$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json) Hash identifier: aJlmR/mWfSShqjmb6FNIwtzdCLVEewk1Okhx7+aSB4g= Subject key identifier: 2D:EC:72:2D:4C:84:CE:F3:60:42:F3:56:DD:F3:B5:B9:F2:C2:51:D6 Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft Manifest number: 82 Signing time: Sun 19 May 2024 07:18:51 +0000 Manifest this update: Sun 19 May 2024 07:18:51 +0000 Manifest next update: Sun 26 May 2024 07:18:51 +0000 Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: 0M1TZBkUA+eW75J6O5o8prE1o4/fwTEsNWvHbH4YMiE=) 2: 1FA1A3AE9D7311EE96E7821CC4F9AE02.roa (hash: g/3lsPtP0rCQttdRyM9iZWgo7wwPQglOhvZUdi86lfo=) 3: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: lwIovDBhbWl0rKnDI2i+BH67T5RQmBVJUsGai/l3P3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Validity Not Before: May 19 07:18:51 2024 GMT Not After : May 26 07:18:51 2024 GMT Subject: CN=6649a7db-6e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:48:cb:fb:dd:fd:75:37:6f:c7:8e:9b:8b: e8:e3:bb:23:21:e6:90:71:40:8d:de:5f:be:f8:00: b0:99:0e:6f:9f:4c:63:61:11:df:45:8a:db:a9:2b: 1f:30:e1:ae:23:76:cc:35:f7:7e:8e:02:ee:e3:46: 2f:57:c1:ce:4a:ba:75:c9:8f:c8:e1:80:b5:6a:fe: 36:97:2e:2a:7b:af:cc:82:2e:b7:5f:38:e7:1a:d5: 61:1c:e1:fb:ec:9f:d3:65:70:dc:fb:b1:2c:bd:ed: 25:18:b2:5a:3d:69:a1:ff:bb:b4:09:83:a7:b6:53: 55:0f:55:91:25:1c:af:43:c4:8f:10:e1:0c:1b:b6: e2:da:25:cb:e9:c3:56:1d:13:13:c2:43:68:95:c3: 59:a4:2a:56:7c:4f:57:57:9b:aa:d8:0f:cd:86:59: b5:40:e3:13:3b:39:b9:95:ea:68:17:e0:20:ee:05: 80:3d:b2:61:2b:d9:61:ec:32:03:83:00:85:0c:1a: 8a:3f:7c:84:d4:1f:1e:7e:b6:56:31:08:93:d8:4d: b5:83:62:80:bb:f9:35:b1:64:9c:5a:91:82:1c:9c: cc:ac:ff:57:24:5b:bd:21:14:90:00:d7:9d:d7:2e: f5:06:0e:ca:4e:aa:4a:4b:6c:19:a0:65:0a:c6:89: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:72:2D:4C:84:CE:F3:60:42:F3:56:DD:F3:B5:B9:F2:C2:51:D6 X509v3 Authority Key Identifier: keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1b:a0:36:ab:9b:94:5b:c9:66:c7:86:93:9b:d0:91:65:97: a6:70:f3:a5:e7:95:71:a1:a7:07:e5:2e:a0:d2:a3:23:1e:11: 32:2f:4e:84:8b:3a:4b:39:a9:50:e7:8a:b5:aa:90:62:b0:32: 2c:8a:01:43:0f:7d:12:bc:87:8a:a9:6f:16:6d:6c:51:d7:d3: b4:d3:35:fb:81:21:00:22:c3:c6:ca:7a:b0:b0:54:f8:a2:ae: a2:89:45:16:39:d7:40:a0:8f:ca:11:f2:e0:81:e8:ce:6b:0d: f1:f7:20:f5:5b:11:09:74:66:f8:f4:b6:0d:0e:af:79:93:ee: ce:22:31:ec:37:ea:be:4f:29:8c:94:a7:5a:f1:fa:ff:3c:65: ab:45:5f:4f:15:2e:7e:bb:87:8d:f8:52:a9:ae:68:e3:2c:d0: 85:8e:45:c4:51:4d:ad:4a:0b:ed:04:36:67:54:52:67:61:49: cc:95:8a:cf:cd:04:fe:19:e5:ad:f8:ee:4d:37:02:de:26:31: 57:2e:ea:cc:84:01:e9:d6:3e:ac:d8:8a:8d:85:96:6f:ea:27: d7:ad:a3:48:57:d2:a8:a9:2a:19:f9:7c:05:10:51:e1:15:79: f8:09:de:32:39:5c:71:3e:5d:84:8c:67:3c:27:48:49:8e:0b: ec:03:95:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE Mzg3MjYzQjgwHhcNMjQwNTE5MDcxODUxWhcNMjQwNTI2MDcxODUxWjAYMRYwFAYD VQQDEw02NjQ5YTdkYi02ZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9odIy/vd/XU3b8eOm4vo47sjIeaQcUCN3l+++ACwmQ5vn0xjYRHfRYrbqSsf MOGuI3bMNfd+jgLu40YvV8HOSrp1yY/I4YC1av42ly4qe6/Mgi63XzjnGtVhHOH7 7J/TZXDc+7Esve0lGLJaPWmh/7u0CYOntlNVD1WRJRyvQ8SPEOEMG7bi2iXL6cNW HRMTwkNolcNZpCpWfE9XV5uq2A/Nhlm1QOMTOzm5lepoF+Ag7gWAPbJhK9lh7DID gwCFDBqKP3yE1B8efrZWMQiT2E21g2KAu/k1sWScWpGCHJzMrP9XJFu9IRSQANed 1y71Bg7KTqpKS2wZoGUKxokNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3sci1M hM7zYELzVt3ztbnywlHWMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2 NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACG6A2q5uUW8lmx4aTm9CRZZemcPOl55VxoacH5S6g0qMjHhEyL06E izpLOalQ54q1qpBisDIsigFDD30SvIeKqW8WbWxR19O00zX7gSEAIsPGynqwsFT4 oq6iiUUWOddAoI/KEfLggejOaw3x9yD1WxEJdGb49LYNDq95k+7OIjHsN+q+TymM lKda8fr/PGWrRV9PFS5+u4eN+FKprmjjLNCFjkXEUU2tSgvtBDZnVFJnYUnMlYrP zQT+GeWt+O5NNwLeJjFXLurMhAHp1j6s2IqNhZZv6ifXraNIV9KoqSoZ+XwFEFHh FXn4Cd4yOVxxPl2EjGc8J0hJjgvsA5Wq -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org