$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: Y4T5cdfOZRdsFZGAp6OWH6du1Q9GCD9MTFGJCvbB0Z4= Subject key identifier: 5E:BC:E7:AC:D4:61:F9:F5:77:E2:34:84:E2:CB:24:7B:29:FC:5E:A4 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0BE6 Signing time: Sat 18 May 2024 19:02:09 +0000 Manifest this update: Sat 18 May 2024 19:02:08 +0000 Manifest next update: Sat 25 May 2024 19:02:08 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: bPgEDCV7c5bzr7po8FbSLfK4/vVEpHMelXa/G9boTnM=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: OUM6xIiVFIOh+aNHeNW4rfpQ1L1FG6j6FDFz4bgTri8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: May 18 19:02:08 2024 GMT Not After : May 25 19:02:08 2024 GMT Subject: CN=6648fb31-9c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:ee:ac:33:43:b7:da:ce:76:69:ee:5f:29: 69:bf:dc:b9:e2:30:7d:6c:22:1f:48:3b:5b:db:c6: 88:93:36:a2:ca:8e:29:b6:29:ef:07:8d:b9:7c:4a: e2:4a:c6:17:ae:b7:5b:31:57:32:02:16:6a:c5:90: 30:4a:e1:16:14:9f:3e:8f:c9:64:ae:8f:29:09:dc: 34:72:ed:ce:a3:76:90:51:42:f1:08:62:af:05:43: 03:32:5a:ec:7c:3f:7b:f9:c4:73:fd:47:4a:a8:61: 13:6c:21:27:ff:39:ae:01:34:cd:ce:21:3a:f4:f0: 5a:8a:4e:d7:ef:26:e8:49:e2:73:04:07:43:a8:14: 39:2f:a3:39:08:d6:56:26:31:0e:0e:93:c1:f8:66: 2d:d8:f6:13:8d:28:33:11:a1:97:95:ef:1a:23:3f: 27:5f:10:c6:a1:d6:80:8f:e6:ff:85:f2:ce:ba:5c: 54:02:91:1f:5d:8b:0b:5f:7e:8d:a7:c6:1d:4a:72: 87:e0:26:3a:bc:d7:b5:7c:f5:72:3e:46:44:b1:f5: db:f4:45:e7:a4:29:fb:b6:83:f5:d5:13:7b:54:aa: 95:b8:21:35:e2:51:b2:74:79:2a:ab:08:f1:3e:4c: b4:4f:52:8a:a6:30:00:6b:cb:30:ff:9f:fb:7b:0f: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BC:E7:AC:D4:61:F9:F5:77:E2:34:84:E2:CB:24:7B:29:FC:5E:A4 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:c3:9a:db:7b:87:93:0f:09:d8:19:93:27:e4:cd:8a:d0: 30:a6:b9:35:29:34:f2:43:5f:a8:da:59:81:c4:d9:3a:f5:3c: 37:97:5c:03:18:ff:0b:65:3f:9e:40:2e:4b:60:26:5e:12:d8: 5e:e4:7c:27:43:b4:d9:66:ae:1f:60:d3:2b:e6:35:08:eb:71: e8:68:29:4a:33:7f:d8:bf:94:bd:8c:2c:a3:34:b1:1e:87:a0: f4:22:fc:fd:f2:12:0e:e8:01:95:57:4c:b1:5b:44:97:bc:dd: 32:23:60:ab:99:7a:7a:84:0f:b3:8d:35:0f:d0:5f:56:0a:da: cb:02:44:d1:a7:a6:42:3b:d1:5b:99:6b:52:76:42:30:b1:4c: 00:3c:89:a1:30:ee:0f:d9:00:ef:30:5d:ac:52:5a:be:9c:83: 28:3d:f8:4e:28:36:76:52:e9:db:42:07:d4:1d:c9:b2:ea:6a: d3:ac:37:da:a2:4f:57:a0:4b:1f:4c:0a:3b:53:06:5d:e9:f2: 3f:44:6d:92:b9:14:02:83:63:86:5e:c9:da:57:13:ee:2e:db: 69:bf:99:c0:88:d8:7c:33:e1:af:f2:25:86:6e:d8:9c:f6:51: 1e:e8:51:af:0e:81:43:92:76:2d:5d:c9:4c:21:c8:3e:a4:9b: 24:08:15:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjQwNTE4MTkwMjA4WhcNMjQwNTI1MTkwMjA4WjAYMRYwFAYD VQQDEw02NjQ4ZmIzMS05YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWDurDNDt9rOdmnuXylpv9y54jB9bCIfSDtb28aIkzaiyo4ptinvB425fEri SsYXrrdbMVcyAhZqxZAwSuEWFJ8+j8lkro8pCdw0cu3Oo3aQUULxCGKvBUMDMlrs fD97+cRz/UdKqGETbCEn/zmuATTNziE69PBaik7X7yboSeJzBAdDqBQ5L6M5CNZW JjEODpPB+GYt2PYTjSgzEaGXle8aIz8nXxDGodaAj+b/hfLOulxUApEfXYsLX36N p8YdSnKH4CY6vNe1fPVyPkZEsfXb9EXnpCn7toP11RN7VKqVuCE14lGydHkqqwjx Pky0T1KKpjAAa8sw/5/7ew+pbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6856zU Yfn1d+I0hOLLJHsp/F6kMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtVsOa23uHkw8J2BmTJ+TNitAwprk1KTTyQ1+o2lmBxNk69Tw3l1wD GP8LZT+eQC5LYCZeEthe5HwnQ7TZZq4fYNMr5jUI63HoaClKM3/Yv5S9jCyjNLEe h6D0Ivz98hIO6AGVV0yxW0SXvN0yI2CrmXp6hA+zjTUP0F9WCtrLAkTRp6ZCO9Fb mWtSdkIwsUwAPImhMO4P2QDvMF2sUlq+nIMoPfhOKDZ2UunbQgfUHcmy6mrTrDfa ok9XoEsfTAo7UwZd6fI/RG2SuRQCg2OGXsnaVxPuLttpv5nAiNh8M+Gv8iWGbtic 9lEe6FGvDoFDknYtXclMIcg+pJskCBVm -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org