$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft File: Gu-1HeyOsHlip15FnOIQp0ABBPs.mft (raw, json) Hash identifier: iGBC2Qay4LQZ4zCP3MVsMUJXHDICBhcIMVXB+LftZ1o= Subject key identifier: 69:70:5E:33:60:C5:15:CE:64:31:90:EB:9C:61:8A:2E:7A:09:24:3F Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft Manifest number: 33BE Signing time: Tue 30 Apr 2024 14:46:26 +0000 Manifest this update: Tue 30 Apr 2024 14:46:25 +0000 Manifest next update: Tue 07 May 2024 14:46:25 +0000 Files and hashes: 1: Gu-1HeyOsHlip15FnOIQp0ABBPs.crl (hash: mASNYxNni8bmD48lMm17e5LOuVbSnbeusTVgXVK28ZE=) 2: 232E8BFEFEA411EDBC673B4BC4F9AE02.roa (hash: tL/bpnY56thAmkSkvHj2zW1bjHE/bttQg4ijVfNoCPI=) 3: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (hash: HtKSa26rIUPBKNNxZu7c+H1IlS8vW+/hfQnOO/XZdZc=) 4: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (hash: 1Z3EtWYcZVV+ytIydGHG1ZcaZnMTdTNNZ1jf1qeQT6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Apr 30 14:46:25 2024 GMT Not After : May 7 14:46:25 2024 GMT Subject: CN=66310441-24fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:12:0a:dd:32:65:b5:74:73:e3:32:16:d3: c9:6a:ed:1f:bf:65:d8:39:4f:99:18:21:ac:1f:cd: c4:59:37:ae:2d:fc:de:47:a1:4b:81:28:32:73:8a: 03:49:0f:a7:6e:dd:b0:ba:83:5f:e4:0f:5d:5e:02: f5:83:92:37:42:14:6e:db:30:91:5e:20:73:8f:17: 80:71:f0:44:b0:15:3a:96:e0:0f:f1:82:4b:aa:1f: ba:81:5a:49:12:9a:d3:9c:42:43:d7:11:e8:87:02: 89:b9:0b:e0:14:92:db:56:ac:cb:6f:83:95:ce:9a: 1f:be:b0:05:6c:b1:98:32:1a:41:90:81:bb:f5:b7: 80:33:70:f7:0f:c1:2d:a7:43:d1:d5:19:43:b7:ad: 79:12:25:de:5b:17:4b:80:88:3b:9a:d7:60:56:37: 4e:6a:a0:3d:bf:8a:45:da:a6:cc:5b:34:02:2d:21: 59:42:1e:96:55:1b:63:ff:88:18:e4:88:3e:c2:fc: ca:09:a9:af:7d:e2:8a:ce:37:d1:9c:7b:f0:fc:9a: 29:e6:c7:6b:28:87:70:b6:b8:24:29:16:47:5c:db: 62:52:f1:e8:8a:2d:1a:a7:8b:1c:03:67:1a:c6:64: f5:00:cd:11:1d:6a:f8:b8:15:30:eb:ce:2d:fa:bd: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:70:5E:33:60:C5:15:CE:64:31:90:EB:9C:61:8A:2E:7A:09:24:3F X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:95:b1:4e:59:40:32:a4:de:db:31:5a:a2:ec:ed:46:bf:df: 5e:c5:9c:ed:84:00:8d:ea:b0:a3:ab:30:09:09:1e:89:c3:d7: 75:88:dd:da:db:12:22:83:f1:2d:1e:b3:96:cd:27:45:f5:c0: e3:eb:b6:53:92:47:3a:e5:47:78:94:6d:d7:fd:92:d5:bc:74: 05:b3:98:48:be:f5:83:0a:57:17:0b:dd:7c:0f:27:ca:2e:54: b9:d1:3b:78:66:6b:e2:df:b5:e5:d6:2a:13:55:e0:2b:29:bd: 74:e0:16:53:0d:9f:51:b9:ef:a0:13:fb:92:35:38:55:f6:5d: 4f:6f:c8:92:e5:73:8b:c6:31:18:37:aa:dc:25:6e:0c:e6:a6: 97:7f:c0:44:5f:f0:35:13:b7:d7:b2:fb:0a:b8:6a:fa:9b:0e: 4b:20:28:45:9b:5b:67:d2:00:ba:0a:6d:09:9f:30:3d:10:d3: ab:6d:6d:2d:9e:11:82:a7:3f:7f:10:d0:b8:58:97:ef:58:8a: 74:d5:5a:3b:dc:99:86:2a:97:59:ca:35:2a:7b:ea:d5:e9:e3: 35:5b:85:ea:b2:df:66:98:99:0b:1d:4c:59:f4:41:22:57:f8: 5b:f1:98:bf:40:42:f8:8c:c7:65:2f:bd:61:dd:41:41:1c:a7: 21:32:a3:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjQwNDMwMTQ0NjI1WhcNMjQwNTA3MTQ0NjI1WjAYMRYwFAYD VQQDEw02NjMxMDQ0MS0yNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAESCt0yZbV0c+MyFtPJau0fv2XYOU+ZGCGsH83EWTeuLfzeR6FLgSgyc4oD SQ+nbt2wuoNf5A9dXgL1g5I3QhRu2zCRXiBzjxeAcfBEsBU6luAP8YJLqh+6gVpJ EprTnEJD1xHohwKJuQvgFJLbVqzLb4OVzpofvrAFbLGYMhpBkIG79beAM3D3D8Et p0PR1RlDt615EiXeWxdLgIg7mtdgVjdOaqA9v4pF2qbMWzQCLSFZQh6WVRtj/4gY 5Ig+wvzKCamvfeKKzjfRnHvw/Jop5sdrKIdwtrgkKRZHXNtiUvHoii0ap4scA2ca xmT1AM0RHWr4uBUw684t+r37vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlwXjNg xRXOZDGQ65xhii56CSQ/MB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NI bGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5lbFOWUAypN7bMVqi7O1Gv99exZzthACN6rCjqzAJCR6Jw9d1iN3a 2xIig/EtHrOWzSdF9cDj67ZTkkc65Ud4lG3X/ZLVvHQFs5hIvvWDClcXC918DyfK LlS50Tt4Zmvi37Xl1ioTVeArKb104BZTDZ9Rue+gE/uSNThV9l1Pb8iS5XOLxjEY N6rcJW4M5qaXf8BEX/A1E7fXsvsKuGr6mw5LIChFm1tn0gC6Cm0JnzA9ENOrbW0t nhGCpz9/ENC4WJfvWIp01Vo73JmGKpdZyjUqe+rV6eM1W4Xqst9mmJkLHUxZ9EEi V/hb8Zi/QEL4jMdlL71h3UFBHKchMqPU -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:46 2024 by rpki-client on console-ams.rpki-client.org