$ rpki-client -vvf rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft File: GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft (raw, json) Hash identifier: rGfmRGhM59WmHmg+sk9ZWz9WG6y+ErzDE/E5Fma7690= Subject key identifier: 48:7F:28:8E:81:EE:F3:F1:37:10:D9:BB:2E:85:09:30:08:4D:5E:97 Authority key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 Certificate issuer: /CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006 Certificate serial: 1DE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft Manifest number: 1DDE Signing time: Sun 02 Jun 2024 16:36:57 +0000 Manifest this update: Sun 02 Jun 2024 16:36:56 +0000 Manifest next update: Sun 09 Jun 2024 16:36:56 +0000 Files and hashes: 1: GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl (hash: 0o2iLTvX1Y1uRi5n8HSY8F7ev3zXED+6Q5uIRg7Caas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7651 (0x1de3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160827/serialNumber=1933F62B910631D0494CACC47CB167C581045006 Validity Not Before: Jun 2 16:36:56 2024 GMT Not After : Jun 9 16:36:56 2024 GMT Subject: CN=665c9fa9-dcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:ba:b7:54:42:16:87:4b:c3:80:07:f1:95: 2a:9d:b8:a2:dc:04:62:65:5d:90:f0:07:58:bc:33: bf:f6:03:c7:5f:94:19:f2:e9:f6:4a:f5:bb:ec:fe: 0b:46:33:ba:41:e2:89:c4:42:e0:81:ed:bc:16:55: 5b:de:e6:45:c6:6d:b9:32:44:be:a5:e9:b0:99:13: d1:f3:c8:f4:4c:f4:d1:cc:31:d0:0c:6a:63:b5:7e: 2e:7f:d4:84:29:50:03:21:a9:23:1a:e6:b4:72:5b: 74:73:6b:76:f7:10:e1:f0:75:f6:48:56:80:5e:4e: 06:41:ad:31:ab:2d:12:0d:e6:f6:8a:8e:74:59:d1: ce:6b:61:35:99:f4:e7:c6:71:c0:e6:12:a9:e7:b4: aa:58:58:16:30:de:69:ce:c3:bb:0d:33:cd:2d:92: e5:b1:c0:63:e4:23:58:a6:45:fe:d5:67:c7:ea:53: ee:1a:2c:d2:f5:8c:49:c5:71:28:3b:72:94:54:98: 3a:f8:f0:63:7f:de:99:02:12:0e:08:26:81:b5:19: b7:40:0b:53:2c:b9:c9:f3:8d:09:de:17:02:d5:50: f3:31:a0:6a:20:88:81:ea:7a:f4:c4:ef:f6:b5:46: 39:d8:47:16:7e:b3:6e:09:3d:11:fe:2a:81:95:88: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:28:8E:81:EE:F3:F1:37:10:D9:BB:2E:85:09:30:08:4D:5E:97 X509v3 Authority Key Identifier: keyid:19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:25:cb:ba:60:fe:0d:92:d9:44:a2:6b:a4:95:77:1a:9e: d2:67:25:ec:e6:fb:f8:1b:0e:ab:b9:af:f8:86:48:ae:b8:e9: e3:83:99:13:d4:8d:c8:91:a2:7b:78:bd:1a:26:fa:9e:55:54: b4:45:41:18:8b:7f:57:a3:31:2d:6e:7f:ae:57:6b:2c:04:af: 26:52:06:a1:14:df:27:60:22:39:b1:1d:88:ec:0e:c3:40:3f: 9f:59:8e:c9:d2:ca:c1:09:ca:40:ba:44:89:ca:b9:7a:83:90: d0:bd:4a:66:ec:ff:50:72:db:3e:b6:00:09:c6:48:ea:72:f1: e5:38:10:80:b9:63:ab:b8:e6:ae:d7:66:bc:67:c0:2f:56:fa: a7:43:30:66:49:95:4b:a5:75:8b:03:97:1e:ce:99:15:55:08: e0:86:ad:e3:30:9b:3b:ab:89:26:bb:a1:53:82:4f:92:4b:88: 2f:5d:7f:eb:51:99:58:8b:2b:57:dc:38:72:0e:13:f5:34:4e: 2a:bd:2a:f4:fa:1c:e7:36:d9:ba:8b:1f:54:c1:e2:68:d7:40: bd:d4:7b:5e:a9:a7:f4:b7:84:54:12:3f:30:b6:95:08:cb:ff: 7f:ae:5b:45:e2:c4:ba:5c:5f:10:13:2d:5c:bf:21:dd:a0:fe: 99:fb:7a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4MjcxMTAvBgNVBAUTKDE5MzNGNjJCOTEwNjMxRDA0OTRDQUNDNDdDQjE2N0M1 ODEwNDUwMDYwHhcNMjQwNjAyMTYzNjU2WhcNMjQwNjA5MTYzNjU2WjAYMRYwFAYD VQQDEw02NjVjOWZhOS1kY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo+6t1RCFodLw4AH8ZUqnbii3ARiZV2Q8AdYvDO/9gPHX5QZ8un2SvW77P4L RjO6QeKJxELgge28FlVb3uZFxm25MkS+pemwmRPR88j0TPTRzDHQDGpjtX4uf9SE KVADIakjGua0clt0c2t29xDh8HX2SFaAXk4GQa0xqy0SDeb2io50WdHOa2E1mfTn xnHA5hKp57SqWFgWMN5pzsO7DTPNLZLlscBj5CNYpkX+1WfH6lPuGizS9YxJxXEo O3KUVJg6+PBjf96ZAhIOCCaBtRm3QAtTLLnJ840J3hcC1VDzMaBqIIiB6nr0xO/2 tUY52EcWfrNuCT0R/iqBlYhCXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEh/KI6B 7vPxNxDZuy6FCTAITV6XMB8GA1UdIwQYMBaAFBkz9iuRBjHQSUysxHyxZ8WBBFAG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDgyNy85NjUzQ0NCQzZC OEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01kQkpUS3pFZkxGbnhZRUVV QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUUDJLNUVHTWRCSlRLekVmTEZueFlFRVVBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDgyNy85NjUzQ0NCQzZCOEUxMUU2OUU3Qzc1NTRDNEY5QUUwMi9HVFAySzVFR01k QkpUS3pFZkxGbnhZRUVVQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqOyXLumD+DZLZRKJrpJV3Gp7SZyXs5vv4Gw6rua/4hkiuuOnjg5kT 1I3IkaJ7eL0aJvqeVVS0RUEYi39XozEtbn+uV2ssBK8mUgahFN8nYCI5sR2I7A7D QD+fWY7J0srBCcpAukSJyrl6g5DQvUpm7P9Qcts+tgAJxkjqcvHlOBCAuWOruOau 12a8Z8AvVvqnQzBmSZVLpXWLA5cezpkVVQjghq3jMJs7q4kmu6FTgk+SS4gvXX/r UZlYiytX3DhyDhP1NE4qvSr0+hznNtm6ix9UweJo10C91Hteqaf0t4RUEj8wtpUI y/9/rltF4sS6XF8QEy1cvyHdoP6Z+3rY -----END CERTIFICATE-----Generated at Sun Jun 2 17:59:43 2024 by rpki-client on console-fra.rpki-client.org