$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: HcaGfZ3bjpbcA/c7rKWheC7wI68wqpDSpvv/aWUT85w= Subject key identifier: 41:B1:1E:C3:2E:7B:D6:E7:3D:51:71:2E:7C:90:9B:2E:F2:DF:C9:94 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 096B Signing time: Sat 18 May 2024 21:01:51 +0000 Manifest this update: Sat 18 May 2024 21:01:51 +0000 Manifest next update: Sat 25 May 2024 21:01:51 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: Wfjodrys/+TNUsLyfF5jwQtUGS87u+YJLA9yT9xL2Zw=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: S22G9QDkwGKayGVHAQugfVJP+lzVsoqHSJVwM0lQLI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: May 18 21:01:51 2024 GMT Not After : May 25 21:01:51 2024 GMT Subject: CN=6649173f-801d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:3e:2f:0c:1c:53:7e:87:ed:0f:d3:dc:7d: 23:3f:67:cb:b8:cb:69:98:56:52:e1:4e:8e:49:8e: 71:95:02:dc:5a:d9:05:d0:10:28:47:e9:00:a8:90: 11:05:d2:fc:35:6d:55:92:79:c0:24:bf:3e:df:4d: de:db:75:02:0d:39:39:8d:78:f9:96:ee:2e:f5:20: 16:91:72:04:2a:f4:1e:48:50:5d:6a:59:6c:e0:d4: 4b:f9:a2:c7:7d:20:a3:bb:96:ea:66:6f:c7:40:d0: 7f:90:94:3a:43:62:29:08:44:f4:1c:73:40:c3:3f: be:f5:6b:d2:55:78:81:3a:56:4e:99:16:34:b8:ca: 46:a1:6b:03:8b:c2:52:bd:32:76:17:ca:82:75:4c: 25:67:70:68:4c:ed:2a:5d:c9:83:3f:a9:dd:58:98: b0:63:2a:49:b5:a0:7b:10:95:5e:41:6b:01:03:6d: 92:c8:c6:ca:ec:2e:bf:c3:54:61:b9:9f:d1:81:10: 10:bf:3a:cd:b5:ad:e9:d1:ca:3c:44:cb:e8:58:29: 90:28:bc:2b:1a:a5:b0:56:18:79:11:a5:9d:4c:32: 37:51:d7:1b:68:d0:35:da:12:47:ab:ef:71:92:f8: 8a:09:e5:e3:e1:32:20:f7:bc:1b:d8:68:f4:74:f1: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:1E:C3:2E:7B:D6:E7:3D:51:71:2E:7C:90:9B:2E:F2:DF:C9:94 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:49:d5:5f:72:10:ea:45:5b:7e:84:04:c7:8b:e3:49:0b:6a: 19:b1:cf:1f:99:1d:0c:10:4c:e4:62:7f:b3:6a:1d:a1:37:51: ba:b4:17:35:ab:38:c5:f5:21:b1:87:f9:43:0d:0c:31:9d:8c: bb:d8:c8:76:f7:5f:62:3b:95:ca:0b:27:02:28:bc:ee:ce:65: 83:bb:3e:2f:ed:ec:29:d0:19:7f:37:81:c3:d0:15:88:e6:c7: df:aa:c3:58:f4:b0:6a:43:60:d7:71:6b:aa:5c:a8:33:2a:a2: 67:49:1e:0b:c2:2b:85:e6:7a:20:ae:2e:5f:cf:a5:fd:fc:87: ea:92:93:36:ef:c6:30:72:34:3e:1d:63:58:c9:64:8d:96:ac: e6:b6:8e:f8:6d:77:ab:b3:c5:42:54:56:5c:df:07:ba:d8:ab: b2:6f:5b:5b:62:c1:f0:11:5f:1f:8a:24:c4:05:2c:18:8e:37: b1:ee:be:b1:24:99:5c:83:d2:1b:c3:46:e9:d4:9d:68:2a:d2: fe:34:e2:be:01:6e:7d:ef:2d:20:c6:da:b4:32:61:b2:20:75: 77:2e:48:fa:d1:91:47:4a:46:5f:85:19:0b:91:89:45:3f:58: ca:32:76:3b:c1:35:e7:75:f8:11:be:0b:0d:e4:6c:89:b6:2f: 42:f5:4e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjQwNTE4MjEwMTUxWhcNMjQwNTI1MjEwMTUxWjAYMRYwFAYD VQQDEw02NjQ5MTczZi04MDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sM+LwwcU36H7Q/T3H0jP2fLuMtpmFZS4U6OSY5xlQLcWtkF0BAoR+kAqJAR BdL8NW1VknnAJL8+303e23UCDTk5jXj5lu4u9SAWkXIEKvQeSFBdalls4NRL+aLH fSCju5bqZm/HQNB/kJQ6Q2IpCET0HHNAwz++9WvSVXiBOlZOmRY0uMpGoWsDi8JS vTJ2F8qCdUwlZ3BoTO0qXcmDP6ndWJiwYypJtaB7EJVeQWsBA22SyMbK7C6/w1Rh uZ/RgRAQvzrNta3p0co8RMvoWCmQKLwrGqWwVhh5EaWdTDI3UdcbaNA12hJHq+9x kviKCeXj4TIg97wb2Gj0dPEh3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGxHsMu e9bnPVFxLnyQmy7y38mUMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaSdVfchDqRVt+hATHi+NJC2oZsc8fmR0MEEzkYn+zah2hN1G6tBc1 qzjF9SGxh/lDDQwxnYy72Mh2919iO5XKCycCKLzuzmWDuz4v7ewp0Bl/N4HD0BWI 5sffqsNY9LBqQ2DXcWuqXKgzKqJnSR4LwiuF5nogri5fz6X9/IfqkpM278YwcjQ+ HWNYyWSNlqzmto74bXers8VCVFZc3we62Kuyb1tbYsHwEV8fiiTEBSwYjjex7r6x JJlcg9Ibw0bp1J1oKtL+NOK+AW597y0gxtq0MmGyIHV3Lkj60ZFHSkZfhRkLkYlF P1jKMnY7wTXndfgRvgsN5GyJti9C9U60 -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org