$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.mft File: GIlu-zOF9DLtgjcek0D_zmpmIjM.mft (raw, json) Hash identifier: /ZMdusJyEKj25ls+XXMHO9y9SxwhUsy9AZSVIPESfNc= Subject key identifier: 73:E5:6A:E0:E0:26:D3:10:45:16:87:B8:F5:09:E2:CD:71:33:03:53 Authority key identifier: 18:89:6E:FB:33:85:F4:32:ED:82:37:1E:93:40:FF:CE:6A:66:22:33 Certificate issuer: /CN=A91E9BC7/serialNumber=18896EFB3385F432ED82371E9340FFCE6A662233 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIlu-zOF9DLtgjcek0D_zmpmIjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.mft Manifest number: 0575 Signing time: Mon 29 Apr 2024 00:43:22 +0000 Manifest this update: Mon 29 Apr 2024 00:43:22 +0000 Manifest next update: Mon 06 May 2024 00:43:22 +0000 Files and hashes: 1: GIlu-zOF9DLtgjcek0D_zmpmIjM.crl (hash: FT7hz9uaY1uFPUUW2zGrWTFrMdnqs5lTJcTO1YbaTVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.crl rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIlu-zOF9DLtgjcek0D_zmpmIjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9BC7/serialNumber=18896EFB3385F432ED82371E9340FFCE6A662233 Validity Not Before: Apr 29 00:43:22 2024 GMT Not After : May 6 00:43:22 2024 GMT Subject: CN=662eed2a-7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:62:5c:88:48:c7:4b:92:f8:ce:6f:1f:1b: 02:63:58:0a:a3:60:e0:73:05:9a:97:05:12:2e:e7: 91:73:9c:41:b3:10:bf:b9:5e:91:9e:ea:fa:70:70: f9:6c:a3:d0:9f:f9:c1:9a:39:4e:d2:35:2c:d6:c9: 85:8e:49:bf:fd:11:ee:a5:6b:df:11:1c:2c:1b:28: ed:49:92:46:ae:78:5a:c3:f9:62:a6:c9:a2:37:9b: a7:bd:b3:99:7f:72:35:7e:cb:52:fa:7a:e1:e6:f7: ed:7c:a7:de:ea:b3:af:4e:1c:d0:32:80:c5:53:41: 60:61:25:3f:8f:e0:65:9b:c9:7f:9e:1a:12:05:5f: 84:b9:e2:89:d1:a8:f6:b3:bd:0e:e0:13:8f:ca:67: 40:14:e3:0d:a8:39:1e:6d:67:0b:d4:65:23:0b:6f: bd:c0:ad:3f:0d:c3:78:7b:fb:bf:7a:c0:32:03:65: 72:dd:08:ec:ca:63:19:0b:43:52:33:3e:a3:21:df: a7:a2:6d:7d:15:22:6a:aa:db:a1:c1:b7:c6:38:0a: 5f:8b:80:f7:ca:22:fa:ce:f0:f0:f5:23:b5:8b:ba: 86:cc:bd:58:d4:a0:7c:31:4a:73:1c:10:45:1f:38: c5:ab:18:2f:08:9c:94:f0:4d:12:f9:2a:77:14:03: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:6A:E0:E0:26:D3:10:45:16:87:B8:F5:09:E2:CD:71:33:03:53 X509v3 Authority Key Identifier: keyid:18:89:6E:FB:33:85:F4:32:ED:82:37:1E:93:40:FF:CE:6A:66:22:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIlu-zOF9DLtgjcek0D_zmpmIjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:62:03:d7:39:f8:e2:be:ae:cc:c4:46:aa:3c:16:ac:e1: 