$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: PFD8iuCCSHcdVtfLNe5UFCMkmM4ZGzn7GVMwZC4t+cQ= Subject key identifier: 68:56:9E:61:E9:40:F7:13:AF:4D:89:41:26:E6:1B:50:BF:7D:80:EE Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 33CC Signing time: Sat 18 May 2024 14:23:39 +0000 Manifest this update: Sat 18 May 2024 14:23:38 +0000 Manifest next update: Sat 25 May 2024 14:23:38 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 9pl84rLtE8DsG4xWikjxg+Bg6/w/+Aq/d53M1e2lV5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: May 18 14:23:38 2024 GMT Not After : May 25 14:23:38 2024 GMT Subject: CN=6648b9ea-3a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:d8:41:c2:f3:c8:f5:24:1c:f3:59:a7:95: 5b:81:63:fe:94:b4:1c:76:8d:ce:08:f6:35:14:ff: b5:9a:b2:76:1e:4e:c7:42:a9:81:18:1b:42:4a:0a: 98:a6:2e:bd:ec:44:a9:51:df:90:cd:37:26:a4:4d: ad:e8:8f:46:ef:f4:cf:d9:95:4c:7f:c0:79:fc:c7: e0:60:c5:d6:2b:df:9b:5a:cc:a8:b9:49:36:29:f4: 73:7d:2a:8c:78:b5:34:f0:5d:90:a3:ae:1d:3a:a4: be:a3:87:ea:19:09:7a:5f:31:c6:a9:fc:4d:97:fe: 0f:c3:4e:88:1d:f2:3d:44:87:87:f8:c4:8b:33:1f: 73:22:e7:0c:ab:27:0f:8b:9e:e6:02:50:f0:a8:0a: 7f:c2:94:0e:d1:9a:92:ee:6c:6a:4f:6f:d8:fe:e1: 22:48:d8:40:aa:75:e0:57:af:71:6a:3b:aa:69:26: 09:e7:b5:22:1b:0e:cc:9e:db:82:fd:f2:45:9c:1e: e2:eb:db:87:26:3d:45:cd:f5:26:1b:66:9b:1a:5e: ba:15:c3:09:33:f7:e1:06:e4:c9:ed:1a:76:9f:4c: ea:69:b4:3b:b0:5f:ab:bd:82:c2:12:c1:31:1d:2c: 4c:21:e3:f0:c2:d8:13:4a:f5:af:21:a8:62:eb:f2: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:9E:61:E9:40:F7:13:AF:4D:89:41:26:E6:1B:50:BF:7D:80:EE X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:8d:98:da:69:5b:43:11:9b:21:2b:6c:40:b3:d3:e8:32: a3:6e:03:82:e9:41:87:62:b3:93:79:8b:87:2f:72:20:53:9c: 99:ad:2e:b3:cd:e6:1a:12:97:9b:e2:40:f7:0a:0c:1e:a9:55: 3b:3a:42:56:07:bb:b2:c1:5c:a6:ab:82:17:e9:25:95:58:38: 08:a1:9d:91:2e:16:e9:5e:6b:e5:60:af:0d:bc:f5:58:28:a7: df:5e:4c:94:27:86:ca:45:20:59:09:ee:14:73:f8:32:4d:1b: 89:1a:64:36:d7:d9:d4:9e:e5:b2:19:62:52:2a:5d:ba:9c:ad: eb:e0:07:20:eb:c7:d0:bd:6b:02:20:1a:f4:0a:1d:4c:75:d5: 10:42:1c:5c:4a:95:58:24:73:63:f3:3a:8c:a5:76:df:c3:f1: 3c:ae:f8:70:c2:c8:43:cd:5e:5b:75:0d:e1:f8:19:7a:f5:80: db:e2:0f:7c:80:3f:82:e4:bc:20:3e:4e:13:32:2e:46:93:7c: 94:3a:4e:18:d8:6e:4a:ce:bc:7b:33:33:e2:99:16:e4:68:f1: 56:8e:33:52:0e:c4:b0:c5:b3:fe:24:ef:37:87:d0:d7:64:0f: 9d:d8:3d:03:b5:d4:ed:e7:2c:91:27:66:bb:01:fe:11:af:5e: 94:cc:1d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjQwNTE4MTQyMzM4WhcNMjQwNTI1MTQyMzM4WjAYMRYwFAYD VQQDEw02NjQ4YjllYS0zYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutnYQcLzyPUkHPNZp5VbgWP+lLQcdo3OCPY1FP+1mrJ2Hk7HQqmBGBtCSgqY pi697ESpUd+QzTcmpE2t6I9G7/TP2ZVMf8B5/MfgYMXWK9+bWsyouUk2KfRzfSqM eLU08F2Qo64dOqS+o4fqGQl6XzHGqfxNl/4Pw06IHfI9RIeH+MSLMx9zIucMqycP i57mAlDwqAp/wpQO0ZqS7mxqT2/Y/uEiSNhAqnXgV69xajuqaSYJ57UiGw7MntuC /fJFnB7i69uHJj1FzfUmG2abGl66FcMJM/fhBuTJ7Rp2n0zqabQ7sF+rvYLCEsEx HSxMIePwwtgTSvWvIahi6/JqJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhWnmHp QPcTr02JQSbmG1C/fYDuMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlo2Y2mlbQxGbIStsQLPT6DKjbgOC6UGHYrOTeYuHL3IgU5yZrS6z zeYaEpeb4kD3CgweqVU7OkJWB7uywVymq4IX6SWVWDgIoZ2RLhbpXmvlYK8NvPVY KKffXkyUJ4bKRSBZCe4Uc/gyTRuJGmQ219nUnuWyGWJSKl26nK3r4Acg68fQvWsC IBr0Ch1MddUQQhxcSpVYJHNj8zqMpXbfw/E8rvhwwshDzV5bdQ3h+Bl69YDb4g98 gD+C5LwgPk4TMi5Gk3yUOk4Y2G5Kzrx7MzPimRbkaPFWjjNSDsSwxbP+JO83h9DX ZA+d2D0DtdTt5yyRJ2a7Af4Rr16UzB0/ -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org