$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: x37+xYw00JWHDpL0cUCeS4Y4vhVJuyphXFCCRSLOk54= Subject key identifier: 15:69:ED:C5:77:FB:E0:B4:FC:D9:33:75:49:82:FE:C3:51:89:D1:EB Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 010C Signing time: Fri 03 May 2024 05:30:18 +0000 Manifest this update: Fri 03 May 2024 05:30:18 +0000 Manifest next update: Fri 10 May 2024 05:30:18 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: UleHlpoJGjs1z4b0XHaGrFUFL2tSM0VIZIcijapFZNk=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: Z9vK6BUEUyhkHCgbEYCQB83vkqUnWnDNuYhGe3OvPYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: May 3 05:30:18 2024 GMT Not After : May 10 05:30:18 2024 GMT Subject: CN=6634766a-3715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:c0:7c:54:d3:dc:3c:da:b0:0a:9b:49:30: d6:32:46:6a:ce:9f:6d:26:9f:7b:90:c7:e5:aa:75: 4a:8e:e1:02:b2:d9:4e:87:b2:f1:2d:ac:7c:8f:cb: e7:82:7b:82:a9:3b:36:f3:41:bb:db:a5:34:bf:5e: fa:8c:16:ba:98:55:b1:ff:f8:a7:10:f3:25:d3:11: 50:8a:40:da:68:f0:71:18:74:6d:98:32:66:04:ba: d5:ef:2f:90:03:62:81:66:c3:05:d2:c3:66:d6:1b: 12:a4:6b:8e:08:f3:79:d7:da:29:45:f3:36:f0:dc: 95:07:15:fa:48:fa:e5:2e:7a:c3:d6:43:64:51:0f: 5e:11:6a:31:b4:c7:75:47:32:55:90:10:15:ce:37: 59:49:8f:51:bd:5b:73:5d:a1:35:04:c5:16:d4:33: 23:1f:8f:cc:1b:1a:57:29:b4:ac:ca:9c:b3:fc:e2: 99:fa:b3:df:b7:99:07:6f:74:00:de:fb:86:1d:70: 33:98:d6:d1:08:13:57:08:cd:34:1b:f7:ab:41:fd: df:f6:94:50:61:c1:77:1f:31:42:4a:9a:0c:76:15: 38:49:df:e1:2d:56:ed:90:6f:0f:9b:f1:f9:ae:29: 25:4e:16:b1:f6:3e:88:8c:1d:95:e2:b6:e2:b0:52: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:ED:C5:77:FB:E0:B4:FC:D9:33:75:49:82:FE:C3:51:89:D1:EB X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:f8:91:4c:41:4a:30:07:91:78:42:82:24:73:2a:41:89: 05:6b:89:54:76:1d:0b:fa:a1:eb:6a:ba:c1:16:d5:bd:f3:0d: 68:b7:03:42:46:10:99:e5:00:40:44:eb:99:82:fe:08:0b:a2: 35:ca:88:21:b8:74:5c:25:d1:ad:a3:89:30:7d:21:4e:d7:f5: cc:a4:ad:02:2c:1b:ba:71:35:8f:3d:59:f6:db:26:37:e0:19: 1f:4d:be:a1:96:93:24:00:6e:30:f2:34:b6:9e:23:91:a3:bc: bd:8b:80:6c:78:6b:33:f8:ab:0a:07:85:d1:a2:3c:a4:a2:99: ef:c7:33:c3:88:10:8e:5c:14:ca:e1:47:a1:2f:c2:30:10:17: fe:e7:38:5f:4b:1b:ca:5f:1e:89:6f:ad:70:cb:93:d2:0d:61: c5:56:08:b9:bb:4e:a6:01:41:ab:23:72:d3:85:9d:a3:f9:16: e5:11:cd:a4:af:6d:85:3c:fa:e4:e7:8c:0e:fa:dc:23:de:8e: a8:9b:2c:98:8f:b4:74:be:7e:7a:e8:15:d5:75:12:8d:69:ac: e3:4f:a1:d2:9c:3b:3d:6b:29:56:2c:81:70:9e:c6:ad:68:4b: 63:3c:3d:55:57:85:09:dc:42:9d:93:a8:1f:e8:ca:66:bd:d6: db:7b:da:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjQwNTAzMDUzMDE4WhcNMjQwNTEwMDUzMDE4WjAYMRYwFAYD VQQDEw02NjM0NzY2YS0zNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3obAfFTT3DzasAqbSTDWMkZqzp9tJp97kMflqnVKjuECstlOh7LxLax8j8vn gnuCqTs280G726U0v176jBa6mFWx//inEPMl0xFQikDaaPBxGHRtmDJmBLrV7y+Q A2KBZsMF0sNm1hsSpGuOCPN519opRfM28NyVBxX6SPrlLnrD1kNkUQ9eEWoxtMd1 RzJVkBAVzjdZSY9RvVtzXaE1BMUW1DMjH4/MGxpXKbSsypyz/OKZ+rPft5kHb3QA 3vuGHXAzmNbRCBNXCM00G/erQf3f9pRQYcF3HzFCSpoMdhU4Sd/hLVbtkG8Pm/H5 riklThax9j6IjB2V4rbisFLEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVp7cV3 ++C0/NkzdUmC/sNRidHrMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkxfiRTEFKMAeReEKCJHMqQYkFa4lUdh0L+qHrarrBFtW98w1otwNC RhCZ5QBAROuZgv4IC6I1yoghuHRcJdGto4kwfSFO1/XMpK0CLBu6cTWPPVn22yY3 4BkfTb6hlpMkAG4w8jS2niORo7y9i4BseGsz+KsKB4XRojykopnvxzPDiBCOXBTK 4UehL8IwEBf+5zhfSxvKXx6Jb61wy5PSDWHFVgi5u06mAUGrI3LThZ2j+RblEc2k r22FPPrk54wO+twj3o6omyyYj7R0vn566BXVdRKNaazjT6HSnDs9aylWLIFwnsat aEtjPD1VV4UJ3EKdk6gf6Mpmvdbbe9qE -----END CERTIFICATE-----Generated at Fri May 3 06:28:41 2024 by rpki-client on console-fra.rpki-client.org