$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: UtmW01kZkvboGGcB+ErLjH43JlI+HDFFH3YRucDtizg= Subject key identifier: 34:93:E8:F0:ED:30:89:BD:1B:BD:6E:B0:21:AE:A1:87:90:FD:2D:8C Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 0306 Signing time: Fri 03 May 2024 03:16:43 +0000 Manifest this update: Fri 03 May 2024 03:16:42 +0000 Manifest next update: Fri 10 May 2024 03:16:42 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: E3rJo21UMA76VfLLtTVVYpvL3HyTiSRRupWZ6UvEcVA=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: yShCVW/Ki+pOl4xyg9Rzgiedz6DKaXwPSqXRv340YiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: May 3 03:16:42 2024 GMT Not After : May 10 03:16:42 2024 GMT Subject: CN=6634571b-fbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:63:f0:0b:21:04:89:09:d5:a1:55:22:bc: 16:f2:94:97:c1:f0:d2:36:a6:a8:fa:15:45:6a:b0: 61:11:63:24:32:27:16:9e:e1:7e:5f:f2:54:8d:f4: 1c:df:81:c4:b7:58:63:36:14:77:52:2e:2c:ed:fe: 56:03:01:84:8b:76:32:29:39:41:87:50:e0:53:04: 2b:58:cd:44:01:50:5c:2c:56:36:48:04:2f:12:63: ea:28:10:71:1d:b1:74:bf:f8:59:2b:c2:eb:c0:fe: d9:0a:3a:fc:6a:67:23:30:78:60:bb:25:6e:73:a9: 20:19:05:13:0b:1c:b2:90:09:81:b7:81:85:cf:a4: 50:55:e6:73:45:f3:eb:c9:af:61:57:61:e0:bf:b3: 22:ee:8f:17:f4:5e:58:f1:56:08:d9:30:64:60:4a: ca:c7:46:7f:a6:bf:a3:e5:32:9c:46:fb:84:51:8d: 49:47:6d:80:3c:10:13:fd:52:09:3b:b2:1e:0b:35: 0d:e1:19:54:b2:76:ed:eb:c6:dc:75:91:6f:3c:8b: 47:ec:e4:e3:97:1d:86:17:3d:97:13:ed:cf:13:4a: 9e:75:c9:e0:1f:27:14:9d:e6:0c:d8:0d:70:7e:95: c5:3d:25:0d:6b:3f:fc:9f:53:32:e1:9b:b2:f6:30: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:E8:F0:ED:30:89:BD:1B:BD:6E:B0:21:AE:A1:87:90:FD:2D:8C X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:cc:a9:8a:57:8a:c7:f0:53:3d:f4:8d:64:3d:32:b5:e7:5e: 20:db:aa:cb:43:6f:1a:14:ea:ea:14:40:15:7c:75:bd:ad:2c: 6d:27:5d:c3:4d:96:13:3e:3a:55:17:06:8a:f5:83:ca:a6:f0: f0:ce:5a:39:88:9d:55:8c:77:fb:78:32:c5:6d:08:67:84:d7: ec:e0:e6:88:1f:37:50:94:78:b9:fd:a8:37:e8:0c:f1:95:5f: 91:d8:ad:67:1a:7d:42:90:ed:93:cb:1e:8a:c1:75:7c:b8:15: 92:f0:9f:fe:0e:ff:0d:d8:7f:49:d3:cc:0c:14:8c:fa:3e:f2: 3b:17:c6:07:77:e5:5c:8b:a8:c3:8c:52:0f:76:00:ec:29:7b: e3:6a:db:bf:28:b7:67:29:92:fa:74:71:e5:7a:61:5c:96:b4: a4:b8:22:4a:39:04:81:14:ce:75:a8:98:cd:d5:7a:db:19:c7: 14:ea:79:69:32:5b:bf:4f:de:60:18:c3:e9:95:6b:ca:50:f2: 66:2b:c1:75:73:96:47:94:0f:f2:35:a2:f5:d4:0d:e9:64:13: 3b:72:c5:42:3f:39:40:27:b7:ed:ea:ee:df:bd:51:69:93:29: ff:08:a6:74:c9:0c:8c:40:f8:92:72:5e:9f:1c:44:36:66:ca: 04:38:d8:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjQwNTAzMDMxNjQyWhcNMjQwNTEwMDMxNjQyWjAYMRYwFAYD VQQDEw02NjM0NTcxYi1mYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte1j8AshBIkJ1aFVIrwW8pSXwfDSNqao+hVFarBhEWMkMicWnuF+X/JUjfQc 34HEt1hjNhR3Ui4s7f5WAwGEi3YyKTlBh1DgUwQrWM1EAVBcLFY2SAQvEmPqKBBx HbF0v/hZK8LrwP7ZCjr8amcjMHhguyVuc6kgGQUTCxyykAmBt4GFz6RQVeZzRfPr ya9hV2Hgv7Mi7o8X9F5Y8VYI2TBkYErKx0Z/pr+j5TKcRvuEUY1JR22APBAT/VIJ O7IeCzUN4RlUsnbt68bcdZFvPItH7OTjlx2GFz2XE+3PE0qedcngHycUneYM2A1w fpXFPSUNaz/8n1My4Zuy9jDEtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDST6PDt MIm9G71usCGuoYeQ/S2MMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmzKmKV4rH8FM99I1kPTK1514g26rLQ28aFOrqFEAVfHW9rSxtJ13D TZYTPjpVFwaK9YPKpvDwzlo5iJ1VjHf7eDLFbQhnhNfs4OaIHzdQlHi5/ag36Azx lV+R2K1nGn1CkO2Tyx6KwXV8uBWS8J/+Dv8N2H9J08wMFIz6PvI7F8YHd+Vci6jD jFIPdgDsKXvjatu/KLdnKZL6dHHlemFclrSkuCJKOQSBFM51qJjN1XrbGccU6nlp Mlu/T95gGMPplWvKUPJmK8F1c5ZHlA/yNaL11A3pZBM7csVCPzlAJ7ft6u7fvVFp kyn/CKZ0yQyMQPiScl6fHEQ2ZsoEONi1 -----END CERTIFICATE-----Generated at Fri May 3 04:45:29 2024 by rpki-client on console-fra.rpki-client.org