$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft File: gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json) Hash identifier: TNHqK6sFwBsCNBQL3QJ5IIdSq5CtyQaEuqlP32aryiQ= Subject key identifier: FF:E4:16:B8:7B:8B:26:93:5B:FD:2B:64:B3:2D:7E:13:7C:DF:9A:08 Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft Manifest number: 03BE Signing time: Sun 19 May 2024 02:26:23 +0000 Manifest this update: Sun 19 May 2024 02:26:23 +0000 Manifest next update: Sun 26 May 2024 02:26:23 +0000 Files and hashes: 1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: z1kLznmlIdz0zCkzp52glzDRocZ0Hpg4rRyLE6W2G1U=) 2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: fS3+yJNBchofB2uTon0Ot8/ZsehIhcR0TMZX6/azUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B Validity Not Before: May 19 02:26:23 2024 GMT Not After : May 26 02:26:23 2024 GMT Subject: CN=6649634f-37c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:f7:e4:8d:48:4a:74:87:14:09:6b:59:d2: 33:51:c6:ff:ee:42:2c:5b:f1:ad:42:4d:a4:34:12: c4:1a:42:33:7b:06:ab:18:4f:87:41:ab:07:4b:23: 27:d0:e5:b0:3d:14:d3:07:55:23:9c:9b:30:41:fe: 62:00:3d:16:15:77:30:aa:17:da:c7:02:3f:0e:8e: 65:0f:05:62:cc:b9:ec:13:a5:cc:d6:1c:af:fa:3b: 34:37:9f:c0:06:f4:8c:5b:19:c0:df:e7:64:36:25: 90:ec:e3:2d:d5:17:db:75:01:92:15:f1:74:99:02: 7d:45:22:98:b2:65:eb:23:c6:6f:18:1c:75:af:90: 5f:e0:9c:9b:f4:63:8f:33:46:2e:e6:8f:31:8a:08: f8:e9:ee:67:e6:53:3c:78:e3:62:e4:03:45:e1:4f: 1d:1d:50:fd:22:70:d3:e6:da:a8:3d:ea:9f:71:9c: 82:24:75:8f:b0:62:f6:07:cf:6b:5d:bb:d5:26:cb: 4c:fc:33:64:eb:25:e1:5e:d1:f2:92:65:44:2f:2d: 53:89:c8:9c:46:9a:f4:4c:b3:91:b8:02:90:8a:7a: 5d:e8:f5:7a:66:2a:65:05:a1:52:e2:84:ab:97:41: db:2e:d0:8b:29:de:e3:a4:dd:ed:f6:ca:89:13:73: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:16:B8:7B:8B:26:93:5B:FD:2B:64:B3:2D:7E:13:7C:DF:9A:08 X509v3 Authority Key Identifier: keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:92:d6:49:59:36:76:94:c9:c3:b4:06:44:d1:a5:68:c3:90: d1:5d:d5:74:12:1b:69:58:8e:f2:76:7a:15:68:a6:88:28:55: 49:33:83:f5:23:f9:ae:37:38:45:76:69:e0:28:13:e2:79:86: 3a:7e:64:09:10:87:24:8d:5a:47:63:e1:ab:7f:e8:cc:e3:6f: 64:bb:77:7d:a6:b0:ea:ff:9a:c1:6b:3b:92:f3:e9:84:c0:b8: e9:d6:c0:3a:7f:74:c8:d0:30:f6:cb:39:ac:ac:44:c5:e7:81: 1a:9b:a1:a3:e7:17:28:f5:95:3b:64:79:08:ab:f6:03:7c:c0: 07:92:83:a3:0c:04:8f:6b:bf:89:33:4e:a5:57:46:73:1f:57: b5:ee:b0:0d:ec:42:36:2d:d6:9b:7d:3e:ef:2b:98:a1:98:e0: 6e:05:f6:9a:e1:47:bc:cf:30:bd:7c:18:96:a6:db:8a:84:05: a4:14:e4:27:21:01:ba:f4:3c:2c:be:63:1b:8e:0f:f8:6f:a2: b9:71:ff:b4:4d:a5:21:26:0f:40:ec:fa:da:33:cf:61:b4:f5: 6c:7c:40:0b:87:53:3b:7d:17:63:b1:aa:02:49:cd:b1:d3:9f: 00:0e:6e:c7:9c:3a:b2:21:53:ee:9d:af:17:79:40:95:e7:af: 22:05:90:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlDQUUxMTAvBgNVBAUTKDgxODkxMTlGODAxRTI4MEE2QjRERDU2MjY1M0VGMTAz Njk2MUQwOUIwHhcNMjQwNTE5MDIyNjIzWhcNMjQwNTI2MDIyNjIzWjAYMRYwFAYD VQQDEw02NjQ5NjM0Zi0zN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6f35I1ISnSHFAlrWdIzUcb/7kIsW/GtQk2kNBLEGkIzewarGE+HQasHSyMn 0OWwPRTTB1UjnJswQf5iAD0WFXcwqhfaxwI/Do5lDwVizLnsE6XM1hyv+js0N5/A BvSMWxnA3+dkNiWQ7OMt1RfbdQGSFfF0mQJ9RSKYsmXrI8ZvGBx1r5Bf4Jyb9GOP M0Yu5o8xigj46e5n5lM8eONi5ANF4U8dHVD9InDT5tqoPeqfcZyCJHWPsGL2B89r XbvVJstM/DNk6yXhXtHykmVELy1TicicRpr0TLORuAKQinpd6PV6ZiplBaFS4oSr l0HbLtCLKd7jpN3t9sqJE3OqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/kFrh7 iyaTW/0rZLMtfhN835oIMB8GA1UdIwQYMBaAFIGJEZ+AHigKa03VYmU+8QNpYdCb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUNBRS9GRUQ1QTJBODQx MkUxMUVDQUJGN0Y1NjZDNEY5QUUwMi9nWWtSbjRBZUtBcHJUZFZpWlQ3eEEybGgw SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZa1JuNEFlS0FwclRkVmlaVDd4QTJsaDBKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUNBRS9GRUQ1QTJBODQxMkUxMUVDQUJGN0Y1NjZDNEY5QUUwMi9nWWtSbjRBZUtB cHJUZFZpWlQ3eEEybGgwSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpktZJWTZ2lMnDtAZE0aVow5DRXdV0EhtpWI7ydnoVaKaIKFVJM4P1 I/muNzhFdmngKBPieYY6fmQJEIckjVpHY+Grf+jM429ku3d9prDq/5rBazuS8+mE wLjp1sA6f3TI0DD2yzmsrETF54Eam6Gj5xco9ZU7ZHkIq/YDfMAHkoOjDASPa7+J M06lV0ZzH1e17rAN7EI2LdabfT7vK5ihmOBuBfaa4Ue8zzC9fBiWptuKhAWkFOQn IQG69DwsvmMbjg/4b6K5cf+0TaUhJg9A7PraM89htPVsfEALh1M7fRdjsaoCSc2x 058ADm7HnDqyIVPuna8XeUCV568iBZAM -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org