$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft File: gfRnrcMX0WNIr0MwSwRBRDof4yw.mft (raw, json) Hash identifier: ZDEGSyBRRSwryKz9JzUveO51wogQEO448LAkfjVj/do= Subject key identifier: 1D:00:0A:9A:77:B7:C3:69:20:B7:1B:40:A3:FB:A3:24:05:F7:78:1C Authority key identifier: 81:F4:67:AD:C3:17:D1:63:48:AF:43:30:4B:04:41:44:3A:1F:E3:2C Certificate issuer: /CN=A91B0BAB/serialNumber=81F467ADC317D16348AF43304B0441443A1FE32C Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gfRnrcMX0WNIr0MwSwRBRDof4yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft Manifest number: 0F59 Signing time: Thu 16 May 2024 21:19:43 +0000 Manifest this update: Thu 16 May 2024 21:19:42 +0000 Manifest next update: Thu 23 May 2024 21:19:42 +0000 Files and hashes: 1: gfRnrcMX0WNIr0MwSwRBRDof4yw.crl (hash: 7z1FPcX0blsBtva1+j1/c3Is+nUjrFpmxVA8fBQs7Rw=) 2: 1FD94540C98111EEB0FF0E1CC4F9AE02.roa (hash: lIFyxj9aC+iXtbhSkjDwBiYtiotkp3LnBhX8Lz9S9NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.crl rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gfRnrcMX0WNIr0MwSwRBRDof4yw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BAB/serialNumber=81F467ADC317D16348AF43304B0441443A1FE32C Validity Not Before: May 16 21:19:42 2024 GMT Not After : May 23 21:19:42 2024 GMT Subject: CN=6646786f-50d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:0f:f6:72:a6:08:08:f8:c4:41:d2:e1:b9: aa:26:a0:2d:08:3e:8b:68:f9:4c:f8:16:44:9d:5d: ca:e6:7b:08:89:7a:d6:93:8f:a2:cd:78:15:d2:e7: 8c:dc:96:05:48:d1:93:f9:b6:69:f2:07:8a:36:99: 8d:bb:71:4c:49:b2:98:87:a2:fa:0b:af:5e:6e:52: 80:a2:f6:b6:79:74:cf:59:90:eb:db:a8:dd:32:df: b8:5e:d9:d1:40:a5:65:78:29:a6:52:18:4e:b8:3a: 76:99:1f:35:12:0f:a8:f6:47:ce:f0:10:8b:bc:9d: d3:7e:6f:3e:42:5e:c4:d0:63:d7:cd:cd:4b:ca:09: 2e:cb:3a:fb:b4:2a:75:bd:74:87:f4:76:fc:ed:4c: 34:e7:7e:96:e0:ff:40:f4:c5:1a:40:3e:71:f1:d9: b5:8a:52:11:31:c6:f3:47:46:d8:0f:54:16:25:06: cd:be:bc:4e:a3:20:c4:62:3a:6a:cd:27:7d:ed:ac: 23:38:31:78:9a:54:af:6e:07:16:fb:9e:68:2d:48: de:90:37:22:9a:83:fc:a4:96:77:39:c4:36:cb:ef: 6d:9f:36:3f:c9:6c:5b:a1:97:b9:7e:ec:a4:3c:b1: 80:cd:ed:a0:76:bb:e9:26:15:62:4c:c4:e8:d7:b3: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:00:0A:9A:77:B7:C3:69:20:B7:1B:40:A3:FB:A3:24:05:F7:78:1C X509v3 Authority Key Identifier: keyid:81:F4:67:AD:C3:17:D1:63:48:AF:43:30:4B:04:41:44:3A:1F:E3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gfRnrcMX0WNIr0MwSwRBRDof4yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/gfRnrcMX0WNIr0MwSwRBRDof4yw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4d:23:7a:c0:da:90:82:05:70:d3:83:78:46:e2:f6:06:ff: 