$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: y+9wifi3OzRu2oy83ctX+2ekOQn8hOPdey4o5Yrkyos= Subject key identifier: 65:67:E7:49:CF:A2:84:2F:22:0E:2A:9A:70:81:7B:3A:47:3A:77:34 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 02EA Signing time: Wed 01 May 2024 03:35:36 +0000 Manifest this update: Wed 01 May 2024 03:35:36 +0000 Manifest next update: Wed 08 May 2024 03:35:36 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: 15pSNPzJpeGUmiU+Ree6bC8kWQhAcvGvx3ed6+aK94c=) 2: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: oQqFB4mCK9lOMAaK8N1MQQ3r8ZV/5SIQAc2GEgxu44Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: May 1 03:35:36 2024 GMT Not After : May 8 03:35:36 2024 GMT Subject: CN=6631b888-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:01:5c:d4:07:3a:e0:dd:56:80:2c:5b:f7: f4:47:ae:53:6d:32:f4:63:7e:56:56:e5:e7:d4:c0: a4:25:73:54:27:c5:7e:f6:d5:bd:f5:fb:a7:a4:c1: e9:29:1b:ad:d0:d7:ea:3a:57:eb:cd:b3:07:32:d6: b3:a7:39:77:8a:13:2e:ac:51:69:0f:65:f2:b5:96: a1:07:21:23:12:f6:cc:ab:3d:05:03:41:57:e9:a3: e7:44:1f:d0:72:91:46:05:62:82:19:eb:42:92:92: 0e:0b:d6:fc:da:d4:9c:4b:6e:5f:b7:1f:c1:29:bc: 5e:88:d8:a9:86:24:c7:22:6e:90:07:69:9c:a9:fa: a7:d4:a1:3f:4a:6e:6f:7a:33:77:ce:14:d6:2a:7e: d9:ea:ca:0b:17:c6:df:52:a4:54:0d:bb:01:ab:84: 96:00:6b:89:85:2d:5c:4b:64:01:18:89:4d:60:62: 38:2f:d8:b2:c3:05:f5:8c:ca:47:b4:1d:2a:6f:2c: 3a:ed:2f:32:b8:72:10:f7:c3:0a:f0:75:3c:0a:07: 49:ca:bc:cd:39:d7:20:5b:a7:ae:11:17:a4:34:42: 67:d7:c5:d8:09:f2:b4:bc:ba:11:2c:f9:d0:c0:b0: 8c:83:9f:2c:79:08:91:3e:ed:b2:cf:b3:0a:57:4f: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:E7:49:CF:A2:84:2F:22:0E:2A:9A:70:81:7B:3A:47:3A:77:34 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:0d:6b:4e:34:52:ee:9c:a9:be:10:3d:14:4c:05:74:25: a1:36:b4:97:4a:35:c6:bb:f2:2a:05:6c:55:5d:09:c2:ee:81: ca:92:28:08:f3:50:d7:04:24:22:b5:ff:d1:0b:61:82:1d:ca: 01:76:6e:40:b9:d6:55:90:69:37:e0:4f:a8:af:14:e2:94:8e: 1e:92:a4:93:90:05:f8:a0:85:24:be:6e:ab:a4:b4:1b:98:2b: 64:0e:fd:51:41:08:e9:90:39:7c:cb:b7:cd:32:75:cb:cb:8a: 1f:c0:a2:86:90:03:eb:d2:5d:67:1b:bd:21:05:43:00:b9:76: 25:8b:1a:59:7d:3e:47:24:25:5a:a8:bb:12:72:51:02:92:e5: e2:38:af:33:0f:d6:53:fc:0f:31:c9:ae:ea:a3:5b:1b:ef:bb: 55:29:8e:01:d6:40:b8:02:85:7c:ea:1b:93:d7:25:a3:89:27: fa:73:d2:ba:5d:16:d1:19:61:0c:e6:38:56:0c:83:12:8e:36: c9:bf:9c:eb:60:32:c2:1a:c3:4a:d6:3d:37:b0:87:f6:b6:0a: 9e:26:b6:33:20:ed:ad:1e:a2:77:8c:58:71:06:ac:c3:ce:30: 6a:60:f3:be:92:59:b1:ed:cf:c9:89:ae:78:9f:51:a3:6d:3b: d4:de:77:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjQwNTAxMDMzNTM2WhcNMjQwNTA4MDMzNTM2WjAYMRYwFAYD VQQDEw02NjMxYjg4OC0xYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2wBXNQHOuDdVoAsW/f0R65TbTL0Y35WVuXn1MCkJXNUJ8V+9tW99funpMHp KRut0NfqOlfrzbMHMtazpzl3ihMurFFpD2XytZahByEjEvbMqz0FA0FX6aPnRB/Q cpFGBWKCGetCkpIOC9b82tScS25ftx/BKbxeiNiphiTHIm6QB2mcqfqn1KE/Sm5v ejN3zhTWKn7Z6soLF8bfUqRUDbsBq4SWAGuJhS1cS2QBGIlNYGI4L9iywwX1jMpH tB0qbyw67S8yuHIQ98MK8HU8CgdJyrzNOdcgW6euERekNEJn18XYCfK0vLoRLPnQ wLCMg58seQiRPu2yz7MKV08MBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVn50nP ooQvIg4qmnCBezpHOnc0MB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbeA1rTjRS7pypvhA9FEwFdCWhNrSXSjXGu/IqBWxVXQnC7oHKkigI 81DXBCQitf/RC2GCHcoBdm5AudZVkGk34E+orxTilI4ekqSTkAX4oIUkvm6rpLQb mCtkDv1RQQjpkDl8y7fNMnXLy4ofwKKGkAPr0l1nG70hBUMAuXYlixpZfT5HJCVa qLsSclECkuXiOK8zD9ZT/A8xya7qo1sb77tVKY4B1kC4AoV86huT1yWjiSf6c9K6 XRbRGWEM5jhWDIMSjjbJv5zrYDLCGsNK1j03sIf2tgqeJrYzIO2tHqJ3jFhxBqzD zjBqYPO+klmx7c/Jia54n1GjbTvU3nfm -----END CERTIFICATE-----Generated at Wed May 1 05:59:15 2024 by rpki-client on console-fra.rpki-client.org