$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: rde0pn1c441TeplU7iIlr2s19Q11dp9bNLErzexcKGI= Subject key identifier: F6:C6:96:35:34:9A:B5:BB:A8:DC:6A:B8:96:22:18:70:BF:17:B3:E1 Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0D65 Signing time: Sat 18 May 2024 18:37:22 +0000 Manifest this update: Sat 18 May 2024 18:37:21 +0000 Manifest next update: Sat 25 May 2024 18:37:21 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: whT3+6vzen4KGj+3Yk/NNx0oRQQjDPZqifi0ErDxJAg=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: re/ox5EHbX4AgbSgdttCWw4KM4XprMMRG7YhKjmQ4KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: May 18 18:37:21 2024 GMT Not After : May 25 18:37:21 2024 GMT Subject: CN=6648f562-a06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:5d:29:5e:96:f6:03:44:6a:dc:7e:e4:e6: 02:32:12:07:19:32:c6:42:65:86:81:70:6c:1a:cc: fa:46:57:fc:dd:f0:70:12:2c:10:b2:2d:2c:d1:b1: 2f:65:13:2e:56:f0:08:83:97:1b:4d:31:8e:4c:ba: 5f:69:78:88:87:bf:a3:d4:32:65:df:49:81:53:01: be:7e:67:af:ca:59:d7:12:18:72:82:56:89:ec:4e: 9a:a0:b2:50:2e:20:72:49:70:d5:15:5b:2a:e9:73: e9:de:6b:94:1b:37:dd:5f:c2:43:50:4a:f1:8f:d7: aa:e9:fd:20:1e:bb:74:c2:58:c5:55:22:a4:d7:52: b6:df:b2:65:8a:4b:8d:09:0a:6e:46:d9:42:29:3d: dd:3c:90:c4:b5:a9:53:50:1a:13:06:40:4b:4f:fc: cd:b9:e2:04:7f:1c:a0:5c:06:92:07:8e:e1:f5:57: ce:dc:60:fd:66:9b:18:51:1e:34:65:53:2b:56:e8: 18:eb:22:60:fd:a3:8e:b6:4b:68:e6:28:6b:07:ab: 77:84:ad:9d:27:76:8d:34:72:47:c0:9d:5c:0b:d8: b4:7e:6d:74:66:3b:36:c9:57:9b:6b:55:3a:7c:37: b0:41:60:e2:3a:7c:3e:30:44:92:7e:44:ea:04:18: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:96:35:34:9A:B5:BB:A8:DC:6A:B8:96:22:18:70:BF:17:B3:E1 X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f2:3c:af:45:2b:8e:3b:73:7c:23:0d:ef:f2:56:6f:c1:08: 02:0b:55:61:c1:8b:1e:05:a4:4b:49:dd:aa:9b:2d:01:c6:e8: 82:e7:17:62:db:dd:21:36:1b:8c:80:4c:e5:3f:af:c9:86:65: cd:bf:3e:36:66:84:1f:30:1e:95:5d:44:f7:5b:bf:7e:c9:2b: f4:3b:31:bf:64:8c:18:41:1c:b5:ab:f6:2a:21:18:06:39:ec: a7:31:1f:30:76:f4:57:89:4e:d8:22:3e:3b:47:60:24:4b:7f: d8:7e:fb:84:90:83:eb:63:15:5c:41:37:bd:a8:b2:e5:ca:b4: ec:a4:75:13:b0:45:bc:8f:90:09:5a:c5:a9:05:00:d2:b4:8f: fc:32:e5:8a:88:36:4a:eb:6b:c8:f3:37:20:63:99:66:92:6c: 0f:6b:fc:a5:4a:8b:2a:f2:5d:31:7d:72:6c:53:90:33:42:1c: b0:f3:b9:a6:81:9b:98:72:4b:70:5e:32:7c:0a:b3:5e:6c:0f: 4a:1d:e5:66:2a:0a:ff:1f:3b:0a:13:9e:bd:b8:21:13:7a:35: 18:79:d1:52:29:53:1b:54:b4:98:d2:33:87:63:6c:1f:71:f5: 41:69:62:a4:44:3a:c5:f4:a4:15:f2:dc:60:29:90:09:cb:f1: 25:35:8b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjQwNTE4MTgzNzIxWhcNMjQwNTI1MTgzNzIxWjAYMRYwFAYD VQQDEw02NjQ4ZjU2Mi1hMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQZdKV6W9gNEatx+5OYCMhIHGTLGQmWGgXBsGsz6Rlf83fBwEiwQsi0s0bEv ZRMuVvAIg5cbTTGOTLpfaXiIh7+j1DJl30mBUwG+fmevylnXEhhyglaJ7E6aoLJQ LiBySXDVFVsq6XPp3muUGzfdX8JDUErxj9eq6f0gHrt0wljFVSKk11K237JlikuN CQpuRtlCKT3dPJDEtalTUBoTBkBLT/zNueIEfxygXAaSB47h9VfO3GD9ZpsYUR40 ZVMrVugY6yJg/aOOtkto5ihrB6t3hK2dJ3aNNHJHwJ1cC9i0fm10Zjs2yVeba1U6 fDewQWDiOnw+MESSfkTqBBjYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbGljU0 mrW7qNxquJYiGHC/F7PhMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe8jyvRSuOO3N8Iw3v8lZvwQgCC1VhwYseBaRLSd2qmy0BxuiC5xdi 290hNhuMgEzlP6/JhmXNvz42ZoQfMB6VXUT3W79+ySv0OzG/ZIwYQRy1q/YqIRgG OeynMR8wdvRXiU7YIj47R2AkS3/YfvuEkIPrYxVcQTe9qLLlyrTspHUTsEW8j5AJ WsWpBQDStI/8MuWKiDZK62vI8zcgY5lmkmwPa/ylSosq8l0xfXJsU5AzQhyw87mm gZuYcktwXjJ8CrNebA9KHeVmKgr/HzsKE569uCETejUYedFSKVMbVLSY0jOHY2wf cfVBaWKkRDrF9KQV8txgKZAJy/ElNYsn -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org