$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: oxyzzDv9I/gulTVIPV90LGdNCuisWREp05BMPR+ODfY= Subject key identifier: 07:FF:A1:6B:21:55:ED:60:BC:5A:2D:1B:6B:36:13:B5:DE:B2:B8:60 Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 0378 Signing time: Mon 29 Apr 2024 02:41:17 +0000 Manifest this update: Mon 29 Apr 2024 02:41:16 +0000 Manifest next update: Mon 06 May 2024 02:41:16 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: 3OwP1E68/5oUsU4iKsuebxU+cIlkka9P+Jgx4wukewQ=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: D+ZlHwdaikSqimshlMtOdjKO4cUt9Td5TIsVlTRcXrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Apr 29 02:41:16 2024 GMT Not After : May 6 02:41:16 2024 GMT Subject: CN=662f08cc-34a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:d6:21:f8:8c:94:48:ec:96:12:d2:7e:0a: f2:7a:fc:d6:ec:cd:4a:39:3b:2b:f5:b0:de:a8:98: 52:b2:4e:c8:3e:5f:03:9b:37:b9:d8:20:31:32:83: 62:bf:01:82:82:61:6b:bd:e3:d0:86:1a:30:2c:b1: 84:7f:22:7b:97:f4:ca:7e:61:3d:0a:af:c3:24:9c: 43:1c:f5:9b:70:11:3c:3f:5a:5d:72:ec:4e:53:44: 58:d8:10:bd:3c:47:eb:b0:bc:a9:cd:6f:91:08:98: 94:3c:18:4a:10:e0:06:4f:cd:51:ac:49:71:4a:1c: a2:43:cc:58:d2:b0:8b:c0:f3:d4:60:4c:04:81:75: 01:33:e2:2d:bc:b6:60:f5:87:2f:5a:ad:74:22:0d: a2:ce:26:28:4f:b2:3d:1d:8f:83:70:0d:62:b2:35: 28:8b:54:94:da:c9:c5:25:4b:c3:aa:4c:8f:34:2d: 4a:4f:6a:d8:4b:eb:7a:38:0d:28:50:e6:dc:0e:e2: c2:98:2d:31:c6:b2:57:62:f0:05:c8:19:92:cc:20: 66:30:5e:b9:1b:b8:9e:e0:21:40:4f:c7:34:c9:dc: 36:ca:df:39:b7:cb:11:2f:29:4b:ec:62:df:66:60: 39:1e:17:8b:02:f1:50:21:1c:e5:8b:35:34:28:ef: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FF:A1:6B:21:55:ED:60:BC:5A:2D:1B:6B:36:13:B5:DE:B2:B8:60 X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:92:76:44:25:f3:a5:a5:fd:90:84:ef:42:1e:bf:92:1c:b0: 09:46:60:27:a5:ed:9f:81:5b:3e:99:45:48:27:64:18:c1:90: d6:95:59:d9:db:2f:05:d9:46:98:9f:98:90:cf:ad:07:11:9b: 03:d8:a7:17:37:b4:b7:59:3c:27:74:a0:ab:9b:ca:b4:eb:a8: d7:5e:d5:f2:d3:4f:64:c3:39:a9:04:f4:38:9d:f0:e0:88:bf: 71:ba:35:b5:cf:ea:61:59:66:32:1e:bb:4b:bb:6b:49:ea:f3: b3:a6:77:a1:d6:ba:c2:89:6c:b2:7b:82:3a:f8:1b:b5:7c:80: 6a:bf:0e:41:15:0b:9a:92:c9:d5:e2:8f:99:41:0d:9b:fd:c6: 5a:c1:70:45:5e:5f:8d:e0:91:30:e3:a7:c0:c5:80:e5:1b:9e: 34:69:91:8c:a4:50:2b:e2:df:0b:ac:10:8e:a7:9e:81:a9:86: 77:4c:e5:a5:0a:2c:9a:72:32:92:32:a9:17:dd:ca:72:36:42: 4d:ca:6f:66:7b:98:d1:fa:22:4e:3e:02:ac:68:bf:d2:79:b9: c5:44:e9:f6:7a:19:7f:ff:79:e3:70:99:d2:f1:9e:71:97:9d: c0:4b:9f:75:91:73:4d:ad:2f:99:13:6b:3b:9b:67:ca:fe:38: 09:77:2e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjQwNDI5MDI0MTE2WhcNMjQwNTA2MDI0MTE2WjAYMRYwFAYD VQQDEw02NjJmMDhjYy0zNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBnWIfiMlEjslhLSfgryevzW7M1KOTsr9bDeqJhSsk7IPl8Dmze52CAxMoNi vwGCgmFrvePQhhowLLGEfyJ7l/TKfmE9Cq/DJJxDHPWbcBE8P1pdcuxOU0RY2BC9 PEfrsLypzW+RCJiUPBhKEOAGT81RrElxShyiQ8xY0rCLwPPUYEwEgXUBM+ItvLZg 9YcvWq10Ig2iziYoT7I9HY+DcA1isjUoi1SU2snFJUvDqkyPNC1KT2rYS+t6OA0o UObcDuLCmC0xxrJXYvAFyBmSzCBmMF65G7ie4CFAT8c0ydw2yt85t8sRLylL7GLf ZmA5HheLAvFQIRzlizU0KO/ghQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAf/oWsh Ve1gvFotG2s2E7XesrhgMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrknZEJfOlpf2QhO9CHr+SHLAJRmAnpe2fgVs+mUVIJ2QYwZDWlVnZ 2y8F2UaYn5iQz60HEZsD2KcXN7S3WTwndKCrm8q066jXXtXy009kwzmpBPQ4nfDg iL9xujW1z+phWWYyHrtLu2tJ6vOzpneh1rrCiWyye4I6+Bu1fIBqvw5BFQuaksnV 4o+ZQQ2b/cZawXBFXl+N4JEw46fAxYDlG540aZGMpFAr4t8LrBCOp56BqYZ3TOWl CiyacjKSMqkX3cpyNkJNym9me5jR+iJOPgKsaL/SebnFROn2ehl//3njcJnS8Z5x l53AS591kXNNrS+ZE2s7m2fK/jgJdy66 -----END CERTIFICATE-----Generated at Mon Apr 29 03:35:02 2024 by rpki-client on console-fra.rpki-client.org