$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: 4dA8tKQnBULindrSv3xSV10Qc0azwquNQJPWOAWG9T8= Subject key identifier: 26:91:DF:BE:D7:89:60:80:4E:94:89:8A:E4:B8:60:A4:87:1D:8F:BD Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0875 Signing time: Sat 18 May 2024 21:36:55 +0000 Manifest this update: Sat 18 May 2024 21:36:55 +0000 Manifest next update: Sat 25 May 2024 21:36:55 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: M6S5/1p/CH2UieB6/rZb1yoz5fovs/9HF7AE06qUGDo=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: oKOcbNnwPGTy3q5emliwbRxX0Ls/8MFVWMAhcz5HBKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: May 18 21:36:55 2024 GMT Not After : May 25 21:36:55 2024 GMT Subject: CN=66491f77-439b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:62:c7:ac:cb:f5:61:ec:ae:26:76:0d:b8:b3: 8b:38:6b:e8:5d:e0:be:db:fe:38:be:87:44:d7:d1: 4e:6c:82:6e:b0:fa:8f:a1:3d:d9:2d:c7:d2:69:6f: 32:c4:60:c5:23:33:a5:47:87:6d:3a:58:4d:20:63: 53:e7:d8:7e:97:80:b8:47:4d:9b:ac:14:0a:e5:1b: 87:9b:fb:37:d0:52:7e:e7:e1:26:41:88:c5:4a:02: 29:27:c1:77:df:b1:74:00:c3:0d:2a:57:61:69:d0: 1a:c3:6a:a0:65:61:c8:c9:51:e5:f7:16:08:f7:7f: 34:41:98:9b:bc:78:43:3c:ad:07:b3:95:e2:2d:e7: b1:18:c0:3a:94:62:d6:91:6d:f1:fd:e3:db:6f:80: 92:ea:b1:87:91:8f:eb:2a:00:08:50:bb:e2:c9:09: 9f:aa:02:5c:fc:7b:9b:ce:d8:67:96:0d:8c:9a:47: 16:c5:53:be:f7:da:21:43:92:2b:d4:9d:b2:94:31: a9:13:1a:bf:22:49:c6:ff:0f:19:d5:ac:39:ed:a5: f1:88:05:fe:01:91:16:bf:dd:81:f4:77:6f:56:00: 9b:77:03:a1:9c:e6:30:35:83:e0:de:c1:70:c2:f8: 87:a0:79:41:07:a1:13:d1:f7:81:c7:4b:4b:8d:4c: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:91:DF:BE:D7:89:60:80:4E:94:89:8A:E4:B8:60:A4:87:1D:8F:BD X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:12:fd:7b:b2:90:0b:13:76:fc:40:fa:db:9f:fb:07:b9:29: 97:8c:d0:3d:f8:5c:e9:a1:e5:0c:0d:8a:e8:80:e7:0f:cf:42: 44:56:f9:5c:65:9e:7b:d3:6e:ca:d7:75:43:11:ba:fa:fe:f8: f8:f6:e3:7a:87:28:4f:05:4d:ec:f4:56:f9:7b:02:83:e1:a7: 8c:78:01:6f:64:02:bf:d5:ba:8b:d9:59:2c:46:81:a3:8b:19: f1:e7:d5:71:c5:08:62:39:e3:70:42:ec:7f:cb:a2:3f:68:4d: bf:10:6d:11:d4:dc:8a:35:ba:56:9e:94:2d:b5:d8:48:ee:55: 93:10:35:2a:38:e4:30:5e:67:9b:a1:1a:6b:b0:17:87:a4:74: ec:0c:cc:97:11:0f:88:7e:44:dd:d1:ba:07:7f:3c:a6:7f:ed: 82:b9:d0:61:9b:68:38:0a:32:0d:e9:d7:d9:10:0c:23:a0:7f: f1:cc:c5:47:ea:19:ff:08:15:6a:c9:63:ad:24:63:93:58:b2: 30:86:e3:36:ce:72:cc:fd:d5:a5:d7:ab:4f:17:1b:26:e2:43: c3:5e:af:5c:03:1f:34:13:f8:30:ea:a2:7c:8c:60:9b:ab:b5: 60:e0:14:fb:7a:35:55:54:99:6a:28:d9:ad:42:79:cd:bf:9b: 93:97:fd:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjQwNTE4MjEzNjU1WhcNMjQwNTI1MjEzNjU1WjAYMRYwFAYD VQQDEw02NjQ5MWY3Ny00MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GLHrMv1YeyuJnYNuLOLOGvoXeC+2/44vodE19FObIJusPqPoT3ZLcfSaW8y xGDFIzOlR4dtOlhNIGNT59h+l4C4R02brBQK5RuHm/s30FJ+5+EmQYjFSgIpJ8F3 37F0AMMNKldhadAaw2qgZWHIyVHl9xYI9380QZibvHhDPK0Hs5XiLeexGMA6lGLW kW3x/ePbb4CS6rGHkY/rKgAIULviyQmfqgJc/Hubzthnlg2MmkcWxVO+99ohQ5Ir 1J2ylDGpExq/IknG/w8Z1aw57aXxiAX+AZEWv92B9HdvVgCbdwOhnOYwNYPg3sFw wviHoHlBB6ET0feBx0tLjUyjBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaR377X iWCATpSJiuS4YKSHHY+9MB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Ev17spALE3b8QPrbn/sHuSmXjNA9+FzpoeUMDYrogOcPz0JEVvlc ZZ57027K13VDEbr6/vj49uN6hyhPBU3s9Fb5ewKD4aeMeAFvZAK/1bqL2VksRoGj ixnx59VxxQhiOeNwQux/y6I/aE2/EG0R1NyKNbpWnpQttdhI7lWTEDUqOOQwXmeb oRprsBeHpHTsDMyXEQ+IfkTd0boHfzymf+2CudBhm2g4CjIN6dfZEAwjoH/xzMVH 6hn/CBVqyWOtJGOTWLIwhuM2znLM/dWl16tPFxsm4kPDXq9cAx80E/gw6qJ8jGCb q7Vg4BT7ejVVVJlqKNmtQnnNv5uTl/3g -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org