$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: u/Jn4cbNbl9Sh6Veg2GR4Zw/EqK8oGdWrVkYIN/L0o0= Subject key identifier: 8A:EE:A6:0F:1F:ED:EE:BA:17:CD:D5:90:5B:5E:13:56:74:07:AA:78 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 80 Signing time: Fri 17 May 2024 07:19:21 +0000 Manifest this update: Fri 17 May 2024 07:19:20 +0000 Manifest next update: Fri 24 May 2024 07:19:20 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: Lu3R6DYdbKkmEwSQt2unPjphgJ+5Rui7kqLJSGJ+yZw=) 2: 089A55E052CB11EEB275AA16C4F9AE02.roa (hash: ax1bHy7X34iXLX07N6LNxeI0vXjEjPqhN5RKN4nqXaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: May 17 07:19:20 2024 GMT Not After : May 24 07:19:20 2024 GMT Subject: CN=664704f8-6f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:eb:c9:85:2a:1f:5a:78:3f:64:4e:e7:64: 92:a2:45:78:ac:82:e1:d8:57:96:37:aa:cd:a9:93: 1f:12:35:75:ee:45:61:86:13:45:a4:f6:7a:7f:0f: cc:47:19:07:4a:9e:25:f3:89:74:14:54:53:ea:ed: 4b:f7:e6:54:ba:e0:5b:be:11:9b:17:09:12:52:84: 08:10:f5:20:60:f9:36:3b:cb:64:df:19:a1:e8:65: b5:73:f6:c1:ae:35:91:27:fe:b7:5d:3f:5e:d5:06: e9:23:4f:99:c1:2b:80:fa:f5:1e:2f:e7:91:8d:1d: dd:52:e4:ae:ea:c4:7f:7a:ef:16:56:97:15:e7:e7: d7:b6:64:4d:8b:e3:69:9e:cc:7f:84:44:35:fb:ce: 99:f0:c5:fc:b4:ac:34:36:91:7f:03:e7:e2:d2:69: 23:36:92:49:e0:37:74:1b:00:91:a4:e8:8a:c9:03: b4:83:4f:f9:b1:0a:04:21:3c:9e:14:e3:5b:82:6a: a9:d9:70:37:a7:5d:30:66:38:b3:2b:5c:c0:98:10: 91:99:1e:a4:da:25:ba:75:43:67:67:48:16:d8:f2: a5:50:eb:05:c4:29:3f:91:3c:86:39:40:8a:99:43: 83:58:53:e3:c9:a4:43:07:56:ad:a9:ec:e2:52:6b: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:A6:0F:1F:ED:EE:BA:17:CD:D5:90:5B:5E:13:56:74:07:AA:78 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:88:e0:4a:b4:47:d2:1c:60:07:15:9e:13:e5:e6:f9:11:0f: 1a:36:d8:ef:44:df:01:00:69:96:89:67:de:cc:fb:98:91:45: 12:34:77:8e:3b:ef:6c:25:4f:7a:e8:14:e1:2e:0d:e3:f0:70: 15:fd:f1:94:10:4c:64:34:2e:57:b5:4a:0b:28:8a:d7:79:98: a2:31:e0:7f:b3:82:45:24:e7:8b:64:fb:74:cd:0d:54:21:07: 82:91:ad:92:2e:18:6c:0b:d5:be:63:41:fa:10:48:e6:e6:6c: d2:85:cc:7b:be:dd:a2:c0:0a:c8:8f:c7:74:bf:eb:d1:3b:59: c7:ce:29:2b:d9:27:df:be:db:18:9c:80:05:7a:5d:c2:58:cf: 9d:71:cd:d0:ab:66:6e:2c:84:ec:95:0f:9d:1a:39:26:1c:ea: 43:d1:26:4c:61:02:57:41:34:0d:0c:d3:51:74:25:ff:53:53: 43:dc:4e:02:f4:57:6b:73:56:43:1f:ef:b2:66:f6:c3:e6:f8: 69:e1:af:c5:87:3e:a7:50:05:d7:f6:01:06:19:73:06:c8:23: 54:ad:78:b0:db:83:f8:46:6c:65:66:2c:c9:bb:8c:43:4b:2d: a5:ef:91:4b:4b:b9:cb:41:b2:ac:be:4f:fe:50:8c:e8:b6:44: 54:cb:03:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjQwNTE3MDcxOTIwWhcNMjQwNTI0MDcxOTIwWjAYMRYwFAYD VQQDEw02NjQ3MDRmOC02ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1jryYUqH1p4P2RO52SSokV4rILh2FeWN6rNqZMfEjV17kVhhhNFpPZ6fw/M RxkHSp4l84l0FFRT6u1L9+ZUuuBbvhGbFwkSUoQIEPUgYPk2O8tk3xmh6GW1c/bB rjWRJ/63XT9e1QbpI0+ZwSuA+vUeL+eRjR3dUuSu6sR/eu8WVpcV5+fXtmRNi+Np nsx/hEQ1+86Z8MX8tKw0NpF/A+fi0mkjNpJJ4Dd0GwCRpOiKyQO0g0/5sQoEITye FONbgmqp2XA3p10wZjizK1zAmBCRmR6k2iW6dUNnZ0gW2PKlUOsFxCk/kTyGOUCK mUODWFPjyaRDB1atqeziUmsSwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrupg8f 7e66F83VkFteE1Z0B6p4MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdiOBKtEfSHGAHFZ4T5eb5EQ8aNtjvRN8BAGmWiWfezPuYkUUSNHeO O+9sJU966BThLg3j8HAV/fGUEExkNC5XtUoLKIrXeZiiMeB/s4JFJOeLZPt0zQ1U IQeCka2SLhhsC9W+Y0H6EEjm5mzShcx7vt2iwArIj8d0v+vRO1nHzikr2SffvtsY nIAFel3CWM+dcc3Qq2ZuLITslQ+dGjkmHOpD0SZMYQJXQTQNDNNRdCX/U1ND3E4C 9Fdrc1ZDH++yZvbD5vhp4a/Fhz6nUAXX9gEGGXMGyCNUrXiw24P4RmxlZizJu4xD Sy2l75FLS7nLQbKsvk/+UIzotkRUywM0 -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org