$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: eJNZUn5WtIaYYhfhaBLBxn8snor3yzjQv76W2kzB20s= Subject key identifier: DA:B4:87:53:37:3A:55:D6:86:14:8D:32:23:8F:A4:10:39:46:CA:7C Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 060D Signing time: Sun 05 May 2024 00:03:25 +0000 Manifest this update: Sun 05 May 2024 00:03:25 +0000 Manifest next update: Sun 12 May 2024 00:03:25 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: gU0eHfTMetFWWTVgoGcURpZ7gQVN+0KAqFVqayfASIw=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: t1CpQ4L3GyTj4BVSlvWpp+W4Kme3xXKFI0Eh6kMBBD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: May 5 00:03:25 2024 GMT Not After : May 12 00:03:25 2024 GMT Subject: CN=6636cccd-3e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:a9:fe:e7:b8:c2:68:fc:ef:11:84:ab:ce: ff:50:24:2b:4e:75:f4:50:67:08:c9:1b:18:9d:50: 72:0a:49:17:75:35:48:2a:e6:24:f7:5a:91:cf:a9: 58:88:0b:33:08:4e:84:4f:70:cb:71:5a:6f:1c:9d: c8:ea:f9:1d:bb:8e:17:a5:a5:48:d7:c5:7e:7d:67: 84:26:f8:ed:b8:42:59:43:d7:0e:fc:97:dd:8e:7e: d7:b9:d3:43:95:cc:62:50:21:ff:dd:ec:7f:39:08: b1:0d:8e:3f:b5:e9:67:b6:e5:2d:d2:73:86:e9:05: 20:a7:4e:b6:eb:ce:d4:01:2a:74:b8:6b:96:c1:a6: ec:20:23:77:c7:80:1c:5c:27:e4:5e:ae:ce:14:35: c9:06:09:f8:55:f9:87:b8:bd:62:a8:f7:34:de:14: a0:7c:eb:de:80:5f:05:09:0f:38:e7:98:b3:19:2e: ea:4a:79:35:22:bd:00:a0:aa:41:1e:e0:c5:35:e4: 3e:80:60:cd:f6:d7:6c:ae:4a:01:cc:4f:17:ff:8c: f9:2f:67:99:ab:97:a7:d0:3d:ff:18:28:99:df:b1: 3a:d5:6b:be:12:17:17:93:f6:43:4d:b8:60:ee:0b: 9a:6a:9a:77:80:1d:c4:ee:2f:09:a2:a0:f2:96:ef: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:87:53:37:3A:55:D6:86:14:8D:32:23:8F:A4:10:39:46:CA:7C X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b6:79:0f:2c:ac:66:af:43:fb:c7:d4:10:33:a2:a9:69:51: a6:ef:43:59:6d:1d:ee:e2:05:ff:4b:9c:24:e8:fc:39:65:cc: 07:e8:c4:6d:d8:38:4f:2f:60:af:46:1b:0e:68:14:ea:d5:4f: 51:83:b0:ee:eb:21:9e:7f:5e:3d:64:04:71:9f:db:cd:06:fe: c4:96:14:8a:4b:37:95:b3:ba:99:8c:65:2b:37:1c:9b:71:7c: 0a:ee:32:d4:fe:9d:0d:34:f3:d2:12:14:3d:86:d1:29:8c:99: 5d:84:18:3e:9c:64:11:9e:ea:12:9c:e0:1f:8e:1b:4d:85:c2: 13:9c:06:a3:d9:65:a7:98:a7:60:7a:57:0a:bd:5c:13:d2:4e: b2:fd:f1:ed:b3:6d:25:f8:7c:0f:1a:17:f7:f6:1c:bd:af:8a: eb:63:23:a0:a7:a3:fd:7c:56:19:c5:13:e6:5b:09:14:95:71: 3c:c2:15:26:4f:e4:8d:59:92:a4:69:84:16:18:9b:e4:af:ac: 0f:8c:29:85:54:a9:68:e1:b0:b0:aa:8e:11:4d:a9:71:97:db: 27:a6:b8:42:b9:78:24:e2:be:2e:93:e7:fe:61:31:89:8f:83: 82:10:26:56:00:7e:d1:be:fa:fd:6b:e5:31:c8:32:10:79:0a: 97:e0:3f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjQwNTA1MDAwMzI1WhcNMjQwNTEyMDAwMzI1WjAYMRYwFAYD VQQDEw02NjM2Y2NjZC0zZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eKp/ue4wmj87xGEq87/UCQrTnX0UGcIyRsYnVByCkkXdTVIKuYk91qRz6lY iAszCE6ET3DLcVpvHJ3I6vkdu44XpaVI18V+fWeEJvjtuEJZQ9cO/Jfdjn7XudND lcxiUCH/3ex/OQixDY4/telntuUt0nOG6QUgp062687UASp0uGuWwabsICN3x4Ac XCfkXq7OFDXJBgn4VfmHuL1iqPc03hSgfOvegF8FCQ8455izGS7qSnk1Ir0AoKpB HuDFNeQ+gGDN9tdsrkoBzE8X/4z5L2eZq5en0D3/GCiZ37E61Wu+EhcXk/ZDTbhg 7guaapp3gB3E7i8JoqDylu+RQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq0h1M3 OlXWhhSNMiOPpBA5Rsp8MB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFtnkPLKxmr0P7x9QQM6KpaVGm70NZbR3u4gX/S5wk6Pw5ZcwH6MRt 2DhPL2CvRhsOaBTq1U9Rg7Du6yGef149ZARxn9vNBv7ElhSKSzeVs7qZjGUrNxyb cXwK7jLU/p0NNPPSEhQ9htEpjJldhBg+nGQRnuoSnOAfjhtNhcITnAaj2WWnmKdg elcKvVwT0k6y/fHts20l+HwPGhf39hy9r4rrYyOgp6P9fFYZxRPmWwkUlXE8whUm T+SNWZKkaYQWGJvkr6wPjCmFVKlo4bCwqo4RTalxl9snprhCuXgk4r4uk+f+YTGJ j4OCECZWAH7Rvvr9a+UxyDIQeQqX4D+X -----END CERTIFICATE-----Generated at Sun May 5 01:22:20 2024 by rpki-client on console-fra.rpki-client.org