$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json) Hash identifier: IQ61Y2PzBL7+1FJI8x9/WLMRGwn6iWBsaGiFaYIxQrI= Subject key identifier: F5:F2:EC:53:D6:48:2E:D5:B0:F8:B1:62:E5:0B:8D:99:7F:05:81:B1 Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft Manifest number: 02D5 Signing time: Sun 19 May 2024 03:31:07 +0000 Manifest this update: Sun 19 May 2024 03:31:06 +0000 Manifest next update: Sun 26 May 2024 03:31:06 +0000 Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: kVPFZ2RE4J4bnj+QB+cZnGbk+cua2aQctqUr/DaxWa8=) 2: B58877BC91ED11EE854A5B66C4F9AE02.roa (hash: +UvNgg/6F9D9uD3XdqtyTsAF3XvrCZlUGl3Er+C0bzk=) 3: 763C6FD691EE11EE88E19D67C4F9AE02.roa (hash: 9LVRB5RMPe+vCgNIqxUMj9EnEIWmX49NNG/2uR+dq+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Validity Not Before: May 19 03:31:06 2024 GMT Not After : May 26 03:31:06 2024 GMT Subject: CN=6649727a-3912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:48:96:62:0b:31:8b:be:1f:0b:ec:cf:8b: 70:fd:1a:55:23:75:57:55:20:35:86:26:be:88:4f: 2b:fe:44:23:2a:07:2a:3f:47:d1:0e:7b:6f:05:c7: c4:82:e7:7c:3d:e2:2d:c7:1f:31:46:be:57:09:fc: 67:78:09:f5:81:92:15:0a:e6:3f:75:e4:76:4d:a8: ea:a3:48:88:1f:0c:53:9e:e1:fa:36:45:94:0c:c1: d9:b5:73:d5:0b:08:97:ea:42:5d:57:55:0e:32:d5: e9:42:b3:a6:26:99:0a:63:c5:19:44:a8:58:d3:c9: dc:54:48:1f:2c:df:a6:6f:fa:7e:90:47:f6:87:03: de:ad:bc:01:49:5d:81:33:fc:cb:a9:f4:f7:09:58: f2:cb:82:20:c5:f3:97:44:30:ea:fc:58:a2:8d:cd: 37:5e:dc:c6:92:23:bd:e1:60:1b:58:9d:17:09:67: af:9d:ba:33:7d:38:93:21:9c:29:cc:83:26:6b:c9: db:3f:db:48:42:31:4e:b0:1f:0f:44:83:31:a0:74: 33:08:b7:f4:fe:42:84:3b:bb:09:9f:ed:21:e8:6d: 2a:ee:34:d2:be:3a:5a:c1:2b:9a:28:4f:de:10:bf: 0f:2c:01:b2:b3:64:be:3e:96:63:f9:1b:d6:41:e0: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F2:EC:53:D6:48:2E:D5:B0:F8:B1:62:E5:0B:8D:99:7F:05:81:B1 X509v3 Authority Key Identifier: keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:f6:31:ff:2e:00:a6:68:ee:dd:9d:41:ee:3f:56:6f:04: 5c:1a:f5:80:cf:73:9f:e4:71:9f:e8:f7:e0:b0:95:f2:ec:43: d0:de:61:85:02:c2:63:a3:9f:fb:7a:4e:9e:d1:17:3e:ac:09: 04:eb:7d:6a:53:79:6a:53:46:8d:a2:43:0f:7c:7e:3e:11:26: 8d:d3:12:fe:80:bd:d5:02:b8:ef:1b:80:11:03:4f:9a:33:53: 94:bf:fb:d8:2e:df:05:bc:44:14:c5:c4:b0:a6:0d:8e:3f:f3: 07:74:f0:ed:39:85:c4:9e:d1:ed:c9:06:87:ad:09:68:2c:48: d7:0d:7f:3f:1d:fd:c2:94:14:49:e1:33:e1:67:e0:1a:29:e5: b0:a7:53:8d:d4:c5:f1:9b:d2:48:00:8b:fb:e3:0f:f6:53:fd: fe:4f:11:3d:65:17:d3:d7:45:58:a0:07:a9:97:2b:6c:03:82: a0:ca:97:af:46:0c:58:19:13:fb:c1:23:02:6c:1a:3f:14:21: a4:e5:3f:83:85:fd:95:cc:33:ce:81:a3:07:e7:68:ab:b8:75: 18:f5:49:4d:a7:de:90:61:13:a2:13:97:db:4b:d6:6d:17:74: 9d:de:3d:a7:9f:4b:a9:ca:1c:5b:3b:6f:eb:55:ed:7e:55:24: ec:51:0a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG RTJCMDk5M0QwHhcNMjQwNTE5MDMzMTA2WhcNMjQwNTI2MDMzMTA2WjAYMRYwFAYD VQQDEw02NjQ5NzI3YS0zOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ORIlmILMYu+Hwvsz4tw/RpVI3VXVSA1hia+iE8r/kQjKgcqP0fRDntvBcfE gud8PeItxx8xRr5XCfxneAn1gZIVCuY/deR2Tajqo0iIHwxTnuH6NkWUDMHZtXPV CwiX6kJdV1UOMtXpQrOmJpkKY8UZRKhY08ncVEgfLN+mb/p+kEf2hwPerbwBSV2B M/zLqfT3CVjyy4IgxfOXRDDq/Fiijc03XtzGkiO94WAbWJ0XCWevnbozfTiTIZwp zIMma8nbP9tIQjFOsB8PRIMxoHQzCLf0/kKEO7sJn+0h6G0q7jTSvjpawSuaKE/e EL8PLAGys2S+PpZj+RvWQeCPqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXy7FPW SC7VsPixYuULjZl/BYGxMB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3 OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM X0c2UkkyeXdodFQtS3dtVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB71vYx/y4Apmju3Z1B7j9WbwRcGvWAz3Of5HGf6PfgsJXy7EPQ3mGF AsJjo5/7ek6e0Rc+rAkE631qU3lqU0aNokMPfH4+ESaN0xL+gL3VArjvG4ARA0+a M1OUv/vYLt8FvEQUxcSwpg2OP/MHdPDtOYXEntHtyQaHrQloLEjXDX8/Hf3ClBRJ 4TPhZ+AaKeWwp1ON1MXxm9JIAIv74w/2U/3+TxE9ZRfT10VYoAeplytsA4Kgypev RgxYGRP7wSMCbBo/FCGk5T+Dhf2VzDPOgaMH52iruHUY9UlNp96QYROiE5fbS9Zt F3Sd3j2nn0upyhxbO2/rVe1+VSTsUQoN -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org