$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: 8tk9ZWNcKY+6B+xQsAnQO0vukxu4/Llbj7UqQ6zrXO8= Subject key identifier: EE:BA:AD:F1:99:6D:F2:C0:BD:E1:2F:A6:FF:05:CF:C1:E0:E3:94:81 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 042A Signing time: Sun 19 May 2024 02:01:34 +0000 Manifest this update: Sun 19 May 2024 02:01:33 +0000 Manifest next update: Sun 26 May 2024 02:01:33 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: zzDeooZwfT2D4siBYDu4EKaAw726v7TupAlRR8AXwlg=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: FQSR/4MkVHjr7ZGyEAAE3IKAOkg+KAmFlH0Otg4j2as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: May 19 02:01:33 2024 GMT Not After : May 26 02:01:33 2024 GMT Subject: CN=66495d7e-b8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:3b:e1:98:e6:68:c0:34:6c:87:86:6c:3f: a0:2d:e2:95:93:af:49:74:04:89:6d:03:6b:96:d7: e6:50:f6:74:3d:05:6f:66:96:de:d6:4e:7b:a1:46: 43:4c:b9:e6:e0:f3:9b:a4:f8:b7:98:66:8a:65:1b: f9:fe:1c:98:06:d7:05:cf:60:14:5c:81:18:35:16: f4:c7:27:f8:b2:2d:5b:3f:66:1c:34:d6:ab:b1:4a: 55:28:26:9b:c5:69:aa:65:c4:96:0e:31:50:3e:d4: 0d:1d:40:c6:7d:44:7f:f6:b1:f5:40:f1:9d:d2:cf: 56:32:ba:ea:61:aa:18:50:ab:cf:a2:f6:f9:68:2d: 38:1e:80:3e:f7:d7:4d:01:4d:be:c2:6a:55:85:d1: a9:2c:3b:db:b2:48:c1:c9:05:ab:c5:1b:dc:f8:26: 50:d7:df:2a:3d:f3:ad:0b:60:d2:91:df:94:52:14: c5:97:23:f6:16:cf:e1:0a:7a:c6:a6:41:85:04:4f: c8:88:83:90:61:80:88:ed:22:01:43:8a:3f:7e:8f: c0:c5:b7:12:74:b8:01:7e:54:5d:d0:40:d2:9c:f8: cc:a4:3d:45:9f:4a:b7:33:88:74:55:e2:7c:16:10: 16:ed:7b:42:22:f0:f0:ec:23:5c:71:3a:07:66:e6: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:AD:F1:99:6D:F2:C0:BD:E1:2F:A6:FF:05:CF:C1:E0:E3:94:81 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b6:c3:05:00:13:36:31:04:35:09:ff:60:2d:5a:eb:27:57: 3d:d1:35:92:fe:d8:ee:b9:80:ac:a9:c1:b2:f3:44:06:fc:fa: 72:92:93:2e:f5:47:68:9d:0a:77:1f:04:2c:34:e2:b8:cb:80: 3b:52:56:b6:ce:7e:a8:2d:c3:6e:df:68:62:78:47:8c:1e:7c: 6e:b1:06:9f:a2:ba:3c:9b:4a:94:b4:be:33:85:b9:4c:19:c2: 15:f7:5d:3d:79:8a:6f:9b:e1:5c:1d:55:52:90:54:08:f0:26: a1:1c:3d:85:b7:4a:9b:18:71:63:c5:ca:22:58:77:c9:2e:e1: ce:ce:b8:98:24:85:ba:ba:4e:4a:ad:1d:5c:94:95:9a:7e:80: 82:c3:41:5e:29:03:b8:d4:28:d1:a8:aa:1c:cc:fb:11:da:40: cb:9f:33:ce:d9:1a:95:f2:30:cb:c3:e6:b0:34:35:dc:e6:73: 0d:c0:dc:dc:ba:85:e0:3c:e9:1e:84:dc:11:25:05:c0:a8:f1: 59:c2:1b:cf:39:a1:19:dd:18:a9:f1:f7:e2:40:c1:01:f3:d4: 8f:aa:e3:3a:4e:c6:cd:1f:5b:70:83:4e:43:16:d2:2d:39:83: 1c:38:c6:99:7b:f6:1e:72:82:d0:c5:53:f5:17:f7:70:07:4f: 57:1e:b1:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjQwNTE5MDIwMTMzWhcNMjQwNTI2MDIwMTMzWjAYMRYwFAYD VQQDEw02NjQ5NWQ3ZS1iOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0c74ZjmaMA0bIeGbD+gLeKVk69JdASJbQNrltfmUPZ0PQVvZpbe1k57oUZD TLnm4PObpPi3mGaKZRv5/hyYBtcFz2AUXIEYNRb0xyf4si1bP2YcNNarsUpVKCab xWmqZcSWDjFQPtQNHUDGfUR/9rH1QPGd0s9WMrrqYaoYUKvPovb5aC04HoA+99dN AU2+wmpVhdGpLDvbskjByQWrxRvc+CZQ198qPfOtC2DSkd+UUhTFlyP2Fs/hCnrG pkGFBE/IiIOQYYCI7SIBQ4o/fo/AxbcSdLgBflRd0EDSnPjMpD1Fn0q3M4h0VeJ8 FhAW7XtCIvDw7CNccToHZub6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO66rfGZ bfLAveEvpv8Fz8Hg45SBMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGtsMFABM2MQQ1Cf9gLVrrJ1c90TWS/tjuuYCsqcGy80QG/PpykpMu 9UdonQp3HwQsNOK4y4A7Ula2zn6oLcNu32hieEeMHnxusQaforo8m0qUtL4zhblM GcIV9109eYpvm+FcHVVSkFQI8CahHD2Ft0qbGHFjxcoiWHfJLuHOzriYJIW6uk5K rR1clJWafoCCw0FeKQO41CjRqKoczPsR2kDLnzPO2RqV8jDLw+awNDXc5nMNwNzc uoXgPOkehNwRJQXAqPFZwhvPOaEZ3Rip8ffiQMEB89SPquM6TsbNH1twg05DFtIt OYMcOMaZe/YecoLQxVP1F/dwB09XHrHC -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org