$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: MX77myvsaljfGZosx9ouBPCXwrLOpAB3uKPIU547Kl0= Subject key identifier: B7:5C:F6:19:ED:ED:2D:8C:37:07:6F:B7:7B:08:19:1C:39:84:51:7C Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 073D Signing time: Thu 30 May 2024 22:53:24 +0000 Manifest this update: Thu 30 May 2024 22:53:23 +0000 Manifest next update: Thu 06 Jun 2024 22:53:23 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: l3crxwQREKQ6yty8JWKknBSy+vJjhYTXMgw8IkFmeGo=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: bVIigg8Ts3woBy0lelHvCn/+BeHP8YKbpv6ObCwEtMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: May 30 22:53:23 2024 GMT Not After : Jun 6 22:53:23 2024 GMT Subject: CN=66590364-58c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:fc:88:72:4e:e8:88:9e:06:75:6e:c6:5d: 09:25:f5:7a:a7:17:64:e4:71:76:0f:6d:51:3d:b2: 8d:23:ca:d0:6f:a5:73:10:5f:59:c4:12:62:03:02: 72:79:64:da:d9:35:25:86:91:35:b0:14:cb:cb:56: 8e:67:c4:56:52:85:bd:0b:b9:ca:ad:1f:5d:00:03: 5c:2a:0a:2a:79:7f:7e:a7:c2:11:e7:8d:fe:e6:99: ef:97:38:73:8a:3a:e2:96:31:50:13:11:28:c1:f4: e4:1e:2f:0a:da:5f:f7:f0:b2:59:df:d5:33:66:55: 7e:1d:07:78:24:89:60:4e:81:02:94:bb:4d:e4:bb: 0e:b4:f2:0e:c5:5d:6b:74:41:af:90:ef:cc:3d:98: 50:20:53:41:c3:ef:cb:87:0f:ba:d2:80:b2:fc:55: f8:00:4e:87:76:31:85:f2:2e:1e:03:af:a2:f0:80: 66:83:84:76:69:c0:14:1c:ef:c0:87:bb:6e:39:8f: 72:5f:2d:b4:35:91:aa:76:ea:70:aa:63:cf:46:00: 23:68:4a:cb:a0:ab:5f:00:cd:6f:13:02:b3:7b:33: 4b:d8:c1:ae:c8:29:e1:42:47:35:e6:94:ec:27:e6: e1:2f:c9:50:8d:25:ab:41:3b:2a:3c:a2:b1:4c:33: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5C:F6:19:ED:ED:2D:8C:37:07:6F:B7:7B:08:19:1C:39:84:51:7C X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:bb:3a:b1:e2:72:78:3f:f3:90:85:6f:eb:e5:9e:bf:e3:5d: 7a:78:9e:cb:f3:85:02:4e:0d:a3:7f:23:7e:f0:77:fe:6f:26: 6a:af:07:94:bc:65:03:39:38:59:b2:cd:cc:ed:5b:07:f5:dd: 4c:04:60:d2:66:63:a7:32:da:4f:eb:7c:7d:6a:8c:04:b0:92: b7:24:b2:58:4d:07:59:19:68:8a:f1:72:17:b6:9c:f3:7f:bb: d9:d5:c3:a3:43:4a:a6:36:18:e2:04:64:e8:0e:94:eb:1d:85: 02:eb:6f:99:01:1e:08:ca:4d:ce:8a:19:39:cc:2c:c9:33:62: 5c:b3:f3:75:91:37:e2:ce:b5:1a:e0:f1:48:97:ba:c5:84:42: 55:2d:76:48:0b:9f:83:5a:77:7a:4b:ad:5e:10:c2:3f:95:ed: 05:08:0c:0e:01:b4:12:7b:22:f9:90:b2:4f:d9:53:9d:d3:8d: a2:fd:e8:2a:5a:10:9c:45:7e:f7:ed:bb:ea:e9:0e:7a:f2:d0: 30:34:b0:be:81:01:e7:77:3b:f1:82:21:31:40:c5:14:c8:7f: 31:58:d2:6d:e3:cf:aa:d7:12:90:d4:4c:81:da:12:55:84:4a: 8e:ed:2e:1a:0a:ea:ff:9c:88:19:3a:cf:b0:d4:3b:27:75:90: 5c:53:c2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjQwNTMwMjI1MzIzWhcNMjQwNjA2MjI1MzIzWjAYMRYwFAYD VQQDEw02NjU5MDM2NC01OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVb8iHJO6IieBnVuxl0JJfV6pxdk5HF2D21RPbKNI8rQb6VzEF9ZxBJiAwJy eWTa2TUlhpE1sBTLy1aOZ8RWUoW9C7nKrR9dAANcKgoqeX9+p8IR543+5pnvlzhz ijriljFQExEowfTkHi8K2l/38LJZ39UzZlV+HQd4JIlgToEClLtN5LsOtPIOxV1r dEGvkO/MPZhQIFNBw+/Lhw+60oCy/FX4AE6HdjGF8i4eA6+i8IBmg4R2acAUHO/A h7tuOY9yXy20NZGqdupwqmPPRgAjaErLoKtfAM1vEwKzezNL2MGuyCnhQkc15pTs J+bhL8lQjSWrQTsqPKKxTDMFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdc9hnt 7S2MNwdvt3sIGRw5hFF8MB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXuzqx4nJ4P/OQhW/r5Z6/4116eJ7L84UCTg2jfyN+8Hf+byZqrweU vGUDOThZss3M7VsH9d1MBGDSZmOnMtpP63x9aowEsJK3JLJYTQdZGWiK8XIXtpzz f7vZ1cOjQ0qmNhjiBGToDpTrHYUC62+ZAR4Iyk3Oihk5zCzJM2Jcs/N1kTfizrUa 4PFIl7rFhEJVLXZIC5+DWnd6S61eEMI/le0FCAwOAbQSeyL5kLJP2VOd042i/egq WhCcRX737bvq6Q568tAwNLC+gQHndzvxgiExQMUUyH8xWNJt48+q1xKQ1EyB2hJV hEqO7S4aCur/nIgZOs+w1DsndZBcU8Lw -----END CERTIFICATE-----Generated at Thu May 30 23:45:10 2024 by rpki-client on console-fra.rpki-client.org