$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft File: GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json) Hash identifier: xp5EXoTL0Ky8pFl5bht5RT170ymSsQKnPnZ8ZN4X2wc= Subject key identifier: 8F:05:06:3C:D1:BD:A8:01:D1:A1:44:D1:77:B8:10:58:BC:9B:91:CD Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft Manifest number: 1B38 Signing time: Sat 18 May 2024 16:38:55 +0000 Manifest this update: Sat 18 May 2024 16:38:54 +0000 Manifest next update: Sat 25 May 2024 16:38:54 +0000 Files and hashes: 1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: 8Y6nTwswmSI8R4WDZi2KAIV2dWd64vdkrtL/f7e8vQI=) 2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: G3DBliFZu/VI4MFfGI8d8nacUbfmanba/FcPWi0Nxnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6978 (0x1b42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: May 18 16:38:54 2024 GMT Not After : May 25 16:38:54 2024 GMT Subject: CN=6648d99e-f38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:1c:a0:dd:8a:db:82:b8:09:44:43:63:b7: 7b:19:bf:6c:58:35:7e:2a:2c:3f:26:a3:bb:6c:32: 02:6c:e3:14:b8:7e:5e:db:be:f3:c5:ca:c8:0a:e2: 4b:be:cb:ce:de:0a:9f:32:23:36:af:93:05:35:20: 6b:ee:93:0b:6a:80:ac:bc:cf:af:50:46:50:15:27: f8:71:52:21:a7:f2:c6:94:9b:4a:61:18:4d:30:d2: 20:19:51:a3:c7:ec:d5:07:6a:3b:6a:39:26:15:21: 03:66:f3:19:08:c2:da:18:24:63:c7:e3:20:27:e7: a4:3e:6f:9a:ba:51:c1:74:37:4c:77:60:71:10:82: 99:ce:a7:46:81:97:96:2c:bf:19:58:c6:4a:74:02: e2:a1:10:2d:2a:6b:4a:30:7d:49:3d:0a:2d:3e:00: fa:a9:5d:74:bf:22:c4:13:8c:bc:ed:b1:80:4c:3c: 41:9c:55:40:a0:f5:11:7d:4e:ee:0a:8b:f0:f0:5d: d3:25:35:da:44:a0:6d:57:80:ff:4e:84:80:1d:0f: 21:cc:6d:70:40:42:0c:d9:1e:1a:64:2f:16:bb:41: e3:da:63:34:da:7b:69:4c:d9:1e:b7:cd:d9:b8:60: e7:74:f4:9f:fe:5c:80:13:2a:eb:05:30:a2:e8:9d: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:06:3C:D1:BD:A8:01:D1:A1:44:D1:77:B8:10:58:BC:9B:91:CD X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:ba:4b:77:cc:04:75:f7:6c:e1:3c:27:4f:c7:c7:89:0a: b4:3c:5e:7c:6f:96:38:0a:4b:0d:ba:07:a1:27:f3:d3:26:5f: 0c:fb:a2:ae:be:9a:c0:27:0a:91:31:5b:11:38:f9:d7:05:62: eb:ae:38:ce:8b:a5:01:9f:e7:e1:12:02:e8:f3:66:6d:c1:a5: 39:85:4a:94:e1:d7:7e:90:3a:58:23:0f:e4:8b:3d:f1:38:22: 01:af:4c:7d:73:d6:96:be:d9:ec:ed:ba:be:1e:41:67:b0:d5: 42:d5:66:c4:02:a1:ce:8c:53:f5:7f:54:57:d2:bf:a4:bb:5b: 68:0d:4e:88:9e:0d:ee:dc:04:40:bf:02:c9:85:94:0a:01:dd: a0:09:87:36:b6:c5:a7:e5:11:9b:d8:53:23:c2:bc:a8:b7:38: 56:7b:f9:cf:bb:82:2a:33:c9:ef:8b:8e:4e:4f:60:13:1c:6e: dc:3d:cd:c9:49:d6:7d:28:db:14:a7:7e:be:b4:6c:da:58:45: 3d:45:7d:c4:22:b5:e5:b9:29:42:ae:a5:6a:b5:c0:6f:54:40: 10:cd:fc:48:78:ba:14:92:48:d9:36:f5:7d:a4:2e:a3:e0:a8: 0d:06:38:be:fe:d4:76:6b:a9:f1:ca:35:ca:c4:c9:43:4d:62: f6:1e:c7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjQwNTE4MTYzODU0WhcNMjQwNTI1MTYzODU0WjAYMRYwFAYD VQQDEw02NjQ4ZDk5ZS1mMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfocoN2K24K4CURDY7d7Gb9sWDV+Kiw/JqO7bDICbOMUuH5e277zxcrICuJL vsvO3gqfMiM2r5MFNSBr7pMLaoCsvM+vUEZQFSf4cVIhp/LGlJtKYRhNMNIgGVGj x+zVB2o7ajkmFSEDZvMZCMLaGCRjx+MgJ+ekPm+aulHBdDdMd2BxEIKZzqdGgZeW LL8ZWMZKdALioRAtKmtKMH1JPQotPgD6qV10vyLEE4y87bGATDxBnFVAoPURfU7u Covw8F3TJTXaRKBtV4D/ToSAHQ8hzG1wQEIM2R4aZC8Wu0Hj2mM02ntpTNket83Z uGDndPSf/lyAEyrrBTCi6J3vawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8FBjzR vagB0aFE0Xe4EFi8m5HNMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlq d2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4bpLd8wEdfds4TwnT8fHiQq0PF58b5Y4CksNugehJ/PTJl8M+6Ku vprAJwqRMVsROPnXBWLrrjjOi6UBn+fhEgLo82ZtwaU5hUqU4dd+kDpYIw/kiz3x OCIBr0x9c9aWvtns7bq+HkFnsNVC1WbEAqHOjFP1f1RX0r+ku1toDU6Ing3u3ARA vwLJhZQKAd2gCYc2tsWn5RGb2FMjwryotzhWe/nPu4IqM8nvi45OT2ATHG7cPc3J SdZ9KNsUp36+tGzaWEU9RX3EIrXluSlCrqVqtcBvVEAQzfxIeLoUkkjZNvV9pC6j 4KgNBji+/tR2a6nxyjXKxMlDTWL2Hsd+ -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org