$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft File: gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json) Hash identifier: urcD4LvcApbvG/2WE5i/xTi0NcSFTKIm3MYDMu8MXRk= Subject key identifier: 0D:F4:59:1C:93:A9:C1:04:7A:43:69:16:05:6C:F5:F1:27:A9:CB:7C Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft Manifest number: 057F Signing time: Fri 03 May 2024 00:43:20 +0000 Manifest this update: Fri 03 May 2024 00:43:20 +0000 Manifest next update: Fri 10 May 2024 00:43:20 +0000 Files and hashes: 1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: kWKC8qkqmaHIEnKTvcxU+WMyesutBQvJWSZsC7YWIdk=) 2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: 01f25j3R54MWvOTz10L2YoiOpP1/37rLlOmREDYrZ44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60 Validity Not Before: May 3 00:43:20 2024 GMT Not After : May 10 00:43:20 2024 GMT Subject: CN=66343328-4b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:4a:7b:ff:4f:ea:94:83:cf:e9:97:bb:ba: e6:bb:d5:84:30:4f:3c:dc:0b:4e:79:4b:e5:1c:b3: af:ea:df:c5:40:b5:26:a4:89:e0:86:68:57:b0:c0: 1a:1f:63:24:dd:af:ed:03:ed:5a:fc:a7:d4:85:0c: e9:16:3e:42:0c:89:19:72:f7:9e:1f:82:7d:b8:6f: 1f:c0:dd:1e:72:c6:0a:0a:aa:f5:21:be:16:a4:ef: f1:ae:bd:b5:dc:73:ae:9d:8d:76:0c:a6:eb:d8:ad: f6:e1:79:11:f6:6d:47:5d:14:3a:c3:66:ae:d5:69: c6:f0:e6:e7:a3:ba:50:1a:11:7e:28:a3:13:ca:c8: 2e:f9:a2:4c:c1:ad:a3:b0:a7:28:fa:f6:c7:f9:df: 54:df:bb:66:2f:69:ba:60:a7:89:7a:dc:d0:a8:86: ec:21:1f:5a:bc:cc:41:f5:44:1c:21:96:50:25:73: e0:64:7a:ee:fe:19:22:25:03:cc:56:12:4a:a5:4a: 5b:7b:ae:12:79:9a:39:36:63:bb:e1:d0:48:46:cd: b3:1b:48:3c:5c:87:56:08:f5:79:ab:cf:4f:43:38: fc:86:22:ce:79:16:f2:fb:da:73:4b:ca:31:39:19: 9f:ff:8d:26:8a:a7:08:29:d6:b9:3e:a9:e2:d7:bc: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:59:1C:93:A9:C1:04:7A:43:69:16:05:6C:F5:F1:27:A9:CB:7C X509v3 Authority Key Identifier: keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:35:a3:9e:d3:a5:19:fd:ee:a7:c4:8f:54:3e:73:54:c6:0e: 56:f8:6e:88:de:87:32:02:b0:4f:67:76:5b:95:c6:45:94:e1: 2e:9f:bd:26:b0:85:a2:61:29:6d:5d:9f:cf:87:51:ef:3f:76: 1b:94:49:d6:39:26:e6:1c:17:df:14:03:b5:00:4a:bf:05:07: 92:09:39:38:7d:24:b9:20:a4:bd:6a:38:0e:82:4d:9e:9f:7e: 58:e8:f4:8b:9b:08:63:e2:a0:c0:6e:0f:4c:21:3a:c7:a2:3e: 4f:45:ad:44:6a:75:4e:be:f2:1c:13:79:45:36:47:ec:f6:04: 57:c2:79:8e:9c:c6:07:b1:2c:e9:79:8f:01:6f:ed:2e:28:f7: 44:7d:e8:d5:44:59:88:6e:93:6c:ab:d2:bd:ea:79:24:52:c4: e7:5f:00:95:36:ec:38:ef:3f:aa:d1:37:80:5c:43:64:42:08: be:c7:ea:c9:21:b6:ef:47:54:21:2f:60:45:3d:c1:df:ba:9a: 99:23:ff:94:9e:40:5b:2d:d8:c0:5c:a3:08:e2:34:85:1b:41: f1:2d:74:c7:df:30:4b:e9:4e:d4:65:c1:c1:d0:6a:87:0c:01: 08:b0:89:54:f8:3b:11:43:12:91:ab:3a:0d:10:4f:ff:b3:46: 7c:67:1d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2 RjkwQkZDNjAwHhcNMjQwNTAzMDA0MzIwWhcNMjQwNTEwMDA0MzIwWjAYMRYwFAYD VQQDEw02NjM0MzMyOC00YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdFKe/9P6pSDz+mXu7rmu9WEME883AtOeUvlHLOv6t/FQLUmpInghmhXsMAa H2Mk3a/tA+1a/KfUhQzpFj5CDIkZcveeH4J9uG8fwN0ecsYKCqr1Ib4WpO/xrr21 3HOunY12DKbr2K324XkR9m1HXRQ6w2au1WnG8Obno7pQGhF+KKMTysgu+aJMwa2j sKco+vbH+d9U37tmL2m6YKeJetzQqIbsIR9avMxB9UQcIZZQJXPgZHru/hkiJQPM VhJKpUpbe64SeZo5NmO74dBIRs2zG0g8XIdWCPV5q89PQzj8hiLOeRby+9pzS8ox ORmf/40miqcIKda5Pqni17x6RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA30WRyT qcEEekNpFgVs9fEnqct8MB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBRC80QjY1MDY1ODhERTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpj MTR2Y09pRXJDMzV2a0xfR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtNaOe06UZ/e6nxI9UPnNUxg5W+G6I3ocyArBPZ3ZblcZFlOEun70m sIWiYSltXZ/Ph1HvP3YblEnWOSbmHBffFAO1AEq/BQeSCTk4fSS5IKS9ajgOgk2e n35Y6PSLmwhj4qDAbg9MITrHoj5PRa1EanVOvvIcE3lFNkfs9gRXwnmOnMYHsSzp eY8Bb+0uKPdEfejVRFmIbpNsq9K96nkkUsTnXwCVNuw47z+q0TeAXENkQgi+x+rJ IbbvR1QhL2BFPcHfupqZI/+UnkBbLdjAXKMI4jSFG0HxLXTH3zBL6U7UZcHB0GqH DAEIsIlU+DsRQxKRqzoNEE//s0Z8Zx0f -----END CERTIFICATE-----Generated at Fri May 3 01:30:29 2024 by rpki-client on console-fra.rpki-client.org