$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: CL2PA0iOF4/CPoqU9YPmGKs+u6psdE99Mw2ip8kLIdE= Subject key identifier: 85:94:93:D3:CC:5D:21:35:71:FD:20:88:CF:B9:B3:E0:3E:C5:52:7B Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 05D7 Signing time: Sat 18 May 2024 22:13:05 +0000 Manifest this update: Sat 18 May 2024 22:13:04 +0000 Manifest next update: Sat 25 May 2024 22:13:04 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: ecCCG4xJa3EAtdbhwK6MxzRva3ilMPOHemI/yCTjFkI=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: iwdB1nxGqs+gQ8A1MeI/NRaSpbPdDyxT09qg19TlxT4=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: G0pNS2leTFFrSijocSln6pPdL61D3MzyUqD2tiAmWUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: May 18 22:13:04 2024 GMT Not After : May 25 22:13:04 2024 GMT Subject: CN=664927f0-2c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:1f:db:03:c9:74:61:c2:2b:52:f6:c5:20: ae:4f:32:d6:72:d2:7e:d9:f7:97:3c:02:fc:88:e5: 34:eb:2a:b9:b2:b1:7e:5c:a2:af:b6:f5:33:ca:50: 44:dc:4b:9b:90:36:f2:4d:a9:3c:fb:b0:95:51:b4: 51:ea:28:62:48:14:63:30:f3:6b:42:72:c6:52:75: 94:b6:de:5b:51:36:e7:d2:bf:40:b3:0b:b7:22:9a: 7a:11:c4:13:7b:69:90:bd:5a:81:6a:06:a4:1d:1c: 30:e2:ff:45:69:46:5a:73:a8:48:9f:5b:44:fb:c0: 9b:9f:de:7a:f9:56:07:2b:42:de:a2:39:f9:74:ac: 32:53:d8:1b:64:4f:24:ff:f9:73:70:18:c5:db:d0: e2:5c:ef:cd:a4:e1:a5:9b:20:29:19:ca:fa:8a:36: 4b:18:aa:b8:95:52:02:f3:a5:ea:4e:ff:42:b4:87: f0:54:3c:8a:f1:28:67:cc:b7:c5:4f:3f:f0:9a:d5: 9d:80:ac:9f:06:64:9c:a5:48:62:0c:8c:df:c6:64: 01:d2:e2:30:81:9f:58:a2:08:7c:4f:86:af:b3:04: f8:57:4a:b0:a0:71:e0:4e:0f:c2:65:d0:3c:a5:49: 44:7a:70:1a:e4:f7:0f:25:ac:85:25:d1:e8:c9:ee: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:93:D3:CC:5D:21:35:71:FD:20:88:CF:B9:B3:E0:3E:C5:52:7B X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cb:90:86:5c:b9:6d:6d:76:d9:1b:f5:3b:25:fd:bd:10:aa: f3:5b:13:49:e2:99:36:cf:c4:72:e1:e5:34:48:f3:db:77:0d: f6:8a:7a:bb:6e:3f:b6:38:24:8a:af:ae:70:84:cb:66:f1:d2: 8f:b0:07:73:77:35:49:15:59:1d:b5:7c:2c:bc:ab:2a:06:60: 76:98:7d:2e:6a:db:d9:cf:f6:f3:2a:49:c8:cc:e0:4d:dd:5a: 27:5d:ae:21:12:df:a8:46:17:25:76:bc:02:12:5d:d0:81:ab: 55:93:39:20:a4:ce:c6:4e:7a:f1:88:aa:9d:b8:0f:cb:fe:f4: 69:7f:30:46:bf:24:3a:a3:4b:fb:ba:53:39:69:de:4c:93:f1: 7d:c7:16:63:3a:a5:bc:ef:11:27:0e:d8:4e:87:1c:e3:de:53: 9f:f1:f9:ab:c7:be:d6:7b:bc:59:dd:9a:db:2d:bb:e5:55:2b: 3f:4a:9d:08:bb:95:aa:2c:48:70:0d:b6:bc:bc:0d:0a:73:82: 8c:5d:37:f3:65:dc:52:81:c9:e0:1d:98:a2:cf:77:12:39:bf: 31:1b:35:70:4c:08:f2:89:5b:89:51:49:48:6d:3c:22:95:a5: 2e:81:de:de:53:cd:2a:42:bf:a1:73:88:50:30:26:97:0b:e5: 0c:90:2e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjQwNTE4MjIxMzA0WhcNMjQwNTI1MjIxMzA0WjAYMRYwFAYD VQQDEw02NjQ5MjdmMC0yYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXof2wPJdGHCK1L2xSCuTzLWctJ+2feXPAL8iOU06yq5srF+XKKvtvUzylBE 3EubkDbyTak8+7CVUbRR6ihiSBRjMPNrQnLGUnWUtt5bUTbn0r9Aswu3Ipp6EcQT e2mQvVqBagakHRww4v9FaUZac6hIn1tE+8Cbn956+VYHK0Leojn5dKwyU9gbZE8k //lzcBjF29DiXO/NpOGlmyApGcr6ijZLGKq4lVIC86XqTv9CtIfwVDyK8ShnzLfF Tz/wmtWdgKyfBmScpUhiDIzfxmQB0uIwgZ9Yogh8T4avswT4V0qwoHHgTg/CZdA8 pUlEenAa5PcPJayFJdHoye5pcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWUk9PM XSE1cf0giM+5s+A+xVJ7MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMy5CGXLltbXbZG/U7Jf29EKrzWxNJ4pk2z8Ry4eU0SPPbdw32inq7 bj+2OCSKr65whMtm8dKPsAdzdzVJFVkdtXwsvKsqBmB2mH0uatvZz/bzKknIzOBN 3VonXa4hEt+oRhcldrwCEl3QgatVkzkgpM7GTnrxiKqduA/L/vRpfzBGvyQ6o0v7 ulM5ad5Mk/F9xxZjOqW87xEnDthOhxzj3lOf8fmrx77We7xZ3ZrbLbvlVSs/Sp0I u5WqLEhwDba8vA0Kc4KMXTfzZdxSgcngHZiiz3cSOb8xGzVwTAjyiVuJUUlIbTwi laUugd7eU80qQr+hc4hQMCaXC+UMkC7Z -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org