$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: K+oBIzFLowVy8v4rBMyA1sNup2Q0tmg3ps+r9HYyzaU= Subject key identifier: 41:B9:39:2A:E5:6C:6C:7E:31:F0:75:A8:95:06:38:65:B3:AD:42:66 Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 219F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 219E Signing time: Sat 18 May 2024 16:12:55 +0000 Manifest this update: Sat 18 May 2024 16:12:54 +0000 Manifest next update: Sat 25 May 2024 16:12:54 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: L09quX/G/Rqfu73Ft2c3QRmpOe0tQ0eCyMhitOBeQ18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8607 (0x219f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: May 18 16:12:54 2024 GMT Not After : May 25 16:12:54 2024 GMT Subject: CN=6648d387-a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:40:3f:7b:a8:8d:e9:8a:79:02:8a:c6:49: 52:d7:67:63:19:7c:57:15:a4:69:bf:22:22:20:19: a5:f6:bf:b6:86:e4:fc:fb:25:a4:e3:97:5e:8f:e2: 5a:47:a8:a9:6a:66:eb:3a:ef:8f:de:5f:d1:08:96: 2c:46:82:da:74:c6:1b:d1:cf:33:c4:a3:04:46:d7: 4d:5c:3f:36:45:4d:09:65:dc:20:08:39:7a:13:ca: aa:c9:b7:4e:08:28:6f:f5:2b:7f:b5:0f:ad:98:82: e9:57:a8:64:6e:03:73:fc:8a:c3:4c:a7:33:04:36: 10:bd:51:c9:68:f6:c6:ff:2b:7d:0b:11:0e:27:50: 09:82:86:6b:1b:d7:fd:c8:d7:30:b0:a1:2d:b4:65: 56:58:28:a3:f1:83:f6:28:61:29:5b:4d:34:1f:92: 7e:82:ee:1f:44:b3:38:4d:61:ca:6b:13:89:85:93: a3:54:a8:b0:94:e2:69:7e:07:b6:d0:25:cc:9a:a2: 7b:77:d4:76:ad:c5:78:5a:8a:19:e6:1c:21:ac:eb: 73:cd:84:f9:d9:71:42:5d:fa:14:af:79:a9:40:79: e4:18:b9:6f:2c:a1:c2:99:a4:8a:d3:c4:ff:a9:75: 7b:f5:27:49:4e:ea:75:e6:c5:68:76:b4:70:c6:e7: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:39:2A:E5:6C:6C:7E:31:F0:75:A8:95:06:38:65:B3:AD:42:66 X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3e:a2:e1:88:f5:ec:53:87:a6:d7:16:96:87:e1:a4:d6:5f: b6:78:77:ce:c5:e7:af:3a:b1:2d:85:8d:9e:20:f7:aa:5c:bc: ea:c4:55:cb:72:9c:42:76:66:98:77:4c:e7:22:6a:f7:c6:05: a6:a7:66:58:8f:e4:2c:1f:72:3b:5c:43:fd:00:11:46:f1:47: c8:f3:f0:62:ea:c8:c7:08:05:64:fd:a8:67:25:d2:87:cb:49: 6c:6a:66:e3:02:0d:2c:03:c2:5d:8c:7c:8b:e0:11:99:2a:b9: 8f:0d:59:e8:27:eb:8a:13:ea:b6:e9:56:7e:86:e1:57:63:cb: b9:16:2f:22:3e:cb:d5:5c:57:3a:76:6c:41:39:0b:2e:76:29: 8e:37:e4:42:17:61:c7:cd:24:f3:ba:34:7c:13:7d:ec:77:d9: 78:5b:0d:e4:f8:69:b7:2f:30:7f:44:3a:f7:e0:f6:6b:ca:48: b7:ae:43:f0:9e:de:d4:9a:1a:c7:bf:f5:b8:76:39:4f:dc:6d: d6:23:77:64:d8:8a:57:17:63:97:52:13:dd:c9:40:f6:ed:b8: 05:7b:37:c6:ad:18:a5:07:d2:cc:b1:57:68:6e:23:11:21:18: 79:0e:da:9f:06:ae:0d:f9:90:96:a1:38:f7:74:3f:9f:07:26: 79:23:b9:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjQwNTE4MTYxMjU0WhcNMjQwNTI1MTYxMjU0WjAYMRYwFAYD VQQDEw02NjQ4ZDM4Ny1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39dAP3uojemKeQKKxklS12djGXxXFaRpvyIiIBml9r+2huT8+yWk45dej+Ja R6ipambrOu+P3l/RCJYsRoLadMYb0c8zxKMERtdNXD82RU0JZdwgCDl6E8qqybdO CChv9St/tQ+tmILpV6hkbgNz/IrDTKczBDYQvVHJaPbG/yt9CxEOJ1AJgoZrG9f9 yNcwsKEttGVWWCij8YP2KGEpW000H5J+gu4fRLM4TWHKaxOJhZOjVKiwlOJpfge2 0CXMmqJ7d9R2rcV4WooZ5hwhrOtzzYT52XFCXfoUr3mpQHnkGLlvLKHCmaSK08T/ qXV79SdJTup15sVodrRwxufRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG5OSrl bGx+MfB1qJUGOGWzrUJmMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuPqLhiPXsU4em1xaWh+Gk1l+2eHfOxeevOrEthY2eIPeqXLzqxFXL cpxCdmaYd0znImr3xgWmp2ZYj+QsH3I7XEP9ABFG8UfI8/Bi6sjHCAVk/ahnJdKH y0lsambjAg0sA8JdjHyL4BGZKrmPDVnoJ+uKE+q26VZ+huFXY8u5Fi8iPsvVXFc6 dmxBOQsudimON+RCF2HHzSTzujR8E33sd9l4Ww3k+Gm3LzB/RDr34PZryki3rkPw nt7UmhrHv/W4djlP3G3WI3dk2IpXF2OXUhPdyUD27bgFezfGrRilB9LMsVdobiMR IRh5DtqfBq4N+ZCWoTj3dD+fByZ5I7nH -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org