$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: KufDmyJqiStr687VaUKTR7fveL57vLS0LNylQ8qvf9w= Subject key identifier: 83:A0:F6:B1:74:3E:95:05:FB:C0:15:1F:F5:E0:ED:C5:2A:81:B3:B2 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 36 Signing time: Fri 17 May 2024 08:26:09 +0000 Manifest this update: Fri 17 May 2024 08:26:09 +0000 Manifest next update: Fri 24 May 2024 08:26:09 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: M+f+qlzrqYmToU5KySQRSwE8p8q7tSR2+uw2bAUzYp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: May 17 08:26:09 2024 GMT Not After : May 24 08:26:09 2024 GMT Subject: CN=664714a1-96d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:85:77:27:5d:87:65:33:a8:01:45:d4:63: ce:3b:7b:17:0e:26:f5:d8:81:f0:d0:2f:f3:4c:1e: ea:b8:f0:06:a2:53:67:e3:6a:8e:69:be:d0:0d:19: 6b:7d:c7:bf:fb:82:4a:d7:fc:95:b1:ee:f1:e0:9b: d3:c3:15:35:01:ad:88:ba:7d:17:d2:2b:db:fc:fe: be:47:f6:e1:3b:2f:48:38:c0:48:66:8d:ef:0b:38: b2:0b:e6:69:72:f8:80:3c:6a:38:6f:ec:8c:18:0f: 67:a8:bf:3e:ae:b3:bc:20:1b:1d:53:96:2f:8b:32: 87:1b:cb:09:1e:a6:9a:d2:da:b3:15:da:3f:11:09: 47:9c:0a:50:47:27:26:9b:bb:7f:2c:14:5f:ed:e9: c3:e3:ac:db:04:22:9c:c6:dc:bc:8c:84:a9:70:2a: 52:b4:9c:c0:ec:56:d2:25:61:75:ff:e3:7e:dc:5d: 6f:e6:0d:03:4b:bf:93:d3:76:f7:52:c3:18:6e:f7: fa:07:1f:24:6f:7b:0a:90:63:c9:0b:2b:3c:cc:36: bb:59:7c:00:af:11:d2:53:19:2b:5e:4c:32:e4:e9: 71:d4:aa:ba:a4:ae:a5:a5:0e:b4:14:4b:51:de:ad: 59:68:13:98:29:3a:1f:cb:da:39:d3:24:f4:fa:56: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A0:F6:B1:74:3E:95:05:FB:C0:15:1F:F5:E0:ED:C5:2A:81:B3:B2 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6e:b9:1c:c7:a5:07:e8:42:37:3a:37:5d:04:e6:df:ac:9e: 0b:cd:dc:a5:0b:38:6d:21:fd:c0:11:38:0e:38:30:61:ba:5e: e6:d3:2a:08:22:90:fc:09:c4:2e:63:c9:b0:ce:c4:10:e6:08: 41:85:54:91:e8:d5:8b:ff:b6:ff:04:87:1d:23:d7:05:07:43: e8:dc:dc:fd:41:a5:66:a8:11:6e:81:51:cd:59:46:55:cd:59: 25:60:c9:02:fe:46:18:2f:5a:ef:ad:79:93:5c:49:b1:44:b9: 76:17:14:74:0c:8a:1a:32:5d:b0:84:af:9f:1f:f8:ce:24:65: 16:28:ae:25:70:a8:f7:75:12:1a:c6:6e:cb:1a:2f:d6:e8:1f: b4:9d:13:39:88:8d:18:b4:4a:41:78:0d:87:81:0e:b5:c0:c5: 22:64:f1:c6:a6:fe:8c:f3:0d:bf:e3:5c:c0:28:2e:b9:2e:4f: f0:34:d4:a7:28:63:22:91:65:3c:08:5a:bf:72:53:2c:1d:48: dc:5e:bd:88:37:9f:87:00:a9:52:62:c4:b9:62:cd:36:cb:32: 2e:97:1d:f1:a4:cd:88:cc:e0:57:b9:c6:8f:d2:f4:d7:8a:81: e7:dd:4a:87:9e:37:09:98:e7:aa:a1:d6:3e:98:56:22:ff:17: e0:b6:90:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzJCOTExMC8GA1UEBRMoMTlCQjU1MzA2MkY5MzYzRDYwREE2Qjk0NjgxRjFBRDYw NDgzRDVCNzAeFw0yNDA1MTcwODI2MDlaFw0yNDA1MjQwODI2MDlaMBgxFjAUBgNV BAMTDTY2NDcxNGExLTk2ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcNIV3J12HZTOoAUXUY847excOJvXYgfDQL/NMHuq48AaiU2fjao5pvtANGWt9 x7/7gkrX/JWx7vHgm9PDFTUBrYi6fRfSK9v8/r5H9uE7L0g4wEhmje8LOLIL5mly +IA8ajhv7IwYD2eovz6us7wgGx1Tli+LMocbywkepprS2rMV2j8RCUecClBHJyab u38sFF/t6cPjrNsEIpzG3LyMhKlwKlK0nMDsVtIlYXX/437cXW/mDQNLv5PTdvdS wxhu9/oHHyRvewqQY8kLKzzMNrtZfACvEdJTGSteTDLk6XHUqrqkrqWlDrQUS1He rVloE5gpOh/L2jnTJPT6VnMnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg6D2sXQ+ lQX7wBUf9eDtxSqBs7IwHwYDVR0jBBgwFoAUGbtVMGL5Nj1g2muUaB8a1gSD1bcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDMkI5LzM5OEU4QTI2QzJB MjExRUU5MUQ5NTM1Q0M0RjlBRTAyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2J0Vk1HTDVOajFnMm11VWFCOGExZ1NEMWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD MkI5LzM5OEU4QTI2QzJBMjExRUU5MUQ5NTM1Q0M0RjlBRTAyL0didFZNR0w1Tmox ZzJtdVVhQjhhMWdTRDFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9uuRzHpQfoQjc6N10E5t+sngvN3KULOG0h/cAROA44MGG6XubTKggi kPwJxC5jybDOxBDmCEGFVJHo1Yv/tv8Ehx0j1wUHQ+jc3P1BpWaoEW6BUc1ZRlXN WSVgyQL+RhgvWu+teZNcSbFEuXYXFHQMihoyXbCEr58f+M4kZRYoriVwqPd1EhrG bssaL9boH7SdEzmIjRi0SkF4DYeBDrXAxSJk8cam/ozzDb/jXMAoLrkuT/A01Kco YyKRZTwIWr9yUywdSNxevYg3n4cAqVJixLlizTbLMi6XHfGkzYjM4Fe5xo/S9NeK gefdSoeeNwmY56qh1j6YViL/F+C2kKs= -----END CERTIFICATE-----Generated at Fri May 17 10:59:11 2024 by rpki-client on console-ams.rpki-client.org