$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: xZlwKt8BxPusZkPG0yN0u/FKuC5S/AbeYbK4wZ2C0lY= Subject key identifier: DC:F3:95:EF:D0:D8:17:4C:29:89:99:3F:44:AF:4D:DB:85:68:B0:4E Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0252 Signing time: Sun 19 May 2024 03:54:49 +0000 Manifest this update: Sun 19 May 2024 03:54:49 +0000 Manifest next update: Sun 26 May 2024 03:54:49 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: hZ/GwYPYoXcI4vxGvh51pSwRFBmJxBMVGbfXj5Yydho=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: iwHeauz7WZYDU/Jd2gsJmb5xRInpR2juCJoiZqsMv4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: May 19 03:54:49 2024 GMT Not After : May 26 03:54:49 2024 GMT Subject: CN=66497809-f147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:c6:c8:d5:b1:41:17:30:69:a5:8a:c9:38: e0:4c:b1:71:fc:b0:8b:31:62:e4:ca:60:68:14:96: e5:4f:aa:0e:1a:6b:8c:31:69:17:54:54:87:a4:89: 6c:27:90:12:06:bd:67:6a:8d:23:c0:42:64:10:50: c0:14:b8:f0:e7:3a:d8:6d:8a:a5:34:1c:02:50:e7: 9f:77:c3:16:01:65:c4:ed:7e:ae:c6:be:e7:c2:b6: 6d:50:97:69:b0:48:93:16:ad:60:e4:03:0b:8e:28: 4c:4f:eb:84:70:6d:36:55:9e:6f:43:c4:63:a1:a9: a2:e4:cd:4a:57:f9:c6:c6:9c:76:65:7d:72:dd:5a: 85:1b:1d:46:9a:1d:51:c8:51:70:2f:cb:cf:45:60: 5f:2e:c1:27:51:53:63:c7:21:29:ac:17:a4:78:33: 09:23:10:e2:55:70:7e:67:6e:e7:e9:86:22:c9:3f: d1:d7:cf:57:dc:38:63:2e:fb:26:dc:de:2c:3e:06: 3c:76:64:6a:86:86:6f:c9:4c:4a:f4:93:fb:25:d4: d6:72:31:b5:b1:5b:ff:4b:b7:8b:75:df:ea:7d:46: 20:b5:c8:dc:57:89:d5:ec:a7:a9:da:5f:66:cc:3c: 76:9c:f4:74:0b:49:8f:65:5d:e1:d3:49:82:2e:86: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:95:EF:D0:D8:17:4C:29:89:99:3F:44:AF:4D:DB:85:68:B0:4E X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9e:cd:90:fe:74:4f:f2:76:cb:a9:09:e3:cb:6e:40:ed:6a: 27:2f:2c:5f:23:1c:c8:ee:6e:55:33:c5:a9:ad:9b:0e:d5:a3: 1b:de:05:89:aa:58:00:c3:42:91:f3:93:49:29:43:05:26:95: c5:5d:20:c4:be:b3:18:eb:c4:fe:8d:6e:73:27:6e:e9:13:73: 45:a9:c5:c4:67:84:84:6e:0f:2f:ab:62:86:f1:6e:1f:d2:36: 4b:75:e8:00:26:b4:ef:d7:5c:b2:7d:5f:48:a3:d1:be:71:5c: a4:65:ad:2b:7d:44:a8:81:eb:7e:28:6a:b1:62:2b:67:b9:35: 23:9e:e5:78:84:b8:9d:2e:4c:e4:74:30:cb:2b:0c:8b:c2:a9: de:8c:79:4f:c4:fe:5e:10:b6:47:45:b8:78:56:c4:fc:7c:13: e2:bd:bd:48:9f:05:4e:8e:42:e4:49:b7:e8:ef:d2:f6:f0:43: f2:26:89:cd:1e:4b:b0:4b:53:36:76:21:46:e5:8a:eb:24:30: 59:d7:1e:d8:a5:24:24:f2:5f:ab:33:ec:32:34:a6:1d:36:07: 66:fc:4a:9a:b8:03:6e:0f:46:6d:75:78:d7:2a:b9:ad:82:a3: a9:22:59:b8:4f:18:e8:1d:d5:a2:53:55:9e:e4:2c:dd:1d:af: f3:8c:82:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjQwNTE5MDM1NDQ5WhcNMjQwNTI2MDM1NDQ5WjAYMRYwFAYD VQQDEw02NjQ5NzgwOS1mMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz3GyNWxQRcwaaWKyTjgTLFx/LCLMWLkymBoFJblT6oOGmuMMWkXVFSHpIls J5ASBr1nao0jwEJkEFDAFLjw5zrYbYqlNBwCUOefd8MWAWXE7X6uxr7nwrZtUJdp sEiTFq1g5AMLjihMT+uEcG02VZ5vQ8Rjoami5M1KV/nGxpx2ZX1y3VqFGx1Gmh1R yFFwL8vPRWBfLsEnUVNjxyEprBekeDMJIxDiVXB+Z27n6YYiyT/R189X3DhjLvsm 3N4sPgY8dmRqhoZvyUxK9JP7JdTWcjG1sVv/S7eLdd/qfUYgtcjcV4nV7Kep2l9m zDx2nPR0C0mPZV3h00mCLoZWrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzzle/Q 2BdMKYmZP0SvTduFaLBOMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnns2Q/nRP8nbLqQnjy25A7WonLyxfIxzI7m5VM8WprZsO1aMb3gWJ qlgAw0KR85NJKUMFJpXFXSDEvrMY68T+jW5zJ27pE3NFqcXEZ4SEbg8vq2KG8W4f 0jZLdegAJrTv11yyfV9Io9G+cVykZa0rfUSoget+KGqxYitnuTUjnuV4hLidLkzk dDDLKwyLwqnejHlPxP5eELZHRbh4VsT8fBPivb1InwVOjkLkSbfo79L28EPyJonN HkuwS1M2diFG5YrrJDBZ1x7YpSQk8l+rM+wyNKYdNgdm/EqauANuD0ZtdXjXKrmt gqOpIlm4TxjoHdWiU1We5CzdHa/zjIJP -----END CERTIFICATE-----Generated at Sun May 19 04:22:03 2024 by rpki-client on console-fra.rpki-client.org