$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: fL2AQMB2fe36YZ5fuanM430nabFNdCRl9mD/cqD9vRk= Subject key identifier: EE:F6:30:A1:6D:DC:BF:E7:11:24:A3:7A:1A:EA:EA:CA:95:AA:07:1E Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 10CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 10C5 Signing time: Sat 18 May 2024 17:54:11 +0000 Manifest this update: Sat 18 May 2024 17:54:11 +0000 Manifest next update: Sat 25 May 2024 17:54:11 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: LDIELWXj9Y89WYHtDCAAVqeYJ3VCOBuuB53CsPQ40AM=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: GHZUJVUiu7TjOQPlC9Czp21OsffLY36D9ErlKj0Wa3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4303 (0x10cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: May 18 17:54:11 2024 GMT Not After : May 25 17:54:11 2024 GMT Subject: CN=6648eb43-78d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:7a:83:12:a3:a9:2f:02:3b:91:b1:c2:80: 4d:b0:3b:3a:dd:3a:18:dd:90:f9:90:a3:07:a8:e7: ba:59:f6:ff:f6:c1:f8:e8:ad:93:4d:be:57:e8:0b: e6:44:59:f8:7c:78:ea:4d:35:a8:fc:06:f6:10:a8: 9a:80:77:5c:ce:70:ac:11:9d:cc:ad:c5:13:2b:a4: 7a:d1:f7:d2:b9:22:e1:56:a9:73:df:62:dc:2a:e0: be:8b:ed:4f:c8:02:dd:6e:b7:3b:59:c5:81:1d:5b: 97:8f:67:2e:e3:25:e1:20:85:8e:34:14:c9:32:b9: cc:1e:2e:1b:eb:fd:5a:1b:16:17:5b:6f:8d:19:ea: 58:31:6a:58:ef:68:b9:54:03:98:6f:f0:27:00:7b: 94:7a:82:24:32:fc:6b:f7:0d:ae:bc:05:a3:db:fb: d8:4d:d4:20:1b:5e:7d:0f:0e:55:21:01:39:7e:e4: 22:b3:bb:c0:af:cd:d5:1d:5d:c2:b2:df:04:5d:20: 1a:5f:7c:d3:26:b8:a9:82:6a:d9:85:2a:fc:f4:dd: b3:c4:5f:ea:cb:f8:aa:6e:ce:eb:48:02:db:59:ad: 99:41:36:c4:26:67:6b:47:8c:24:16:f1:a4:35:9e: d3:77:72:89:32:64:ed:5f:8b:0a:a1:72:07:cb:20: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:30:A1:6D:DC:BF:E7:11:24:A3:7A:1A:EA:EA:CA:95:AA:07:1E X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:53:d1:46:3b:8f:88:74:a4:3c:b0:d6:fb:bd:76:dc:5f:ba: 47:e2:39:28:53:7a:5b:be:29:de:9d:a3:c8:e2:63:91:21:3d: eb:c0:cf:08:76:a0:4e:f5:6b:fb:30:b0:ce:02:9e:a4:9a:d1: fd:8d:ab:9d:95:bd:38:7b:85:77:db:c8:06:cf:c6:ed:65:e1: a9:f5:3e:df:b1:1e:82:bc:b6:f0:2a:c1:6f:31:48:9a:dc:ea: 67:90:5a:a1:4a:46:b5:2f:9d:22:a7:7e:0d:b2:28:f9:84:6b: ed:ae:b2:d5:f1:39:09:1d:1f:57:74:84:d3:96:5c:d0:0e:4b: c6:d0:8a:2b:5c:b9:68:70:d8:b7:c5:0f:b1:e3:2a:a6:2a:f2: 0e:1a:ad:a1:9e:b8:b0:d8:d3:5a:d5:88:e1:96:4b:e6:af:b7: 41:3b:22:9b:03:45:88:48:7b:4f:0e:b7:6b:34:c7:e4:e3:bf: 1d:e0:b0:ba:37:0f:f3:58:2b:a6:0e:a2:eb:27:2a:9f:9a:08: 3e:c1:e6:9f:ee:76:c4:08:71:c9:fb:54:85:47:4e:6e:ae:01: 9f:d9:c0:35:9f:f2:61:a5:df:1f:8b:e8:aa:f2:ce:e4:0d:9f: 72:1f:09:10:c7:12:f2:23:4f:7d:6b:df:53:d9:c4:e9:79:1d: f2:91:04:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjQwNTE4MTc1NDExWhcNMjQwNTI1MTc1NDExWjAYMRYwFAYD VQQDEw02NjQ4ZWI0My03OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraR6gxKjqS8CO5GxwoBNsDs63ToY3ZD5kKMHqOe6Wfb/9sH46K2TTb5X6Avm RFn4fHjqTTWo/Ab2EKiagHdcznCsEZ3MrcUTK6R60ffSuSLhVqlz32LcKuC+i+1P yALdbrc7WcWBHVuXj2cu4yXhIIWONBTJMrnMHi4b6/1aGxYXW2+NGepYMWpY72i5 VAOYb/AnAHuUeoIkMvxr9w2uvAWj2/vYTdQgG159Dw5VIQE5fuQis7vAr83VHV3C st8EXSAaX3zTJripgmrZhSr89N2zxF/qy/iqbs7rSALbWa2ZQTbEJmdrR4wkFvGk NZ7Td3KJMmTtX4sKoXIHyyClQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO72MKFt 3L/nESSjehrq6sqVqgceMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaU9FGO4+IdKQ8sNb7vXbcX7pH4jkoU3pbvinenaPI4mORIT3rwM8I dqBO9Wv7MLDOAp6kmtH9jaudlb04e4V328gGz8btZeGp9T7fsR6CvLbwKsFvMUia 3OpnkFqhSka1L50ip34Nsij5hGvtrrLV8TkJHR9XdITTllzQDkvG0IorXLlocNi3 xQ+x4yqmKvIOGq2hnriw2NNa1Yjhlkvmr7dBOyKbA0WISHtPDrdrNMfk478d4LC6 Nw/zWCumDqLrJyqfmgg+weaf7nbECHHJ+1SFR05urgGf2cA1n/Jhpd8fi+iq8s7k DZ9yHwkQxxLyI099a99T2cTpeR3ykQQo -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org