$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json) Hash identifier: 3/+DGGsYZA3y5S3Ke6ypVUThb/yCsaDC6S+3tvQLPl4= Subject key identifier: C1:A8:B6:23:90:A7:88:12:86:1C:00:80:8A:06:23:6D:41:87:79:B6 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft Manifest number: 0D6B Signing time: Sat 04 May 2024 18:46:32 +0000 Manifest this update: Sat 04 May 2024 18:46:31 +0000 Manifest next update: Sat 11 May 2024 18:46:31 +0000 Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: jFn6d5QnviSPJIrLoKep2K7FNB1lggduhnXN+km9DD8=) 2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: qNUw6tBSS3V6lu6BDo00RZ4F27FrvgcGzl/e+IqAtc8=) 3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: a7KzGt7Z3vMqJOZSsfrRDiH8IlMaZQEsF0l2mbLC0cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: May 4 18:46:31 2024 GMT Not After : May 11 18:46:31 2024 GMT Subject: CN=66368288-f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:45:29:62:a5:b3:1c:db:83:67:e9:68:b9: 41:42:4c:98:99:80:da:a9:a7:a3:a1:57:17:18:20: 1c:cf:8a:94:6b:35:42:29:d5:37:46:d9:ca:08:8a: 9b:2e:85:90:af:51:8e:c9:91:2e:16:5f:b2:95:fe: 8d:08:54:60:7d:76:5a:6c:81:8c:5e:72:eb:4e:1e: 0c:f8:6c:78:19:02:9e:23:36:b0:10:34:a2:89:c8: c6:af:ba:8c:57:6c:81:70:88:b4:49:6e:b4:ce:8b: 2c:6e:00:2f:92:9b:b2:96:41:50:ec:9d:c8:28:7c: 90:1c:5c:ce:54:77:9e:30:11:a1:84:a5:70:a9:a9: 88:56:e5:fe:f9:7b:66:a6:f0:87:cb:8c:5f:aa:7d: 83:7d:35:6b:4c:53:92:74:06:18:03:f5:42:57:1e: db:82:a7:b7:5c:ac:fd:38:8e:ec:68:9b:fd:8e:2d: 02:01:e9:e7:16:df:ab:1f:f5:1a:d0:7b:e6:d2:eb: c6:03:00:d3:80:70:35:d4:23:c2:c8:0b:2c:d1:24: 86:64:bb:79:02:5c:88:9a:ca:ce:6e:df:f9:dc:6c: cb:d0:80:35:c5:5c:2e:12:d9:42:aa:9e:09:f3:c4: d2:9b:e8:5a:59:4f:ae:9d:94:ca:e5:74:8d:21:b6: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:B6:23:90:A7:88:12:86:1C:00:80:8A:06:23:6D:41:87:79:B6 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:21:2d:90:0e:5b:c2:7e:10:ca:02:c9:35:cf:a2:a2:eb:65: 9b:93:4f:18:96:30:4d:41:f8:20:0c:04:12:90:fb:76:50:cc: d5:da:61:0c:ad:0e:ef:24:9a:e9:d9:ce:60:99:85:0e:7a:02: b4:dc:1c:f9:eb:21:81:9a:23:16:b3:9d:b4:08:d0:bc:0f:22: 82:44:dd:5f:c6:50:84:b3:13:df:29:f7:5e:b6:71:0b:83:c5: bd:73:76:9d:5f:b4:b9:74:68:c5:1f:97:5b:c3:8a:e9:9c:fd: 4f:ec:b6:d1:86:c7:e2:a5:eb:79:e2:62:db:e8:68:1a:63:e3: 1f:d3:33:3b:9d:a8:ec:ec:d1:64:56:4c:15:6e:f3:1c:96:f6: 49:2e:b3:54:3d:ce:ed:0f:08:ea:bb:e2:ec:d9:33:68:ab:bd: e5:ab:ad:c2:97:69:e0:7b:39:82:99:ef:66:88:59:c6:a0:6a: 13:6f:70:cd:73:b8:e5:84:04:a2:20:74:e5:1c:04:99:63:62: 38:f3:5c:9c:b8:1c:d0:ef:d8:52:61:df:96:ff:66:a7:70:5d: 3d:7a:d5:f5:14:e1:8d:60:29:e2:8d:cb:c1:e6:4e:2b:0e:81: 12:1d:a9:93:6a:32:88:02:24:40:a1:91:31:a8:0e:2f:b1:47: b3:4c:86:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjQwNTA0MTg0NjMxWhcNMjQwNTExMTg0NjMxWjAYMRYwFAYD VQQDEw02NjM2ODI4OC1mODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2BFKWKlsxzbg2fpaLlBQkyYmYDaqaejoVcXGCAcz4qUazVCKdU3RtnKCIqb LoWQr1GOyZEuFl+ylf6NCFRgfXZabIGMXnLrTh4M+Gx4GQKeIzawEDSiicjGr7qM V2yBcIi0SW60zossbgAvkpuylkFQ7J3IKHyQHFzOVHeeMBGhhKVwqamIVuX++Xtm pvCHy4xfqn2DfTVrTFOSdAYYA/VCVx7bgqe3XKz9OI7saJv9ji0CAennFt+rH/Ua 0Hvm0uvGAwDTgHA11CPCyAss0SSGZLt5AlyImsrObt/53GzL0IA1xVwuEtlCqp4J 88TSm+haWU+unZTK5XSNIbaSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGotiOQ p4gShhwAgIoGI21Bh3m2MB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwIS2QDlvCfhDKAsk1z6Ki62Wbk08YljBNQfggDAQSkPt2UMzV2mEM rQ7vJJrp2c5gmYUOegK03Bz56yGBmiMWs520CNC8DyKCRN1fxlCEsxPfKfdetnEL g8W9c3adX7S5dGjFH5dbw4rpnP1P7LbRhsfipet54mLb6GgaY+Mf0zM7najs7NFk VkwVbvMclvZJLrNUPc7tDwjqu+Ls2TNoq73lq63Cl2ngezmCme9miFnGoGoTb3DN c7jlhASiIHTlHASZY2I481ycuBzQ79hSYd+W/2ancF09etX1FOGNYCnijcvB5k4r DoESHamTajKIAiRAoZExqA4vsUezTIbu -----END CERTIFICATE-----Generated at Sat May 4 20:37:07 2024 by rpki-client on console-fra.rpki-client.org