$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: Pg9PDbc422qOC3nMUBBrkHiWVz1O3q7ANmlNdhNHzyI= Subject key identifier: 6C:3E:48:00:F7:D0:23:50:3B:9C:AF:CF:F3:3B:04:F4:43:AA:A6:DB Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0A38 Signing time: Fri 31 May 2024 15:59:24 +0000 Manifest this update: Fri 31 May 2024 15:59:24 +0000 Manifest next update: Fri 07 Jun 2024 15:59:23 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: rPMnStFbzmQD2GKebKX9/5RRzQG6f26rAMbySeoUN5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: May 31 15:59:24 2024 GMT Not After : Jun 7 15:59:23 2024 GMT Subject: CN=6659f3dc-671c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e5:6e:f6:2e:dd:a5:7b:2e:7d:07:31:53:3b: d5:9c:39:58:fd:2a:ea:be:8a:1e:14:0b:81:64:f4: 18:4a:0d:9c:d6:8c:71:15:e0:ae:f1:d9:1b:44:73: 08:bb:53:d6:72:d3:27:f7:fa:5e:63:19:91:8d:03: e3:92:c6:10:cd:b7:63:a8:38:4e:46:de:5d:82:43: 33:da:c8:01:04:64:a9:55:16:69:1f:01:9d:27:d3: 54:1d:33:ce:d1:a5:85:b1:95:1b:cf:0b:3c:6c:b4: 12:60:dc:04:bf:2b:19:8e:2c:04:b4:63:fa:b9:a4: 15:14:fc:93:06:17:af:d0:39:e8:81:28:c4:20:8c: 27:09:9f:e7:62:92:41:52:9a:c3:90:da:46:d0:35: 57:2c:ee:3d:0f:16:59:05:54:45:ad:46:70:ad:42: 0a:93:26:48:06:ff:a1:c6:90:e2:06:2a:ee:40:d3: 66:af:18:04:86:b1:2c:97:8d:b2:4e:6d:42:3e:d2: 37:49:cd:02:21:f1:7b:1f:c7:df:e7:ba:8f:53:f4: e7:22:ef:d2:9b:a6:52:9d:e8:d4:2e:ec:27:50:1f: e3:69:a2:6b:65:d9:31:2f:f3:5c:86:4a:c6:42:6f: 60:10:16:8a:5e:a0:c0:72:64:34:41:c1:51:b2:ac: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3E:48:00:F7:D0:23:50:3B:9C:AF:CF:F3:3B:04:F4:43:AA:A6:DB X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:34:3e:61:b7:6a:eb:5e:37:ca:85:52:2f:57:a9:e9:3f:18: 21:6c:32:b0:07:66:b4:7b:9c:e0:9f:06:03:cf:fc:36:b5:82: 93:50:09:90:68:da:83:44:28:f0:ec:57:f8:e9:12:29:d6:46: 42:22:d9:a7:2b:24:d9:aa:6f:71:60:9e:58:40:fa:e4:15:99: 69:23:66:9b:89:52:75:f6:46:31:a2:b9:96:72:c8:a4:db:93: a4:db:84:f8:14:e3:3b:82:0d:3a:57:9a:6a:85:7b:21:fd:47: a9:97:4c:fe:b5:e3:f6:d8:19:2b:2f:ee:85:6f:62:9b:93:49: 9e:28:5e:c2:18:95:aa:91:e1:cf:52:cd:39:22:5b:97:76:a5: 15:79:6a:ba:6d:1a:06:af:6c:1c:2d:2f:04:37:48:5c:68:92: 5a:04:54:a5:20:f6:68:64:dd:6d:d9:2e:8b:50:38:8d:3d:16: 85:87:d4:2e:74:ba:12:73:bc:85:36:5f:db:05:02:a2:65:82: 79:53:b5:9d:c9:fe:e3:16:a2:9c:e9:23:5c:1e:de:05:31:5a: 85:07:c4:cb:5a:de:41:b8:24:27:45:54:bc:c8:ed:7e:86:8a: ec:45:63:08:ff:03:ab:d2:ff:26:21:f9:6b:d2:6c:f7:dc:a9: 55:09:c0:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjQwNTMxMTU1OTI0WhcNMjQwNjA3MTU1OTIzWjAYMRYwFAYD VQQDEw02NjU5ZjNkYy02NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uVu9i7dpXsufQcxUzvVnDlY/SrqvooeFAuBZPQYSg2c1oxxFeCu8dkbRHMI u1PWctMn9/peYxmRjQPjksYQzbdjqDhORt5dgkMz2sgBBGSpVRZpHwGdJ9NUHTPO 0aWFsZUbzws8bLQSYNwEvysZjiwEtGP6uaQVFPyTBhev0DnogSjEIIwnCZ/nYpJB UprDkNpG0DVXLO49DxZZBVRFrUZwrUIKkyZIBv+hxpDiBiruQNNmrxgEhrEsl42y Tm1CPtI3Sc0CIfF7H8ff57qPU/TnIu/Sm6ZSnejULuwnUB/jaaJrZdkxL/NchkrG Qm9gEBaKXqDAcmQ0QcFRsqxRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw+SAD3 0CNQO5yvz/M7BPRDqqbbMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAND5ht2rrXjfKhVIvV6npPxghbDKwB2a0e5zgnwYDz/w2tYKTUAmQ aNqDRCjw7Ff46RIp1kZCItmnKyTZqm9xYJ5YQPrkFZlpI2abiVJ19kYxormWcsik 25Ok24T4FOM7gg06V5pqhXsh/Uepl0z+teP22BkrL+6Fb2Kbk0meKF7CGJWqkeHP Us05IluXdqUVeWq6bRoGr2wcLS8EN0hcaJJaBFSlIPZoZN1t2S6LUDiNPRaFh9Qu dLoSc7yFNl/bBQKiZYJ5U7Wdyf7jFqKc6SNcHt4FMVqFB8TLWt5BuCQnRVS8yO1+ horsRWMI/wOr0v8mIflr0mz33KlVCcDt -----END CERTIFICATE-----Generated at Fri May 31 17:44:50 2024 by rpki-client on console-fra.rpki-client.org