$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: jZ2Gq++oK0TIdai9tuyIfrX3BsTc9TRC3dhqUItt6cU= Subject key identifier: 46:99:E2:E3:88:E2:81:66:DA:4C:01:41:31:7F:7F:CA:0A:DB:2B:17 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 33B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 33B4 Signing time: Tue 30 Apr 2024 15:33:40 +0000 Manifest this update: Tue 30 Apr 2024 15:33:40 +0000 Manifest next update: Tue 07 May 2024 15:33:40 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: 9Z0HJZ76pxM0zoELmcUGqqMs1CCp7KI1Ls9REJvOyNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13236 (0x33b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: Apr 30 15:33:40 2024 GMT Not After : May 7 15:33:40 2024 GMT Subject: CN=66310f54-7b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:f4:b3:66:8c:3f:a7:95:aa:f9:b6:05:67: e9:8a:41:84:bd:2d:24:ac:39:6f:f9:19:21:79:56: 97:35:03:5c:46:33:75:3b:a5:9a:4b:c6:a2:09:86: 61:a5:df:d2:67:93:00:8a:a7:68:bb:86:97:6c:89: af:83:90:66:20:f3:2e:d9:a2:c5:11:a8:24:b1:9f: 7d:39:3c:14:f3:28:62:0c:d9:9f:18:01:0c:b3:1e: ce:66:b0:62:5d:df:b3:f6:f7:44:f5:8c:5f:32:f0: 9d:57:6f:76:4a:b8:11:12:0b:f3:3d:ac:bc:9a:15: ca:4a:b6:29:fb:bd:ae:33:03:0a:f8:90:79:81:c1: 63:65:ac:34:a1:94:e2:92:ec:92:1c:e1:04:01:1e: 7e:ad:79:78:35:73:7c:6a:ff:60:00:01:51:df:ea: fc:1c:73:7c:98:38:72:50:97:61:78:8d:4c:f5:d3: e0:3c:dc:83:5b:6f:af:51:30:43:13:24:2c:55:a2: 1a:35:c7:46:dd:c2:dd:4d:7f:2e:57:fc:1b:d6:3e: 84:64:35:e0:a9:04:43:ef:2d:ef:0c:9b:9d:9e:17: 37:7e:2b:7f:fb:2e:86:74:62:ff:64:b5:3e:a9:de: dc:3d:05:20:ec:4f:e4:89:35:a6:d1:1f:01:ed:5d: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:99:E2:E3:88:E2:81:66:DA:4C:01:41:31:7F:7F:CA:0A:DB:2B:17 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:28:fb:ce:b2:78:f6:fe:4e:35:34:4c:aa:e8:23:8d:e8: e2:28:a9:54:7c:8b:f3:0c:2d:69:ba:8b:2b:6b:7a:b6:5e:9f: 65:f4:df:4a:a3:c6:21:44:41:44:94:4a:87:6a:ff:a5:6c:f0: 3a:01:6e:17:3d:f7:08:64:55:81:9d:5a:c2:51:52:da:93:de: 68:44:5d:b8:81:7f:67:f0:47:3e:14:a0:73:94:11:5e:5c:d9: ce:da:ac:b4:ce:5a:ca:7e:53:de:f4:3f:1e:fd:ec:b5:3d:4e: 12:60:22:e1:57:20:23:9b:07:aa:4b:e2:23:96:aa:15:81:11: a4:8d:de:4f:75:08:f2:11:a6:7e:b0:c1:55:08:38:66:69:65: e5:98:a1:3c:b8:cf:d1:08:f4:4b:12:2e:37:b1:a5:a4:d4:1a: bd:7e:aa:28:ac:74:28:a5:d5:32:2e:8d:8a:bb:8c:79:87:c5: ca:bf:30:2f:a7:b2:5b:c8:da:ba:1f:f4:82:26:8f:29:39:a0: 36:89:2b:a2:8a:3b:9d:51:05:0f:2b:82:0a:e1:ad:48:a4:13: 2c:ab:81:c7:63:b4:24:0e:ce:74:89:32:fb:03:35:5c:bf:16: 02:5f:05:e0:6c:e7:05:ac:3d:84:60:bc:03:41:b1:6d:8b:2d: de:e6:59:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjQwNDMwMTUzMzQwWhcNMjQwNTA3MTUzMzQwWjAYMRYwFAYD VQQDEw02NjMxMGY1NC03Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDD0s2aMP6eVqvm2BWfpikGEvS0krDlv+RkheVaXNQNcRjN1O6WaS8aiCYZh pd/SZ5MAiqdou4aXbImvg5BmIPMu2aLFEagksZ99OTwU8yhiDNmfGAEMsx7OZrBi Xd+z9vdE9YxfMvCdV292SrgREgvzPay8mhXKSrYp+72uMwMK+JB5gcFjZaw0oZTi kuySHOEEAR5+rXl4NXN8av9gAAFR3+r8HHN8mDhyUJdheI1M9dPgPNyDW2+vUTBD EyQsVaIaNcdG3cLdTX8uV/wb1j6EZDXgqQRD7y3vDJudnhc3fit/+y6GdGL/ZLU+ qd7cPQUg7E/kiTWm0R8B7V18MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaZ4uOI 4oFm2kwBQTF/f8oK2ysXMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzij7zrJ49v5ONTRMqugjjejiKKlUfIvzDC1puosra3q2Xp9l9N9K o8YhREFElEqHav+lbPA6AW4XPfcIZFWBnVrCUVLak95oRF24gX9n8Ec+FKBzlBFe XNnO2qy0zlrKflPe9D8e/ey1PU4SYCLhVyAjmweqS+IjlqoVgRGkjd5PdQjyEaZ+ sMFVCDhmaWXlmKE8uM/RCPRLEi43saWk1Bq9fqoorHQopdUyLo2Ku4x5h8XKvzAv p7JbyNq6H/SCJo8pOaA2iSuiijudUQUPK4IK4a1IpBMsq4HHY7QkDs50iTL7AzVc vxYCXwXgbOcFrD2EYLwDQbFtiy3e5lkn -----END CERTIFICATE-----Generated at Tue Apr 30 18:56:55 2024 by rpki-client on console-fra.rpki-client.org