$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json) Hash identifier: 5Z64BGve97o7wU6niX+TuPqBAiQXya4VFw+7EDf9F+Y= Subject key identifier: A2:36:34:83:95:9D:51:88:05:BC:99:99:A5:F0:C4:D6:FA:28:AC:3F Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft Manifest number: 06CE Signing time: Sat 18 May 2024 22:57:19 +0000 Manifest this update: Sat 18 May 2024 22:57:18 +0000 Manifest next update: Sat 25 May 2024 22:57:18 +0000 Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: 6RddLtU1Dsb7bTab73wWgDZHT3nv9m+oD/fFMipmVdA=) 2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: +giITiM/YdqmbzO/BW3K/sDxzMMEjUhYcrvpZd/m8Ys=) 3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: K2ToGux1LmW9HMWWJmE8hrP/U43KU+VL5yeKLunBOlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: May 18 22:57:18 2024 GMT Not After : May 25 22:57:18 2024 GMT Subject: CN=6649324e-40c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:14:af:f1:dd:8d:5a:de:c9:5b:64:61:ed: a9:6b:e5:3c:dc:be:7a:96:d6:4c:14:0d:6a:dd:3f: 6b:cf:b0:ec:df:86:e8:8b:4d:c9:0c:81:5e:1e:80: 77:0c:4a:74:68:ef:fd:66:a9:21:8b:57:5e:53:a5: 5a:ba:0f:e3:3c:56:d0:c6:33:e1:84:d3:24:3c:a6: 18:2f:5e:6e:12:f4:ca:04:17:b6:77:3b:31:40:1a: a3:b4:74:31:5e:ba:38:97:29:74:92:7a:72:e4:bf: d3:31:f3:6c:ce:13:bd:6d:98:28:6d:48:a3:12:63: 34:c5:80:6d:78:8d:97:b4:c1:f6:08:8a:ed:eb:7b: 4d:ff:6e:7d:2b:32:10:eb:8f:00:c3:11:97:41:3d: ef:ad:af:7f:ab:1d:06:ac:42:cd:5f:ae:8f:ad:b4: 33:aa:f1:3f:5c:a7:aa:e2:07:a4:bc:12:0a:24:1a: eb:ea:7f:04:5a:c6:78:f5:1c:1f:37:0e:41:2d:b9: a5:e6:f0:75:b3:ad:7c:f8:43:e8:e4:8a:e8:89:77: bf:26:7a:6d:88:b5:57:cc:3b:23:9a:42:13:2a:78: ca:aa:eb:33:df:5f:e3:42:c6:7f:79:23:b4:17:3c: ac:08:1b:e1:3d:e0:38:78:2e:6f:29:4b:6d:96:ee: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:34:83:95:9D:51:88:05:BC:99:99:A5:F0:C4:D6:FA:28:AC:3F X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:10:52:7b:ad:9d:b2:ff:78:65:95:8d:5d:e9:f8:18:e5: 92:50:fb:7d:37:90:11:81:d2:08:15:69:d3:f7:bd:f6:86:44: d2:28:c0:18:29:dd:d9:89:41:ff:18:40:9b:4a:b4:1f:85:c2: 2e:c4:8d:2f:d1:ac:e4:91:d1:db:f2:4c:43:bb:5a:4b:a3:af: 34:e8:db:c8:d8:67:27:2b:c8:c0:08:af:59:f3:43:41:c5:f8: 92:10:0d:35:d3:f8:d0:4c:de:04:ff:44:e8:93:a2:ed:0e:5a: 3d:33:9f:be:9b:de:ec:49:b2:81:24:5b:30:ac:54:be:63:a1: e8:93:c7:fa:74:1d:6b:03:63:0c:0c:06:34:bc:11:6f:70:18: a3:99:f7:75:8e:cd:f9:7c:fc:c2:b8:45:c1:62:09:9b:3c:11: ed:44:bc:d7:6b:d8:f2:24:19:6b:c9:48:d7:6c:61:10:0a:44: 19:4e:df:a2:b2:51:ff:aa:39:84:8f:0e:3b:5e:5f:93:6a:b7: 6c:ae:ee:ef:91:e5:0f:b7:22:2c:b5:e6:71:fa:d2:79:ca:7e: 43:62:48:70:13:42:ac:63:57:05:6d:f6:f0:42:24:0c:83:1c: 76:b4:5e:c4:58:60:21:0e:41:f1:fa:f6:2d:5f:1e:88:29:a0: b1:3c:99:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjQwNTE4MjI1NzE4WhcNMjQwNTI1MjI1NzE4WjAYMRYwFAYD VQQDEw02NjQ5MzI0ZS00MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs34Ur/HdjVreyVtkYe2pa+U83L56ltZMFA1q3T9rz7Ds34boi03JDIFeHoB3 DEp0aO/9Zqkhi1deU6Vaug/jPFbQxjPhhNMkPKYYL15uEvTKBBe2dzsxQBqjtHQx Xro4lyl0knpy5L/TMfNszhO9bZgobUijEmM0xYBteI2XtMH2CIrt63tN/259KzIQ 648AwxGXQT3vra9/qx0GrELNX66PrbQzqvE/XKeq4gekvBIKJBrr6n8EWsZ49Rwf Nw5BLbml5vB1s618+EPo5IroiXe/JnptiLVXzDsjmkITKnjKqusz31/jQsZ/eSO0 FzysCBvhPeA4eC5vKUttlu5eFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI2NIOV nVGIBbyZmaXwxNb6KKw/MB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUE3Ri9FOTY0QUY0QzBCNTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VC dnNqSW4wVUJsNHdKSURhN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrxBSe62dsv94ZZWNXen4GOWSUPt9N5ARgdIIFWnT9732hkTSKMAY Kd3ZiUH/GECbSrQfhcIuxI0v0azkkdHb8kxDu1pLo6806NvI2GcnK8jACK9Z80NB xfiSEA010/jQTN4E/0Tok6LtDlo9M5++m97sSbKBJFswrFS+Y6Hok8f6dB1rA2MM DAY0vBFvcBijmfd1js35fPzCuEXBYgmbPBHtRLzXa9jyJBlryUjXbGEQCkQZTt+i slH/qjmEjw47Xl+Tardsru7vkeUPtyIsteZx+tJ5yn5DYkhwE0KsY1cFbfbwQiQM gxx2tF7EWGAhDkHx+vYtXx6IKaCxPJnm -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org