$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: 1Cit/ZsRioJ+vq0VLxwH8mqMuyf83I87dI+u2mpFLGA= Subject key identifier: A7:A4:83:18:17:5E:33:54:5B:4C:B8:72:FF:BA:13:5B:FD:B3:27:87 Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 1422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 1419 Signing time: Sat 18 May 2024 17:25:16 +0000 Manifest this update: Sat 18 May 2024 17:25:16 +0000 Manifest next update: Sat 25 May 2024 17:25:16 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: fH7LVwx9hJWIvN0slp3wjEr8ObbKN4KrNGVziBgYPno=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: buurxI1h6Fr4d4JUIhu/ZCJ7rztPfsYg3AAKPhpuU8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5154 (0x1422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Validity Not Before: May 18 17:25:16 2024 GMT Not After : May 25 17:25:16 2024 GMT Subject: CN=6648e47c-22ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:6f:b0:b2:bb:2f:5a:3c:77:63:ee:62:bd: 04:a6:94:6d:dd:3c:4e:46:65:93:80:ad:d9:00:0e: 17:7e:41:dc:c2:a3:77:15:83:6d:a4:f5:18:79:80: 3d:87:d1:be:26:da:75:8f:aa:8a:0d:f4:2e:18:90: 32:d3:cc:cf:71:e4:96:e6:68:63:d3:9a:7b:ea:c3: 37:4e:b8:a1:32:57:0c:59:10:37:45:99:02:c2:98: 8e:a2:b9:84:a1:6d:63:fd:76:f6:5a:7e:99:ea:23: 03:44:b0:d2:cf:a1:4e:97:b8:32:b2:b8:97:46:30: 54:ef:c6:cd:33:ab:7a:e2:e8:d0:13:3a:62:86:e9: 91:26:c4:f9:df:56:02:0b:16:0d:2b:42:6f:29:ef: 50:ed:f7:0e:f0:1e:56:0d:47:0b:0f:c2:07:8a:56: 3a:e7:15:1e:67:98:9c:77:1c:a1:6f:cf:78:d0:f5: 56:5a:88:62:08:dd:d8:11:34:ef:1a:3b:8d:7d:cf: e3:11:02:3c:35:6b:1d:fa:c0:eb:4a:b2:2f:9b:63: 5d:a5:59:11:da:30:7c:6c:be:f8:34:be:4a:aa:ad: c7:9d:a5:07:58:06:da:fc:48:7c:7a:7a:0e:ca:7e: 0e:1b:2d:51:5e:21:d1:62:b1:a4:f8:94:0e:ba:ab: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:83:18:17:5E:33:54:5B:4C:B8:72:FF:BA:13:5B:FD:B3:27:87 X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ef:f2:8f:f3:4c:70:81:53:66:9d:7e:fe:9c:35:68:fe:ab: 54:81:37:b4:ba:dc:65:dc:e4:8b:fd:50:94:7b:5a:7b:26:a6: e4:58:08:02:fb:97:d2:b8:b2:50:1b:cf:06:96:ad:64:25:b2: d2:fe:c2:61:e8:2f:ff:e5:60:f4:82:d2:3e:64:bb:bc:8c:ec: 60:fd:ab:ff:ce:b9:1c:cb:be:96:fe:16:6d:2b:4a:10:28:bb: 50:e5:4f:d5:67:a5:9d:75:80:78:38:e3:9c:a7:07:32:36:2a: b6:60:90:b7:60:35:f0:6a:dc:d1:6a:c6:c2:78:f7:15:2b:8f: b3:e1:7c:fd:0d:3a:3f:d8:13:79:b8:2d:e4:89:cc:1b:5e:5f: b8:a3:85:dd:cf:23:cc:ba:b6:d7:77:d7:fe:20:eb:96:01:b6: 8c:f3:d4:b0:c7:63:8e:b9:1e:da:fd:d3:20:51:2e:5b:a1:ca: df:46:56:b2:fa:48:f6:47:dd:33:12:71:6d:d4:18:e3:25:1a: be:8c:85:1f:2b:fe:83:42:c2:d3:11:d9:0d:c4:5c:5e:28:c0: 29:6d:68:4e:c7:dc:ec:d5:87:59:01:c1:3c:77:3a:e3:9c:f0: 09:b6:06:0c:d0:95:b2:27:0a:c0:ea:f2:3b:d5:c9:4f:fd:a9: dc:82:78:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjQwNTE4MTcyNTE2WhcNMjQwNTI1MTcyNTE2WjAYMRYwFAYD VQQDEw02NjQ4ZTQ3Yy0yMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48VvsLK7L1o8d2PuYr0EppRt3TxORmWTgK3ZAA4XfkHcwqN3FYNtpPUYeYA9 h9G+Jtp1j6qKDfQuGJAy08zPceSW5mhj05p76sM3TrihMlcMWRA3RZkCwpiOormE oW1j/Xb2Wn6Z6iMDRLDSz6FOl7gysriXRjBU78bNM6t64ujQEzpihumRJsT531YC CxYNK0JvKe9Q7fcO8B5WDUcLD8IHilY65xUeZ5icdxyhb8940PVWWohiCN3YETTv GjuNfc/jEQI8NWsd+sDrSrIvm2NdpVkR2jB8bL74NL5Kqq3HnaUHWAba/Eh8enoO yn4OGy1RXiHRYrGk+JQOuqsI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKekgxgX XjNUW0y4cv+6E1v9syeHMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7/KP80xwgVNmnX7+nDVo/qtUgTe0utxl3OSL/VCUe1p7JqbkWAgC +5fSuLJQG88Glq1kJbLS/sJh6C//5WD0gtI+ZLu8jOxg/av/zrkcy76W/hZtK0oQ KLtQ5U/VZ6WddYB4OOOcpwcyNiq2YJC3YDXwatzRasbCePcVK4+z4Xz9DTo/2BN5 uC3kicwbXl+4o4XdzyPMurbXd9f+IOuWAbaM89Swx2OOuR7a/dMgUS5bocrfRlay +kj2R90zEnFt1BjjJRq+jIUfK/6DQsLTEdkNxFxeKMApbWhOx9zs1YdZAcE8dzrj nPAJtgYM0JWyJwrA6vI71clP/ancgnjD -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org