$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: wwU+45UPze2PX3ClXX/Z8vxExLr/JkTKH0NObkt039Y= Subject key identifier: 56:74:71:65:95:D8:25:42:BB:27:BB:47:E4:56:71:54:10:EA:A3:E2 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 0153 Signing time: Wed 29 May 2024 05:24:06 +0000 Manifest this update: Wed 29 May 2024 05:24:05 +0000 Manifest next update: Wed 05 Jun 2024 05:24:05 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: wAlzR9j49HjKu0Yr2iodVwfqLlg20dZDbYvKyHTAtSk=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: s15M0vkeJCzeAMtmlM+l1juodIEn43o4axBJIZ7Crds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: May 29 05:24:05 2024 GMT Not After : Jun 5 05:24:05 2024 GMT Subject: CN=6656bbf5-0158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:3a:9e:ce:cc:b3:23:32:a9:92:55:1b:50: 34:16:4a:1f:ed:7a:b0:22:65:48:ab:76:2d:15:64: 69:61:57:c0:3c:9b:0b:06:b0:48:09:b8:fb:24:62: 89:f9:3f:4a:ca:61:36:81:65:d0:eb:4a:77:82:48: 8f:a4:64:ba:e2:cc:b9:78:ad:8c:87:96:a9:20:f0: 79:f1:fa:05:f5:4a:89:b4:59:28:c9:5c:34:92:7f: c8:94:03:93:40:2f:75:b8:84:5c:80:10:d9:2b:4d: 8c:09:c7:c8:cc:db:83:e0:1d:0c:03:fa:6f:91:b5: a0:75:52:5d:02:5d:a8:b4:c1:60:6c:08:89:1c:2f: 0d:43:80:a9:8c:5a:2b:0c:7d:8c:48:90:9b:da:0d: 9a:b5:0a:11:5d:0b:ad:6c:b8:6f:51:fa:9d:a8:17: 70:a6:86:85:6b:87:af:be:8c:7d:30:84:31:cd:e0: bf:21:a9:4e:2f:a2:e7:67:4d:44:ab:ef:8f:14:e8: 60:c6:f6:87:eb:83:57:2e:31:19:88:08:37:a9:2f: a1:28:4b:af:27:5b:61:e3:c0:6f:4b:5a:6f:5a:60: 0b:77:fc:58:41:32:0e:b2:34:af:4d:4d:32:92:d7: 46:ce:ae:fb:d8:b5:5f:8d:d9:49:70:32:22:bd:92: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:74:71:65:95:D8:25:42:BB:27:BB:47:E4:56:71:54:10:EA:A3:E2 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:51:85:d7:37:db:82:c5:15:65:8e:a0:b7:72:1d:f7:b6:c3: 12:fd:5b:cb:a6:2e:92:e0:2c:28:32:f6:36:73:81:34:01:ce: 98:88:27:84:bd:90:d2:69:33:f1:46:17:2b:ce:65:71:17:51: e7:75:2c:2f:74:c9:6c:e6:a3:2a:b4:df:a9:4b:17:70:72:86: 6e:79:c5:7b:16:c5:69:51:f2:34:4e:3f:f1:e2:7f:3e:07:4c: 9f:68:b4:ac:a0:a2:e6:aa:4f:6b:de:b8:01:a7:43:12:0a:85: 7e:89:78:2e:b3:c9:c4:58:73:33:86:ba:1f:c1:6e:8f:c2:b3: ba:2f:a4:c5:78:01:9d:af:73:b8:87:34:e8:de:3a:33:48:7b: bc:7f:43:74:0b:4b:75:0f:77:07:4c:b4:bf:90:52:67:e9:0f: df:1d:1e:88:92:72:b3:9c:48:27:e1:99:c1:e5:87:b5:86:59: 85:b6:bc:54:63:9d:e0:a8:bf:d4:d1:56:69:4a:34:ef:ee:ec: 64:dd:d8:f9:c4:a3:8b:f1:fe:3d:65:d4:fb:08:bc:0d:0e:ec: 2f:75:21:b0:86:5c:e1:39:eb:5e:0f:ac:9d:0c:69:64:93:e6: 69:68:be:d2:a9:06:c5:a2:0e:5a:d6:db:b8:61:2e:37:88:95: 33:6e:69:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjQwNTI5MDUyNDA1WhcNMjQwNjA1MDUyNDA1WjAYMRYwFAYD VQQDEw02NjU2YmJmNS0wMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzg6ns7MsyMyqZJVG1A0Fkof7XqwImVIq3YtFWRpYVfAPJsLBrBICbj7JGKJ +T9KymE2gWXQ60p3gkiPpGS64sy5eK2Mh5apIPB58foF9UqJtFkoyVw0kn/IlAOT QC91uIRcgBDZK02MCcfIzNuD4B0MA/pvkbWgdVJdAl2otMFgbAiJHC8NQ4CpjFor DH2MSJCb2g2atQoRXQutbLhvUfqdqBdwpoaFa4evvox9MIQxzeC/IalOL6LnZ01E q++PFOhgxvaH64NXLjEZiAg3qS+hKEuvJ1th48BvS1pvWmALd/xYQTIOsjSvTU0y ktdGzq772LVfjdlJcDIivZIueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ0cWWV 2CVCuye7R+RWcVQQ6qPiMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuUYXXN9uCxRVljqC3ch33tsMS/VvLpi6S4CwoMvY2c4E0Ac6YiCeE vZDSaTPxRhcrzmVxF1HndSwvdMls5qMqtN+pSxdwcoZuecV7FsVpUfI0Tj/x4n8+ B0yfaLSsoKLmqk9r3rgBp0MSCoV+iXgus8nEWHMzhrofwW6PwrO6L6TFeAGdr3O4 hzTo3jozSHu8f0N0C0t1D3cHTLS/kFJn6Q/fHR6IknKznEgn4ZnB5Ye1hlmFtrxU Y53gqL/U0VZpSjTv7uxk3dj5xKOL8f49ZdT7CLwNDuwvdSGwhlzhOeteD6ydDGlk k+ZpaL7SqQbFog5a1tu4YS43iJUzbmmF -----END CERTIFICATE-----Generated at Wed May 29 06:12:24 2024 by rpki-client on console-ams.rpki-client.org