$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: Qqp+w/gPiA5us5QrORbEfSnIMlmtqDXydrwAN1x3bxY= Subject key identifier: 87:9A:F5:A8:F1:E1:40:F1:45:0E:09:F4:C2:5C:CD:58:EF:51:35:DA Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 75 Signing time: Sun 19 May 2024 07:27:05 +0000 Manifest this update: Sun 19 May 2024 07:27:04 +0000 Manifest next update: Sun 26 May 2024 07:27:04 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: Z0hy7OvK67ZFul5xvuCwyoPD1gdJ2+IC3ntYYmRVAyU=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: GQbESOYUtUaZ94Yc1FDzYQHcOOIJVDWv/UCKcDQ3h8E=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: C6IOSqMBs7kTWp1we70WGZOOA4Xdc736nWfod1Q0yd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: May 19 07:27:04 2024 GMT Not After : May 26 07:27:04 2024 GMT Subject: CN=6649a9c9-5442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:30:4c:d3:d2:0c:5f:44:50:ab:7a:8c:7d: 6e:52:61:7a:44:98:da:5f:8d:ee:88:97:2e:e8:56: 6d:99:81:5c:02:88:17:65:65:d4:c4:4a:d8:58:38: 50:11:30:f2:2a:20:84:9c:e7:4f:10:90:d4:dc:bc: 7f:40:ad:8b:87:51:bc:44:54:88:68:94:b2:9e:84: ed:c7:1d:56:3c:a4:2d:c4:ee:a0:34:1b:4f:67:7a: 4e:73:41:3d:29:fd:72:db:68:7f:7e:aa:ec:1c:46: a0:2a:19:e4:5c:de:fd:e2:0a:bc:78:9f:c7:36:7e: bb:5b:42:09:8a:4d:bd:1c:ae:93:04:c2:27:91:fc: 16:0c:58:93:b0:88:b5:23:52:f0:de:66:7e:5d:52: 27:80:bc:40:d7:d8:8d:ba:9d:4d:1e:1b:4d:5c:4d: 32:0e:97:23:0a:06:80:85:d0:76:5b:88:17:57:25: 01:d9:a8:79:d0:23:b5:85:b1:4d:ca:ad:7f:de:e0: c7:0e:02:a6:f5:91:ba:4f:7f:68:fc:44:7f:1d:66: b7:3a:0e:93:53:48:ea:82:46:c4:1f:1b:3d:f9:fc: 7c:52:0a:1e:2e:5c:df:72:e9:1a:ff:28:9a:18:78: c1:2e:ad:52:50:cc:a6:e4:95:73:dd:36:1c:21:53: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:F5:A8:F1:E1:40:F1:45:0E:09:F4:C2:5C:CD:58:EF:51:35:DA X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:57:19:11:6c:50:9f:a4:c0:db:28:82:4b:18:47:0f:38: 8b:a2:56:dc:3b:01:0d:dc:84:4d:37:1f:c8:69:a7:16:15:fe: 39:d0:90:2c:dc:10:6b:30:be:08:c3:9b:bd:94:dc:2a:39:2e: ce:65:51:cb:0b:5d:56:f1:99:43:85:2d:dd:9e:bd:31:38:c9: f0:54:0d:5c:e5:0b:47:f6:20:b1:f3:95:fa:bc:85:0d:a7:1e: 10:da:17:1e:3b:ba:0b:5d:6d:cb:5c:36:7f:35:18:6d:24:00: 34:cb:0d:60:54:98:f0:7e:35:79:12:d8:ed:2c:1d:cc:ad:7d: a1:55:56:32:57:6d:4b:c5:4e:f1:28:2e:74:20:d6:e2:8f:e1: f7:6b:d1:2f:81:1f:cb:33:00:72:29:44:60:dd:17:12:a8:03: 5e:41:30:0c:5c:fb:c6:9c:9b:43:1c:8b:73:ef:b3:81:07:96: 43:8e:b7:2e:49:02:cb:a7:be:2d:78:1e:95:29:7a:1b:d7:70: df:d1:31:78:72:01:1a:52:5d:2b:9f:00:50:f2:e2:df:f0:78: 3e:87:4a:35:26:4b:a1:ac:47:ce:7b:2c:05:13:68:1f:f7:34: f6:6a:f4:ec:94:1f:ff:ba:ad:63:f3:03:1e:62:f6:39:a6:11: b1:fa:c0:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDc4ODExMC8GA1UEBRMoODIwOUZERjM5QUYwMkMzQjlBRTUwM0YyMjVENzQ3RTY3 QUEzQ0RGMzAeFw0yNDA1MTkwNzI3MDRaFw0yNDA1MjYwNzI3MDRaMBgxFjAUBgNV BAMTDTY2NDlhOWM5LTU0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ5zBM09IMX0RQq3qMfW5SYXpEmNpfje6Ily7oVm2ZgVwCiBdlZdTESthYOFAR MPIqIISc508QkNTcvH9ArYuHUbxEVIholLKehO3HHVY8pC3E7qA0G09nek5zQT0p /XLbaH9+quwcRqAqGeRc3v3iCrx4n8c2frtbQgmKTb0crpMEwieR/BYMWJOwiLUj UvDeZn5dUieAvEDX2I26nU0eG01cTTIOlyMKBoCF0HZbiBdXJQHZqHnQI7WFsU3K rX/e4McOAqb1kbpPf2j8RH8dZrc6DpNTSOqCRsQfGz35/HxSCh4uXN9y6Rr/KJoY eMEurVJQzKbklXPdNhwhU1MnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh5r1qPHh QPFFDgn0wlzNWO9RNdowHwYDVR0jBBgwFoAUggn985rwLDua5QPyJddH5nqjzfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Nzg4LzM3RjAxQjFBNkM5 MTExRUVBNTYwN0IyOUM0RjlBRTAyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2duOTg1cndMRHVhNVFQeUpkZEg1bnFqemZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Nzg4LzM3RjAxQjFBNkM5MTExRUVBNTYwN0IyOUM0RjlBRTAyL2dnbjk4NXJ3TER1 YTVRUHlKZGRINW5xanpmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2pVxkRbFCfpMDbKIJLGEcPOIuiVtw7AQ3chE03H8hppxYV/jnQkCzc EGswvgjDm72U3Co5Ls5lUcsLXVbxmUOFLd2evTE4yfBUDVzlC0f2ILHzlfq8hQ2n HhDaFx47ugtdbctcNn81GG0kADTLDWBUmPB+NXkS2O0sHcytfaFVVjJXbUvFTvEo LnQg1uKP4fdr0S+BH8szAHIpRGDdFxKoA15BMAxc+8acm0Mci3Pvs4EHlkOOty5J Asunvi14HpUpehvXcN/RMXhyARpSXSufAFDy4t/weD6HSjUmS6GsR857LAUTaB/3 NPZq9OyUH/+6rWPzAx5i9jmmEbH6wDU= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org