$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: xqJfGk+yYSPmRDs5Fm0oxxNvPE3BQiRcg0VhIHp2xe8= Subject key identifier: A1:CD:06:AD:41:37:4E:AF:56:D3:7A:96:BA:74:9A:A9:49:56:51:95 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3A2C Signing time: Sat 18 May 2024 14:21:21 +0000 Manifest this update: Sat 18 May 2024 14:21:21 +0000 Manifest next update: Sat 25 May 2024 14:21:21 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: I03foYCshJCk5iGJGu654EtIwbolqCxlJV56x99b1v4=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: hJcQdmJiW/x39cC+4FrZJ9eLSi77X0UjxpYt9Ltt0kg=) 3: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: LaQUt3uITCWbGGrq7B5P13l9POhouqu7zMDBeTVkmqk=) 4: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: fNsgTUHzpXKVp4vMklhbAG0A6cCm/Jq7Z0ItTN8ghXI=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: jwuK5ePHrBaL7CXKlyKa94RXbU7x9vsd7Z/Ijd7Nwio=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 33N7tjDoUIrlkQOzwlY2avxsB6ldtgIm+ihpWBf1Xw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16015 (0x3e8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: May 18 14:21:21 2024 GMT Not After : May 25 14:21:21 2024 GMT Subject: CN=6648b961-ef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:05:90:b8:32:67:6d:04:75:4f:f7:c4:69: 55:95:cb:97:ff:62:1f:32:17:32:c1:59:09:80:c7: 76:4f:d4:0f:45:5a:cf:78:97:5c:81:42:86:a3:c5: 7f:1a:e3:5c:e9:9d:36:f2:95:12:ab:92:61:4c:62: 02:c0:cb:0e:93:d4:90:f6:8e:6d:c4:fa:85:fc:7a: c7:11:7d:d6:55:02:c4:dc:40:92:27:6c:a9:f3:54: 96:99:8c:71:43:e1:bf:c3:d3:a9:8f:9d:88:27:a3: 3a:25:22:04:35:da:ac:a4:8b:6e:30:07:87:8a:eb: 27:ca:eb:62:0e:61:31:aa:96:2e:57:46:1b:2c:76: 03:cb:db:b4:03:45:eb:b6:da:07:73:42:1d:3c:27: 10:54:ce:03:e0:73:77:cf:11:7b:a4:84:5f:c0:90: 0c:24:ea:55:e3:80:52:97:a7:30:4a:05:8a:25:30: 3a:a3:5a:bd:91:c1:ae:a0:0f:66:ca:25:4d:72:25: 60:9f:48:5e:3c:3a:ed:8c:32:0e:b1:92:dd:88:c0: 71:c3:59:d8:27:8a:1d:6f:2e:fb:95:6d:cd:e0:e4: ff:9a:65:a8:49:c9:e3:8d:22:42:76:04:be:ad:a0: 78:70:75:bc:c0:58:b8:c9:94:41:dc:0d:d3:1f:1c: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:06:AD:41:37:4E:AF:56:D3:7A:96:BA:74:9A:A9:49:56:51:95 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9e:41:b8:7a:5e:0f:ae:24:5d:2c:c0:04:f0:b1:59:cd:27: e0:77:2a:6b:6c:17:81:cb:8b:8c:89:ba:b9:9e:28:ab:07:db: d6:9c:40:59:c2:cd:a1:51:78:3a:dc:d4:c4:34:77:9e:fc:10: df:b6:f6:53:1c:90:98:25:60:6d:e4:d7:cc:b1:fe:82:f1:ff: be:ae:f7:f2:52:b1:f5:8b:39:01:93:e9:4b:93:da:70:53:e3: 41:e7:e1:c9:1c:1b:9e:ec:48:18:2a:65:03:56:55:d7:4f:92: 0e:ca:6f:db:ce:9d:a9:f0:90:64:7c:e3:cf:9f:88:cd:c7:1d: f7:11:78:20:ef:f7:85:28:0b:bf:3f:c8:21:01:35:d1:89:10: 13:1a:30:98:0c:24:49:ab:50:ca:ff:aa:1d:4e:74:3e:f3:68: a6:a7:c8:94:cc:1f:d3:40:dd:12:59:49:fc:02:51:3e:75:a1: fb:14:d4:0a:6d:3a:b6:c5:d9:04:f8:a5:a0:ae:8d:c3:d3:f6: d3:26:3b:e2:58:a1:d0:e1:98:b6:40:d5:55:8e:bc:62:39:ee: bc:d5:c1:59:b9:a9:c9:d2:7d:8c:93:f1:c5:0d:34:af:31:f1: d0:df:0e:ca:3f:3b:5c:b2:89:10:e1:c4:c9:59:8c:d0:6e:57: 1b:4d:66:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICPo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjQwNTE4MTQyMTIxWhcNMjQwNTI1MTQyMTIxWjAYMRYwFAYD VQQDEw02NjQ4Yjk2MS1lZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HQFkLgyZ20EdU/3xGlVlcuX/2IfMhcywVkJgMd2T9QPRVrPeJdcgUKGo8V/ GuNc6Z028pUSq5JhTGICwMsOk9SQ9o5txPqF/HrHEX3WVQLE3ECSJ2yp81SWmYxx Q+G/w9Opj52IJ6M6JSIENdqspItuMAeHiusnyutiDmExqpYuV0YbLHYDy9u0A0Xr ttoHc0IdPCcQVM4D4HN3zxF7pIRfwJAMJOpV44BSl6cwSgWKJTA6o1q9kcGuoA9m yiVNciVgn0hePDrtjDIOsZLdiMBxw1nYJ4odby77lW3N4OT/mmWoScnjjSJCdgS+ raB4cHW8wFi4yZRB3A3THxxTJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHNBq1B N06vVtN6lrp0mqlJVlGVMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdnkG4el4PriRdLMAE8LFZzSfgdyprbBeBy4uMibq5niirB9vWnEBZ ws2hUXg63NTENHee/BDftvZTHJCYJWBt5NfMsf6C8f++rvfyUrH1izkBk+lLk9pw U+NB5+HJHBue7EgYKmUDVlXXT5IOym/bzp2p8JBkfOPPn4jNxx33EXgg7/eFKAu/ P8ghATXRiRATGjCYDCRJq1DK/6odTnQ+82imp8iUzB/TQN0SWUn8AlE+daH7FNQK bTq2xdkE+KWgro3D0/bTJjviWKHQ4Zi2QNVVjrxiOe681cFZuanJ0n2Mk/HFDTSv MfHQ3w7KPztcsokQ4cTJWYzQblcbTWao -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org