$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: uYb2BBpduVnksSr6UEENnRbsR3qWl/7EFqteh5G2WGA= Subject key identifier: C1:E7:23:10:0B:FE:BF:6C:EE:F3:AD:1E:20:DB:EC:31:9D:9B:F4:B5 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: D0 Signing time: Mon 27 May 2024 01:46:43 +0000 Manifest this update: Mon 27 May 2024 01:46:42 +0000 Manifest next update: Mon 03 Jun 2024 01:46:42 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: nA+YEjnhLTnm2C/Q8nlzebLOgNwI0yp4FpdwV6HdYDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: May 27 01:46:42 2024 GMT Not After : Jun 3 01:46:42 2024 GMT Subject: CN=6653e603-a960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:82:96:15:0f:fb:e7:71:57:b7:00:f0:df: 6f:d2:39:eb:b0:6d:d5:79:9a:a9:3e:b8:bc:ba:5b: 56:d3:4e:2b:1d:b1:8a:34:09:0a:a3:35:39:9d:69: 8d:eb:ed:33:3f:09:3d:40:e8:fa:55:33:9d:44:c2: e6:d2:a3:23:f9:9d:cf:86:7f:09:b7:d4:66:ac:17: 19:6e:5f:4e:bb:f3:a6:b8:81:73:39:1c:d8:8d:94: 10:2e:30:d5:45:13:9f:8d:2c:bf:7e:eb:33:a7:a8: d7:5e:c5:da:b8:c8:3c:8f:d4:19:59:dc:17:d4:5b: 30:b1:ff:87:3f:fd:cb:7a:83:f0:20:36:af:fe:ef: 28:97:80:a9:71:12:b9:67:02:a3:bc:62:24:7a:cb: af:ae:d6:e1:ae:cb:1f:75:82:14:3f:37:3d:16:60: 35:68:e3:54:ab:93:03:ac:af:99:a7:e5:74:69:dc: f2:6b:4e:1d:31:91:ed:a3:75:5a:09:ef:b8:b0:29: d1:1e:77:70:bf:f6:e0:2e:1d:1c:11:3a:4f:97:39: 69:a1:14:38:9c:ce:4e:a1:48:25:d1:1a:22:90:32: 7d:57:55:13:5e:d2:3f:d1:83:60:65:05:63:e9:0d: 4b:1e:ae:82:8a:7c:cb:06:e9:8d:77:56:1c:3b:1f: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:23:10:0B:FE:BF:6C:EE:F3:AD:1E:20:DB:EC:31:9D:9B:F4:B5 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:2c:97:ab:5a:e7:0f:e4:82:88:09:32:79:17:3a:0c:8d: 2d:28:2c:7c:bf:96:a9:3e:61:68:7e:0b:dc:c6:bc:24:49:03: d5:2f:d0:68:24:67:43:3d:f1:5e:56:9d:9d:7c:e4:a8:9b:2d: c4:58:0e:7d:ea:80:f7:1b:20:ae:03:4f:8c:ad:09:ed:dd:b6: df:68:d8:6f:20:a4:c9:bb:68:7b:05:56:3c:a9:6d:5f:dd:16: ae:b6:0c:33:ec:57:c5:d7:db:a0:c0:7f:95:ea:f0:b2:dc:3c: ee:21:e9:eb:57:df:c6:3f:fa:2e:53:d7:7c:bd:17:31:b4:87: d3:5f:51:23:21:df:df:dd:f1:e9:c7:61:98:22:d2:32:a3:9b: d0:3e:9c:0f:f7:cb:17:65:ff:d7:18:dd:f2:75:4b:d8:6d:1b: 59:47:6c:32:0a:fb:6e:fa:b8:1e:9a:97:9a:63:d2:3b:a9:aa: 71:af:2a:55:f0:5f:95:ea:7e:d5:5a:9e:cd:6d:fd:a0:8a:6b: de:54:4d:19:91:29:78:75:c0:10:3c:98:51:fc:8d:11:78:ed: e2:65:09:99:78:e5:1e:a9:56:4b:38:8f:c1:cb:d0:85:2b:4f: a1:b8:14:51:ee:af:c0:5b:14:59:42:d7:9d:e8:5f:2a:89:9a: 2c:84:ae:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjQwNTI3MDE0NjQyWhcNMjQwNjAzMDE0NjQyWjAYMRYwFAYD VQQDEw02NjUzZTYwMy1hOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszOClhUP++dxV7cA8N9v0jnrsG3VeZqpPri8ultW004rHbGKNAkKozU5nWmN 6+0zPwk9QOj6VTOdRMLm0qMj+Z3Phn8Jt9RmrBcZbl9Ou/OmuIFzORzYjZQQLjDV RROfjSy/fuszp6jXXsXauMg8j9QZWdwX1Fswsf+HP/3LeoPwIDav/u8ol4CpcRK5 ZwKjvGIkesuvrtbhrssfdYIUPzc9FmA1aONUq5MDrK+Zp+V0adzya04dMZHto3Va Ce+4sCnRHndwv/bgLh0cETpPlzlpoRQ4nM5OoUgl0RoikDJ9V1UTXtI/0YNgZQVj 6Q1LHq6CinzLBumNd1YcOx+ypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHnIxAL /r9s7vOtHiDb7DGdm/S1MB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFnCyXq1rnD+SCiAkyeRc6DI0tKCx8v5apPmFofgvcxrwkSQPVL9Bo JGdDPfFeVp2dfOSomy3EWA596oD3GyCuA0+MrQnt3bbfaNhvIKTJu2h7BVY8qW1f 3Rautgwz7FfF19ugwH+V6vCy3DzuIenrV9/GP/ouU9d8vRcxtIfTX1EjId/f3fHp x2GYItIyo5vQPpwP98sXZf/XGN3ydUvYbRtZR2wyCvtu+rgempeaY9I7qapxrypV 8F+V6n7VWp7Nbf2gimveVE0ZkSl4dcAQPJhR/I0ReO3iZQmZeOUeqVZLOI/By9CF K0+huBRR7q/AWxRZQted6F8qiZoshK4y -----END CERTIFICATE-----Generated at Mon May 27 02:57:01 2024 by rpki-client on console-fra.rpki-client.org