$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: SMo3LS7fJSY/cAG8oefzVRpdrQElTC47xgrAoy5Gj3M= Subject key identifier: C7:44:E9:73:1E:58:CD:24:AD:5F:B5:94:A7:9F:A5:F7:F2:CC:5B:E3 Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 187F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 1D3E Signing time: Wed 08 May 2024 16:59:16 +0000 Manifest this update: Wed 08 May 2024 16:59:16 +0000 Manifest next update: Wed 15 May 2024 16:59:16 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: QTTMDx4gMRhlLjDopQSSdhILv074HtxpWqStQNx0vmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6271 (0x187f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: May 8 16:59:16 2024 GMT Not After : May 15 16:59:16 2024 GMT Subject: CN=663baf64-93f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:15:62:0d:2e:e7:db:89:e7:83:8d:4a:6b:2d: 0f:63:6f:e8:39:a6:e4:fa:60:74:82:73:b8:6f:61: 16:0d:a9:59:db:2d:38:c3:37:d5:ab:de:29:22:03: 98:d7:7b:31:65:9d:e1:38:4e:31:9a:bc:fe:8c:d6: 0c:85:c4:24:e2:78:5c:8e:f0:a1:6d:8c:78:86:d3: 18:bf:c2:f8:63:7e:6c:53:61:92:c5:9b:a5:6c:26: 00:e9:f2:fc:3c:85:88:91:84:70:d4:19:97:52:47: ab:eb:4f:34:b4:97:3b:d4:b7:c9:31:e1:20:fd:ee: c2:c6:44:eb:f5:c7:48:3a:9c:31:22:e2:8e:52:d7: 16:4b:71:56:6b:ab:49:77:8f:c0:fc:c9:bd:6a:c4: ac:54:53:41:89:11:69:3a:96:fb:08:af:84:9a:23: 6d:10:dd:8e:f7:10:f2:7a:eb:da:85:c4:7e:e1:98: 13:39:98:8e:f1:ef:4d:5a:5c:4d:84:1f:37:dc:75: 5c:65:e1:e4:8e:14:36:fb:cc:d3:88:86:da:0d:0f: 5b:6a:6c:6c:30:c1:08:d0:35:5c:7c:89:ff:31:9b: 7c:90:92:17:05:84:71:1d:61:1c:08:25:98:25:d2: cd:b9:03:de:8a:0d:2e:31:80:f8:62:d7:22:31:15: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:E9:73:1E:58:CD:24:AD:5F:B5:94:A7:9F:A5:F7:F2:CC:5B:E3 X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e6:a2:81:03:4e:75:fe:dc:bd:b2:4c:ae:5b:ab:7c:ed:aa: 0c:d0:86:0c:12:2c:c3:a5:5c:fe:84:cb:d9:62:2b:e3:d4:76: f3:b8:4e:10:5f:31:fe:a2:2b:03:24:1c:91:ba:2f:90:88:5e: ae:7f:a5:ca:1a:fd:df:3b:68:ea:ad:ca:fa:44:36:47:fd:cc: e7:4a:14:f3:c6:65:e1:42:f6:51:95:6d:0c:53:4a:4f:0c:d5: 12:e7:7d:7a:80:4f:5e:36:cd:21:5c:16:ca:74:9e:8a:7a:ba: 6f:c4:af:dc:8a:24:54:1a:b9:1e:65:dc:9d:44:28:4c:74:b1: 89:b2:fa:16:ca:be:2b:7a:fc:57:5e:f3:56:78:e3:92:69:1d: 3a:64:b3:27:f8:06:22:e9:96:21:7b:0c:ae:49:92:03:90:09: 7b:78:7f:5b:90:77:cf:49:ed:36:b5:67:c5:f2:64:42:8c:cc: 7b:8a:2d:19:8a:38:60:78:b7:ed:39:84:65:91:7a:9e:3e:96: 80:d4:36:94:0d:76:07:1e:98:ac:72:44:94:1c:91:e1:c2:dd: 80:ed:81:d4:d9:4d:bb:b3:b2:75:f0:82:e5:11:29:b2:4b:9a: a8:12:9d:04:5a:92:4e:c3:62:e7:a7:af:da:90:9a:6a:4b:c9: d8:cd:bd:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjQwNTA4MTY1OTE2WhcNMjQwNTE1MTY1OTE2WjAYMRYwFAYD VQQDEw02NjNiYWY2NC05M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hViDS7n24nng41Kay0PY2/oOabk+mB0gnO4b2EWDalZ2y04wzfVq94pIgOY 13sxZZ3hOE4xmrz+jNYMhcQk4nhcjvChbYx4htMYv8L4Y35sU2GSxZulbCYA6fL8 PIWIkYRw1BmXUker6080tJc71LfJMeEg/e7CxkTr9cdIOpwxIuKOUtcWS3FWa6tJ d4/A/Mm9asSsVFNBiRFpOpb7CK+EmiNtEN2O9xDyeuvahcR+4ZgTOZiO8e9NWlxN hB833HVcZeHkjhQ2+8zTiIbaDQ9bamxsMMEI0DVcfIn/MZt8kJIXBYRxHWEcCCWY JdLNuQPeig0uMYD4YtciMRXmRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdE6XMe WM0krV+1lKefpffyzFvjMB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy5qKBA051/ty9skyuW6t87aoM0IYMEizDpVz+hMvZYivj1HbzuE4Q XzH+oisDJByRui+QiF6uf6XKGv3fO2jqrcr6RDZH/cznShTzxmXhQvZRlW0MU0pP DNUS5316gE9eNs0hXBbKdJ6KerpvxK/ciiRUGrkeZdydRChMdLGJsvoWyr4revxX XvNWeOOSaR06ZLMn+AYi6ZYhewyuSZIDkAl7eH9bkHfPSe02tWfF8mRCjMx7ii0Z ijhgeLftOYRlkXqePpaA1DaUDXYHHpisckSUHJHhwt2A7YHU2U27s7J18ILlESmy S5qoEp0EWpJOw2Lnp6/akJpqS8nYzb12 -----END CERTIFICATE-----Generated at Wed May 8 18:14:40 2024 by rpki-client on console-fra.rpki-client.org