$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft File: Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json) Hash identifier: q9dRdca2/Ua9c4sqblBJxOPz26Y87N/p0R9DNlZ9cZQ= Subject key identifier: 4E:51:2E:45:4C:84:A6:54:AF:54:F1:B0:AB:C3:68:B2:3F:F7:C4:F5 Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2 Certificate issuer: /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft Manifest number: 5F Signing time: Sun 19 May 2024 07:42:36 +0000 Manifest this update: Sun 19 May 2024 07:42:35 +0000 Manifest next update: Sun 26 May 2024 07:42:35 +0000 Files and hashes: 1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: pJ+4RcnYshA/iwJJYSlIaJOrYwVHBGaMmziY/bZlDBA=) 2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: vYR9SjpP8jHKczAPek7eoEYqF72FxyEH5VDwe9plJnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2 Validity Not Before: May 19 07:42:35 2024 GMT Not After : May 26 07:42:35 2024 GMT Subject: CN=6649ad6c-5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ce:73:cd:e1:ef:79:8a:ac:87:91:9b:e4:48: e4:44:4a:d4:d9:5d:77:3c:85:64:f4:bd:f1:7e:f7: af:ee:ce:ce:ac:85:a1:d8:6e:0f:6b:9a:10:26:d8: fe:84:51:e8:ad:63:b3:57:fe:ef:48:f4:f9:04:1c: c4:db:b7:88:73:bb:b1:8d:9a:7b:fd:72:f0:33:33: f1:7a:48:6d:ad:66:31:64:c3:9b:ee:ff:a6:22:1e: 95:9a:06:74:a3:64:d4:ed:ea:b6:0a:fe:79:c2:db: 9c:38:76:36:08:a2:3e:b4:e8:0e:90:a7:6e:9b:cc: 1a:05:25:2a:a7:4e:9f:0c:5b:f0:a1:59:ca:69:67: 0a:ce:8e:6e:cd:7c:20:31:7a:a3:b5:f4:f4:97:f2: 46:c4:09:f5:9a:e1:e8:b7:04:6f:91:23:0b:d0:e6: 45:90:b8:89:82:7a:07:7f:0a:05:f5:d2:22:92:d4: 20:0e:ac:61:4d:80:7c:5d:ec:84:fd:4e:9a:32:94: 53:de:01:9c:95:7b:b0:8b:6d:ce:06:e8:28:96:84: 8a:ee:bb:5d:4a:92:b0:87:4f:ae:c2:bc:a9:ee:f5: 09:ee:30:06:49:8a:d2:ee:27:03:e8:5a:15:97:57: 10:8c:f0:5e:ee:b2:24:19:23:00:aa:ec:a1:da:9b: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:51:2E:45:4C:84:A6:54:AF:54:F1:B0:AB:C3:68:B2:3F:F7:C4:F5 X509v3 Authority Key Identifier: keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1b:54:d9:3a:1d:fa:b2:80:b3:8e:41:19:a2:b2:f3:bb:b4: c6:93:95:90:82:de:67:c3:7c:06:39:22:ff:ba:72:40:64:16: bb:36:96:08:28:de:2c:38:18:3e:72:62:fc:9b:ea:23:84:c6: 64:55:a9:15:b4:61:58:de:c7:9d:10:95:fe:92:30:09:60:cf: ee:14:8d:eb:5a:4e:7c:55:8e:dc:f2:61:e7:a3:b3:16:62:b3: bf:cc:51:00:69:04:2a:de:7f:f0:43:be:48:f6:0d:9b:bb:bf: 84:fa:b1:24:da:76:f3:9e:72:0a:e4:c2:c6:73:ea:b7:8e:b2: 53:8a:e0:1b:31:0f:dc:e1:0b:7a:34:79:a3:b0:d5:58:dd:f2: 69:80:8e:3d:0b:8f:0c:fe:5c:a3:42:e5:d5:d0:d5:a4:87:f2: 1c:77:57:27:01:6c:e9:13:84:6b:10:13:0f:54:2f:ad:35:15: c3:84:b8:ce:18:12:dd:67:cc:ee:db:fa:0e:8f:e4:80:3f:23: c1:65:66:88:b9:0f:c6:5b:3f:66:76:98:42:ec:12:8a:ea:f7: d4:81:12:67:fd:26:39:b3:62:86:f3:90:da:f4:3d:8d:7b:da: e3:03:eb:43:99:f0:47:24:62:20:4d:90:43:d4:ec:f0:aa:f7: e5:c9:25:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTlGMTExMC8GA1UEBRMoMUE3QjNFQ0Y0NDYzM0UxRUEyNEM5MDYxN0FEMzk3NDU1 RTc0RTZCMjAeFw0yNDA1MTkwNzQyMzVaFw0yNDA1MjYwNzQyMzVaMBgxFjAUBgNV BAMTDTY2NDlhZDZjLTU1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhznPN4e95iqyHkZvkSOREStTZXXc8hWT0vfF+96/uzs6shaHYbg9rmhAm2P6E UeitY7NX/u9I9PkEHMTbt4hzu7GNmnv9cvAzM/F6SG2tZjFkw5vu/6YiHpWaBnSj ZNTt6rYK/nnC25w4djYIoj606A6Qp26bzBoFJSqnTp8MW/ChWcppZwrOjm7NfCAx eqO19PSX8kbECfWa4ei3BG+RIwvQ5kWQuImCegd/CgX10iKS1CAOrGFNgHxd7IT9 TpoylFPeAZyVe7CLbc4G6CiWhIruu11KkrCHT67CvKnu9QnuMAZJitLuJwPoWhWX VxCM8F7usiQZIwCq7KHamyrdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTlEuRUyE plSvVPGwq8Nosj/3xPUwHwYDVR0jBBgwFoAUGns+z0RjPh6iTJBhetOXRV505rIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOUYxL0VFNjk1RkU2ODc1 RDExRUU4RjQ4OTkxM0M0RjlBRTAyL0ducy16MFJqUGg2aVRKQmhldE9YUlY1MDVy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR25zLXowUmpQaDZpVEpCaGV0T1hSVjUwNXJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OUYxL0VFNjk1RkU2ODc1RDExRUU4RjQ4OTkxM0M0RjlBRTAyL0ducy16MFJqUGg2 aVRKQmhldE9YUlY1MDVySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKcbVNk6HfqygLOOQRmisvO7tMaTlZCC3mfDfAY5Iv+6ckBkFrs2lggo 3iw4GD5yYvyb6iOExmRVqRW0YVjex50Qlf6SMAlgz+4UjetaTnxVjtzyYeejsxZi s7/MUQBpBCref/BDvkj2DZu7v4T6sSTadvOecgrkwsZz6reOslOK4BsxD9zhC3o0 eaOw1Vjd8mmAjj0Ljwz+XKNC5dXQ1aSH8hx3VycBbOkThGsQEw9UL601FcOEuM4Y Et1nzO7b+g6P5IA/I8FlZoi5D8ZbP2Z2mELsEorq99SBEmf9JjmzYobzkNr0PY17 2uMD60OZ8EckYiBNkEPU7PCq9+XJJa0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org