$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: mfxOjW30nFI5f8Bxoq4cuT1T1QJUGr4mXRnr3OCLQdU= Subject key identifier: 7E:9B:24:AB:94:03:BB:D1:C5:6C:12:08:86:40:D2:1C:6E:21:5A:4D Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 82 Signing time: Sun 19 May 2024 07:09:17 +0000 Manifest this update: Sun 19 May 2024 07:09:16 +0000 Manifest next update: Sun 26 May 2024 07:09:16 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 1HFiDXglMssPn5EUvJgpcisymCeDw1Pr9WBuePB0vCE=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: OnN3gNIZ/fCbsBg1DuMqFTew2UrHIqCTnUQyEN0vDoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: May 19 07:09:16 2024 GMT Not After : May 26 07:09:16 2024 GMT Subject: CN=6649a59c-be57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:00:79:5d:2b:a8:fc:76:d3:df:ce:ef:ed: 4b:9b:81:e8:67:f3:a3:7d:a7:a4:0e:84:76:b1:2c: 68:30:a6:91:27:23:1e:db:53:81:f9:fd:31:97:1b: 41:8f:92:3e:0b:19:7a:42:ca:95:77:14:83:c3:1c: 43:b8:2f:b9:cc:bb:44:ad:da:41:7f:98:8a:4e:89: 3e:46:2a:d7:6c:4e:15:9b:04:8e:83:31:50:8d:00: 39:08:38:79:1c:2a:76:84:05:fd:4b:16:9e:52:9f: 91:e6:d1:fd:7a:81:99:2d:e4:81:a6:af:cd:10:57: de:1a:a1:0d:fc:92:e1:ef:0e:c1:a1:2e:cc:24:96: bf:0c:28:23:d3:69:80:76:0b:2c:ae:a5:90:54:38: d0:0c:ce:57:53:29:fb:16:5d:e2:c9:86:5b:7e:bd: 98:c8:90:87:4e:c6:19:00:48:81:7a:df:18:a8:24: 8f:15:7e:e7:01:e0:1a:4b:f9:50:fb:9d:8f:3e:00: 93:48:1e:c8:6a:09:80:12:26:2c:e6:3f:fa:58:02: 82:36:88:fd:7f:4f:93:78:5c:0e:16:f5:b4:a4:7d: 31:4d:a2:29:7e:a6:bd:a9:e3:c5:ee:9c:16:d2:6d: 31:0c:15:a4:7c:27:e1:46:2b:5d:38:d4:6a:d1:d3: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9B:24:AB:94:03:BB:D1:C5:6C:12:08:86:40:D2:1C:6E:21:5A:4D X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:4a:99:a9:4f:f8:e4:af:3c:91:91:a2:63:3f:67:c8:dc: 11:3f:4e:53:4a:9c:d0:cb:40:5b:32:dd:00:b2:e3:4f:0b:96: 24:c7:ae:db:04:e5:f2:0c:ed:0e:f8:8f:9e:e4:d8:2d:b4:5c: 25:4d:6f:1a:89:bb:78:ff:39:ea:e7:d8:74:1e:f0:d8:58:99: 51:9f:c0:80:02:04:36:00:5a:f1:21:0a:b2:fb:7f:25:18:ca: 48:c9:60:e2:11:5c:9e:31:1a:91:ac:08:4d:ba:a5:e4:07:a9: 83:c8:7e:fe:1f:d7:32:88:a8:07:c0:91:23:81:d4:2c:40:c6: d7:83:d6:38:90:17:72:00:82:bd:28:37:51:73:1f:9f:2a:d4: 7a:77:54:38:37:cc:fa:eb:eb:35:47:8c:1b:37:60:34:53:37: 0a:97:77:8b:31:df:82:a4:13:7a:a6:95:9e:b9:c8:51:ed:6f: 83:74:7d:69:4e:6c:11:5c:f2:f8:59:0c:42:65:07:d6:ae:9d: 56:e4:66:73:4b:0a:c2:d7:6a:6a:46:6f:b3:13:4c:ce:01:51: a3:7d:c6:31:c7:14:83:b3:77:4e:38:0e:32:cb:41:27:73:5e: b9:8f:70:34:6f:95:af:63:93:d3:6d:d2:e5:b1:b5:1e:ce:68: 54:54:61:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjQwNTE5MDcwOTE2WhcNMjQwNTI2MDcwOTE2WjAYMRYwFAYD VQQDEw02NjQ5YTU5Yy1iZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg0AeV0rqPx209/O7+1Lm4HoZ/OjfaekDoR2sSxoMKaRJyMe21OB+f0xlxtB j5I+Cxl6QsqVdxSDwxxDuC+5zLtErdpBf5iKTok+RirXbE4VmwSOgzFQjQA5CDh5 HCp2hAX9SxaeUp+R5tH9eoGZLeSBpq/NEFfeGqEN/JLh7w7BoS7MJJa/DCgj02mA dgssrqWQVDjQDM5XUyn7Fl3iyYZbfr2YyJCHTsYZAEiBet8YqCSPFX7nAeAaS/lQ +52PPgCTSB7IagmAEiYs5j/6WAKCNoj9f0+TeFwOFvW0pH0xTaIpfqa9qePF7pwW 0m0xDBWkfCfhRitdONRq0dPiiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6bJKuU A7vRxWwSCIZA0hxuIVpNMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbUqZqU/45K88kZGiYz9nyNwRP05TSpzQy0BbMt0AsuNPC5Ykx67b BOXyDO0O+I+e5NgttFwlTW8aibt4/znq59h0HvDYWJlRn8CAAgQ2AFrxIQqy+38l GMpIyWDiEVyeMRqRrAhNuqXkB6mDyH7+H9cyiKgHwJEjgdQsQMbXg9Y4kBdyAIK9 KDdRcx+fKtR6d1Q4N8z66+s1R4wbN2A0UzcKl3eLMd+CpBN6ppWeuchR7W+DdH1p TmwRXPL4WQxCZQfWrp1W5GZzSwrC12pqRm+zE0zOAVGjfcYxxxSDs3dOOA4yy0En c165j3A0b5WvY5PTbdLlsbUezmhUVGHh -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org