$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: iV9QewhDz83Iot4mmQTJ/HDk9meMmWSCFymhcomlaWw= Subject key identifier: 34:EB:3F:D7:5C:3F:14:67:42:83:02:F8:D8:11:F9:6A:DE:C3:0C:F4 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 33E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 33D4 Signing time: Fri 26 Apr 2024 14:39:59 +0000 Manifest this update: Fri 26 Apr 2024 14:39:58 +0000 Manifest next update: Fri 03 May 2024 14:39:58 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: gLY20dPq2Fhq9qo4ka/90u0Izv5oRVinm6bwnCSejPY=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: ZH0sVl0w6+grV2jPlK6llRZ7lJDHaTAvfA3w4SNuHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13288 (0x33e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Apr 26 14:39:58 2024 GMT Not After : May 3 14:39:58 2024 GMT Subject: CN=662bbcbe-9eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:b7:ef:9f:28:4a:12:fe:41:5f:a2:e0:b2: a3:e1:f5:a5:67:e3:fe:8d:47:02:7d:e6:20:08:eb: 7c:74:4f:18:81:71:74:19:45:02:3e:14:cf:e6:8c: 4c:2a:31:78:32:93:2e:1e:93:e6:23:a3:ac:84:13: 8c:d1:1f:fb:bc:90:e5:21:94:33:d7:b1:ad:6a:11: 8e:2c:65:29:cf:0b:d3:61:ef:ed:cc:5d:82:86:44: 84:61:9f:3f:47:0c:cb:33:ef:d1:4f:14:dc:eb:fa: e1:17:d9:e0:e0:6c:21:ae:0a:c7:80:96:ca:ae:38: ab:72:ae:08:c3:96:9f:74:e2:e9:c0:f5:69:94:9d: 73:47:8e:01:4a:b4:80:6d:64:55:93:13:51:b8:2e: ec:46:f9:dc:96:32:e6:71:a2:65:ad:bf:e8:ff:e4: 11:a9:b3:60:41:0b:b0:fe:db:61:e7:0d:cb:a5:6d: f9:05:9f:ef:f9:1b:32:b7:1c:44:76:b5:2d:86:e9: c5:10:e0:84:9e:6d:00:37:4a:b2:3c:4e:81:dc:44: 08:bf:39:d0:16:09:f8:b9:5c:0d:b5:64:98:d1:39: 42:52:9c:6a:36:4f:e2:19:f9:74:0b:8e:ee:ee:72: dd:e2:a2:09:51:ba:fd:1c:a8:6a:be:07:b1:16:c7: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EB:3F:D7:5C:3F:14:67:42:83:02:F8:D8:11:F9:6A:DE:C3:0C:F4 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:fd:a5:b2:1f:be:2e:ff:46:ef:7b:50:e3:41:d8:9f:e8: d4:08:0f:94:8d:dd:c4:43:39:c7:34:4d:8b:af:b0:46:7f:e9: e8:b1:ef:0f:9e:83:4b:78:3d:28:32:af:5f:8f:04:db:b3:ea: fa:46:99:25:bd:20:c4:36:9e:ee:02:b4:be:9e:a0:76:d7:b7: a8:a5:59:bc:d0:b3:43:6f:8d:44:d8:77:20:35:42:4e:72:c9: a7:98:73:82:06:be:42:5f:be:c0:0c:49:7b:4a:d5:ea:3a:8e: 0d:59:18:97:9e:97:04:05:99:86:b3:31:54:c4:dc:73:21:0e: 0d:fd:ab:39:cb:8e:45:e6:c7:04:89:eb:4c:26:1a:2d:c4:f5: 1c:06:9d:28:2c:44:cc:53:b5:52:99:55:47:15:ac:2f:dd:a1: 60:a1:cf:88:60:19:a8:49:6d:ff:48:07:48:0e:7f:dc:47:c8: e1:51:de:bc:c8:04:70:54:19:fb:07:94:cb:22:1d:ed:66:b7: d5:76:22:2c:ac:cd:34:85:76:c2:66:d5:51:d8:e4:b0:77:e9: ee:74:29:98:93:4e:5b:9c:51:c8:5f:9a:27:0b:24:9a:45:46: f2:a4:36:12:ae:bd:05:46:aa:83:03:c4:a7:48:cd:2a:da:ec: 43:de:12:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjQwNDI2MTQzOTU4WhcNMjQwNTAzMTQzOTU4WjAYMRYwFAYD VQQDEw02NjJiYmNiZS05ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgu3758oShL+QV+i4LKj4fWlZ+P+jUcCfeYgCOt8dE8YgXF0GUUCPhTP5oxM KjF4MpMuHpPmI6OshBOM0R/7vJDlIZQz17GtahGOLGUpzwvTYe/tzF2ChkSEYZ8/ RwzLM+/RTxTc6/rhF9ng4GwhrgrHgJbKrjircq4Iw5afdOLpwPVplJ1zR44BSrSA bWRVkxNRuC7sRvncljLmcaJlrb/o/+QRqbNgQQuw/tth5w3LpW35BZ/v+RsytxxE drUthunFEOCEnm0AN0qyPE6B3EQIvznQFgn4uVwNtWSY0TlCUpxqNk/iGfl0C47u 7nLd4qIJUbr9HKhqvgexFse7xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTrP9dc PxRnQoMC+NgR+Wrewwz0MB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9v2lsh++Lv9G73tQ40HYn+jUCA+Ujd3EQznHNE2Lr7BGf+nose8P noNLeD0oMq9fjwTbs+r6RpklvSDENp7uArS+nqB217eopVm80LNDb41E2HcgNUJO csmnmHOCBr5CX77ADEl7StXqOo4NWRiXnpcEBZmGszFUxNxzIQ4N/as5y45F5scE ietMJhotxPUcBp0oLETMU7VSmVVHFawv3aFgoc+IYBmoSW3/SAdIDn/cR8jhUd68 yARwVBn7B5TLIh3tZrfVdiIsrM00hXbCZtVR2OSwd+nudCmYk05bnFHIX5onCySa RUbypDYSrr0FRqqDA8SnSM0q2uxD3hKO -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:39 2024 by rpki-client on console-ams.rpki-client.org