$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: UpLwFWCozXlxp53HP7NJsLNSMT6o2eanVsTvg4Ywnv8= Subject key identifier: 1E:E8:F0:42:CB:85:88:91:7A:4D:94:8B:19:C0:AB:56:6C:9A:E1:38 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 98 Signing time: Sun 19 May 2024 05:33:43 +0000 Manifest this update: Sun 19 May 2024 05:33:43 +0000 Manifest next update: Sun 26 May 2024 05:33:43 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: kiClat87YpcHz0CQZxjSVtixagIAOUswJKWApt43br8=) 2: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: qhG6P4ezQ8uqL0kJF/rbO1/GqUlQ4zd2iYV0e3/WbBs=) 3: C1BC7028511111EEB1F5CB5BC4F9AE02.roa (hash: sFZnrJ5UmI472S3AzfDp2PbbIYx7O3FFKiEpE2/8pT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: May 19 05:33:43 2024 GMT Not After : May 26 05:33:43 2024 GMT Subject: CN=66498f37-77a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:82:97:bd:82:52:d3:a1:5e:e2:b1:9f:e1: 10:a9:c3:04:05:85:f7:6b:b9:15:14:f9:e1:57:3b: 71:61:6d:4c:bf:01:ca:65:28:6b:a0:e7:42:a0:a7: 64:08:e2:92:7a:5d:d4:c3:90:50:7f:68:d4:bd:ed: 95:11:c5:4a:f9:c3:8f:60:f4:98:51:3e:6d:8e:ea: a2:f8:2a:50:2c:d9:f1:b2:80:c8:42:06:0b:a8:a5: 3c:f8:99:33:c6:f3:43:6d:39:a0:2d:ee:5f:75:84: be:be:33:60:fd:62:f2:2d:6b:90:03:30:21:24:0e: fe:c0:61:9b:13:03:18:74:e4:76:c9:45:f2:c4:d8: 0f:31:44:dd:03:87:75:42:e0:0c:55:78:98:7d:d0: e8:53:ef:38:57:e6:e6:24:91:46:a6:21:db:b9:7a: 1c:d5:25:68:ef:51:cf:0f:84:f3:19:e1:28:8b:22: 4d:fd:73:f5:02:20:1b:d9:3e:c7:15:3d:5d:21:f3: 78:ae:3d:2d:b8:ab:b4:6a:49:d6:4b:69:18:dc:f7: 2f:f6:45:87:bf:e7:6d:a6:d0:af:d0:92:0e:c2:c7: 91:12:80:03:32:fe:0c:22:a8:de:df:e6:55:ff:e4: c8:a8:8a:ae:c9:a8:6a:2f:bf:a8:bf:eb:25:9c:26: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:F0:42:CB:85:88:91:7A:4D:94:8B:19:C0:AB:56:6C:9A:E1:38 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a9:09:92:04:ba:72:fd:8b:b4:23:07:c6:cc:6e:b6:84:6d: ee:13:7e:33:f4:34:5a:46:2f:2b:0c:4d:48:7a:ee:c3:4c:e1: 9d:bb:57:41:a8:85:77:27:ba:6a:47:3e:f1:d9:f0:74:91:53: f5:6c:47:f8:67:98:b8:c9:1a:39:ef:dc:6e:39:91:32:7f:51: 8c:c5:a3:2b:46:1b:73:7b:00:8d:87:a8:09:89:d3:f7:c9:59: f8:48:1a:60:01:b1:d2:e3:6b:af:03:08:3c:42:a5:69:70:08: a8:b7:91:8c:cc:96:7d:a9:27:e8:46:af:39:3d:97:b7:97:09: 72:d1:f3:ca:96:71:5c:28:f7:a0:33:da:c6:4a:12:b5:5b:a9: 76:e4:9a:b4:c8:37:c4:c1:f5:fc:0e:bf:88:46:1b:c0:df:7b: 0d:81:83:41:82:db:fb:40:64:35:a2:4e:0c:1e:80:af:0f:76: 47:4b:f4:60:3f:2b:93:83:c2:bf:32:1f:ec:f6:f0:4d:7f:ba: 83:cb:a3:1a:7f:fd:16:82:65:bd:2e:31:c0:d2:1b:01:f0:7c: be:d6:34:c7:ea:84:8e:ae:65:aa:3e:3c:c4:83:d7:98:e8:81: 45:75:5e:af:0f:8e:35:24:24:3d:ab:ac:fb:4e:27:b9:82:b0: 86:72:b3:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjQwNTE5MDUzMzQzWhcNMjQwNTI2MDUzMzQzWjAYMRYwFAYD VQQDEw02NjQ5OGYzNy03N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pSCl72CUtOhXuKxn+EQqcMEBYX3a7kVFPnhVztxYW1MvwHKZShroOdCoKdk COKSel3Uw5BQf2jUve2VEcVK+cOPYPSYUT5tjuqi+CpQLNnxsoDIQgYLqKU8+Jkz xvNDbTmgLe5fdYS+vjNg/WLyLWuQAzAhJA7+wGGbEwMYdOR2yUXyxNgPMUTdA4d1 QuAMVXiYfdDoU+84V+bmJJFGpiHbuXoc1SVo71HPD4TzGeEoiyJN/XP1AiAb2T7H FT1dIfN4rj0tuKu0aknWS2kY3Pcv9kWHv+dtptCv0JIOwseREoADMv4MIqje3+ZV /+TIqIquyahqL7+ov+slnCZEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7o8ELL hYiRek2UixnAq1ZsmuE4MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxqQmSBLpy/Yu0IwfGzG62hG3uE34z9DRaRi8rDE1Ieu7DTOGdu1dB qIV3J7pqRz7x2fB0kVP1bEf4Z5i4yRo579xuOZEyf1GMxaMrRhtzewCNh6gJidP3 yVn4SBpgAbHS42uvAwg8QqVpcAiot5GMzJZ9qSfoRq85PZe3lwly0fPKlnFcKPeg M9rGShK1W6l25Jq0yDfEwfX8Dr+IRhvA33sNgYNBgtv7QGQ1ok4MHoCvD3ZHS/Rg PyuTg8K/Mh/s9vBNf7qDy6Maf/0WgmW9LjHA0hsB8Hy+1jTH6oSOrmWqPjzEg9eY 6IFFdV6vD441JCQ9q6z7Tie5grCGcrNB -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org