$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json) Hash identifier: 5cxuTmjbJyJMxApEA5D6EFf0NJ2s8wK3YKL3LxfmMt8= Subject key identifier: 77:F2:89:E8:C8:E0:46:A4:18:A0:A6:A3:7D:90:C6:73:42:4E:15:B0 Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 1864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft Manifest number: 1853 Signing time: Tue 30 Apr 2024 17:04:19 +0000 Manifest this update: Tue 30 Apr 2024 17:04:18 +0000 Manifest next update: Tue 07 May 2024 17:04:18 +0000 Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: xNFuh8TahBZ9dYLxua1QxwQG1M2C6ElhA80erc6TP4I=) 2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: 0sTER7p3pFaiEEI4rnotOMQNNZ2iD/9Ch6oDrhs/hxs=) 3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: aGeMGoHE+otk2qfV2+P5uSwazM3gbyh0A6bh1lLxHf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Apr 30 17:04:18 2024 GMT Not After : May 7 17:04:18 2024 GMT Subject: CN=66312493-e37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:04:aa:29:54:7f:4e:50:21:c5:6e:92:94: 5e:66:1f:45:0a:98:8a:52:f8:2d:e7:1e:c9:54:9a: 91:30:d6:aa:3e:d2:b6:36:e1:3f:50:a7:d5:1f:d0: 85:e6:c4:a0:44:1d:cb:b8:b3:05:fb:9f:a6:02:b4: af:43:b9:47:ad:29:b7:3f:26:be:54:41:ce:23:21: 9b:f6:e1:a8:d8:d7:bf:8f:76:43:21:98:34:58:e6: f7:bf:9d:e7:0a:00:14:b7:c5:e1:b1:13:32:4f:89: 2e:c3:9b:00:02:b5:a5:63:4a:37:cb:45:f9:eb:b3: e0:37:95:c8:ce:0e:b3:66:bc:14:93:4e:42:b7:c6: 20:6e:89:c9:97:d7:08:c7:a2:c4:19:f7:25:ed:8e: d4:40:dc:2d:cc:f3:1d:f1:a0:9d:15:ce:7b:28:72: 60:91:2f:ea:32:9c:aa:73:ff:51:ac:dd:2f:f3:b6: 64:78:93:1a:59:89:c7:0a:c6:c4:7d:ef:38:80:03: 1c:33:42:31:92:7d:ef:3b:97:f9:d0:77:01:35:72: 87:b2:29:c9:36:89:d5:f5:b9:9e:e3:0b:94:4b:48: 40:c2:0b:b1:d3:62:cb:99:3c:9a:b5:80:0e:e1:f4: 4e:ba:55:f4:6b:bf:28:d4:16:79:11:17:06:4e:7e: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F2:89:E8:C8:E0:46:A4:18:A0:A6:A3:7D:90:C6:73:42:4E:15:B0 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:f5:a2:56:f9:77:32:a9:4a:f2:1d:7b:16:b4:fb:a0:81: 97:fd:c0:e6:de:25:20:34:de:39:4c:5e:b5:c7:d4:c1:1e:d0: 8a:cb:2f:28:63:92:cd:78:ca:3a:3e:82:f8:17:b1:f1:75:32: 4f:9a:34:19:b7:bf:35:3e:9a:fb:14:d4:1f:ec:31:88:c7:dc: 76:a4:cb:fa:a3:b9:59:5e:db:8d:5d:2c:e9:b6:47:f4:c1:63: 0a:aa:4b:0c:d8:ac:f2:fa:7d:e4:6b:07:df:d9:17:8c:54:45: 50:47:b6:9e:4f:b1:32:6c:db:0a:6a:c4:97:f3:39:74:0d:8c: 66:15:af:be:f5:89:60:c8:f3:a7:98:aa:c1:6c:80:b7:b8:44: 14:f2:4e:7e:35:5b:e6:72:fa:fb:27:fe:41:3f:2a:06:b6:58: 34:5c:7b:52:d1:9d:bf:84:41:40:69:06:7f:00:d8:7b:e6:ea: 7e:41:89:97:4c:b1:a4:8d:c0:f5:26:98:ba:b3:ca:14:f3:fd: 51:8e:29:55:27:49:e1:bb:87:e8:f0:8d:2c:28:47:8a:dc:70: 96:d7:0a:07:42:83:0b:ba:a2:d0:4b:e8:d3:b3:61:ed:9b:cf: e5:47:43:8f:bc:11:3c:4e:60:4a:f4:aa:00:e3:8c:4a:bd:d6: 83:71:38:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjQwNDMwMTcwNDE4WhcNMjQwNTA3MTcwNDE4WjAYMRYwFAYD VQQDEw02NjMxMjQ5My1lMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6AEqilUf05QIcVukpReZh9FCpiKUvgt5x7JVJqRMNaqPtK2NuE/UKfVH9CF 5sSgRB3LuLMF+5+mArSvQ7lHrSm3Pya+VEHOIyGb9uGo2Ne/j3ZDIZg0WOb3v53n CgAUt8XhsRMyT4kuw5sAArWlY0o3y0X567PgN5XIzg6zZrwUk05Ct8YgbonJl9cI x6LEGfcl7Y7UQNwtzPMd8aCdFc57KHJgkS/qMpyqc/9RrN0v87ZkeJMaWYnHCsbE fe84gAMcM0Ixkn3vO5f50HcBNXKHsinJNonV9bme4wuUS0hAwgux02LLmTyatYAO 4fROulX0a78o1BZ5ERcGTn6gmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfyiejI 4EakGKCmo32QxnNCThWwMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACE/WiVvl3MqlK8h17FrT7oIGX/cDm3iUgNN45TF61x9TBHtCKyy8o Y5LNeMo6PoL4F7HxdTJPmjQZt781Ppr7FNQf7DGIx9x2pMv6o7lZXtuNXSzptkf0 wWMKqksM2Kzy+n3kawff2ReMVEVQR7aeT7EybNsKasSX8zl0DYxmFa++9YlgyPOn mKrBbIC3uEQU8k5+NVvmcvr7J/5BPyoGtlg0XHtS0Z2/hEFAaQZ/ANh75up+QYmX TLGkjcD1Jpi6s8oU8/1RjilVJ0nhu4fo8I0sKEeK3HCW1woHQoMLuqLQS+jTs2Ht m8/lR0OPvBE8TmBK9KoA44xKvdaDcTgx -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:40 2024 by rpki-client on console-fra.rpki-client.org