$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: aNF1lo251VLLSgHgQJDoJGvEWqhom98HWe/5D6i2Owk= Subject key identifier: 02:FA:F3:1F:C2:85:2E:D7:75:A6:C4:AB:C0:59:A1:BC:4F:E6:46:FF Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 1172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 1167 Signing time: Sat 18 May 2024 17:47:30 +0000 Manifest this update: Sat 18 May 2024 17:47:29 +0000 Manifest next update: Sat 25 May 2024 17:47:29 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: PyWwxlCq3Adjpccn27BkdG9ws0momoR68tVmgOdf7TE=) 2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: xAAO6itcprSh+8gb3Y6zviRgaXnWwWSK7iIacRpKf1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4466 (0x1172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: May 18 17:47:29 2024 GMT Not After : May 25 17:47:29 2024 GMT Subject: CN=6648e9b1-873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:e6:b2:ce:33:c8:7b:88:8b:37:fb:b1:d7: a9:6f:27:38:96:e5:15:c3:66:8b:94:94:33:9d:21: fe:2a:3e:ed:90:cc:fd:bb:fd:0b:c8:9f:1b:56:81: a9:a4:69:37:30:df:c0:a0:10:a1:15:fc:0f:8f:ca: 6c:e2:6d:96:77:45:4e:5d:32:a3:b6:65:c9:7f:8f: b2:98:57:b6:be:c6:58:46:d9:34:a1:d2:2c:93:7b: 15:4b:c4:63:25:19:67:a7:94:36:7d:1b:78:58:c6: a9:e5:22:a7:5c:02:3a:8c:c8:9f:8b:01:d9:f0:1f: b5:e7:14:fd:61:c9:08:49:c9:21:05:d4:bd:d6:c5: 9c:5a:2c:87:43:b3:0d:58:19:5c:09:a3:ef:9f:54: 2e:37:f5:18:df:0c:05:44:eb:9d:c7:00:d9:d6:19: ab:0c:25:4e:6c:db:74:58:1f:d6:6a:d9:21:15:b9: 0b:62:ee:17:ef:b8:c2:4c:ba:97:ad:8f:a9:6c:f4: df:31:be:fd:91:bf:a0:2e:1a:94:7e:5e:78:5d:68: 72:e5:e3:59:8b:1c:d9:e0:ef:2a:5a:ff:09:10:de: 05:d8:85:b7:00:f4:b8:bb:58:2f:6b:de:aa:d8:c9: 15:fb:04:25:32:0d:4b:1b:67:d9:01:9a:d5:ac:50: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FA:F3:1F:C2:85:2E:D7:75:A6:C4:AB:C0:59:A1:BC:4F:E6:46:FF X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:32:3f:b6:ce:eb:61:c1:c6:4b:30:df:c1:c6:23:10:04:1f: 2d:f2:22:de:bb:d2:5e:e6:d3:09:5d:fd:61:72:0d:30:f9:10: 6b:7d:e7:8e:ea:d1:d8:35:c1:44:86:c8:73:c4:cc:6b:21:eb: 90:19:f7:9d:7a:b3:89:67:cf:05:df:c5:86:67:b2:0f:37:f5: 0a:ce:85:43:0f:27:89:a8:db:93:50:a3:9d:6e:f4:09:38:6f: 86:cd:87:8d:cd:fd:b9:0c:6d:e8:c4:8d:77:3c:bc:ce:c4:e8: 80:06:d4:d8:fb:91:01:aa:00:51:1d:6e:cd:c8:be:38:d5:ce: 17:53:f5:12:29:6f:d7:02:da:b7:83:4a:5d:27:f5:e4:26:cc: 2f:30:dc:ec:89:5e:89:53:24:cf:d0:56:f9:0e:68:1d:9a:bf: 9c:88:0f:e5:63:ee:fa:71:c8:fc:fa:53:87:70:c9:88:1e:0c: 2a:c7:fa:02:2d:ed:14:ad:27:99:a4:04:1e:3d:1c:13:24:7a: b1:59:22:4e:22:77:e8:a8:6f:79:e7:49:16:8a:5a:8d:e4:18: 1b:51:f9:6d:c7:40:9c:c1:a1:11:18:1d:8d:64:9b:f5:9c:52: 38:6e:d5:27:1a:08:43:14:88:de:a0:64:12:c9:77:80:6b:d6: 86:24:01:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjQwNTE4MTc0NzI5WhcNMjQwNTI1MTc0NzI5WjAYMRYwFAYD VQQDEw02NjQ4ZTliMS04NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSPmss4zyHuIizf7sdepbyc4luUVw2aLlJQznSH+Kj7tkMz9u/0LyJ8bVoGp pGk3MN/AoBChFfwPj8ps4m2Wd0VOXTKjtmXJf4+ymFe2vsZYRtk0odIsk3sVS8Rj JRlnp5Q2fRt4WMap5SKnXAI6jMifiwHZ8B+15xT9YckISckhBdS91sWcWiyHQ7MN WBlcCaPvn1QuN/UY3wwFROudxwDZ1hmrDCVObNt0WB/WatkhFbkLYu4X77jCTLqX rY+pbPTfMb79kb+gLhqUfl54XWhy5eNZixzZ4O8qWv8JEN4F2IW3APS4u1gva96q 2MkV+wQlMg1LG2fZAZrVrFACiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL68x/C hS7XdabEq8BZobxP5kb/MB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEMj+2zuthwcZLMN/BxiMQBB8t8iLeu9Je5tMJXf1hcg0w+RBrfeeO 6tHYNcFEhshzxMxrIeuQGfederOJZ88F38WGZ7IPN/UKzoVDDyeJqNuTUKOdbvQJ OG+GzYeNzf25DG3oxI13PLzOxOiABtTY+5EBqgBRHW7NyL441c4XU/USKW/XAtq3 g0pdJ/XkJswvMNzsiV6JUyTP0Fb5Dmgdmr+ciA/lY+76ccj8+lOHcMmIHgwqx/oC Le0UrSeZpAQePRwTJHqxWSJOInfoqG9550kWilqN5BgbUfltx0CcwaERGB2NZJv1 nFI4btUnGghDFIjeoGQSyXeAa9aGJAGj -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org