69:d8:c1:d3:75:d0:19:b3:71:52:33:f1:af:d8:f6:a5:d9:82: 46:99:11:c9:a2:76:99:90:91:c1:a5:f7:db:b2:a5:c4:4f:0b: 68:ed:c2:e6:b1:32:b3:b7:db:36:14:5a:54:04:b6:e4:20:87: 98:64:7e:78:96:a4:94:df:86:c4:6c:a2:a9:fa:7f:1d:8f:bb: 17:95:49:74:57:1d:1b:a7:3d:a2:0a:97:d5:52:fe:95:ba:ea: 36:a8:c5:0e:4c:24:71:8b:8b:62:79:63:3d:04:07:81:86:b9: 64:2c:05:96:43:28:91:07:99:27:ea:c8:c7:63:57:e9:85:f8: 19:0a:bd:7c:85:66:57:ee:3a:2e:87:d7:e2:3c:3a:7c:24:22: 33:ed:3a:04:d8:f2:03:53:b1:3a:86:b8:a4:6a:16:aa:52:ad: 14:e6:59:e3:ac:fe:b7:6a:67:af:18:76:35:7d:72:0f:24:d3: 0e:7d:43:95:8c:27:07:5b:fb:57:0e:95:a5:3c:ec:18:99:18: 64:9c:94:50:db:5d:63:51:18:03:7a:d5:c3:50:ea:a1:29:a5: 06:86:b7:f5:e0:6a:65:cf:b3:5a:fe:38:3e:14:39:88:11:ec: 97:d3:ed:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCQzcxMTAvBgNVBAUTKDE4ODk2RUZCMzM4NUY0MzJFRDgyMzcxRTkzNDBGRkNF NkE2NjIyMzMwHhcNMjQwNDI5MDA0MzIyWhcNMjQwNTA2MDA0MzIyWjAYMRYwFAYD VQQDEw02NjJlZWQyYS03ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y5iXIhIx0uS+M5vHxsCY1gKo2DgcwWalwUSLueRc5xBsxC/uV6Rnur6cHD5 bKPQn/nBmjlO0jUs1smFjkm//RHupWvfERwsGyjtSZJGrnhaw/lipsmiN5unvbOZ f3I1fstS+nrh5vftfKfe6rOvThzQMoDFU0FgYSU/j+Blm8l/nhoSBV+EueKJ0aj2 s70O4BOPymdAFOMNqDkebWcL1GUjC2+9wK0/DcN4e/u/esAyA2Vy3QjsymMZC0NS Mz6jId+nom19FSJqqtuhwbfGOApfi4D3yiL6zvDw9SO1i7qGzL1Y1KB8MUpzHBBF HzjFqxgvCJyU8E0S+Sp3FAN4kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPlauDg JtMQRRaHuPUJ4s1xMwNTMB8GA1UdIwQYMBaAFBiJbvszhfQy7YI3HpNA/85qZiIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNy9BMDM5MEZDMjkw RTAxMUVCQTdGQ0EwMUVDNEY5QUUwMi9HSWx1LXpPRjlETHRnamNlazBEX3ptcG1J ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJbHUtek9GOURMdGdqY2VrMERfem1wbUlqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUJDNy9BMDM5MEZDMjkwRTAxMUVCQTdGQ0EwMUVDNEY5QUUwMi9HSWx1LXpPRjlE THRnamNlazBEX3ptcG1Jak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcn2ID1zn44r6uzMRGqjwWrOFp2MHTddAZs3FSM/Gv2Pal2YJGmRHJ onaZkJHBpffbsqXETwto7cLmsTKzt9s2FFpUBLbkIIeYZH54lqSU34bEbKKp+n8d j7sXlUl0Vx0bpz2iCpfVUv6Vuuo2qMUOTCRxi4tieWM9BAeBhrlkLAWWQyiRB5kn 6sjHY1fphfgZCr18hWZX7jouh9fiPDp8JCIz7ToE2PIDU7E6hrikahaqUq0U5lnj rP63amevGHY1fXIPJNMOfUOVjCcHW/tXDpWlPOwYmRhknJRQ211jURgDetXDUOqh KaUGhrf14Gplz7Na/jg+FDmIEeyX0+3v -----END CERTIFICATE-----Generated at Mon Apr 29 12:51:45 2024 by rpki-client on console-ams.rpki-client.org