$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: fn0CsZSUQt4aHiVDAUB3KUi9KjOLDbprVQps53WNpgI= Subject key identifier: 54:7B:23:CA:B8:04:4A:50:38:B3:4A:FA:C4:4B:F4:0C:E9:62:B8:2A Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 03A0 Signing time: Sun 19 May 2024 02:34:11 +0000 Manifest this update: Sun 19 May 2024 02:34:10 +0000 Manifest next update: Sun 26 May 2024 02:34:10 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: W47DJKC8RJ1JKuymJMzbYl5GN8NKMcadc+nBW9c4H/c=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: yZv8Ndkb/Ixz4agZ0ioEAuVc17idALkIoBsSVXC4ewU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: May 19 02:34:10 2024 GMT Not After : May 26 02:34:10 2024 GMT Subject: CN=66496522-5e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:4c:23:a6:f3:49:89:bc:17:22:4b:11:26: b7:a2:a6:a1:3e:4d:ab:0b:80:cb:8e:2d:9e:91:1f: ae:1b:9c:9a:6a:cc:10:90:e3:45:cb:51:43:25:cd: fe:b9:03:e9:b2:08:22:a0:9b:61:90:47:a9:3c:ae: 37:23:49:e5:53:26:37:d3:b2:f9:5d:be:61:11:e8: db:b2:b9:20:7c:0c:26:4b:7f:fb:45:86:7b:65:3f: 86:ff:77:36:17:08:20:72:d7:9a:e7:ad:70:b4:6a: 8b:19:c0:ab:dd:87:b5:3e:52:1e:6a:c0:31:e2:6b: b3:95:48:04:18:88:b5:17:ba:c9:d2:d9:45:ae:af: 7a:7c:59:ee:83:6a:b5:4c:e4:0e:0e:f8:69:ce:d3: 1b:c8:c1:d0:f4:5e:39:66:79:ea:3e:88:ee:2e:58: 50:4f:d3:55:c0:36:a4:43:06:6c:93:49:c4:e5:37: 72:d6:b8:63:ad:ae:f8:82:09:6d:8e:a6:14:cc:65: fc:ef:c6:21:bd:e5:0a:8e:5c:d0:a2:3b:fe:cb:0c: 42:34:fc:25:68:8b:6e:1a:c6:59:74:7b:31:0a:d9: 97:db:32:08:78:ab:b5:2b:e7:73:01:4e:d9:8f:c8: f2:fa:07:fc:27:4c:da:2b:7a:86:d8:68:cc:dd:92: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7B:23:CA:B8:04:4A:50:38:B3:4A:FA:C4:4B:F4:0C:E9:62:B8:2A X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:52:be:70:a2:aa:fa:88:83:5b:a8:d1:e4:e8:6c:0e:d3: 6b:ec:e7:b6:5f:7c:38:b2:09:68:32:2b:43:98:95:3d:a0:18: 4b:34:77:2c:58:8f:a2:2f:d0:95:76:ad:dd:c9:66:c2:4b:0c: c3:31:b2:bf:09:e1:4e:06:f0:1a:45:c6:d6:4b:15:fd:98:35: 0b:2b:9c:21:5d:45:7f:3e:d2:70:e7:28:39:4e:dd:56:12:03: 6f:a3:17:aa:21:b7:98:b9:aa:93:82:9d:1f:71:18:a1:89:9c: 50:a0:1c:c6:49:f6:1c:31:c0:1f:be:f5:85:ca:d0:10:41:f7: 17:06:57:96:ff:ce:73:c1:3f:2a:c5:8c:13:27:3d:5a:f6:37: d9:74:3c:07:91:ca:14:2b:9f:01:e4:d3:66:6b:7e:e0:4a:f9: 4c:7d:f4:41:07:5b:5f:c6:b6:eb:4e:27:1a:f1:7c:41:34:b0: a2:cf:4f:46:26:c8:0d:f5:c5:85:98:7e:c9:44:d5:80:cb:15: e5:d8:f0:53:16:3a:89:dd:16:fd:0e:9c:e0:9f:fa:50:2a:3b: 75:7b:c7:b6:2f:16:e3:41:60:2c:30:0b:bd:52:0e:b7:8a:b0: fd:db:f3:60:8e:63:78:d8:36:1d:78:ee:3f:90:ca:c7:ba:c1: be:ee:83:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjQwNTE5MDIzNDEwWhcNMjQwNTI2MDIzNDEwWjAYMRYwFAYD VQQDEw02NjQ5NjUyMi01ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17RMI6bzSYm8FyJLESa3oqahPk2rC4DLji2ekR+uG5yaaswQkONFy1FDJc3+ uQPpsggioJthkEepPK43I0nlUyY307L5Xb5hEejbsrkgfAwmS3/7RYZ7ZT+G/3c2 Fwggctea561wtGqLGcCr3Ye1PlIeasAx4muzlUgEGIi1F7rJ0tlFrq96fFnug2q1 TOQODvhpztMbyMHQ9F45ZnnqPojuLlhQT9NVwDakQwZsk0nE5Tdy1rhjra74gglt jqYUzGX878YhveUKjlzQojv+ywxCNPwlaItuGsZZdHsxCtmX2zIIeKu1K+dzAU7Z j8jy+gf8J0zaK3qG2GjM3ZJqwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR7I8q4 BEpQOLNK+sRL9AzpYrgqMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAip1K+cKKq+oiDW6jR5OhsDtNr7Oe2X3w4sgloMitDmJU9oBhLNHcs WI+iL9CVdq3dyWbCSwzDMbK/CeFOBvAaRcbWSxX9mDULK5whXUV/PtJw5yg5Tt1W EgNvoxeqIbeYuaqTgp0fcRihiZxQoBzGSfYcMcAfvvWFytAQQfcXBleW/85zwT8q xYwTJz1a9jfZdDwHkcoUK58B5NNma37gSvlMffRBB1tfxrbrTica8XxBNLCiz09G JsgN9cWFmH7JRNWAyxXl2PBTFjqJ3Rb9Dpzgn/pQKjt1e8e2LxbjQWAsMAu9Ug63 irD92/NgjmN42DYdeO4/kMrHusG+7oOF -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org