$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft File: gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json) Hash identifier: 7Ba1qVIDjhG+Mop9F+UCwK4tskVDACy0gIDkCmcmoTk= Subject key identifier: 57:1A:A0:8D:DD:47:A5:4F:1C:7B:7A:12:63:7B:FF:6B:90:D0:82:1E Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E Certificate issuer: /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft Manifest number: 18 Signing time: Sun 19 May 2024 08:45:55 +0000 Manifest this update: Sun 19 May 2024 08:45:55 +0000 Manifest next update: Sun 26 May 2024 08:45:55 +0000 Files and hashes: 1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: yiEHsexkUdDWu6omijw8iT6lZg8OdyVzJsjH8KmGMk0=) 2: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (hash: T3FHkQFBnR1D7G7E+6iXElBbCR/lDFKEW2aPMQWoc4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E Validity Not Before: May 19 08:45:55 2024 GMT Not After : May 26 08:45:55 2024 GMT Subject: CN=6649bc43-5c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:a6:3c:ba:f1:c7:c4:a4:25:59:eb:60:d9: 65:38:78:ac:c4:3b:75:5c:5b:31:2e:9f:f7:af:17: 72:24:63:51:35:7c:34:be:6f:7f:86:f5:94:de:be: 3d:9b:b5:d1:32:1c:bb:7d:10:b1:de:d5:44:d8:14: a0:f7:cd:b6:c3:b8:47:c9:a0:02:8c:5e:27:52:4f: 2e:e4:46:c3:54:26:25:a8:f3:76:ba:15:30:ee:5f: bf:95:e3:60:87:e2:c9:49:e5:22:e5:32:d6:ff:69: c8:1c:3d:27:1b:81:76:5e:99:c4:39:4b:7a:ed:24: 8a:04:da:27:17:cb:fe:7c:d4:40:1a:70:63:96:b2: b5:0d:59:df:08:b0:6a:ce:43:3e:3c:e5:0f:ef:f4: d9:bc:b9:98:4f:e1:b0:86:e9:2d:42:cf:ae:56:fa: 06:46:59:0d:1c:b3:cf:12:2d:cf:61:ce:ea:1d:2a: c0:3e:d5:81:ff:97:35:8d:db:61:ab:6a:b6:dd:90: f1:47:f0:f8:06:69:bd:32:d2:ac:16:42:c3:4d:39: 4a:6b:3d:50:b8:25:23:a7:ce:fc:6e:1b:30:b8:b0: e4:64:d7:dc:75:d0:58:17:02:ab:22:5c:d6:7f:e1: d7:64:f6:22:a4:73:20:96:65:c9:fa:3f:fb:34:cc: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:A0:8D:DD:47:A5:4F:1C:7B:7A:12:63:7B:FF:6B:90:D0:82:1E X509v3 Authority Key Identifier: keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2b:96:c1:6d:65:1e:47:b2:6d:68:d3:5a:bd:e3:4f:68:13: 35:f2:e8:bd:ec:6b:44:4d:e3:fb:05:b4:75:6a:41:f7:05:23: ac:6b:71:92:e8:59:0a:11:e2:c6:35:0b:eb:5c:34:4b:ed:dc: 2a:e9:cc:bc:87:4d:38:4c:6a:93:6f:72:e3:0c:d3:bc:e1:e1: 5d:6d:4c:03:47:66:78:09:55:cb:1f:55:86:b9:17:9e:d9:57: 60:34:2b:a9:5f:e6:24:2e:15:82:7c:85:1b:3e:d9:68:e3:28: a1:38:8e:de:d5:60:5f:5c:ff:39:7b:91:b2:2d:31:3b:54:8a: c3:32:f1:f1:4d:29:a7:66:20:a0:91:6e:11:1d:5d:55:ba:1d: e7:06:98:c0:af:19:cb:ac:15:27:e0:b4:ed:b7:4f:1e:85:ec: 54:5d:73:1b:2c:de:5d:6c:ee:7a:04:f0:18:8f:4d:fb:b3:de: 67:bd:eb:75:11:97:61:4d:7c:2b:bf:c2:30:5e:f1:1d:36:f7: ed:5c:1e:c3:70:63:4e:91:95:59:ab:a0:9c:df:9f:78:df:1d: 45:ce:d0:d2:03:6c:f8:93:68:d0:44:68:ab:23:d9:23:78:3b: 56:73:af:98:0c:56:aa:d1:5a:ca:7f:12:b2:f9:41:ca:16:56: 12:15:3f:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzA4RjExMC8GA1UEBRMoODJFOUM2M0I3QzJDNzkwODdENUFCMTBFODlERDI4QTJG N0M0OUMzRTAeFw0yNDA1MTkwODQ1NTVaFw0yNDA1MjYwODQ1NTVaMBgxFjAUBgNV BAMTDTY2NDliYzQzLTVjNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4c6Y8uvHHxKQlWetg2WU4eKzEO3VcWzEun/evF3IkY1E1fDS+b3+G9ZTevj2b tdEyHLt9ELHe1UTYFKD3zbbDuEfJoAKMXidSTy7kRsNUJiWo83a6FTDuX7+V42CH 4slJ5SLlMtb/acgcPScbgXZemcQ5S3rtJIoE2icXy/581EAacGOWsrUNWd8IsGrO Qz485Q/v9Nm8uZhP4bCG6S1Cz65W+gZGWQ0cs88SLc9hzuodKsA+1YH/lzWN22Gr arbdkPFH8PgGab0y0qwWQsNNOUprPVC4JSOnzvxuGzC4sORk19x10FgXAqsiXNZ/ 4ddk9iKkcyCWZcn6P/s0zAvlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVxqgjd1H pU8ce3oSY3v/a5DQgh4wHwYDVR0jBBgwFoAUgunGO3wseQh9WrEOid0oovfEnD4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzMDhGLzJDMTRFQTEwRjY2 MDExRUU5Qzg4REQxRkM0RjlBRTAyL2d1bkdPM3dzZVFoOVdyRU9pZDBvb3ZmRW5E NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3VuR08zd3NlUWg5V3JFT2lkMG9vdmZFbkQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz MDhGLzJDMTRFQTEwRjY2MDExRUU5Qzg4REQxRkM0RjlBRTAyL2d1bkdPM3dzZVFo OVdyRU9pZDBvb3ZmRW5ENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQrlsFtZR5Hsm1o01q9409oEzXy6L3sa0RN4/sFtHVqQfcFI6xrcZLo WQoR4sY1C+tcNEvt3CrpzLyHTThMapNvcuMM07zh4V1tTANHZngJVcsfVYa5F57Z V2A0K6lf5iQuFYJ8hRs+2WjjKKE4jt7VYF9c/zl7kbItMTtUisMy8fFNKadmIKCR bhEdXVW6HecGmMCvGcusFSfgtO23Tx6F7FRdcxss3l1s7noE8BiPTfuz3me963UR l2FNfCu/wjBe8R029+1cHsNwY06RlVmroJzfn3jfHUXO0NIDbPiTaNBEaKsj2SN4 O1Zzr5gMVqrRWsp/ErL5QcoWVhIVP4I= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org