$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json) Hash identifier: VIsk9BHiwobF/5R22hS/4Mz3W3fVLwAuf2m1dGcpU0k= Subject key identifier: EE:63:1B:8E:37:0F:E4:F5:6D:70:CF:69:B4:82:F4:C8:A3:B2:75:DD Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft Manifest number: 81 Signing time: Fri 17 May 2024 07:25:17 +0000 Manifest this update: Fri 17 May 2024 07:25:17 +0000 Manifest next update: Fri 24 May 2024 07:25:17 +0000 Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: kdvZ77jpO0MtzMEGUl+jraAuTI6yad93CDTsicjyyjw=) 2: 1FA1A3AE9D7311EE96E7821CC4F9AE02.roa (hash: g/3lsPtP0rCQttdRyM9iZWgo7wwPQglOhvZUdi86lfo=) 3: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: lwIovDBhbWl0rKnDI2i+BH67T5RQmBVJUsGai/l3P3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Validity Not Before: May 17 07:25:17 2024 GMT Not After : May 24 07:25:17 2024 GMT Subject: CN=6647065d-b2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:aa:ed:c0:93:e0:af:f9:dc:a1:cc:85:5f: 42:a9:81:24:9d:75:dd:6a:c0:30:26:1d:30:0d:ef: 80:0f:cf:42:ab:28:14:82:6f:d9:8b:72:42:a9:79: 16:4e:44:5c:b9:e7:49:13:8a:5b:ae:45:38:25:46: 28:12:20:72:5a:b6:fc:1a:cc:92:53:a5:66:cf:89: 0d:14:34:d8:18:0d:5e:9f:70:ba:bd:5b:1d:ee:28: 6d:f2:38:4b:0f:6c:6b:2c:52:29:1e:9d:63:a1:51: be:2f:31:1b:f4:6a:57:1f:d6:c3:ad:18:30:65:2e: 74:51:ce:2e:bc:3a:d2:47:86:1a:96:a1:15:48:1b: 67:bc:62:0e:5f:f7:20:93:d7:87:57:cd:da:fb:04: 84:9d:d5:f7:2a:ac:ce:7c:44:2a:19:e0:35:3c:c7: f6:82:07:e3:e0:c3:44:fc:81:a8:71:fb:f3:b6:f6: fc:b5:70:5e:df:52:af:29:8b:32:eb:27:28:26:5f: 4c:62:4e:3f:07:d9:c7:30:bd:a9:49:62:f4:77:88: e3:47:38:37:fc:a2:2b:d0:52:5d:40:8f:0c:24:56: b7:a1:35:8b:43:96:f5:b9:56:f6:ee:a9:5c:32:07: d9:23:f3:36:ec:d4:6c:52:11:9e:a2:b5:35:5c:60: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:63:1B:8E:37:0F:E4:F5:6D:70:CF:69:B4:82:F4:C8:A3:B2:75:DD X509v3 Authority Key Identifier: keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5b:1a:57:4f:bc:d2:a5:a0:82:4e:ec:2d:4e:b0:e2:6d:4a: f3:ef:93:e1:e1:21:39:73:70:c7:7d:07:75:32:27:83:d3:94: 14:4c:61:3e:34:24:50:a0:22:80:49:fb:9c:57:6e:41:ec:e7: f1:03:8e:99:13:c2:f8:8f:e6:dc:ba:9a:4b:64:27:77:5e:6d: cb:c3:14:a5:f6:50:4f:0c:0f:fd:fe:10:79:17:48:f6:1b:6c: 9b:ef:ec:7c:51:d5:f3:43:e3:ae:1f:98:8f:82:f6:f3:7d:ea: 72:3b:f9:a9:7c:5c:a6:88:89:06:8d:7b:24:45:a0:6b:ca:cc: 09:88:a2:20:14:6c:76:ec:da:7e:22:1b:1e:ca:cd:2d:53:9e: 0c:55:b3:dd:ca:04:58:5f:ae:a4:48:56:cb:25:73:c0:1a:36: 37:1a:7d:cf:d9:b6:50:eb:76:28:5e:ed:a9:75:3c:db:c0:1c: d4:96:d5:a3:64:4a:f8:04:04:84:52:7f:41:11:33:74:b6:9b: 1b:8f:24:1e:e0:ac:7a:d0:de:92:c2:f0:d7:f7:83:d0:d9:fc: ba:be:b6:b3:4f:3e:66:c4:01:a3:97:26:03:d5:2a:3d:24:71: 66:03:f3:35:03:44:2e:58:34:33:00:8a:c8:49:21:d3:c4:cb: a9:44:c3:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE Mzg3MjYzQjgwHhcNMjQwNTE3MDcyNTE3WhcNMjQwNTI0MDcyNTE3WjAYMRYwFAYD VQQDEw02NjQ3MDY1ZC1iMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYCq7cCT4K/53KHMhV9CqYEknXXdasAwJh0wDe+AD89CqygUgm/Zi3JCqXkW TkRcuedJE4pbrkU4JUYoEiByWrb8GsySU6Vmz4kNFDTYGA1en3C6vVsd7iht8jhL D2xrLFIpHp1joVG+LzEb9GpXH9bDrRgwZS50Uc4uvDrSR4YalqEVSBtnvGIOX/cg k9eHV83a+wSEndX3KqzOfEQqGeA1PMf2ggfj4MNE/IGocfvztvb8tXBe31KvKYsy 6ycoJl9MYk4/B9nHML2pSWL0d4jjRzg3/KIr0FJdQI8MJFa3oTWLQ5b1uVb27qlc MgfZI/M27NRsUhGeorU1XGDGFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5jG443 D+T1bXDPabSC9MijsnXdMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2 NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNWxpXT7zSpaCCTuwtTrDibUrz75Ph4SE5c3DHfQd1MieD05QUTGE+ NCRQoCKASfucV25B7OfxA46ZE8L4j+bcuppLZCd3Xm3LwxSl9lBPDA/9/hB5F0j2 G2yb7+x8UdXzQ+OuH5iPgvbzfepyO/mpfFymiIkGjXskRaBryswJiKIgFGx27Np+ Ihseys0tU54MVbPdygRYX66kSFbLJXPAGjY3Gn3P2bZQ63YoXu2pdTzbwBzUltWj ZEr4BASEUn9BETN0tpsbjyQe4Kx60N6SwvDX94PQ2fy6vrazTz5mxAGjlyYD1So9 JHFmA/M1A0QuWDQzAIrISSHTxMupRMM5 -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org