08:eb:67:7b:b3:46:67:31:55:d7:a0:63:8f:e5:63:04:c2:b8: 01:2b:09:8f:f8:ca:7b:9e:c5:13:fb:64:57:76:ef:d1:03:9a: 60:06:4d:49:a7:d9:34:6f:b2:8c:03:38:17:0f:e0:3f:86:66: d7:5e:96:cb:a8:0f:15:30:bf:a9:9c:4d:4b:ce:7c:d4:a1:8a: c5:bd:95:fe:df:22:f8:53:19:ee:85:c8:ea:07:ec:d2:b0:7f: f8:3c:d1:60:36:66:58:29:35:26:d7:81:b1:5d:8d:8b:bd:df: 7d:95:04:fa:f0:74:22:48:7c:62:28:0a:17:af:57:1c:b3:71: c5:8c:08:cb:0b:15:2d:5a:bd:25:5d:4b:e2:7e:64:6e:1d:74: 4b:4d:51:f8:d6:a3:0d:c5:bc:38:4b:94:43:19:6c:e5:46:ac: 77:c2:62:4d:4c:0d:fa:cd:f7:35:75:5c:e6:37:b3:9b:f6:7e: ef:49:79:68:e1:44:05:b1:81:ce:a8:23:6e:90:e0:b9:4e:71: 9f:cf:37:d2:d0:ba:57:9c:17:af:97:5b:31:cd:59:09:9b:13: 42:86:8d:fa:d1:93:78:04:6a:32:d2:81:77:ac:46:fa:2d:df: 89:6f:eb:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQUIxMTAvBgNVBAUTKDgxRjQ2N0FEQzMxN0QxNjM0OEFGNDMzMDRCMDQ0MTQ0 M0ExRkUzMkMwHhcNMjQwNTE2MjExOTQyWhcNMjQwNTIzMjExOTQyWjAYMRYwFAYD VQQDEw02NjQ2Nzg2Zi01MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLsP9nKmCAj4xEHS4bmqJqAtCD6LaPlM+BZEnV3K5nsIiXrWk4+izXgV0ueM 3JYFSNGT+bZp8geKNpmNu3FMSbKYh6L6C69eblKAova2eXTPWZDr26jdMt+4XtnR QKVleCmmUhhOuDp2mR81Eg+o9kfO8BCLvJ3Tfm8+Ql7E0GPXzc1Lygkuyzr7tCp1 vXSH9Hb87Uw0536W4P9A9MUaQD5x8dm1ilIRMcbzR0bYD1QWJQbNvrxOoyDEYjpq zSd97awjODF4mlSvbgcW+55oLUjekDcimoP8pJZ3OcQ2y+9tnzY/yWxboZe5fuyk PLGAze2gdrvpJhViTMTo17OQRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0ACpp3 t8NpILcbQKP7oyQF93gcMB8GA1UdIwQYMBaAFIH0Z63DF9FjSK9DMEsEQUQ6H+Ms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBQi82MDJDNjY1NDdC MTUxMUVBQTVBNEE4NjlDNEY5QUUwMi9nZlJucmNNWDBXTklyME13U3dSQlJEb2Y0 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmUm5yY01YMFdOSXIwTXdTd1JCUkRvZjR5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBQi82MDJDNjY1NDdCMTUxMUVBQTVBNEE4NjlDNEY5QUUwMi9nZlJucmNNWDBX TklyME13U3dSQlJEb2Y0eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCATSN6wNqQggVw04N4RuL2Bv8I62d7s0ZnMVXXoGOP5WMEwrgBKwmP +Mp7nsUT+2RXdu/RA5pgBk1Jp9k0b7KMAzgXD+A/hmbXXpbLqA8VML+pnE1LznzU oYrFvZX+3yL4UxnuhcjqB+zSsH/4PNFgNmZYKTUm14GxXY2Lvd99lQT68HQiSHxi KAoXr1ccs3HFjAjLCxUtWr0lXUvifmRuHXRLTVH41qMNxbw4S5RDGWzlRqx3wmJN TA36zfc1dVzmN7Ob9n7vSXlo4UQFsYHOqCNukOC5TnGfzzfS0LpXnBevl1sxzVkJ mxNCho360ZN4BGoy0oF3rEb6Ld+Jb+vH -----END CERTIFICATE-----Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org