$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: V7N7VLPz6Od4N6sPhHWm1SIwjNTj8JKYzK+cH6yqpaE= Subject key identifier: A6:B0:C9:DA:BF:3B:98:85:22:81:C4:39:B4:7C:B0:3A:66:D4:BC:D2 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 1935 Signing time: Thu 02 May 2024 16:54:58 +0000 Manifest this update: Thu 02 May 2024 16:54:58 +0000 Manifest next update: Thu 09 May 2024 16:54:58 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: JqISQH+j0lDB+M2xneYVxlv9bKUU6ebmVUPlkBzHLxU=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: TFZyvrE3OwmWYaYDSWUoC+64kctGuwQsPRph3ixaWVg=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: dNRtXVoOTZwtJ1I2U7amdHCRzMyv1RMCXarfjz4uRlY=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 7wlp2PECucp8Uy8l9Ief6GFTHn3kLULrFFBnhP6srUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6484 (0x1954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: May 2 16:54:58 2024 GMT Not After : May 9 16:54:58 2024 GMT Subject: CN=6633c562-8259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:77:69:61:3d:a9:cb:45:6f:0f:26:bc:3d: 0f:f9:6f:d2:51:99:4b:d4:d1:6e:f4:3f:5c:e8:39: 31:39:d7:35:02:17:7c:f8:4a:3d:94:09:3f:a2:ff: de:b4:46:f1:5c:75:9e:af:10:b4:5f:e4:fa:39:c1: 69:71:ce:7a:e6:63:33:1c:87:e6:f9:e2:c9:e1:b8: 3d:f2:be:d1:15:b0:16:de:cd:15:d1:85:c9:9c:f0: 4d:49:15:fe:37:b2:31:8e:28:24:e1:0f:8c:d1:65: 8f:55:09:a3:84:67:10:63:35:0c:be:ba:c1:00:9a: 4d:bc:73:cf:db:83:a6:8d:5e:a5:3c:83:7e:eb:46: 07:4d:54:6a:ea:2a:7c:c4:a0:01:fe:55:23:4e:16: ca:b7:8f:09:5c:65:a8:95:1e:35:76:29:5f:b2:6b: 4a:7e:90:a5:32:36:f4:a1:16:f8:7c:dd:fe:eb:15: 4a:3f:28:6b:8c:5a:e6:d2:1d:13:4e:17:90:b5:05: 14:22:c1:75:be:79:5a:18:7e:0e:b0:19:21:7e:b6: 24:b4:ac:13:ae:c8:08:30:84:c8:47:b9:13:94:0c: e3:8d:2e:80:e1:89:e2:d4:b4:a0:5d:22:ca:40:a0: 02:10:64:81:f2:69:45:ec:08:bf:2d:3a:5b:7b:3d: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:C9:DA:BF:3B:98:85:22:81:C4:39:B4:7C:B0:3A:66:D4:BC:D2 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ca:25:f3:f8:19:90:1b:fc:7d:06:d0:b8:09:9a:f0:6a:54: b0:0c:76:74:fe:95:91:e2:c6:df:bc:52:44:11:cf:c8:36:71: 5a:a1:e1:74:cd:49:c3:1c:7b:27:3e:10:d9:f4:71:eb:00:e9: 17:44:2d:ef:c3:dc:8c:86:d0:b4:e2:83:9e:7f:30:6e:92:7a: be:e6:04:e4:28:f9:0f:5b:3c:48:70:6a:80:68:c9:5f:6b:5b: 66:8c:06:1b:31:e5:05:12:24:30:af:c5:a2:5c:43:89:1e:6c: 26:d3:e5:80:df:8d:74:ca:c1:6a:cb:d6:d0:a4:a2:55:1d:9e: 07:3f:52:63:33:3c:4d:03:bb:ab:32:2a:4c:ab:5d:d1:71:36: 6e:89:70:28:5c:b8:08:5a:36:4b:34:3a:73:5b:83:3a:49:d9: c6:07:14:82:21:c8:17:28:de:84:5b:29:71:07:01:16:88:f3: 54:11:f5:be:d7:d4:42:7c:dc:c4:f1:a6:f3:01:b4:68:e4:4d: 3f:99:8b:08:aa:0e:e9:d8:cf:f3:14:2b:1b:88:75:4e:32:71: 90:a3:a6:93:b6:b2:9a:21:91:48:00:e4:94:9c:76:ba:07:06: 8b:a1:a3:5f:22:c8:7a:9a:86:e2:7b:25:22:f4:31:9d:c5:a1: 12:ad:59:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjQwNTAyMTY1NDU4WhcNMjQwNTA5MTY1NDU4WjAYMRYwFAYD VQQDEw02NjMzYzU2Mi04MjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza53aWE9qctFbw8mvD0P+W/SUZlL1NFu9D9c6DkxOdc1Ahd8+Eo9lAk/ov/e tEbxXHWerxC0X+T6OcFpcc565mMzHIfm+eLJ4bg98r7RFbAW3s0V0YXJnPBNSRX+ N7Ixjigk4Q+M0WWPVQmjhGcQYzUMvrrBAJpNvHPP24OmjV6lPIN+60YHTVRq6ip8 xKAB/lUjThbKt48JXGWolR41dilfsmtKfpClMjb0oRb4fN3+6xVKPyhrjFrm0h0T TheQtQUUIsF1vnlaGH4OsBkhfrYktKwTrsgIMITIR7kTlAzjjS6A4Yni1LSgXSLK QKACEGSB8mlF7Ai/LTpbez21vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKawydq/ O5iFIoHEObR8sDpm1LzSMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChyiXz+BmQG/x9BtC4CZrwalSwDHZ0/pWR4sbfvFJEEc/INnFaoeF0 zUnDHHsnPhDZ9HHrAOkXRC3vw9yMhtC04oOefzBuknq+5gTkKPkPWzxIcGqAaMlf a1tmjAYbMeUFEiQwr8WiXEOJHmwm0+WA3410ysFqy9bQpKJVHZ4HP1JjMzxNA7ur MipMq13RcTZuiXAoXLgIWjZLNDpzW4M6SdnGBxSCIcgXKN6EWylxBwEWiPNUEfW+ 19RCfNzE8abzAbRo5E0/mYsIqg7p2M/zFCsbiHVOMnGQo6aTtrKaIZFIAOSUnHa6 BwaLoaNfIsh6mobieyUi9DGdxaESrVnz -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org