$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: FyKaUAl2Y2syQ6TVP+bfWaDWqmk9UZUZSDGVfZngjb4= Subject key identifier: 15:DF:27:1D:FD:70:9E:6C:7B:EA:92:B7:AD:27:0A:5C:5E:62:E7:68 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1936 Signing time: Sat 04 May 2024 16:55:44 +0000 Manifest this update: Sat 04 May 2024 16:55:43 +0000 Manifest next update: Sat 11 May 2024 16:55:43 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: toYfTG6Yl0TDHw/u1R61NmLojX4svr+wXqSHVPtb1nc=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: TFZyvrE3OwmWYaYDSWUoC+64kctGuwQsPRph3ixaWVg=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: dNRtXVoOTZwtJ1I2U7amdHCRzMyv1RMCXarfjz4uRlY=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 7wlp2PECucp8Uy8l9Ief6GFTHn3kLULrFFBnhP6srUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6485 (0x1955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: May 4 16:55:43 2024 GMT Not After : May 11 16:55:43 2024 GMT Subject: CN=66366890-a1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bd:1e:3c:a0:4e:5a:58:b4:b3:d8:a1:c9:46: c1:e1:71:88:df:6a:98:cb:b3:8e:06:ec:d1:1e:6d: 96:a9:14:9d:a7:d2:a9:9c:66:5d:b3:bd:c2:2a:56: f1:81:e1:be:a3:33:f5:54:35:2e:6a:ec:8e:e7:a8: 08:8d:84:68:da:e3:b1:a4:64:a7:0a:55:65:0d:e8: 52:58:44:d2:9a:f1:8f:87:ac:9f:af:eb:14:4e:d6: 19:0c:65:33:7b:35:a3:a2:d3:f5:b6:53:34:b3:b1: 5f:76:88:d8:24:93:b3:9e:b4:26:61:f3:3a:8c:3f: 02:c2:5b:7a:bf:cc:e3:55:5d:8e:64:47:53:3e:5c: 6d:ef:36:25:49:02:8a:20:5d:48:7a:d6:2c:c0:54: e0:2b:80:3f:c2:8e:f8:b6:d8:e6:48:ae:2b:b2:d7: 5e:15:2a:9e:18:79:64:df:d5:63:c5:b7:a9:77:d0: 4e:b4:36:11:8d:cb:85:c9:4e:12:57:93:c9:53:d9: 08:28:ff:36:7e:1b:28:bf:5d:70:c9:5d:43:14:3e: 53:df:75:bf:80:9b:48:e1:7d:44:f5:e2:b4:80:1d: ea:74:7c:c4:24:17:c2:6c:13:14:6f:62:aa:b4:28: 13:83:95:a2:59:6e:d5:cb:a9:76:46:f3:f6:45:b4: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DF:27:1D:FD:70:9E:6C:7B:EA:92:B7:AD:27:0A:5C:5E:62:E7:68 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a1:26:5e:fb:8d:f9:f4:5d:b4:b9:15:39:87:ef:22:ed:64: 3b:12:ab:06:e9:e1:cf:36:76:95:ff:f0:f0:b5:09:44:8c:cd: 2b:7b:d9:22:9b:4b:72:58:79:af:1b:c2:ac:b7:06:b4:4b:c9: 38:7f:79:d0:ba:51:d6:e2:77:24:8a:32:09:bb:1c:82:63:6a: af:ca:b6:d5:d2:d1:fe:0d:34:33:f1:83:e5:fc:86:cf:eb:e6: 58:65:2b:98:65:12:5a:d5:87:91:cd:0b:b1:1b:1d:8d:b4:ff: af:bc:47:04:d6:9a:7d:79:a8:e8:e1:ca:59:a9:6f:da:61:ea: 64:a5:c3:03:99:bd:1f:70:fb:cd:79:56:c6:52:19:f6:fb:32: e0:96:d8:a9:9a:72:61:fe:77:ff:e7:e8:65:cd:ea:9e:6a:01: 54:b5:53:e5:1f:52:80:14:1b:88:00:bf:8c:fb:7c:3c:45:51: c2:d4:3a:14:e0:ad:52:e6:7e:e5:93:d7:6a:3c:ba:f3:b3:df: 90:6b:f5:f7:aa:5a:48:11:46:7a:ad:c5:77:95:a5:06:0e:b1: 8e:5f:d4:31:09:a9:5e:f3:04:90:0f:8d:6d:81:44:33:c7:bb: fd:71:98:d3:92:58:59:45:05:7a:30:2d:40:25:86:15:15:11: 12:15:27:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjQwNTA0MTY1NTQzWhcNMjQwNTExMTY1NTQzWjAYMRYwFAYD VQQDEw02NjM2Njg5MC1hMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6r0ePKBOWli0s9ihyUbB4XGI32qYy7OOBuzRHm2WqRSdp9KpnGZds73CKlbx geG+ozP1VDUuauyO56gIjYRo2uOxpGSnClVlDehSWETSmvGPh6yfr+sUTtYZDGUz ezWjotP1tlM0s7FfdojYJJOznrQmYfM6jD8Cwlt6v8zjVV2OZEdTPlxt7zYlSQKK IF1IetYswFTgK4A/wo74ttjmSK4rstdeFSqeGHlk39Vjxbepd9BOtDYRjcuFyU4S V5PJU9kIKP82fhsov11wyV1DFD5T33W/gJtI4X1E9eK0gB3qdHzEJBfCbBMUb2Kq tCgTg5WiWW7Vy6l2RvP2RbTqPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXfJx39 cJ5se+qSt60nClxeYudoMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKoSZe+4359F20uRU5h+8i7WQ7EqsG6eHPNnaV//DwtQlEjM0re9ki m0tyWHmvG8Kstwa0S8k4f3nQulHW4nckijIJuxyCY2qvyrbV0tH+DTQz8YPl/IbP 6+ZYZSuYZRJa1YeRzQuxGx2NtP+vvEcE1pp9eajo4cpZqW/aYepkpcMDmb0fcPvN eVbGUhn2+zLgltipmnJh/nf/5+hlzeqeagFUtVPlH1KAFBuIAL+M+3w8RVHC1DoU 4K1S5n7lk9dqPLrzs9+Qa/X3qlpIEUZ6rcV3laUGDrGOX9QxCale8wSQD41tgUQz x7v9cZjTklhZRQV6MC1AJYYVFRESFSer -----END CERTIFICATE-----Generated at Sat May 4 18:00:13 2024 by rpki-client on console-fra.rpki-client.org