$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft File: sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json) Hash identifier: GLpJjpuOwXvB86ifFLdZP2dsoDOTf/Syi873ZWRazjM= Subject key identifier: B1:BE:95:6F:6B:A8:DF:C1:20:21:FA:6C:9D:FB:B9:C2:6C:71:F8:71 Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 Certificate issuer: /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft Manifest number: 0608 Signing time: Sat 18 May 2024 23:55:42 +0000 Manifest this update: Sat 18 May 2024 23:55:42 +0000 Manifest next update: Sat 25 May 2024 23:55:41 +0000 Files and hashes: 1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: WPhTvaxQ95jqEHqOAfEfK6A5ROnfwhMsVnxtHc5CpiE=) 2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: EL5OloZJb5XX3wW0IPlf/JxtkXGi8CDCTx5OK4yuKHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Validity Not Before: May 18 23:55:42 2024 GMT Not After : May 25 23:55:41 2024 GMT Subject: CN=66493ffe-306f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:21:82:4b:20:17:b6:05:d6:1d:12:1c:30: 19:38:e3:46:3d:d6:78:ab:e9:a6:0e:4f:4a:ed:e8: 73:66:4e:5e:bb:8c:0e:ba:0a:0e:4f:be:21:cc:33: 70:e2:fc:01:55:8e:77:b5:bd:00:91:ba:cc:15:cf: 73:07:14:6f:33:95:33:4f:96:f7:81:18:5a:e9:d6: da:da:96:9f:55:6c:a8:2e:65:65:15:e9:29:ee:45: 67:ab:a6:81:48:f9:09:87:ad:39:60:b8:c4:1d:c5: 7b:71:fe:ee:a6:c1:0c:c3:86:ec:28:bf:8b:4f:0a: a2:04:b3:d2:2f:7d:e2:b1:a7:b7:8b:d5:43:d0:ff: 42:ee:04:07:ff:84:9a:a3:bc:2c:a1:78:dc:d0:05: c9:ff:9b:f6:61:7c:86:8c:0d:cc:69:aa:2b:78:c9: 9b:7c:63:64:a0:e9:59:d9:0d:e7:55:a2:30:fc:0d: e3:33:d9:d3:7f:95:82:5b:0a:cc:48:28:36:e2:12: 48:39:08:d6:39:5d:b8:bb:a5:4f:44:fa:7a:41:d6: cd:b5:53:c3:55:ce:87:48:3b:ee:76:85:99:4a:2c: c8:07:ef:91:d3:86:c1:bc:2b:cc:60:38:da:7f:05: 5c:69:db:6f:92:7e:97:43:7f:8c:77:e9:7c:44:2c: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BE:95:6F:6B:A8:DF:C1:20:21:FA:6C:9D:FB:B9:C2:6C:71:F8:71 X509v3 Authority Key Identifier: keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b3:24:82:9e:fa:f5:28:be:3c:5d:e3:05:99:13:c5:51:43: 2b:22:13:e3:c3:44:74:2c:85:f9:e0:c0:5e:09:c4:54:77:9c: 77:58:53:d7:00:a8:c2:b7:61:0a:fa:9f:4c:c2:e7:6b:6c:08: 77:8c:37:9b:6d:32:96:a5:6d:83:02:4a:42:95:98:1a:fb:0b: b4:8d:82:75:52:65:f4:b0:3f:c9:f6:75:5b:f0:d6:86:a9:88: c5:58:62:61:19:c3:9c:ad:04:28:a6:5b:94:89:a1:28:8d:d2: d4:7a:7f:b0:b4:c5:61:dd:4c:2a:ef:10:82:7c:8a:4b:53:b7: 32:82:41:48:8b:ef:19:5f:81:2f:1f:92:1c:a1:27:6f:d9:ed: 44:1b:1a:54:f1:46:ac:aa:77:01:21:29:da:c7:e0:87:15:04: e6:83:fb:eb:ea:27:c7:2f:63:a1:1c:b2:a1:9d:07:23:e5:aa: bf:f3:ea:2d:b5:e3:cf:92:3b:f4:3c:60:4c:cd:a8:a3:21:9b: 60:6e:06:39:58:c9:10:c6:e2:21:1f:46:2e:af:ab:45:70:fc: 98:fb:1b:87:c5:67:cf:77:df:81:79:2c:83:e8:a0:12:c3:fc: ed:7c:29:63:2b:bb:a1:76:c3:ac:e1:15:87:95:51:b4:aa:3c: a1:0e:a5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw MDcyNzhDRTUwHhcNMjQwNTE4MjM1NTQyWhcNMjQwNTI1MjM1NTQxWjAYMRYwFAYD VQQDEw02NjQ5M2ZmZS0zMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7MhgksgF7YF1h0SHDAZOONGPdZ4q+mmDk9K7ehzZk5eu4wOugoOT74hzDNw 4vwBVY53tb0AkbrMFc9zBxRvM5UzT5b3gRha6dba2pafVWyoLmVlFekp7kVnq6aB SPkJh605YLjEHcV7cf7upsEMw4bsKL+LTwqiBLPSL33isae3i9VD0P9C7gQH/4Sa o7wsoXjc0AXJ/5v2YXyGjA3MaaoreMmbfGNkoOlZ2Q3nVaIw/A3jM9nTf5WCWwrM SCg24hJIOQjWOV24u6VPRPp6QdbNtVPDVc6HSDvudoWZSizIB++R04bBvCvMYDja fwVcadtvkn6XQ3+Md+l8RCy0JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG+lW9r qN/BICH6bJ37ucJscfhxMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2 dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClsySCnvr1KL48XeMFmRPFUUMrIhPjw0R0LIX54MBeCcRUd5x3WFPX AKjCt2EK+p9MwudrbAh3jDebbTKWpW2DAkpClZga+wu0jYJ1UmX0sD/J9nVb8NaG qYjFWGJhGcOcrQQopluUiaEojdLUen+wtMVh3Uwq7xCCfIpLU7cygkFIi+8ZX4Ev H5IcoSdv2e1EGxpU8UasqncBISnax+CHFQTmg/vr6ifHL2OhHLKhnQcj5aq/8+ot tePPkjv0PGBMzaijIZtgbgY5WMkQxuIhH0Yur6tFcPyY+xuHxWfPd9+BeSyD6KAS w/ztfCljK7uhdsOs4RWHlVG0qjyhDqWI -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org