$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: 44d2is2/uGwV7YeDGxuPi+dl3eltt9OT6hmR2QeA7TU= Subject key identifier: D1:AE:92:E0:76:75:BA:35:F2:F4:35:70:18:25:C1:A7:E1:04:FB:8D Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: 25 Signing time: Fri 17 May 2024 08:45:18 +0000 Manifest this update: Fri 17 May 2024 08:45:17 +0000 Manifest next update: Fri 24 May 2024 08:45:17 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: kAmsuByG+VcEWRzjkCRCSeHEV2mQEiob/c36mGs+AM8=) 2: 7BC334D0032211EFB6663D61C4F9AE02.roa (hash: KLsaxmsptpjAeDm+b0JJ1w1XqIuCXPvLuQmzINtbEbo=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: xbNJQesTFnSaFQj7OVLX/yZ7ajTt2hsavHnG9clr93o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: May 17 08:45:17 2024 GMT Not After : May 24 08:45:17 2024 GMT Subject: CN=6647191e-2aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:55:5f:0f:0a:b0:8b:5d:b1:29:8c:12:90: d0:59:17:2c:87:13:56:92:98:47:03:02:6e:1d:35: c8:a0:4f:dd:9f:9d:1b:d0:44:b1:39:06:1c:40:fd: e2:3b:23:96:1a:c5:33:b4:cb:8f:fa:74:68:f5:f8: a6:97:e3:ca:ad:b0:01:bf:31:bd:b0:64:6d:af:a8: 9a:2b:ec:99:1e:60:2a:9f:27:f2:97:ee:57:d6:89: 6d:95:99:6a:f2:83:74:25:e7:9a:e2:ef:cc:f7:99: b3:68:3d:90:b7:46:6d:36:02:0f:72:e5:42:3b:8b: a5:93:3e:de:0b:d7:9d:5b:0c:aa:16:ff:a9:d2:8c: 24:bd:a0:15:5c:ed:8a:91:d1:a1:ab:12:cb:5c:07: 1e:a8:0d:c1:b2:37:c3:b9:cd:96:4b:8a:39:d6:c5: 06:77:57:36:1c:78:65:d5:d1:ff:bc:b2:e4:04:b7: f1:76:13:9c:24:51:fc:4b:f5:54:68:46:97:78:e2: 3c:12:7b:c9:a7:7c:c7:e1:d7:c4:54:08:20:7a:8a: b7:43:24:4f:1b:03:f9:d8:83:91:79:50:00:3d:83: 02:1a:92:4f:76:f2:f9:19:ee:45:e9:a6:73:a3:53: 2a:59:cf:2d:44:e7:49:8e:d1:40:dc:d9:d1:d0:fa: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:92:E0:76:75:BA:35:F2:F4:35:70:18:25:C1:A7:E1:04:FB:8D X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:44:a3:73:77:d9:8b:3b:84:78:7c:9a:23:41:59:27:3e:9f: 8f:57:e1:29:21:4f:a0:2e:a3:0b:e6:7b:d9:3d:1c:a0:9a:c4: 4b:28:bb:04:2f:a1:44:13:43:ac:96:04:42:b1:08:f4:a5:85: 16:ea:ec:cc:db:77:08:7c:07:fd:6b:d1:b0:66:9a:6e:b3:9f: 2a:ae:0e:b3:8a:ef:14:af:54:85:00:39:4e:b0:3e:0c:b1:e4: 22:d8:90:24:8c:7f:91:91:87:0e:7b:e1:19:c5:92:06:08:55: 33:9b:24:13:9c:65:2d:bc:a5:1a:d6:ce:a0:d9:d1:38:c8:c2: 12:79:fc:80:67:d7:30:ad:c3:9b:b2:35:01:cd:93:35:d8:d9: d9:c8:d3:c3:1a:39:21:2e:2b:66:ae:7e:a7:8b:85:c2:24:85: c6:1b:02:74:e3:5b:da:4d:3a:c8:35:82:15:20:52:2e:82:13: 9d:9b:0f:49:7a:6f:73:7a:62:88:1b:4f:4f:00:db:9f:ea:7e: 4f:7f:5a:96:a2:82:6b:f4:77:05:cd:e2:a2:f2:8b:35:b7:07: d6:cf:77:17:1d:ac:e3:8b:d4:b9:de:34:2c:0c:e6:71:f9:b8: 28:5e:60:49:ba:c1:19:cb:e3:3e:fc:fd:a3:f1:e2:62:66:2c: 90:51:ea:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDhCRTExMC8GA1UEBRMoRTNGMThENDEyMDI2RjMxQkE0NDNFQTMzRjU2NzA2RkZC MkYwRjE2MjAeFw0yNDA1MTcwODQ1MTdaFw0yNDA1MjQwODQ1MTdaMBgxFjAUBgNV BAMTDTY2NDcxOTFlLTJhYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbxFVfDwqwi12xKYwSkNBZFyyHE1aSmEcDAm4dNcigT92fnRvQRLE5BhxA/eI7 I5YaxTO0y4/6dGj1+KaX48qtsAG/Mb2wZG2vqJor7JkeYCqfJ/KX7lfWiW2VmWry g3Ql55ri78z3mbNoPZC3Rm02Ag9y5UI7i6WTPt4L151bDKoW/6nSjCS9oBVc7YqR 0aGrEstcBx6oDcGyN8O5zZZLijnWxQZ3VzYceGXV0f+8suQEt/F2E5wkUfxL9VRo Rpd44jwSe8mnfMfh18RUCCB6irdDJE8bA/nYg5F5UAA9gwIakk928vkZ7kXppnOj UypZzy1E50mO0UDc2dHQ+jAdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0a6S4HZ1 ujXy9DVwGCXBp+EE+40wHwYDVR0jBBgwFoAU4/GNQSAm8xukQ+oz9WcG/7Lw8WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEOEJFL0M2OEVGRjlFRTVE NjExRUU4QjM1NjczOUM0RjlBRTAyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNF9HTlFTQW04eHVrUS1vejlXY0dfN0x3OFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE OEJFL0M2OEVGRjlFRTVENjExRUU4QjM1NjczOUM0RjlBRTAyLzRfR05RU0FtOHh1 a1Etb3o5V2NHXzdMdzhXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ1Eo3N32Ys7hHh8miNBWSc+n49X4SkhT6Auowvme9k9HKCaxEsouwQv oUQTQ6yWBEKxCPSlhRbq7Mzbdwh8B/1r0bBmmm6znyquDrOK7xSvVIUAOU6wPgyx 5CLYkCSMf5GRhw574RnFkgYIVTObJBOcZS28pRrWzqDZ0TjIwhJ5/IBn1zCtw5uy NQHNkzXY2dnI08MaOSEuK2aufqeLhcIkhcYbAnTjW9pNOsg1ghUgUi6CE52bD0l6 b3N6YogbT08A25/qfk9/Wpaigmv0dwXN4qLyizW3B9bPdxcdrOOL1LneNCwM5nH5 uCheYEm6wRnL4z78/aPx4mJmLJBR6s4= -----END CERTIFICATE-----Generated at Fri May 17 10:59:15 2024 by rpki-client on console-ams.rpki-client.org