$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft File: gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft (raw, json) Hash identifier: oaTbQqdVDmCZovCj0AbUg/Wxrw9JIFHtxYJd8LPyWYs= Subject key identifier: 1B:53:76:E7:FF:CB:74:0A:FF:DC:78:D1:6D:53:CC:EE:DE:F5:A3:04 Authority key identifier: 82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87 Certificate issuer: /CN=A91DB331/serialNumber=8230B12177EA436E98D71F1DFF89B9AE2BBE8587 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft Manifest number: 010F Signing time: Fri 03 May 2024 05:24:13 +0000 Manifest this update: Fri 03 May 2024 05:24:13 +0000 Manifest next update: Fri 10 May 2024 05:24:13 +0000 Files and hashes: 1: gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl (hash: D9jQwXK7v7/ZOVl6NEMwSoyVFDIAciKZ1n/qqplqgnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB331/serialNumber=8230B12177EA436E98D71F1DFF89B9AE2BBE8587 Validity Not Before: May 3 05:24:13 2024 GMT Not After : May 10 05:24:13 2024 GMT Subject: CN=663474fd-5519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:04:73:28:e5:78:9c:2a:d2:61:e1:28:48: 92:e7:67:18:11:56:ab:27:28:0d:27:07:b1:53:99: 1b:87:4a:98:7d:2b:9e:4b:2d:ba:f4:dc:c5:ac:1d: 9b:1f:20:58:d2:2c:84:c5:53:53:4d:b5:a7:ed:30: 86:04:dc:54:72:09:44:21:0c:ce:9d:b7:6e:89:32: 82:ec:c7:9e:79:e3:7d:40:7f:dc:46:56:a5:60:45: c3:b2:c1:62:16:ba:e4:a8:54:87:36:82:49:dd:52: d7:ec:ef:04:e7:70:bc:bf:bd:e3:02:df:c9:ea:8f: ef:e7:70:68:9a:9f:4c:47:c5:f9:79:01:d9:f1:df: 83:fb:bd:3b:2d:4c:78:62:bd:35:4d:67:7f:76:30: 2c:09:e7:24:8e:5d:a3:08:36:bb:70:62:bb:fd:42: 60:bd:5e:94:3e:03:93:7d:76:c3:32:df:c0:46:d2: 48:d7:1c:19:3b:81:62:cb:5d:31:dc:92:88:79:9c: 18:e7:97:17:e9:9c:c9:f1:d1:df:69:71:0a:36:da: 48:eb:c5:4c:0b:ca:e9:36:c6:ab:00:d8:af:65:8d: 27:2b:e8:7c:a2:0d:4c:e3:d6:19:8e:f0:0c:df:a1: 64:6c:57:de:54:c8:64:18:d7:44:91:4c:f6:65:2d: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:53:76:E7:FF:CB:74:0A:FF:DC:78:D1:6D:53:CC:EE:DE:F5:A3:04 X509v3 Authority Key Identifier: keyid:82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3e:82:a6:c4:14:04:45:20:59:cd:35:cc:8b:eb:b7:a5:37: 9e:24:85:65:63:f1:dc:4e:45:69:d0:e1:78:68:79:11:3c:51: 63:9d:57:3e:f5:29:96:4c:01:84:9e:c1:1e:30:b4:6f:5e:10: 41:f4:ad:ad:25:4c:84:9c:13:ca:0d:33:29:c8:7e:9c:83:44: f6:0d:d7:14:c1:fc:c4:0a:54:37:24:5a:d3:46:1a:92:66:75: 91:19:02:fd:0f:06:e7:6a:bc:31:ae:1f:58:1d:d0:3b:69:43: b3:4f:6a:19:a2:ba:a2:dd:ee:ca:29:91:e7:4d:67:ff:96:ea: 55:57:1a:c9:4e:7d:8e:ca:00:bf:f1:31:72:db:89:d3:e3:5c: 27:95:b3:b4:7c:f0:d5:22:0f:15:af:0f:c2:ca:44:45:19:c6: 99:47:8c:7e:a8:71:65:00:40:88:14:3d:38:4f:94:5c:b9:84: 3d:2f:32:86:0a:af:d3:90:92:04:39:2b:82:46:cc:2c:ec:65: fb:82:77:80:2a:53:6e:42:e8:e6:08:38:40:23:7a:d1:c2:fb: d8:29:21:c5:a5:e0:f0:d6:cf:17:22:76:b0:57:5e:11:cf:78: c9:64:80:03:06:50:c0:98:23:08:18:69:d5:fe:f3:a4:0f:07: 99:9b:e7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzMzExMTAvBgNVBAUTKDgyMzBCMTIxNzdFQTQzNkU5OEQ3MUYxREZGODlCOUFF MkJCRTg1ODcwHhcNMjQwNTAzMDUyNDEzWhcNMjQwNTEwMDUyNDEzWjAYMRYwFAYD VQQDEw02NjM0NzRmZC01NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bwEcyjleJwq0mHhKEiS52cYEVarJygNJwexU5kbh0qYfSueSy269NzFrB2b HyBY0iyExVNTTbWn7TCGBNxUcglEIQzOnbduiTKC7MeeeeN9QH/cRlalYEXDssFi FrrkqFSHNoJJ3VLX7O8E53C8v73jAt/J6o/v53Bomp9MR8X5eQHZ8d+D+707LUx4 Yr01TWd/djAsCeckjl2jCDa7cGK7/UJgvV6UPgOTfXbDMt/ARtJI1xwZO4Fiy10x 3JKIeZwY55cX6ZzJ8dHfaXEKNtpI68VMC8rpNsarANivZY0nK+h8og1M49YZjvAM 36FkbFfeVMhkGNdEkUz2ZS11bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtTduf/ y3QK/9x40W1TzO7e9aMEMB8GA1UdIwQYMBaAFIIwsSF36kNumNcfHf+Jua4rvoWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjMzMS84QjEyNTQyRTY3 MzkxMUVEQjU4M0I2N0NDNEY5QUUwMi9nakN4SVhmcVEyNlkxeDhkXzRtNXJpdS1o WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqQ3hJWGZxUTI2WTF4OGRfNG01cml1LWhZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjMzMS84QjEyNTQyRTY3MzkxMUVEQjU4M0I2N0NDNEY5QUUwMi9nakN4SVhmcVEy NlkxeDhkXzRtNXJpdS1oWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALPoKmxBQERSBZzTXMi+u3pTeeJIVlY/HcTkVp0OF4aHkRPFFjnVc+ 9SmWTAGEnsEeMLRvXhBB9K2tJUyEnBPKDTMpyH6cg0T2DdcUwfzEClQ3JFrTRhqS ZnWRGQL9Dwbnarwxrh9YHdA7aUOzT2oZorqi3e7KKZHnTWf/lupVVxrJTn2OygC/ 8TFy24nT41wnlbO0fPDVIg8Vrw/CykRFGcaZR4x+qHFlAECIFD04T5RcuYQ9LzKG Cq/TkJIEOSuCRsws7GX7gneAKlNuQujmCDhAI3rRwvvYKSHFpeDw1s8XInawV14R z3jJZIADBlDAmCMIGGnV/vOkDweZm+ce -----END CERTIFICATE-----Generated at Fri May 3 06:29:24 2024 by rpki-client on console-fra.rpki-client.org