$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: J9sVsCPifSu+7APEcnV8cXm+F8HwJAfPAzlSLXQZPsU= Subject key identifier: 36:E0:61:02:E8:8E:9E:9B:5B:9C:9B:03:35:23:BE:9D:9C:90:DF:05 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 33BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 33BD Signing time: Sat 18 May 2024 15:33:17 +0000 Manifest this update: Sat 18 May 2024 15:33:17 +0000 Manifest next update: Sat 25 May 2024 15:33:17 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: ij5oo9XNwzMRLeA1KlzZ2ITTePlRN6rr2qonMk/J1+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13245 (0x33bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: May 18 15:33:17 2024 GMT Not After : May 25 15:33:17 2024 GMT Subject: CN=6648ca3d-6853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:06:70:a2:b0:4c:01:fa:ec:56:63:9d:bd: c0:9b:41:a5:35:eb:e5:ac:e2:71:b1:2b:e1:90:ca: 4f:ec:f4:d9:e3:a7:81:57:1b:1f:c1:bb:40:d6:e0: 74:6e:5b:18:e9:81:4b:6c:2d:5e:e5:d5:84:74:73: a7:c8:d2:29:ad:c2:3a:2c:74:35:12:1d:b6:a3:6e: 20:6f:75:51:62:30:ed:7f:ad:c3:64:92:56:2c:4b: b1:ae:62:2a:c0:39:ae:19:cb:2c:db:94:d7:77:18: 8b:6c:10:e4:7d:5a:b6:f9:1b:6e:3a:b4:d5:7e:fc: 21:fa:86:b2:39:80:18:6d:5f:3d:8a:01:c2:7d:21: be:41:e4:36:b2:a7:6f:c8:02:f1:ae:99:16:c2:3e: 8c:b0:2b:62:f1:b8:2e:f9:58:96:82:85:6a:64:77: 08:71:9d:d3:40:ab:ca:a6:47:28:ef:04:2a:db:96: 72:b2:69:2e:b9:97:67:81:d7:9d:7c:19:82:0f:fb: 7b:ce:4f:4c:9d:80:9d:9f:ad:90:6f:a8:16:67:44: 80:4d:af:2d:3e:30:f2:c5:6a:0c:a5:67:cd:99:cf: 17:ad:89:4f:17:a1:b7:ca:af:42:c6:bf:fa:30:f6: 28:ed:62:60:6c:8e:a4:67:2b:50:8c:20:5f:2d:86: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E0:61:02:E8:8E:9E:9B:5B:9C:9B:03:35:23:BE:9D:9C:90:DF:05 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ac:73:7e:f3:f9:60:b4:6c:a0:91:65:0b:83:28:ec:8b:2b: 44:2f:85:b8:97:c1:40:53:df:46:6a:c2:84:e7:f3:da:95:cc: c4:10:25:bb:e0:ea:cd:15:08:28:63:16:44:d1:89:84:3a:ca: 91:53:03:28:e2:aa:2a:d3:e0:18:6a:c8:01:2b:65:70:a1:ed: 69:1b:53:49:0a:54:7f:e1:f2:44:d5:13:fa:92:48:f4:af:2b: 69:39:c6:ba:bc:35:72:da:f7:ff:89:c1:0a:27:c4:66:62:97: 05:42:9f:fd:cf:9a:a2:c3:98:b8:75:3e:ac:c5:47:fd:34:4e: cd:ae:86:55:20:ab:1e:82:a9:d7:0c:93:a5:81:15:b3:d1:7a: 6a:99:86:80:65:39:51:fc:f4:1d:e6:f5:47:ff:ae:2a:29:03: b7:66:e5:92:bb:c8:73:4c:6d:f5:a6:3f:6d:f9:40:33:f7:9d: f7:03:f3:68:ae:a6:db:3e:20:3e:b3:15:0b:20:18:36:d1:55: 2f:87:8c:92:de:1e:65:56:4c:29:5b:d2:f7:54:b6:f3:28:c5: 4c:2b:3f:1f:b5:41:7b:b5:d9:21:8e:bc:a5:4e:35:4e:ff:67: 9f:21:4b:be:c2:a6:83:15:bb:46:a8:a6:3a:9c:96:04:8f:f3: 8f:31:b0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjQwNTE4MTUzMzE3WhcNMjQwNTI1MTUzMzE3WjAYMRYwFAYD VQQDEw02NjQ4Y2EzZC02ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QAGcKKwTAH67FZjnb3Am0GlNevlrOJxsSvhkMpP7PTZ46eBVxsfwbtA1uB0 blsY6YFLbC1e5dWEdHOnyNIprcI6LHQ1Eh22o24gb3VRYjDtf63DZJJWLEuxrmIq wDmuGcss25TXdxiLbBDkfVq2+RtuOrTVfvwh+oayOYAYbV89igHCfSG+QeQ2sqdv yALxrpkWwj6MsCti8bgu+ViWgoVqZHcIcZ3TQKvKpkco7wQq25ZysmkuuZdngded fBmCD/t7zk9MnYCdn62Qb6gWZ0SATa8tPjDyxWoMpWfNmc8XrYlPF6G3yq9Cxr/6 MPYo7WJgbI6kZytQjCBfLYbShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbgYQLo jp6bW5ybAzUjvp2ckN8FMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyrHN+8/lgtGygkWULgyjsiytEL4W4l8FAU99GasKE5/PalczEECW7 4OrNFQgoYxZE0YmEOsqRUwMo4qoq0+AYasgBK2Vwoe1pG1NJClR/4fJE1RP6kkj0 rytpOca6vDVy2vf/icEKJ8RmYpcFQp/9z5qiw5i4dT6sxUf9NE7NroZVIKsegqnX DJOlgRWz0XpqmYaAZTlR/PQd5vVH/64qKQO3ZuWSu8hzTG31pj9t+UAz9533A/No rqbbPiA+sxULIBg20VUvh4yS3h5lVkwpW9L3VLbzKMVMKz8ftUF7tdkhjrylTjVO /2efIUu+wqaDFbtGqKY6nJYEj/OPMbAG -----END CERTIFICATE-----Generated at Sat May 18 17:20:02 2024 by rpki-client on console-ams.rpki-client.org