$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: YNZEqttFV3mhSMQZL7ehjR/BwtAucLG8yW8p63prYoc= Subject key identifier: F3:22:1E:ED:A5:A1:0C:47:8C:2C:79:F3:5A:EB:89:62:8A:94:74:5E Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 13F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 13EB Signing time: Sat 04 May 2024 17:34:29 +0000 Manifest this update: Sat 04 May 2024 17:34:28 +0000 Manifest next update: Sat 11 May 2024 17:34:28 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: hD1D1Qk3M+0dxa6o3MZtc13MtlF/xwsdKiBKnyC42Ak=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: C7tafAjOmK53MehrGTzXhIEaHufayaREv/AYHHsLH9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5106 (0x13f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: May 4 17:34:28 2024 GMT Not After : May 11 17:34:28 2024 GMT Subject: CN=663671a5-9834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:d9:70:86:01:ff:9b:52:fb:13:fd:52:7e: a0:54:43:8b:15:dd:a5:bf:32:e6:c1:8c:ad:72:e0: df:90:74:88:ca:7e:6d:fb:46:7d:43:e8:f2:78:d9: 0f:b5:86:8a:d6:ea:af:f9:d4:77:0e:5d:21:3f:1b: 7d:56:4d:b4:ce:17:5f:b1:77:f5:c8:c1:17:f7:61: 22:51:52:73:2b:99:dc:5b:51:10:5c:c8:b6:99:87: d1:24:98:02:72:b1:c2:96:5d:f4:f4:60:b2:a4:30: b5:9f:05:c9:2a:07:22:b5:85:5c:6f:63:c7:2c:ab: 70:5d:2e:0e:d6:c5:2c:4b:07:16:e4:71:d5:0d:12: dc:de:8e:52:89:f4:6d:87:c6:ed:97:1f:be:b5:89: f3:98:4d:c5:f4:de:10:15:ec:dd:0a:31:f2:78:17: be:f4:58:17:08:37:ce:b9:36:ef:31:bf:0c:17:4b: a9:67:43:97:f0:65:1d:06:6d:29:74:47:53:2e:ca: e3:17:e4:21:29:bf:cd:8d:17:d7:8a:61:9c:3d:41: 78:92:8c:53:f5:a0:d0:93:e8:82:71:0f:d0:29:7f: a8:af:5e:d8:c2:c6:0a:1d:ff:95:9a:62:df:49:28: 46:05:72:ca:85:d3:0d:7e:fd:a2:86:77:8f:49:3d: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:1E:ED:A5:A1:0C:47:8C:2C:79:F3:5A:EB:89:62:8A:94:74:5E X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:20:40:29:c1:12:ed:51:30:b7:52:a5:3f:d7:06:03:b3:86: 0f:50:d9:60:c9:22:e4:77:d9:ac:42:0d:28:af:d2:71:cb:cb: 88:48:56:c8:9c:39:ed:c1:04:ff:e7:37:dc:57:92:ef:ab:72: 15:ab:4a:d9:b8:64:b1:4c:34:f5:a1:43:74:68:41:74:74:97: bd:ba:b8:2c:a9:1f:35:09:d2:a7:21:3d:5d:29:95:e1:c7:e5: 92:1a:fa:69:c1:7b:b8:75:e4:26:56:5a:2d:1a:16:07:a4:ee: 57:4a:2d:df:46:ac:20:d5:85:66:c2:90:d4:88:95:30:71:ba: 3a:07:a4:31:d8:c3:97:5c:42:22:cb:99:d8:db:ed:8d:6f:c9: ae:3f:af:79:78:5b:c6:2e:af:30:d0:ad:63:5d:70:90:7a:39: b1:93:66:f1:f7:00:2c:e6:d7:1f:e8:bb:b7:8a:3b:cf:07:eb: 79:59:34:46:d9:25:02:47:a6:8d:ab:2e:16:48:58:58:a1:74: 74:c3:f1:50:e9:c3:29:5d:da:f1:ab:03:6f:29:95:6d:f5:2e: 47:fd:7a:f3:e1:8f:30:6b:aa:ca:4f:81:b7:f7:23:2a:ec:0c: 1e:42:5b:d9:51:63:50:9d:88:b7:db:88:2b:53:42:34:5f:bb: 08:b4:4b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjQwNTA0MTczNDI4WhcNMjQwNTExMTczNDI4WjAYMRYwFAYD VQQDEw02NjM2NzFhNS05ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSvZcIYB/5tS+xP9Un6gVEOLFd2lvzLmwYytcuDfkHSIyn5t+0Z9Q+jyeNkP tYaK1uqv+dR3Dl0hPxt9Vk20zhdfsXf1yMEX92EiUVJzK5ncW1EQXMi2mYfRJJgC crHCll309GCypDC1nwXJKgcitYVcb2PHLKtwXS4O1sUsSwcW5HHVDRLc3o5SifRt h8btlx++tYnzmE3F9N4QFezdCjHyeBe+9FgXCDfOuTbvMb8MF0upZ0OX8GUdBm0p dEdTLsrjF+QhKb/NjRfXimGcPUF4koxT9aDQk+iCcQ/QKX+or17YwsYKHf+VmmLf SShGBXLKhdMNfv2ihnePST0omwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMiHu2l oQxHjCx581rriWKKlHReMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwIEApwRLtUTC3UqU/1wYDs4YPUNlgySLkd9msQg0or9Jxy8uISFbI nDntwQT/5zfcV5Lvq3IVq0rZuGSxTDT1oUN0aEF0dJe9urgsqR81CdKnIT1dKZXh x+WSGvppwXu4deQmVlotGhYHpO5XSi3fRqwg1YVmwpDUiJUwcbo6B6Qx2MOXXEIi y5nY2+2Nb8muP695eFvGLq8w0K1jXXCQejmxk2bx9wAs5tcf6Lu3ijvPB+t5WTRG 2SUCR6aNqy4WSFhYoXR0w/FQ6cMpXdrxqwNvKZVt9S5H/Xrz4Y8wa6rKT4G39yMq 7AweQlvZUWNQnYi324grU0I0X7sItEvG -----END CERTIFICATE-----Generated at Sat May 4 19:58:40 2024 by rpki-client on console-ams.rpki-client.org