$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json) Hash identifier: 4r3bckchhtciloCLMt5UPIJDui5Kx+IjRUofw0PSTms= Subject key identifier: 9C:D7:29:0F:1E:D3:DA:30:FB:FE:E2:33:F5:44:3B:C3:F9:39:58:CD Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft Manifest number: 0655 Signing time: Sat 04 May 2024 23:45:42 +0000 Manifest this update: Sat 04 May 2024 23:45:42 +0000 Manifest next update: Sat 11 May 2024 23:45:42 +0000 Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: dhQ5yPX3yg4HKccq+jM2UTA2ZHYGELutNwjJmnkKotw=) 2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: rpcF4b+qJUHC5lmcRh3xOOCURA4ffTRb8SZCHWobMmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: May 4 23:45:42 2024 GMT Not After : May 11 23:45:42 2024 GMT Subject: CN=6636c8a6-c3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:cd:85:25:02:14:27:1a:3e:58:25:1e:07: 93:4a:b1:f7:24:5e:f3:61:4e:2c:d7:94:1b:3c:d0: 60:33:1c:b5:96:0f:d9:e2:ee:d7:cd:5a:8b:b8:17: 8d:af:73:e8:c3:7c:cf:eb:c9:7e:f4:db:d4:9d:13: e6:a6:26:68:63:1b:48:2a:57:e0:bf:50:9a:be:5c: e4:48:a2:05:3f:d0:ce:e1:81:dc:f3:93:ab:24:0f: ef:d7:86:af:1e:fb:f9:18:b1:c5:92:4a:13:94:f8: cb:82:0a:3f:91:09:da:a1:fa:9b:43:86:16:d7:67: 1c:84:f5:c7:aa:1d:6f:fa:4d:58:17:6b:9a:7c:de: 6d:f9:02:7c:44:87:e2:a7:44:7d:a9:c0:5d:3a:66: 9a:64:0e:09:1f:e6:b0:7c:bd:b5:79:2b:14:92:f2: 8c:05:45:86:fe:17:d2:14:a4:a3:4b:2f:91:0f:1f: 3f:34:71:3d:74:72:5d:41:c3:a7:11:e7:ed:50:d2: 92:ac:ab:d1:6b:d3:76:4d:c5:c9:c2:ba:54:49:c3: 91:70:4c:26:64:95:d3:56:c0:62:fd:56:4c:1d:db: 7b:3b:eb:3d:96:fc:e4:c0:2b:1d:37:59:7c:c4:d6: cf:e1:87:53:14:c7:f4:66:c9:74:43:e7:51:94:d2: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:29:0F:1E:D3:DA:30:FB:FE:E2:33:F5:44:3B:C3:F9:39:58:CD X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:d6:17:d6:7a:33:c6:2b:6a:d6:81:a6:63:b5:ed:cb:2a: 06:7b:2b:c5:a6:32:df:a1:46:0a:d2:10:9f:69:03:8e:c9:63: d1:f8:9a:ca:54:cf:b4:8f:1d:77:5c:cc:19:5e:26:96:33:3a: b7:2a:9d:a0:34:12:37:f2:3d:98:67:55:8b:df:4d:a6:12:30: 26:c9:c7:6b:8e:7c:6d:7f:f3:90:34:77:81:0e:01:56:48:72: d7:28:08:54:7c:31:50:57:de:58:e3:8d:c8:9a:c4:19:4d:d1: f4:fb:1d:e2:ae:c8:68:aa:82:a2:54:8f:92:96:8e:d5:3c:3b: 17:53:5c:18:77:79:d4:8b:8f:68:ce:41:58:c9:ee:f3:c1:48: 47:91:2d:fe:33:f1:64:31:07:04:7b:83:bc:01:2f:1f:97:95: 04:04:bd:56:89:92:7a:e8:f5:0f:25:74:fc:7f:42:05:a5:41: f9:d6:b7:44:ff:a9:7c:b1:d0:bf:a6:32:f8:75:6f:4b:a8:12: ca:75:40:85:0f:b8:a3:40:b2:14:2e:3c:6c:5e:30:de:99:3c: da:1f:73:62:da:08:19:30:15:ed:c5:dd:43:55:70:b3:d2:09: 0d:8d:65:6e:6a:90:c4:32:88:c2:d6:10:9d:27:8e:5c:75:61: c9:74:af:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjQwNTA0MjM0NTQyWhcNMjQwNTExMjM0NTQyWjAYMRYwFAYD VQQDEw02NjM2YzhhNi1jM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJDNhSUCFCcaPlglHgeTSrH3JF7zYU4s15QbPNBgMxy1lg/Z4u7XzVqLuBeN r3Pow3zP68l+9NvUnRPmpiZoYxtIKlfgv1CavlzkSKIFP9DO4YHc85OrJA/v14av Hvv5GLHFkkoTlPjLggo/kQnaofqbQ4YW12cchPXHqh1v+k1YF2uafN5t+QJ8RIfi p0R9qcBdOmaaZA4JH+awfL21eSsUkvKMBUWG/hfSFKSjSy+RDx8/NHE9dHJdQcOn EeftUNKSrKvRa9N2TcXJwrpUScORcEwmZJXTVsBi/VZMHdt7O+s9lvzkwCsdN1l8 xNbP4YdTFMf0Zsl0Q+dRlNJQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzXKQ8e 09ow+/7iM/VEO8P5OVjNMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR QXlWU3hDYkVOVFBzcklOUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQX9YX1nozxitq1oGmY7XtyyoGeyvFpjLfoUYK0hCfaQOOyWPR+JrK VM+0jx13XMwZXiaWMzq3Kp2gNBI38j2YZ1WL302mEjAmycdrjnxtf/OQNHeBDgFW SHLXKAhUfDFQV95Y443ImsQZTdH0+x3irshoqoKiVI+Slo7VPDsXU1wYd3nUi49o zkFYye7zwUhHkS3+M/FkMQcEe4O8AS8fl5UEBL1WiZJ66PUPJXT8f0IFpUH51rdE /6l8sdC/pjL4dW9LqBLKdUCFD7ijQLIULjxsXjDemTzaH3Ni2ggZMBXtxd1DVXCz 0gkNjWVuapDEMojC1hCdJ45cdWHJdK/l -----END CERTIFICATE-----Generated at Sun May 5 01:22:25 2024 by rpki-client on console-fra.rpki-client.org