$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: mYqgpZzapVqHtt/+h32jfK+8KBK8xiEbWWjiD8kSx0M= Subject key identifier: 42:15:2E:10:15:78:26:59:86:1E:16:5B:4B:5F:1B:1F:D1:EC:08:5A Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 97 Signing time: Fri 17 May 2024 05:40:21 +0000 Manifest this update: Fri 17 May 2024 05:40:20 +0000 Manifest next update: Fri 24 May 2024 05:40:20 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: nv1gIkA97avN1sW0cGv5FbR9SsAMynpcvqkl75bLhQw=) 2: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: qhG6P4ezQ8uqL0kJF/rbO1/GqUlQ4zd2iYV0e3/WbBs=) 3: C1BC7028511111EEB1F5CB5BC4F9AE02.roa (hash: sFZnrJ5UmI472S3AzfDp2PbbIYx7O3FFKiEpE2/8pT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: May 17 05:40:20 2024 GMT Not After : May 24 05:40:20 2024 GMT Subject: CN=6646edc5-7d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:59:84:86:80:a5:b5:97:4a:28:c7:57:76:d9: c1:e2:f6:2f:e1:0f:4b:cd:8f:99:9f:a4:f0:d5:a3: b2:d8:18:56:68:81:51:27:57:d4:78:2e:a3:ad:e2: 2b:62:f4:fb:da:b2:5f:0a:80:df:b1:b4:29:d5:33: db:8a:7c:83:2a:07:ad:4d:0b:aa:28:8c:da:f6:d8: 12:f7:cb:67:9c:28:46:12:d8:49:7d:d7:4b:38:b5: d2:07:8f:92:8b:bf:5d:69:18:40:ab:27:80:99:a8: 75:b7:b3:d5:dd:7d:32:e3:c9:54:da:16:71:53:1e: 24:89:cc:0b:bc:82:c3:45:40:c9:52:07:fa:28:ab: 25:d3:21:9f:ed:57:d2:65:e7:af:64:dc:d5:73:c7: f4:c7:3a:2d:d8:95:24:dd:34:8f:15:2f:cd:9f:bc: fe:67:f3:00:ad:95:45:36:96:b3:58:73:a4:2b:d7: 94:b9:9f:d9:16:e6:e3:ad:67:52:cd:e2:b9:b3:09: c8:d8:7c:1a:ac:f5:89:c0:fa:9b:ca:aa:e1:44:63: 43:4e:2f:30:82:b2:2f:91:d4:6a:fa:d0:ce:3b:29: a6:33:a8:49:69:87:42:91:05:56:be:ec:e1:0f:2a: 56:65:a2:95:d2:f0:41:b3:42:0c:6d:a8:85:c1:a0: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:15:2E:10:15:78:26:59:86:1E:16:5B:4B:5F:1B:1F:D1:EC:08:5A X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:c7:cf:97:ec:47:ad:20:b7:53:6b:61:e1:2c:3e:0a:74: 5a:79:04:45:ea:e9:ea:21:e6:40:eb:d4:ed:cb:53:d9:2a:e4: 37:93:40:46:07:e4:95:58:a8:9c:29:10:28:9b:71:22:ac:b1: 9f:38:47:d7:a5:e3:e5:6a:1a:1f:54:9c:07:60:8f:2d:2e:90: 30:ed:53:fb:4e:68:90:4f:05:f2:4d:d2:9e:f1:57:2f:79:f0: e5:e9:ba:5e:b8:5d:07:d1:60:ba:1c:0b:fa:d4:b5:21:84:57: 44:d4:c2:97:07:c4:72:09:a9:4a:b2:b2:aa:a1:06:3f:e6:4b: 0c:ca:42:9c:7c:d8:1e:f6:d1:e4:30:10:b1:02:de:37:91:01: 4b:de:52:40:26:c1:0a:7d:9e:cf:3f:e5:93:be:1e:6c:47:28: 8b:66:5a:9d:f2:e8:ec:df:31:a1:bb:ee:3d:bf:0a:45:75:8c: c5:f5:ab:36:ef:d6:89:5c:9d:b4:aa:3c:6b:23:de:ea:d5:9f: af:1b:89:78:9a:b9:75:8f:56:37:5a:91:04:12:80:5f:8b:08: 72:7b:9e:2a:c9:84:62:90:69:ba:92:67:86:38:10:9d:ea:74: e2:87:41:82:eb:40:c5:e0:b2:65:c1:58:87:cf:b5:72:c9:a1: 69:08:41:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjQwNTE3MDU0MDIwWhcNMjQwNTI0MDU0MDIwWjAYMRYwFAYD VQQDEw02NjQ2ZWRjNS03ZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/lmEhoCltZdKKMdXdtnB4vYv4Q9LzY+Zn6Tw1aOy2BhWaIFRJ1fUeC6jreIr YvT72rJfCoDfsbQp1TPbinyDKgetTQuqKIza9tgS98tnnChGEthJfddLOLXSB4+S i79daRhAqyeAmah1t7PV3X0y48lU2hZxUx4kicwLvILDRUDJUgf6KKsl0yGf7VfS ZeevZNzVc8f0xzot2JUk3TSPFS/Nn7z+Z/MArZVFNpazWHOkK9eUuZ/ZFubjrWdS zeK5swnI2HwarPWJwPqbyqrhRGNDTi8wgrIvkdRq+tDOOymmM6hJaYdCkQVWvuzh DypWZaKV0vBBs0IMbaiFwaDYfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIVLhAV eCZZhh4WW0tfGx/R7AhaMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAV8fPl+xHrSC3U2th4Sw+CnRaeQRF6unqIeZA69Tty1PZKuQ3k0BG B+SVWKicKRAom3EirLGfOEfXpePlahofVJwHYI8tLpAw7VP7TmiQTwXyTdKe8Vcv efDl6bpeuF0H0WC6HAv61LUhhFdE1MKXB8RyCalKsrKqoQY/5ksMykKcfNge9tHk MBCxAt43kQFL3lJAJsEKfZ7PP+WTvh5sRyiLZlqd8ujs3zGhu+49vwpFdYzF9as2 79aJXJ20qjxrI97q1Z+vG4l4mrl1j1Y3WpEEEoBfiwhye54qyYRikGm6kmeGOBCd 6nTih0GC60DF4LJlwViHz7VyyaFpCEEb -----END CERTIFICATE-----Generated at Fri May 17 06:46:25 2024 by rpki-client on console-ams.rpki-client.org