:bd:d1:7c:c8:5f:aa:e0:9d:df:29:a3:92: ea:20:59:85:8a:a6:92:5d:d9:36:db:1f:ab:cc:6d: fb:31:cc:1b:68:2d:b3:a8:d2:09:fb:62:51:13:89: 10:27:95:b4:4a:48:bc:72:5f:05:3c:1f:ad:1a:fa: 54:a2:f4:1f:4c:15:fa:b7:df:f7:07:ec:df:f6:44: 5a:c3:88:e0:fb:91:51:22:48:f5:34:08:fd:d8:a1: 44:5f:42:1c:49:b6:6a:fe:d7:a6:d7:2c:ca:cd:36: a8:d1:79:05:da:04:73:60:60:a5:b2:89:04:2b:28: 6b:d7:8e:2e:52:de:4d:db:e7:34:59:f9:27:ff:3e: 30:9f:59:9f:ff:12:f0:af:f1:5a:52:1f:32:f9:1c: 88:7a:74:93:33:cf:c1:5e:d9:a8:c7:40:56:7b:a2: ea:68:42:f4:8e:12:dc:3c:9a:eb:49:bd:32:02:2b: 51:71:76:4b:d3:ef:e0:47:84:22:14:7a:3b:82:7f: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8E:2C:AB:67:EA:09:0D:5A:B3:7E:C0:10:BA:72:59:63:E7:1E:75 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:aa:8f:77:2e:ca:17:f0:98:6f:be:0e:a7:47:1b:6f:08:40: a3:3a:05:12:71:10:50:3f:c9:88:91:bc:70:ae:82:ea:1c:c6: bb:7d:58:cb:4b:7d:80:9d:3c:79:e8:5d:9c:77:80:86:99:b2: fe:36:9d:e4:de:cd:7f:d8:d8:ee:b1:fa:cc:57:e6:1a:ed:d9: 06:96:e7:4e:b8:2d:64:14:a4:05:01:69:52:1c:19:c4:d3:07: d2:63:ad:cb:31:8d:8c:0c:df:17:e6:7b:d3:d3:27:ec:19:62: de:e9:0e:69:b2:cd:31:90:c7:4f:85:16:51:ba:75:92:28:2e: d2:65:7a:a6:21:55:ee:d9:5a:33:7f:a9:0a:f8:dc:00:c9:9b: 48:43:1b:4d:5d:b1:30:14:9b:e9:ad:7b:c1:04:05:48:47:d3: 52:83:4a:99:90:cf:61:91:ac:6f:92:43:3c:08:59:f1:c3:00: 02:3d:9f:6a:ee:39:bd:47:ba:94:b7:05:69:0e:a8:ff:de:be: f1:73:48:4a:d8:12:2d:cc:85:6f:5d:31:0e:42:b0:8a:0f:35: 59:66:a4:14:3a:d9:87:ae:4a:55:57:1b:7a:63:4e:1d:40:cc: e8:02:e9:eb:3e:a0:04:2d:df:f4:09:33:68:d4:d0:22:d5:1d: c9:09:86:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjQwNTMxMjIxNjU4WhcNMjQwNjA3MjIxNjU4WjAYMRYwFAYD VQQDEw02NjVhNGM1Yi1lMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA930d0M50nsGDK3nErMpupiCk2v/iXEDhC5AF06/voaF2OD3hw62ixD1rPBNJ lkTbK1t6qmtAvCausSWdrne90XzIX6rgnd8po5LqIFmFiqaSXdk22x+rzG37Mcwb aC2zqNIJ+2JRE4kQJ5W0Ski8cl8FPB+tGvpUovQfTBX6t9/3B+zf9kRaw4jg+5FR Ikj1NAj92KFEX0IcSbZq/tem1yzKzTao0XkF2gRzYGClsokEKyhr144uUt5N2+c0 Wfkn/z4wn1mf/xLwr/FaUh8y+RyIenSTM8/BXtmox0BWe6LqaEL0jhLcPJrrSb0y AitRcXZL0+/gR4QiFHo7gn+lFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSOLKtn 6gkNWrN+wBC6cllj5x51MB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqo93LsoX8Jhvvg6nRxtvCECjOgUScRBQP8mIkbxwroLqHMa7fVjL S32AnTx56F2cd4CGmbL+Np3k3s1/2NjusfrMV+Ya7dkGludOuC1kFKQFAWlSHBnE 0wfSY63LMY2MDN8X5nvT0yfsGWLe6Q5pss0xkMdPhRZRunWSKC7SZXqmIVXu2Voz f6kK+NwAyZtIQxtNXbEwFJvprXvBBAVIR9NSg0qZkM9hkaxvkkM8CFnxwwACPZ9q 7jm9R7qUtwVpDqj/3r7xc0hK2BItzIVvXTEOQrCKDzVZZqQUOtmHrkpVVxt6Y04d QMzoAunrPqAELd/0CTNo1NAi1R3JCYYC -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:19 2024 by rpki-client on console-ams.rpki-client.org