$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: /RD/glv0l+iaBcdiaHJBokDbr/ueLCnQKnV4vpUUb74= Subject key identifier: C1:87:B3:1C:C8:6D:8B:C9:1F:AA:3B:4A:5B:FF:EF:9C:F2:FD:89:EB Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 23 Signing time: Mon 13 May 2024 08:42:25 +0000 Manifest this update: Mon 13 May 2024 08:42:24 +0000 Manifest next update: Mon 20 May 2024 08:42:24 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: GB1hLFPELtZzxaOJ0IvxVZirc9JIu3mlPzWLkjc/LjQ=) 2: 7BC334D0032211EFB6663D61C4F9AE02.roa (hash: KLsaxmsptpjAeDm+b0JJ1w1XqIuCXPvLuQmzINtbEbo=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: xbNJQesTFnSaFQj7OVLX/yZ7ajTt2hsavHnG9clr93o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 07:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: May 13 08:42:24 2024 GMT Not After : May 20 08:42:24 2024 GMT Subject: CN=6641d271-f12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:e5:5e:54:6a:cd:37:16:ac:e9:bc:1e:ff: a6:cb:c1:ba:ad:6c:7e:f1:27:e4:ff:0a:0b:2c:75: c0:99:c4:95:c0:a2:c1:06:5a:17:04:df:4f:f4:c1: 31:4e:c6:89:16:bb:77:3e:db:a7:b2:59:2f:ed:2c: 46:3a:a0:7d:6d:b8:34:d5:65:e3:4c:a8:b5:a2:28: 97:fc:35:10:1f:1b:38:cd:72:a7:22:4a:dc:f8:1e: 08:f6:ee:d5:d9:bc:92:6d:85:63:06:6e:0b:7d:55: d4:d3:56:dc:f7:af:d6:01:87:5c:6f:e6:73:75:47: 94:b0:d2:49:2a:bf:54:4b:1c:6a:3e:f8:39:3d:25: ab:14:e1:fd:99:f3:bf:a1:f3:2b:19:d4:71:2f:7c: b4:fb:83:83:b3:68:e5:ff:2d:5c:de:bd:73:d0:bb: 45:30:b2:9b:74:4d:52:f7:81:c0:b8:e2:1d:ba:3b: 7a:30:68:0a:76:ff:44:ca:87:e2:fd:43:58:49:74: 19:41:f0:9f:b1:82:60:62:e2:2f:77:80:33:f7:ee: c0:32:ae:4b:f6:de:a7:09:0a:62:42:f5:13:25:7b: 68:95:f1:b2:34:be:f6:11:bc:8e:53:47:b2:e2:45: ac:2d:4b:68:10:25:b6:a5:13:91:9e:54:1d:8b:1c: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:B3:1C:C8:6D:8B:C9:1F:AA:3B:4A:5B:FF:EF:9C:F2:FD:89:EB X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:c8:3f:69:9a:b1:3e:39:b8:e3:39:36:3e:79:51:9e:e8: 1f:17:72:f2:6d:2c:40:6c:8e:cf:9c:6b:d1:80:b6:36:80:90: e2:15:46:d4:f1:43:37:f0:93:6c:32:1a:dd:a7:c5:02:3f:f4: e2:54:1f:6d:ec:c7:cf:24:ff:12:aa:cf:45:b0:55:2a:fb:29: e0:87:89:c4:ac:a9:a9:fc:ac:3d:fb:91:87:c3:20:37:e4:9c: 3b:89:2a:82:e5:68:fc:f2:0c:17:3a:cd:eb:20:bc:9c:3d:df: cb:a4:fb:e8:21:e9:36:4c:8f:dc:84:70:12:a4:53:02:94:eb: b7:e5:1a:80:e1:61:f6:b9:6f:8e:ba:c9:e3:08:15:79:ab:2d: 0a:5f:88:38:e0:05:8c:dc:64:93:42:42:3c:97:15:41:16:28: e5:9f:b3:64:11:ec:4d:61:b3:59:23:2d:6f:44:71:e6:9d:f8: 7f:03:37:4e:d2:a2:ea:a5:ce:43:77:b6:c6:f3:bc:1d:b8:fb: 7f:dc:69:a5:a0:1f:c2:1c:9b:08:9f:4e:21:3b:08:9b:1a:0f: f5:5c:96:67:5d:73:79:4d:19:5f:5e:0a:86:b6:23:49:f3:95: 47:e0:80:4c:97:ed:00:55:e9:89:cb:39:cf:f0:bc:9d:d3:09: 06:f2:e7:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDhCRTExMC8GA1UEBRMoRTNGMThENDEyMDI2RjMxQkE0NDNFQTMzRjU2NzA2RkZC MkYwRjE2MjAeFw0yNDA1MTMwODQyMjRaFw0yNDA1MjAwODQyMjRaMBgxFjAUBgNV BAMTDTY2NDFkMjcxLWYxMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrD+VeVGrNNxas6bwe/6bLwbqtbH7xJ+T/CgssdcCZxJXAosEGWhcE30/0wTFO xokWu3c+26eyWS/tLEY6oH1tuDTVZeNMqLWiKJf8NRAfGzjNcqciStz4Hgj27tXZ vJJthWMGbgt9VdTTVtz3r9YBh1xv5nN1R5Sw0kkqv1RLHGo++Dk9JasU4f2Z87+h 8ysZ1HEvfLT7g4OzaOX/LVzevXPQu0Uwspt0TVL3gcC44h26O3owaAp2/0TKh+L9 Q1hJdBlB8J+xgmBi4i93gDP37sAyrkv23qcJCmJC9RMle2iV8bI0vvYRvI5TR7Li RawtS2gQJbalE5GeVB2LHD4zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwYezHMht i8kfqjtKW//vnPL9ieswHwYDVR0jBBgwFoAU4/GNQSAm8xukQ+oz9WcG/7Lw8WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEOEJFL0M2OEVGRjlFRTVE NjExRUU4QjM1NjczOUM0RjlBRTAyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNF9HTlFTQW04eHVrUS1vejlXY0dfN0x3OFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE OEJFL0M2OEVGRjlFRTVENjExRUU4QjM1NjczOUM0RjlBRTAyLzRfR05RU0FtOHh1 a1Etb3o5V2NHXzdMdzhXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADPyyD9pmrE+ObjjOTY+eVGe6B8XcvJtLEBsjs+ca9GAtjaAkOIVRtTx Qzfwk2wyGt2nxQI/9OJUH23sx88k/xKqz0WwVSr7KeCHicSsqan8rD37kYfDIDfk nDuJKoLlaPzyDBc6zesgvJw938uk++gh6TZMj9yEcBKkUwKU67flGoDhYfa5b466 yeMIFXmrLQpfiDjgBYzcZJNCQjyXFUEWKOWfs2QR7E1hs1kjLW9Ecead+H8DN07S ouqlzkN3tsbzvB24+3/caaWgH8IcmwifTiE7CJsaD/Vclmddc3lNGV9eCoa2I0nz lUfggEyX7QBV6YnLOc/wvJ3TCQby52E= -----END CERTIFICATE-----Generated at Mon May 13 10:12:08 2024 by rpki-client on console-fra.rpki-client.org