$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: CxlNUAZ17LXQisGf15UH06nZ+Jb6zjPgec4AYOJlVKw= Subject key identifier: 9B:D8:8A:5B:5C:A4:60:F1:A8:99:66:B6:DC:E7:C5:DE:1F:89:E6:16 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0399 Signing time: Fri 03 May 2024 02:41:24 +0000 Manifest this update: Fri 03 May 2024 02:41:24 +0000 Manifest next update: Fri 10 May 2024 02:41:24 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: 33MywRzJbOpBtSAjUloEhMDpA+Ilxv11U3f/mEZOKG0=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: yZv8Ndkb/Ixz4agZ0ioEAuVc17idALkIoBsSVXC4ewU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: May 3 02:41:24 2024 GMT Not After : May 10 02:41:24 2024 GMT Subject: CN=66344ed4-1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cf:e2:d3:ee:8b:07:c7:69:94:53:15:17:24: e0:16:8f:a0:3f:77:7a:31:50:0f:42:c7:7b:ae:6b: cf:ea:72:bb:b9:ec:28:4d:16:72:33:6b:da:6a:d6: 5e:4a:59:f5:2d:dd:eb:c4:fe:df:dd:a8:ca:01:6c: 9d:55:4e:9b:69:71:94:29:b0:f2:d6:21:ea:45:52: ad:5c:98:dd:56:2f:51:8f:90:8d:68:13:26:30:7d: 25:cf:3a:c6:31:2a:7a:9e:a3:bf:77:78:f6:1c:1f: cb:50:46:c2:45:ba:8f:46:4a:0d:30:e6:51:95:13: bf:53:8a:84:d5:45:15:37:63:6b:c3:ce:72:a7:d5: e3:ab:f3:bf:4e:83:8c:5b:2b:70:ef:05:31:d8:82: cf:bd:e1:5d:43:33:8d:63:b7:da:ba:9c:8d:a0:a3: 4b:b0:82:0e:59:08:cf:1c:ea:3c:33:c9:8e:04:b5: c4:26:06:32:43:68:3d:c2:9b:68:39:e4:ea:7a:5d: 41:2b:b1:54:e1:47:5a:9b:c8:ea:51:06:a1:3b:fe: 1f:81:a8:ba:a5:0b:24:5e:9a:1c:56:63:3d:b0:04: bf:21:ac:59:98:71:47:c1:49:8c:55:06:64:74:1d: 83:6e:36:9e:a6:1b:9f:54:ba:e6:b4:b3:c4:f6:94: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:8A:5B:5C:A4:60:F1:A8:99:66:B6:DC:E7:C5:DE:1F:89:E6:16 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:dc:cc:a0:a3:6e:58:37:5d:bc:b9:16:71:5f:70:22:e1:1f: 39:1f:c9:ba:31:14:af:c2:a8:a4:36:56:0b:0c:2a:58:01:8a: 6e:4b:93:9d:ee:29:b8:e8:7d:e9:72:65:68:0f:80:fa:e1:69: 49:27:dd:75:40:fa:8c:da:30:a4:28:ad:84:2a:1a:7c:02:23: a3:80:04:7d:0f:41:17:c1:74:af:d1:42:5f:69:df:7f:87:c9: 16:74:34:75:f3:8e:e7:18:eb:cd:0c:48:40:21:d7:ac:62:0d: fb:12:f4:d5:85:bc:1e:fc:fe:99:d7:4c:2b:86:ff:c9:7e:5a: 4d:41:0e:49:e6:d7:2e:49:c6:ca:bb:8f:40:3e:70:b3:42:68: bf:b2:ef:ef:76:2f:27:d6:c9:dc:50:64:22:b3:47:c2:83:0b: 6f:7b:11:5a:8e:82:e2:61:57:dc:42:b5:3d:e8:23:bf:5e:fa: 89:da:16:28:b1:50:ab:e7:f2:3f:eb:f0:ec:f4:98:75:2b:92: b5:f5:9b:56:01:2a:8c:a0:89:1d:75:7c:67:cc:3d:a9:4e:fa: e2:38:f7:d5:75:71:5c:10:1d:91:c0:b7:07:2d:9f:4e:f9:8b: 2b:a8:2b:02:4e:ec:6d:45:0d:35:5c:b3:ff:03:8d:95:31:ed: d0:df:6f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjQwNTAzMDI0MTI0WhcNMjQwNTEwMDI0MTI0WjAYMRYwFAYD VQQDEw02NjM0NGVkNC0xNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5M/i0+6LB8dplFMVFyTgFo+gP3d6MVAPQsd7rmvP6nK7uewoTRZyM2vaatZe Sln1Ld3rxP7f3ajKAWydVU6baXGUKbDy1iHqRVKtXJjdVi9Rj5CNaBMmMH0lzzrG MSp6nqO/d3j2HB/LUEbCRbqPRkoNMOZRlRO/U4qE1UUVN2Nrw85yp9Xjq/O/ToOM Wytw7wUx2ILPveFdQzONY7faupyNoKNLsIIOWQjPHOo8M8mOBLXEJgYyQ2g9wpto OeTqel1BK7FU4Udam8jqUQahO/4fgai6pQskXpocVmM9sAS/IaxZmHFHwUmMVQZk dB2DbjaephufVLrmtLPE9pQUBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvYiltc pGDxqJlmttznxd4fieYWMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp3Mygo25YN128uRZxX3Ai4R85H8m6MRSvwqikNlYLDCpYAYpuS5Od 7im46H3pcmVoD4D64WlJJ911QPqM2jCkKK2EKhp8AiOjgAR9D0EXwXSv0UJfad9/ h8kWdDR1847nGOvNDEhAIdesYg37EvTVhbwe/P6Z10wrhv/JflpNQQ5J5tcuScbK u49APnCzQmi/su/vdi8n1sncUGQis0fCgwtvexFajoLiYVfcQrU96CO/XvqJ2hYo sVCr5/I/6/Ds9Jh1K5K19ZtWASqMoIkddXxnzD2pTvriOPfVdXFcEB2RwLcHLZ9O +YsrqCsCTuxtRQ01XLP/A42VMe3Q32/f -----END CERTIFICATE-----Generated at Fri May 3 04:45:29 2024 by rpki-client on console-fra.rpki-client.org