$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: 2woOsUmfEN3owu/siG3PYLdMls7UT8qFiwijUyiLt8s= Subject key identifier: E0:A4:96:C5:9B:DF:BE:0D:F4:2C:12:81:77:78:EC:95:6F:37:F7:2D Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 02F2 Signing time: Sun 19 May 2024 03:16:05 +0000 Manifest this update: Sun 19 May 2024 03:16:05 +0000 Manifest next update: Sun 26 May 2024 03:16:05 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: idvunnQQ5dVijxcHsPqV8SiCVOejpvdC0FkIXGPxTfA=) 2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: oQqFB4mCK9lOMAaK8N1MQQ3r8ZV/5SIQAc2GEgxu44Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: May 19 03:16:05 2024 GMT Not After : May 26 03:16:05 2024 GMT Subject: CN=66496ef5-26b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:e6:16:50:a0:87:26:3d:00:d5:50:8c:45: 79:51:e5:99:2b:53:bb:aa:ff:dd:2c:d1:55:01:ca: e7:91:b2:e8:57:0d:d1:e5:dd:38:32:82:41:88:ca: 24:0b:9e:bd:5c:2f:8c:b9:5e:9c:04:91:4a:07:33: 63:96:e4:74:11:75:90:6b:a6:61:1e:ba:1e:e3:bf: 4c:9d:82:b0:8a:d4:ce:9c:6c:13:dc:32:cb:b0:49: 3b:3e:00:c4:2c:88:37:a9:13:c4:b7:9c:07:bb:c1: b9:a5:d3:2c:5a:65:99:0f:c0:c7:98:dd:b3:b6:2a: 74:e2:2c:4b:d8:b5:34:56:95:b9:72:9a:14:49:1d: 0d:f7:0c:79:c7:1d:1b:14:42:63:9b:e3:3d:8c:2e: b1:d2:36:f8:f1:47:72:9e:48:05:97:8e:67:f9:04: 0a:47:77:08:16:7f:66:3a:9d:6e:c7:7a:d1:d9:7c: 3e:87:05:9a:4c:7c:43:a4:82:4b:03:3e:da:09:0b: a3:9f:71:f3:fa:ef:f4:1b:69:eb:e6:8a:0d:de:32: c4:a7:5d:60:5f:fc:0f:7a:4b:3c:73:ae:30:32:20: 50:4e:02:e3:42:49:fa:9a:31:38:39:a4:0d:15:f0: 11:06:df:3e:a7:6f:8d:e7:63:3f:ac:15:f7:30:d6: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:96:C5:9B:DF:BE:0D:F4:2C:12:81:77:78:EC:95:6F:37:F7:2D X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:12:8c:01:6e:b8:02:73:6a:18:ac:b6:64:be:ca:df:1a: fb:6f:da:11:61:e7:1d:56:66:42:b4:b1:75:48:13:ab:27:ff: 55:92:05:e9:75:99:33:2b:df:57:bd:7d:bc:58:1a:47:12:72: 75:42:d9:9e:2d:7e:7f:ab:0e:ee:2c:85:e0:68:04:a1:06:c0: 28:98:cc:7a:5c:88:d1:f0:a5:ff:6a:f7:47:7b:30:55:e6:e8: 9b:50:4a:e1:69:0d:89:5b:18:d4:ed:09:4d:15:dd:0c:84:f8: e1:fc:95:25:49:64:df:41:8c:c1:a1:87:b6:dc:57:cb:e5:27: 9a:b9:9f:59:72:17:3c:8a:f5:79:0a:6f:3d:9e:b4:bf:fc:9f: 83:b5:87:27:61:ca:8e:de:ac:4d:00:cc:ac:ee:db:4f:a1:53: 74:37:3d:40:33:f4:4a:5e:e9:90:39:70:ea:bd:00:14:a8:af: 0a:4c:a6:bf:19:fd:ce:24:a8:15:c8:fe:1e:79:44:92:09:4d: cd:cc:55:00:74:16:6a:ff:fe:af:39:ec:b2:e5:a8:35:ec:f9: 92:52:dd:c4:9c:bf:49:57:48:64:85:00:90:ce:63:ba:77:6f: 5e:ec:c4:1c:9c:af:1a:50:31:8c:b3:6a:90:fc:ce:df:4b:28: 44:5c:10:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjQwNTE5MDMxNjA1WhcNMjQwNTI2MDMxNjA1WjAYMRYwFAYD VQQDEw02NjQ5NmVmNS0yNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKbmFlCghyY9ANVQjEV5UeWZK1O7qv/dLNFVAcrnkbLoVw3R5d04MoJBiMok C569XC+MuV6cBJFKBzNjluR0EXWQa6ZhHroe479MnYKwitTOnGwT3DLLsEk7PgDE LIg3qRPEt5wHu8G5pdMsWmWZD8DHmN2ztip04ixL2LU0VpW5cpoUSR0N9wx5xx0b FEJjm+M9jC6x0jb48UdynkgFl45n+QQKR3cIFn9mOp1ux3rR2Xw+hwWaTHxDpIJL Az7aCQujn3Hz+u/0G2nr5ooN3jLEp11gX/wPeks8c64wMiBQTgLjQkn6mjE4OaQN FfARBt8+p2+N52M/rBX3MNbYVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCklsWb 374N9CwSgXd47JVvN/ctMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKihKMAW64AnNqGKy2ZL7K3xr7b9oRYecdVmZCtLF1SBOrJ/9VkgXp dZkzK99XvX28WBpHEnJ1QtmeLX5/qw7uLIXgaAShBsAomMx6XIjR8KX/avdHezBV 5uibUErhaQ2JWxjU7QlNFd0MhPjh/JUlSWTfQYzBoYe23FfL5SeauZ9Zchc8ivV5 Cm89nrS//J+DtYcnYcqO3qxNAMys7ttPoVN0Nz1AM/RKXumQOXDqvQAUqK8KTKa/ Gf3OJKgVyP4eeUSSCU3NzFUAdBZq//6vOeyy5ag17PmSUt3EnL9JV0hkhQCQzmO6 d29e7MQcnK8aUDGMs2qQ/M7fSyhEXBC8 -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org