$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: ZbLu3UwfrZSYSJYJSKPa9H4JxoWtY5dAu2I4nOIFjyA= Subject key identifier: FC:39:F9:5D:DF:62:90:B9:AC:C2:C5:D4:1F:BB:7F:38:94:4F:9F:81 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 058A Signing time: Sun 19 May 2024 00:31:21 +0000 Manifest this update: Sun 19 May 2024 00:31:21 +0000 Manifest next update: Sun 26 May 2024 00:31:21 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: QTRjxQGsi1IKFZnuNFRIw8fZADEdJx32H4FsrVPumtQ=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: gunOvJOlbGjXfJHFh/SepIdDyMi1uvKafrROfkiVnXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: May 19 00:31:21 2024 GMT Not After : May 26 00:31:21 2024 GMT Subject: CN=66494859-bee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:dc:fe:19:83:e9:d7:f0:32:7f:d9:4d:47: d2:68:1d:57:54:ef:cc:aa:b1:88:d0:cb:2d:86:3e: c9:7f:6e:18:a7:1c:81:3e:b4:c4:14:a9:32:c6:b2: 32:fb:f2:95:ad:50:3f:c9:52:78:9e:a9:c6:38:c5: dd:39:c8:07:a5:6c:ed:63:61:0d:81:58:fa:bf:59: b8:9e:6a:6d:de:08:a0:9a:13:7e:71:5b:99:48:91: 7f:ad:3f:70:83:67:89:b4:04:39:d0:2a:f4:37:5f: 27:65:95:fc:6a:7e:36:14:df:6f:2c:72:5e:ba:80: 0b:12:42:62:50:ae:13:01:19:d3:ae:6a:4a:f6:0b: 12:24:b7:2e:8e:aa:7d:d8:f0:fa:f9:09:33:48:a2: 75:fc:1d:ce:c9:98:f9:dd:2f:7b:e7:51:d3:b3:5f: 9e:c8:2c:62:97:44:1e:f2:34:c0:35:f8:70:d8:68: 4f:f1:41:af:18:ba:38:2a:e6:f6:f0:67:8a:5a:23: ff:b1:0f:01:30:ef:63:5f:90:dc:9d:92:4f:0a:01: 86:35:7b:58:19:4a:5e:4e:cc:5d:e3:27:2e:a3:1c: 61:25:15:0a:ef:44:d3:be:fd:62:a6:5b:59:8e:20: b0:24:d6:86:88:bc:ac:5d:b0:4e:8a:24:36:b9:07: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:39:F9:5D:DF:62:90:B9:AC:C2:C5:D4:1F:BB:7F:38:94:4F:9F:81 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:27:be:26:f2:ae:84:86:f9:32:60:bb:61:d5:02:a6:8b:64: 64:34:62:25:e0:f0:c6:5a:0b:0d:00:d2:55:20:f0:f7:31:e0: c0:9d:59:1d:61:89:b2:94:43:2d:9a:0a:af:38:f1:37:7b:bd: 1e:07:c2:51:b8:42:18:e9:9e:b4:cf:48:1b:94:8e:17:5e:a6: 20:dd:49:b4:88:19:a1:e1:39:86:23:59:6c:23:2a:02:87:b3: bb:1a:f2:13:59:3a:a3:bd:6a:7f:32:dd:22:c1:04:30:55:fe: 0c:0b:a4:a0:6e:37:fa:da:9b:b8:f5:ae:39:17:d3:02:4d:41: f8:72:2a:3a:8e:66:b7:33:c5:db:ca:fb:0b:ab:90:2b:df:06: f2:d9:f8:56:b1:05:0f:61:97:5b:4e:bc:d4:9a:23:5f:07:f2: 96:48:7d:c1:23:7c:b5:76:df:b4:e5:c0:31:b8:58:02:a2:d4: c5:6f:98:ac:c0:cd:a6:bc:13:09:8e:94:fa:2c:f2:7a:0d:d6: f3:8b:de:df:94:9f:ad:c8:85:c0:7a:64:1c:e3:d1:79:59:6e: 8b:9d:e2:b2:88:59:8e:89:50:53:6c:00:7c:cd:2f:51:b5:22: 43:db:f1:4a:61:21:76:0d:29:61:39:a9:20:64:1f:b0:e3:cf: 5e:c6:bf:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjQwNTE5MDAzMTIxWhcNMjQwNTI2MDAzMTIxWjAYMRYwFAYD VQQDEw02NjQ5NDg1OS1iZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KTc/hmD6dfwMn/ZTUfSaB1XVO/MqrGI0Msthj7Jf24YpxyBPrTEFKkyxrIy +/KVrVA/yVJ4nqnGOMXdOcgHpWztY2ENgVj6v1m4nmpt3gigmhN+cVuZSJF/rT9w g2eJtAQ50Cr0N18nZZX8an42FN9vLHJeuoALEkJiUK4TARnTrmpK9gsSJLcujqp9 2PD6+QkzSKJ1/B3OyZj53S9751HTs1+eyCxil0Qe8jTANfhw2GhP8UGvGLo4Kub2 8GeKWiP/sQ8BMO9jX5DcnZJPCgGGNXtYGUpeTsxd4ycuoxxhJRUK70TTvv1ipltZ jiCwJNaGiLysXbBOiiQ2uQcf6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw5+V3f YpC5rMLF1B+7fziUT5+BMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhJ74m8q6EhvkyYLth1QKmi2RkNGIl4PDGWgsNANJVIPD3MeDAnVkd YYmylEMtmgqvOPE3e70eB8JRuEIY6Z60z0gblI4XXqYg3Um0iBmh4TmGI1lsIyoC h7O7GvITWTqjvWp/Mt0iwQQwVf4MC6Sgbjf62pu49a45F9MCTUH4cio6jma3M8Xb yvsLq5Ar3wby2fhWsQUPYZdbTrzUmiNfB/KWSH3BI3y1dt+05cAxuFgCotTFb5is wM2mvBMJjpT6LPJ6Ddbzi97flJ+tyIXAemQc49F5WW6LneKyiFmOiVBTbAB8zS9R tSJD2/FKYSF2DSlhOakgZB+w489exr8c -----END CERTIFICATE-----Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org