$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft File: GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json) Hash identifier: 2DqpGODnQOq7Ww/7yRx4UMi/ODq6k+2jtSsJZrIjPFw= Subject key identifier: 25:18:0D:D2:1A:EE:B6:6B:40:E6:49:19:CE:2D:78:FE:2C:0D:33:F1 Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF Certificate issuer: /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft Manifest number: 90 Signing time: Wed 15 May 2024 07:06:13 +0000 Manifest this update: Wed 15 May 2024 07:06:13 +0000 Manifest next update: Wed 22 May 2024 07:06:13 +0000 Files and hashes: 1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: mFBpWb+X/3hxyuvkGJl9bxW919vQN/XJvuuYjWyGH6Q=) 2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: J4G9DIu5Hso65OgE3YGy1W66Uc1WAcbFtVsy2iofxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF Validity Not Before: May 15 07:06:13 2024 GMT Not After : May 22 07:06:13 2024 GMT Subject: CN=66445ee5-db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:2a:3d:2c:f3:e5:ad:29:35:1c:25:09:79: a2:b8:3e:f4:40:59:54:c4:1a:ec:66:00:b0:af:83: 35:a5:d7:60:8f:4f:ff:c3:92:cb:4a:3a:02:c5:ae: 45:d8:2c:66:00:68:e3:6d:89:47:9b:8e:ce:20:55: fa:33:3c:af:da:43:9c:d9:39:91:3f:e4:84:cb:7b: 92:cd:a2:ac:2b:36:e2:98:dd:94:d8:73:cd:68:59: 6f:c9:f5:9f:da:e0:55:9d:ae:d1:7c:fb:48:c3:b7: 26:cc:f9:67:38:97:bf:ce:f1:06:29:e3:56:23:9d: 4a:a6:cd:23:18:f8:b3:a2:15:91:9f:94:28:b5:3c: 5f:1f:36:01:49:d8:07:bb:51:96:3d:61:91:19:a0: 5f:09:7e:0b:cb:b2:89:3a:86:96:4b:c0:cb:65:42: f2:14:11:d5:28:fa:87:04:e2:2b:5c:39:57:1b:2f: 35:bb:19:e5:46:b3:f7:9a:a1:b9:8e:e9:f7:a4:e3: 1f:64:20:05:15:b8:dc:f9:4e:05:79:f4:6d:b2:de: e8:be:62:e2:c2:bc:7c:90:d4:9d:55:5d:c8:f9:ef: 4a:2b:7c:69:38:91:27:f2:52:63:d1:c0:fb:c5:dd: b7:33:52:a9:7a:3f:f0:37:06:de:3b:01:02:6c:28: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:0D:D2:1A:EE:B6:6B:40:E6:49:19:CE:2D:78:FE:2C:0D:33:F1 X509v3 Authority Key Identifier: keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:b4:aa:17:83:60:a4:cb:18:b9:09:86:8a:5c:3f:64:66:54: 54:fe:09:7e:59:e4:f9:54:71:fe:8e:cb:6b:93:cf:f1:b1:42: 22:57:64:3a:49:e8:59:4d:51:5d:0d:b2:39:f6:52:76:16:a9: f8:e3:f8:a8:a1:da:a0:ad:a7:a9:db:6a:10:11:8e:42:37:6e: 14:80:37:26:48:76:7a:49:fb:5b:c6:e6:b3:21:7c:76:4b:9e: 7b:c2:82:80:0c:ca:69:57:82:ff:a3:79:94:c6:d3:d0:00:5d: 98:a0:f0:a4:e2:9d:4c:dd:47:a6:13:99:72:33:be:1e:de:98: 61:cb:68:1f:40:e6:60:35:73:d1:9b:35:e0:f1:c7:38:d3:6e: 34:40:cb:38:4a:61:22:a9:73:3f:58:bd:b6:2f:56:9d:58:19: 09:4c:ac:44:ec:31:40:ca:f3:71:db:15:de:5a:ab:07:d3:1d: 77:50:2a:b7:28:05:9c:18:8a:80:3a:72:3e:fc:c1:3d:fc:9a: be:1a:1c:2d:aa:2c:ff:43:18:95:fe:68:1b:48:1a:53:93:03: b7:68:c6:02:93:7f:cd:d8:97:6d:12:3e:2f:78:7d:52:51:80: 15:7f:9e:bd:b1:10:e2:59:35:22:25:f4:e6:1b:b2:6c:96:5a: 7e:b7:e8:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIzNUExMTAvBgNVBAUTKDFBNjA3MjVBRTQwNDU4OTZFMzA0MDgzMDAzMjEzRUVB OTUyNjdFQ0YwHhcNMjQwNTE1MDcwNjEzWhcNMjQwNTIyMDcwNjEzWjAYMRYwFAYD VQQDEw02NjQ0NWVlNS1kYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttIqPSzz5a0pNRwlCXmiuD70QFlUxBrsZgCwr4M1pddgj0//w5LLSjoCxa5F 2CxmAGjjbYlHm47OIFX6Mzyv2kOc2TmRP+SEy3uSzaKsKzbimN2U2HPNaFlvyfWf 2uBVna7RfPtIw7cmzPlnOJe/zvEGKeNWI51Kps0jGPizohWRn5QotTxfHzYBSdgH u1GWPWGRGaBfCX4Ly7KJOoaWS8DLZULyFBHVKPqHBOIrXDlXGy81uxnlRrP3mqG5 jun3pOMfZCAFFbjc+U4FefRtst7ovmLiwrx8kNSdVV3I+e9KK3xpOJEn8lJj0cD7 xd23M1Kpej/wNwbeOwECbCgouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUYDdIa 7rZrQOZJGc4teP4sDTPxMB8GA1UdIwQYMBaAFBpgclrkBFiW4wQIMAMhPuqVJn7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjM1QS8wMDZDRDk0QTNC MjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdKYmpCQWd3QXlFLTZwVW1m czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtQnlXdVFFV0piakJBZ3dBeUUtNnBVbWZzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjM1QS8wMDZDRDk0QTNCMjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdK YmpCQWd3QXlFLTZwVW1mczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTtKoXg2Ckyxi5CYaKXD9kZlRU/gl+WeT5VHH+jstrk8/xsUIiV2Q6 SehZTVFdDbI59lJ2Fqn44/ioodqgraep22oQEY5CN24UgDcmSHZ6SftbxuazIXx2 S557woKADMppV4L/o3mUxtPQAF2YoPCk4p1M3UemE5lyM74e3phhy2gfQOZgNXPR mzXg8cc40240QMs4SmEiqXM/WL22L1adWBkJTKxE7DFAyvNx2xXeWqsH0x13UCq3 KAWcGIqAOnI+/ME9/Jq+Ghwtqiz/QxiV/mgbSBpTkwO3aMYCk3/N2JdtEj4veH1S UYAVf569sRDiWTUiJfTmG7Jsllp+t+hg -----END CERTIFICATE-----Generated at Wed May 15 09:28:14 2024 by rpki-client on console-fra.rpki-client.org