$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: wUr7FgNsIM40+WzBFAQ3L/PID27WmT6QyAWpNhRP1K8= Subject key identifier: 5D:60:20:97:0D:B2:64:2F:7D:45:8B:52:71:46:9F:98:E4:3A:98:41 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 33BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 53A3 Signing time: Sat 18 May 2024 15:02:10 +0000 Manifest this update: Sat 18 May 2024 15:02:09 +0000 Manifest next update: Sat 25 May 2024 15:02:09 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: WdRXjRppdyxG4RYV5lxtLXYsty5iYgmu7mDw40qCuPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13245 (0x33bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: May 18 15:02:09 2024 GMT Not After : May 25 15:02:09 2024 GMT Subject: CN=6648c2f1-b4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:88:49:12:fb:68:ae:a1:3c:dd:49:f0:5c: 24:fe:4d:81:67:fe:f2:f3:5e:5a:2b:78:cb:d2:25: eb:48:cf:fa:c0:f7:58:a7:ef:b1:22:33:ac:ac:83: 86:87:ec:e0:90:1a:ff:16:14:80:a3:0f:88:e8:a6: 99:ad:60:11:88:64:99:fd:05:bf:d0:40:24:e7:2d: 47:d9:83:f3:c4:a0:c3:5e:a3:86:a5:15:1c:c6:ed: 8d:87:2a:b4:0d:b2:09:55:6d:00:a3:86:ba:f0:9f: d7:ed:0e:4c:60:8b:73:3b:83:48:04:56:c5:72:8f: c2:c8:08:62:55:a3:53:31:86:ec:8f:9d:f7:2c:4e: 9c:27:6b:a8:60:19:da:c7:8f:d1:99:06:89:c0:79: d7:69:38:51:7e:54:83:d9:0a:14:36:0d:37:3f:d1: 12:aa:0c:90:9b:93:b2:61:61:b3:83:cd:2d:f6:b2: 7f:18:4d:14:bc:8d:a0:cb:a3:e9:47:b2:e4:eb:c8: a6:87:3e:f6:b6:c3:a8:fb:0e:2e:a7:bb:96:7e:7a: bf:fb:d1:c6:b0:7a:69:15:22:64:53:79:a5:f3:b4: 5d:f0:86:5e:62:78:7d:62:5b:1d:14:ad:69:47:20: bb:e6:ca:54:79:a2:e7:95:df:06:02:f2:63:50:75: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:60:20:97:0D:B2:64:2F:7D:45:8B:52:71:46:9F:98:E4:3A:98:41 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b3:20:f7:d2:57:e8:15:fb:92:82:c4:e5:73:e4:1f:50:e2: a4:0f:1d:c7:52:1d:79:2e:47:2d:92:fd:fe:73:13:48:18:f8: da:9a:0c:33:20:23:c5:c9:33:13:38:0d:92:ea:57:1d:5f:ef: c2:06:5f:06:8f:5c:b5:c0:8d:a5:ba:a5:15:49:e8:26:a4:5d: fe:4e:6c:62:27:72:be:d8:4a:5a:b6:d2:a3:14:59:c4:31:de: bc:bb:c8:17:03:2f:a1:e2:3d:12:ba:01:78:6c:15:4b:4c:3c: 36:8e:31:8a:e1:1b:20:56:ce:23:1d:a2:13:96:10:14:47:91: 68:9d:77:90:01:17:40:33:7c:a4:84:38:51:0f:74:00:2c:1f: 6f:52:9b:a1:7e:83:7b:29:3a:2a:1c:fc:a5:b3:9b:3b:f9:7a: 8c:66:ea:17:75:d2:0f:55:62:0f:68:ca:49:cd:d3:04:4d:ad: 28:d2:38:cd:fb:02:1b:1c:11:41:30:93:dc:7d:b1:36:21:73: 67:a4:58:41:7d:63:45:d0:f8:98:ba:c8:94:08:a5:c6:2b:c3: 94:90:c7:50:3a:2f:e5:0b:17:b8:fa:d5:5c:ef:7b:6a:8a:46: a0:4d:4f:07:7e:ad:1e:2a:9a:6d:f1:43:9a:7c:8f:88:3b:d3: dd:a8:95:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjQwNTE4MTUwMjA5WhcNMjQwNTI1MTUwMjA5WjAYMRYwFAYD VQQDEw02NjQ4YzJmMS1iNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgqISRL7aK6hPN1J8Fwk/k2BZ/7y815aK3jL0iXrSM/6wPdYp++xIjOsrIOG h+zgkBr/FhSAow+I6KaZrWARiGSZ/QW/0EAk5y1H2YPzxKDDXqOGpRUcxu2Nhyq0 DbIJVW0Ao4a68J/X7Q5MYItzO4NIBFbFco/CyAhiVaNTMYbsj533LE6cJ2uoYBna x4/RmQaJwHnXaThRflSD2QoUNg03P9ESqgyQm5OyYWGzg80t9rJ/GE0UvI2gy6Pp R7Lk68imhz72tsOo+w4up7uWfnq/+9HGsHppFSJkU3ml87Rd8IZeYnh9YlsdFK1p RyC75spUeaLnld8GAvJjUHV8SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1gIJcN smQvfUWLUnFGn5jkOphBMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHsyD30lfoFfuSgsTlc+QfUOKkDx3HUh15Lkctkv3+cxNIGPjamgwz ICPFyTMTOA2S6lcdX+/CBl8Gj1y1wI2luqUVSegmpF3+TmxiJ3K+2EpattKjFFnE Md68u8gXAy+h4j0SugF4bBVLTDw2jjGK4RsgVs4jHaITlhAUR5FonXeQARdAM3yk hDhRD3QALB9vUpuhfoN7KToqHPyls5s7+XqMZuoXddIPVWIPaMpJzdMETa0o0jjN +wIbHBFBMJPcfbE2IXNnpFhBfWNF0PiYusiUCKXGK8OUkMdQOi/lCxe4+tVc73tq ikagTU8Hfq0eKppt8UOafI+IO9PdqJVl -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org