$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: 4b0I/AujYLOTJdMMf1eltoQcS139LXi0cxZw2+KBv0Y= Subject key identifier: 6B:64:45:3D:EA:33:55:6F:1D:B7:32:8F:AE:A7:36:5B:DA:4C:EC:86 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 42 Signing time: Thu 17 Oct 2024 05:48:08 +0000 Manifest this update: Thu 17 Oct 2024 05:48:07 +0000 Manifest next update: Thu 24 Oct 2024 05:48:07 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: l3MgvEXJFJz4w8yUx0C+6bzLkX4cpPKSpH8vmyF2iJQ=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: e+okQTky3rxLnURNJYv8tMNd0/Aev94NgPH4sbrFFlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Oct 17 05:48:07 2024 GMT Not After : Oct 24 05:48:07 2024 GMT Subject: CN=6710a518-c73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:17:4d:a6:70:b6:87:a6:df:58:6c:aa:19: cd:51:79:25:1c:06:e1:20:5d:ad:6d:f4:44:59:b1: 28:89:66:4a:8a:ea:fd:0d:16:35:20:ba:15:75:fc: 14:c6:49:75:69:ef:f2:75:82:ac:91:a8:a6:ba:23: 7b:12:14:44:41:62:ed:0e:25:0e:1b:4e:8d:f1:fc: dc:ce:3e:26:74:26:66:00:61:5f:f5:cb:88:c9:1c: 80:ba:92:1f:a0:c2:b4:d0:eb:ae:1f:fd:3f:b6:cb: 74:a8:27:ab:f9:c5:97:45:fe:15:32:65:33:a4:0b: 21:9a:1e:37:60:26:4e:07:f1:5d:63:60:af:9f:cd: c8:1f:fc:a5:60:54:6e:ef:32:c1:be:9f:ab:c4:14: 95:fa:0b:4d:68:25:9d:57:2f:d3:b0:bd:dd:f1:39: 1c:c2:fa:be:66:53:cc:e5:0c:da:43:41:9b:a9:af: f7:34:f8:35:84:5c:f5:8a:c6:31:70:0b:06:37:91: 73:e4:b4:fc:49:8b:f2:45:00:7d:e2:1f:48:73:3a: 81:f8:86:0e:fb:9a:1d:0e:60:70:2b:58:b2:b6:4b: 4e:12:1d:de:8f:ed:59:28:0a:3f:75:bb:98:fd:c8: 2c:e7:bc:fa:c7:db:86:5c:2a:5e:5b:ae:25:88:4d: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:45:3D:EA:33:55:6F:1D:B7:32:8F:AE:A7:36:5B:DA:4C:EC:86 X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:f9:f5:f2:e3:f1:e0:92:d9:97:3e:21:cd:0c:fd:44:ad: ad:19:52:6b:44:d1:c5:93:8c:f5:3a:55:4d:4c:35:54:c5:bb: 91:43:94:90:9b:72:fd:49:ef:9e:f0:b5:a4:a8:dc:a4:53:69: 1d:77:4f:b7:21:75:07:84:58:19:6d:b2:67:e3:94:c4:91:43: e3:c3:4e:ad:20:76:39:59:97:a9:da:ec:fd:6f:90:04:3a:54: a0:dc:25:33:fe:bb:e3:3e:d1:11:cf:ca:b0:bc:3f:8a:05:d8: 39:49:47:04:33:a1:44:0e:01:d1:70:9b:bc:3e:22:94:dd:84: b2:18:b1:34:be:fb:b3:14:32:09:4d:05:f6:5d:b8:7d:ce:0d: e2:b3:f5:9f:70:ae:4d:03:fa:f3:a3:08:f9:40:a6:3b:e2:de: ec:69:0c:8b:ac:fb:a2:b9:ac:9e:dd:3a:39:42:32:dc:bc:67: 7a:04:d8:2e:3a:48:bb:7e:55:27:7d:35:c3:32:09:9c:33:7e: bd:38:df:c4:1a:b5:8b:07:c1:34:99:ff:d4:9b:c6:29:8b:30: a7:28:6c:7f:b7:48:44:fb:c7:c6:fa:36:73:20:48:e5:6f:73: cf:41:ce:ed:c3:18:ca:00:33:de:c5:69:cf:62:3e:20:ac:7b: e8:4c:d3:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTZGOTExMC8GA1UEBRMoODI3MzVCM0Y5QzlFQTk3NUQ0RTAyQTk0RTJBMTA4MUJB NEE4QUIyNDAeFw0yNDEwMTcwNTQ4MDdaFw0yNDEwMjQwNTQ4MDdaMBgxFjAUBgNV BAMTDTY3MTBhNTE4LWM3M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkUhdNpnC2h6bfWGyqGc1ReSUcBuEgXa1t9ERZsSiJZkqK6v0NFjUguhV1/BTG SXVp7/J1gqyRqKa6I3sSFERBYu0OJQ4bTo3x/NzOPiZ0JmYAYV/1y4jJHIC6kh+g wrTQ664f/T+2y3SoJ6v5xZdF/hUyZTOkCyGaHjdgJk4H8V1jYK+fzcgf/KVgVG7v MsG+n6vEFJX6C01oJZ1XL9Owvd3xORzC+r5mU8zlDNpDQZupr/c0+DWEXPWKxjFw CwY3kXPktPxJi/JFAH3iH0hzOoH4hg77mh0OYHArWLK2S04SHd6P7VkoCj91u5j9 yCznvPrH24ZcKl5briWITXcpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa2RFPeoz VW8dtzKPrqc2W9pM7IYwHwYDVR0jBBgwFoAUgnNbP5yeqXXU4CqU4qEIG6SoqyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5NkY5L0Y5NDk0MDA4MkEx RDExRUZBOUUxRjk4NUM0RjlBRTAyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ25OYlA1eWVxWFhVNENxVTRxRUlHNlNvcXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 NkY5L0Y5NDk0MDA4MkExRDExRUZBOUUxRjk4NUM0RjlBRTAyL2duTmJQNXllcVhY VTRDcVU0cUVJRzZTb3F5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFvO+fXy4/HgktmXPiHNDP1Era0ZUmtE0cWTjPU6VU1MNVTFu5FDlJCb cv1J757wtaSo3KRTaR13T7chdQeEWBltsmfjlMSRQ+PDTq0gdjlZl6na7P1vkAQ6 VKDcJTP+u+M+0RHPyrC8P4oF2DlJRwQzoUQOAdFwm7w+IpTdhLIYsTS++7MUMglN BfZduH3ODeKz9Z9wrk0D+vOjCPlApjvi3uxpDIus+6K5rJ7dOjlCMty8Z3oE2C46 SLt+VSd9NcMyCZwzfr0438QatYsHwTSZ/9SbximLMKcobH+3SET7x8b6NnMgSOVv c89Bzu3DGMoAM97Fac9iPiCse+hM03k= -----END CERTIFICATE-----Generated at Thu Oct 17 06:45:43 2024 by rpki-client on console-fra.rpki-client.org