$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: p1SvoKR+WBna8JsqfbcNLr2h8UakVo9W3zDUnmGW0cA= Subject key identifier: B1:AD:0A:24:CF:ED:06:0C:66:0D:DF:FA:CE:25:7A:63:EC:51:48:A8 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: 15 Signing time: Mon 27 May 2024 09:07:18 +0000 Manifest this update: Mon 27 May 2024 09:07:18 +0000 Manifest next update: Mon 03 Jun 2024 09:07:18 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: EMOjLsNyYMnzIP1okneU2B2i5nl28Q/oXP585e1yFyI=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: May 27 09:07:18 2024 GMT Not After : Jun 3 09:07:18 2024 GMT Subject: CN=66544d46-2c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:a1:21:fb:95:be:d4:2c:1e:65:ae:05:a2: f4:11:b2:0b:ad:24:b9:50:5f:20:c8:f1:e5:99:40: 05:d0:ee:59:62:9a:21:95:c9:20:f1:ca:ea:68:b2: 90:a2:f5:db:a0:43:75:fa:82:98:a9:f3:ca:66:a3: 46:11:05:46:2e:ab:2e:c2:1a:eb:80:4c:a8:be:3f: 19:b2:59:bf:00:df:b2:46:4d:a0:ed:05:23:4b:fe: 32:98:95:4d:2e:2d:4c:48:2a:96:1d:08:b4:82:7c: 0e:d3:e3:6a:92:eb:c6:d1:6a:e1:35:67:90:c8:16: 87:cd:44:6c:8a:e3:d7:0e:67:66:15:b3:e6:d2:5b: 27:b4:6d:b7:3f:5b:e1:ba:e5:1a:fe:95:19:13:80: f5:ed:de:12:9d:ef:b9:2b:39:0b:4d:c3:c1:78:aa: e8:a0:e2:58:61:90:fd:b9:54:2a:df:e1:43:54:ad: 3a:91:28:9e:1e:de:c9:85:32:db:01:a6:53:c9:e0: f4:c5:5d:13:68:ac:79:89:0e:0d:fc:0b:9d:be:d3: 33:c3:3f:8c:6e:fc:2a:90:7e:c3:6e:c4:5c:d6:63: 70:56:d8:a0:49:72:62:c0:f8:da:2c:0c:dd:f2:36: 41:34:80:8c:39:6d:8e:6f:b9:90:08:2e:f4:c1:5e: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AD:0A:24:CF:ED:06:0C:66:0D:DF:FA:CE:25:7A:63:EC:51:48:A8 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d6:aa:ea:1c:54:8b:ef:5e:fe:e9:50:db:a6:48:ab:45:3f: cb:a4:b4:64:e2:79:75:d6:06:4d:c0:d0:f2:71:a0:e4:4d:65: 19:a1:bc:3f:0c:2f:be:1d:75:da:e3:f9:11:5b:cd:20:c8:9d: cd:c1:f8:05:26:eb:05:bd:88:cc:0b:48:a3:02:1b:6c:97:8b: 90:6b:e5:ba:c3:77:b1:a5:1b:a8:46:98:ff:bf:29:94:5b:b9: da:37:e7:44:84:a3:52:89:f8:10:f5:48:8b:85:1e:13:b6:c9: 78:19:af:ee:31:c3:36:c7:59:9a:4e:30:32:6a:42:6d:94:72: 69:03:a5:e1:a3:aa:e1:cc:bd:a1:a5:85:3d:0e:3e:ec:30:27: db:c5:24:e9:7c:d0:8b:4b:97:75:93:94:8b:2e:00:fa:81:bb: 17:f9:03:58:78:77:e3:e3:0a:c5:79:74:f6:d3:c7:1e:ac:f6: 2a:7f:2b:da:dc:6e:f7:5b:e6:17:e1:d2:dd:c7:e0:dd:e4:c0: f5:b2:14:02:78:b4:88:3e:8b:05:ec:2a:c5:06:a6:d8:ec:0d: d1:d6:49:24:bf:e6:6e:98:3f:28:9e:d6:68:43:ac:c0:ed:6a: f9:9b:e1:9f:03:ba:46:93:57:be:bd:8c:8b:66:61:6a:e7:20: ba:8c:72:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkE0ODExMC8GA1UEBRMoMTk3OTRGM0NBQTM3NTUyN0JBMEZEMzM0NDgwQzdFMDMz OEU3OUUyQTAeFw0yNDA1MjcwOTA3MThaFw0yNDA2MDMwOTA3MThaMBgxFjAUBgNV BAMTDTY2NTQ0ZDQ2LTJjNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClNKEh+5W+1CweZa4FovQRsgutJLlQXyDI8eWZQAXQ7llimiGVySDxyupospCi 9dugQ3X6gpip88pmo0YRBUYuqy7CGuuATKi+PxmyWb8A37JGTaDtBSNL/jKYlU0u LUxIKpYdCLSCfA7T42qS68bRauE1Z5DIFofNRGyK49cOZ2YVs+bSWye0bbc/W+G6 5Rr+lRkTgPXt3hKd77krOQtNw8F4quig4lhhkP25VCrf4UNUrTqRKJ4e3smFMtsB plPJ4PTFXRNorHmJDg38C52+0zPDP4xu/CqQfsNuxFzWY3BW2KBJcmLA+NosDN3y NkE0gIw5bY5vuZAILvTBXqfzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsa0KJM/t BgxmDd/6ziV6Y+xRSKgwHwYDVR0jBBgwFoAUGXlPPKo3VSe6D9M0SAx+Azjnniow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTQ4L0I5RTJBQ0EwRkU1 NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5p by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1hsUFBLbzNWU2U2RDlNMFNBeC1BempubmlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG QTQ4L0I5RTJBQ0EwRkU1NDExRUU5NjE5QTMxNEM0RjlBRTAyL0dYbFBQS28zVlNl NkQ5TTBTQXgtQXpqbm5pby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHWquocVIvvXv7pUNumSKtFP8uktGTieXXWBk3A0PJxoORNZRmhvD8M L74dddrj+RFbzSDInc3B+AUm6wW9iMwLSKMCG2yXi5Br5brDd7GlG6hGmP+/KZRb udo350SEo1KJ+BD1SIuFHhO2yXgZr+4xwzbHWZpOMDJqQm2UcmkDpeGjquHMvaGl hT0OPuwwJ9vFJOl80ItLl3WTlIsuAPqBuxf5A1h4d+PjCsV5dPbTxx6s9ip/K9rc bvdb5hfh0t3H4N3kwPWyFAJ4tIg+iwXsKsUGptjsDdHWSSS/5m6YPyie1mhDrMDt avmb4Z8DukaTV769jItmYWrnILqMcm4= -----END CERTIFICATE-----Generated at Mon May 27 10:25:00 2024 by rpki-client on console-fra.rpki-client.org