$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: l2SNO0Xc7mnYkuYCg9TgXThPEBXPtQJSoLRon4MfX4w= Subject key identifier: 35:0C:86:B8:44:79:36:EB:9D:4D:46:9C:06:C8:9F:E2:6B:5A:75:64 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 18 Signing time: Fri 17 May 2024 08:53:51 +0000 Manifest this update: Fri 17 May 2024 08:53:50 +0000 Manifest next update: Fri 24 May 2024 08:53:50 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: dLknzwLW4YFUx40MwoSo1gedRhqWzovtVCfOWJfTQ7Y=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: WlGg3hTs6Tp0wM849EpdyTISeL/xzllUnK75hnMfU24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: May 17 08:53:50 2024 GMT Not After : May 24 08:53:50 2024 GMT Subject: CN=66471b1f-238d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:d9:a6:86:e2:3e:6b:33:f2:ac:e2:b2:ce: 19:f6:4d:fc:8f:e8:8a:9b:45:98:3c:f2:a4:ba:31: 83:58:6d:d6:28:25:5c:85:84:17:9d:5e:9a:3c:d1: 2c:81:7d:53:85:4d:1e:53:4f:a9:cc:b4:67:e7:f5: 05:0a:81:2f:75:d2:77:c1:22:2c:32:25:58:6e:69: 5b:fe:cf:8d:b6:a5:fb:3d:f1:a1:26:11:d1:f1:68: a4:78:94:bd:63:09:46:d8:f4:3b:c8:ab:34:c7:52: 24:89:e6:f4:5a:1a:ad:35:57:e5:3c:32:b3:f3:aa: 8c:b0:a4:4b:9d:f9:0f:50:45:53:5a:7e:66:29:e2: b1:58:1d:bc:49:49:0f:ea:ac:4a:39:a4:78:f4:6b: 1e:2b:9a:33:5b:bc:60:e3:94:71:2e:e4:9c:82:40: 80:09:23:e7:2f:48:44:3f:12:8b:3d:e2:86:ac:54: eb:5f:95:ca:bb:07:13:02:87:04:aa:39:4d:89:3c: 2a:d6:a4:b9:d5:0e:fe:51:36:6b:6c:5c:ab:77:95: 4f:fb:43:f4:c2:47:e6:4b:eb:e5:a0:15:29:b1:22: 41:b0:50:7c:29:74:28:9d:7f:6a:cf:cb:bf:b5:2a: 83:03:3b:c4:e9:7b:46:44:5c:a3:97:71:81:6e:cb: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:86:B8:44:79:36:EB:9D:4D:46:9C:06:C8:9F:E2:6B:5A:75:64 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:dd:b1:71:4b:80:9e:8d:4a:e1:d9:c3:7c:5e:21:b8:5e:8c: 94:95:03:c4:54:1d:4d:3d:c0:03:72:8c:99:68:a2:0b:1c:1b: 0f:c8:65:40:df:7e:0a:14:48:6e:24:72:6b:00:a5:44:d6:bb: e2:aa:0e:ba:94:e6:d9:83:f4:45:3b:06:a1:fe:91:ed:72:9c: 3c:e7:c0:7e:17:42:1d:df:f3:69:79:55:fd:d4:11:21:fd:e0: a1:bb:8a:62:be:22:c3:26:0b:ee:c4:2d:d9:56:88:5f:92:bc: 0f:89:f1:dd:bd:50:25:79:01:b4:2e:11:9a:83:bc:fc:6d:c2: df:c2:00:4d:6f:32:16:8e:6d:24:45:a0:29:c3:ac:4e:0b:2c: 43:16:ef:b7:75:47:da:02:81:87:24:d5:84:b8:64:78:ee:6e: 50:da:d3:21:9a:fb:16:8c:af:ec:cb:23:6a:33:b4:ad:08:52: d4:02:9f:ca:33:d3:45:87:10:0d:48:d3:ef:84:43:5a:01:f0: 78:5d:33:8a:6f:da:96:74:89:3d:c3:2b:d3:9b:4f:37:6c:ba: 5e:69:2d:d5:2c:d9:1a:28:89:33:10:b5:fb:d7:40:25:05:d3: 24:e6:99:bf:2b:17:e0:90:74:7f:6a:de:4c:4b:d9:2c:27:bc: 9d:0f:e4:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTJCMTExMC8GA1UEBRMoMUE0NTI0N0IzQTFCMDI2OTI3MUQ3NDZDNUE1RkFDMDE0 NUZGMzMyMjAeFw0yNDA1MTcwODUzNTBaFw0yNDA1MjQwODUzNTBaMBgxFjAUBgNV BAMTDTY2NDcxYjFmLTIzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfGNmmhuI+azPyrOKyzhn2TfyP6IqbRZg88qS6MYNYbdYoJVyFhBedXpo80SyB fVOFTR5TT6nMtGfn9QUKgS910nfBIiwyJVhuaVv+z422pfs98aEmEdHxaKR4lL1j CUbY9DvIqzTHUiSJ5vRaGq01V+U8MrPzqoywpEud+Q9QRVNafmYp4rFYHbxJSQ/q rEo5pHj0ax4rmjNbvGDjlHEu5JyCQIAJI+cvSEQ/Eos94oasVOtflcq7BxMChwSq OU2JPCrWpLnVDv5RNmtsXKt3lU/7Q/TCR+ZL6+WgFSmxIkGwUHwpdCidf2rPy7+1 KoMDO8Tpe0ZEXKOXcYFuy3CtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNQyGuER5 NuudTUacBsif4mtadWQwHwYDVR0jBBgwFoAUGkUkezobAmknHXRsWl+sAUX/MyIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMkIxLzE5QTgyRjY2RjNC NTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2tVa2V6b2JBbWtuSFhSc1dsLXNBVVhfTXlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MkIxLzE5QTgyRjY2RjNCNTExRUVCMUUyMjMwRUM0RjlBRTAyL0drVWtlem9iQW1r bkhYUnNXbC1zQVVYX015SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGndsXFLgJ6NSuHZw3xeIbhejJSVA8RUHU09wANyjJloogscGw/IZUDf fgoUSG4kcmsApUTWu+KqDrqU5tmD9EU7BqH+ke1ynDznwH4XQh3f82l5Vf3UESH9 4KG7imK+IsMmC+7ELdlWiF+SvA+J8d29UCV5AbQuEZqDvPxtwt/CAE1vMhaObSRF oCnDrE4LLEMW77d1R9oCgYck1YS4ZHjublDa0yGa+xaMr+zLI2oztK0IUtQCn8oz 00WHEA1I0++EQ1oB8HhdM4pv2pZ0iT3DK9ObTzdsul5pLdUs2RooiTMQtfvXQCUF 0yTmmb8rF+CQdH9q3kxL2SwnvJ0P5Gw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:07 2024 by rpki-client on console-ams.rpki-client.org