$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: zs00Qel89SiW73ECI/JrAOMRPlp5tUVaQrdfg149/CU= Subject key identifier: 9C:8D:EF:BD:E3:74:7B:03:4C:15:A4:B6:45:8E:A6:D0:89:7A:46:9E Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 010D Signing time: Fri 03 May 2024 05:29:13 +0000 Manifest this update: Fri 03 May 2024 05:29:12 +0000 Manifest next update: Fri 10 May 2024 05:29:12 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: 4TfNfpepNodkwXbn0KIUmhCoo4j8OD3yy6AI8hUSMM0=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: mK6RCwJZfbyZAx6xScp844Vd5mfI4Dba90GXQEw5nUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: May 3 05:29:12 2024 GMT Not After : May 10 05:29:12 2024 GMT Subject: CN=66347629-d6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:a8:b4:e5:e6:0f:2d:34:be:40:e3:30:11: ad:48:38:d2:6b:dd:b0:0c:f3:53:06:3b:4c:f4:db: 0e:6a:80:e2:49:b8:a6:fa:68:05:a0:24:ad:5d:2b: 62:79:d8:67:6c:fd:37:66:14:dc:66:8a:a0:fa:7e: 82:cd:f2:5d:99:8e:d3:53:6a:d3:7f:26:6a:ee:2f: 02:56:34:95:97:53:cf:b0:05:e5:7b:fe:9e:20:4c: bd:e0:91:ab:31:75:c2:12:cf:10:b5:96:2e:b8:4d: a6:4f:3d:b7:c5:fe:33:d5:35:6c:5c:20:54:e7:6a: 3a:3d:b0:79:2e:63:b9:dd:79:c2:5d:f2:0d:b9:c7: 71:1b:fc:14:5d:4b:0d:7f:cc:3e:9a:e2:17:8c:45: 51:14:12:68:02:4f:41:6b:c8:ca:68:c7:5c:b2:24: 84:35:e6:58:6a:78:d4:5e:07:e9:75:25:8d:41:6b: ad:ee:fa:20:79:eb:15:e1:c7:2d:2a:e8:05:15:3b: cb:92:74:c8:a3:df:a8:86:d1:52:2a:db:1c:b7:68: 97:ef:9f:85:bd:37:9d:5c:58:50:80:c7:ba:9d:ff: 60:eb:87:2a:0f:0f:10:53:e0:5b:6e:86:93:84:8d: 74:cd:39:1c:85:24:e9:d4:50:56:07:00:ef:e4:a8: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:EF:BD:E3:74:7B:03:4C:15:A4:B6:45:8E:A6:D0:89:7A:46:9E X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:e6:05:44:05:42:41:94:7a:c3:d8:7a:60:d8:cd:09:a3:df: 45:6a:d0:12:b1:2a:71:7f:47:31:0e:6a:8a:a7:27:48:b3:0b: 6c:99:ed:be:d6:e3:89:0b:41:f0:38:99:a0:c1:54:07:58:6c: a4:42:bf:6b:ce:0b:da:5d:14:7e:63:4e:95:41:ab:0f:73:29: 5d:04:18:40:18:64:8a:74:4c:d2:ed:59:dd:5d:41:02:82:1c: 61:dc:1c:06:dd:f5:f4:7d:77:2a:81:d0:2b:a9:0c:5e:6a:4a: e4:3f:dc:e3:4a:bb:f0:0c:90:f8:e3:c7:20:2b:55:ce:b3:d7: f8:db:7c:e5:74:5c:c7:a0:ea:ff:da:91:86:5d:6e:a3:b0:ad: c4:ab:0b:7b:05:5c:fe:00:16:59:ef:08:09:dc:c3:d7:0b:fb: 4b:29:8c:58:ba:4c:8b:a8:73:b9:4a:40:dd:54:43:17:d4:6c: 82:08:6a:f0:3e:2d:18:51:99:3d:1a:45:0c:df:c3:b3:89:c4: 93:94:59:df:6f:a5:e4:54:79:36:d3:72:e9:e7:99:4f:b0:f1: 6e:e2:db:1e:da:6e:d6:5e:bd:74:17:35:15:46:8d:4e:ae:9f: 48:e4:fc:4f:84:98:5a:b4:45:2d:72:00:55:7a:7d:35:01:7d: c9:86:47:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjQwNTAzMDUyOTEyWhcNMjQwNTEwMDUyOTEyWjAYMRYwFAYD VQQDEw02NjM0NzYyOS1kNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnqotOXmDy00vkDjMBGtSDjSa92wDPNTBjtM9NsOaoDiSbim+mgFoCStXSti edhnbP03ZhTcZoqg+n6CzfJdmY7TU2rTfyZq7i8CVjSVl1PPsAXle/6eIEy94JGr MXXCEs8QtZYuuE2mTz23xf4z1TVsXCBU52o6PbB5LmO53XnCXfINucdxG/wUXUsN f8w+muIXjEVRFBJoAk9Ba8jKaMdcsiSENeZYanjUXgfpdSWNQWut7vogeesV4cct KugFFTvLknTIo9+ohtFSKtsct2iX75+FvTedXFhQgMe6nf9g64cqDw8QU+BbboaT hI10zTkchSTp1FBWBwDv5KiPBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyN773j dHsDTBWktkWOptCJekaeMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDu5gVEBUJBlHrD2Hpg2M0Jo99FatASsSpxf0cxDmqKpydIswtsme2+ 1uOJC0HwOJmgwVQHWGykQr9rzgvaXRR+Y06VQasPcyldBBhAGGSKdEzS7VndXUEC ghxh3BwG3fX0fXcqgdArqQxeakrkP9zjSrvwDJD448cgK1XOs9f423zldFzHoOr/ 2pGGXW6jsK3Eqwt7BVz+ABZZ7wgJ3MPXC/tLKYxYukyLqHO5SkDdVEMX1GyCCGrw Pi0YUZk9GkUM38OzicSTlFnfb6XkVHk203Lp55lPsPFu4tse2m7WXr10FzUVRo1O rp9I5PxPhJhatEUtcgBVen01AX3JhkdE -----END CERTIFICATE-----Generated at Fri May 3 06:28:42 2024 by rpki-client on console-fra.rpki-client.org