$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: f0s785mmw2rgzDedgFT6FkOuKR3wwQL6oxsJWb8CkNA= Subject key identifier: B7:C0:64:C2:35:AA:57:7D:B6:8C:A0:F6:BE:90:E7:10:8A:F3:E1:FF Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0A5C Signing time: Sat 18 May 2024 20:21:48 +0000 Manifest this update: Sat 18 May 2024 20:21:48 +0000 Manifest next update: Sat 25 May 2024 20:21:48 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: scOlWsDsG9lXg1ytSJBz5GP/gZ93drd5pS6cLosRn6M=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 0grWoPbIw7eqZ5KWG4fjW4iWTJDkl1s1OqL5n5v7b8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: May 18 20:21:48 2024 GMT Not After : May 25 20:21:48 2024 GMT Subject: CN=66490ddc-9bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:c9:47:75:d6:11:8a:c2:4f:94:f3:15:62: 2a:a1:9a:5a:d6:f3:f8:d0:6e:c9:63:bb:b6:ef:c8: c7:8e:09:52:5d:38:c8:f5:b7:94:b5:7b:71:a8:0e: 5c:88:dc:eb:ff:3c:15:0c:9f:50:60:49:1a:5f:4a: 7d:a9:4e:4c:76:4d:85:0b:00:ca:ac:eb:ae:bc:e8: c4:9c:31:d8:4c:1f:0c:04:67:70:64:c3:e8:e6:58: 6a:1e:40:92:d0:12:1a:ec:28:a0:67:ac:e9:cc:99: 1d:1d:23:6e:1d:23:c7:aa:de:aa:63:1c:b1:a3:c5: 05:37:74:29:1a:70:07:93:2a:9a:74:3d:71:a3:50: bf:a9:67:0a:82:0d:9c:bd:53:a0:c9:79:f0:fe:09: fe:8a:08:87:27:f9:02:21:70:60:a4:d6:a6:9c:cf: 3f:ef:99:f5:29:f0:e3:fa:76:82:57:bb:5d:af:23: ba:b9:be:bc:a1:5b:85:a4:b7:f9:12:08:9a:6c:17: 7f:31:ea:5e:cc:5d:66:08:d8:c3:55:0e:af:17:fa: 29:00:b2:5a:38:cc:6c:72:58:c5:20:b9:df:08:81: 8b:1b:ed:79:3d:1d:48:3b:a1:fb:9a:d2:a2:8c:aa: 44:8b:3d:63:c9:b6:de:49:96:7b:44:71:49:c9:2d: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:64:C2:35:AA:57:7D:B6:8C:A0:F6:BE:90:E7:10:8A:F3:E1:FF X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:8d:a9:71:a6:01:1c:bb:02:3e:2c:64:33:7e:c7:36:ae: 66:f8:0a:39:8b:fa:fd:ce:f0:51:31:d7:c8:39:cf:3d:90:fb: bb:64:92:89:4b:ee:d1:6e:41:60:42:3e:7c:75:5e:0c:43:46: 71:5f:95:4e:02:42:60:14:a9:69:7d:8b:dd:7d:50:55:e3:d3: 1e:1a:eb:f7:c0:48:79:74:bd:66:3a:cd:c9:a5:01:b9:05:cd: 58:0a:ad:8f:20:42:e2:42:04:90:5c:e7:0d:e4:b4:54:74:e1: d8:4d:11:20:65:56:e2:4a:a2:26:10:4a:fe:29:05:b3:6f:22: da:6d:38:f8:9a:c5:cc:9d:96:ac:72:3f:dc:8f:cd:3e:c4:b4: cf:fd:a3:48:52:22:15:7d:e2:c9:93:98:17:7c:1f:24:a0:0c: c6:52:97:25:74:bd:b0:c6:e5:28:2e:fe:57:d8:be:7f:66:b3: 88:32:d5:57:9b:99:ab:44:e0:20:bb:be:7c:52:b7:7d:42:ab: 48:3e:52:86:33:60:19:7c:7b:12:93:73:ac:eb:72:5a:43:28: 81:f8:20:ee:22:1a:71:0d:76:38:16:f6:d6:10:a3:7f:be:e4: 5d:f6:b8:73:7d:4e:63:ab:94:ce:5d:dc:b8:6e:d1:0c:c1:c2: 07:e7:2c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjQwNTE4MjAyMTQ4WhcNMjQwNTI1MjAyMTQ4WjAYMRYwFAYD VQQDEw02NjQ5MGRkYy05YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHjJR3XWEYrCT5TzFWIqoZpa1vP40G7JY7u278jHjglSXTjI9beUtXtxqA5c iNzr/zwVDJ9QYEkaX0p9qU5Mdk2FCwDKrOuuvOjEnDHYTB8MBGdwZMPo5lhqHkCS 0BIa7CigZ6zpzJkdHSNuHSPHqt6qYxyxo8UFN3QpGnAHkyqadD1xo1C/qWcKgg2c vVOgyXnw/gn+igiHJ/kCIXBgpNamnM8/75n1KfDj+naCV7tdryO6ub68oVuFpLf5 EgiabBd/MepezF1mCNjDVQ6vF/opALJaOMxscljFILnfCIGLG+15PR1IO6H7mtKi jKpEiz1jybbeSZZ7RHFJyS2eqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfAZMI1 qld9toyg9r6Q5xCK8+H/MB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB91Y2pcaYBHLsCPixkM37HNq5m+Ao5i/r9zvBRMdfIOc89kPu7ZJKJ S+7RbkFgQj58dV4MQ0ZxX5VOAkJgFKlpfYvdfVBV49MeGuv3wEh5dL1mOs3JpQG5 Bc1YCq2PIELiQgSQXOcN5LRUdOHYTREgZVbiSqImEEr+KQWzbyLabTj4msXMnZas cj/cj80+xLTP/aNIUiIVfeLJk5gXfB8koAzGUpcldL2wxuUoLv5X2L5/ZrOIMtVX m5mrROAgu758Urd9QqtIPlKGM2AZfHsSk3Os63JaQyiB+CDuIhpxDXY4FvbWEKN/ vuRd9rhzfU5jq5TOXdy4btEMwcIH5yzX -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org