$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json) Hash identifier: pz8v8w3GVRRVUop1IRfhL9q0uwEj1Sb5nnRBE6saPCI= Subject key identifier: 3D:D4:EB:97:65:26:C2:C2:43:15:A8:8A:02:15:BB:DA:18:CA:84:98 Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft Manifest number: 0834 Signing time: Mon 06 May 2024 21:52:20 +0000 Manifest this update: Mon 06 May 2024 21:52:19 +0000 Manifest next update: Mon 13 May 2024 21:52:19 +0000 Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: iBUNd9+US3f6/YH0H5ZJ9hoDoYS2z7s34NtuLXzjFcE=) 2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: AhV20TOfrv9vpaINNSPFdetVn3yi8Rq+Sxx63x5SsR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: May 6 21:52:19 2024 GMT Not After : May 13 21:52:19 2024 GMT Subject: CN=66395113-e2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:85:8e:34:80:e9:82:95:a0:b5:c0:e1:b0: 4a:0f:52:43:f0:76:9a:b5:56:d0:01:b5:d7:da:78: d8:70:8a:cd:aa:45:30:68:5f:f2:3d:c7:65:9b:4d: 87:bd:5c:45:0c:51:c0:91:08:60:b6:2e:f7:44:e2: bd:dc:00:f5:ec:6c:3e:da:c0:80:85:a0:6d:c9:68: e6:33:0d:e7:a8:65:44:f4:85:5d:12:ef:6d:fe:cd: e5:13:13:7d:9c:33:f4:01:0b:59:30:35:37:dd:39: 90:5f:ce:e9:db:c4:1c:fa:94:17:d0:ee:47:d9:2d: fe:96:be:0c:c9:ca:87:1f:8c:c9:91:ac:66:6e:ec: 13:9b:20:5a:ec:7e:ff:bc:d2:ea:ab:09:01:7c:98: 5d:1e:02:80:00:e9:ce:02:7e:06:27:e1:72:ca:78: 4c:69:2c:c0:4c:16:8a:bd:dd:ad:e3:16:b8:01:d1: 75:e8:58:28:25:d7:2b:60:fc:3c:d4:4b:c7:c5:f3: 95:2a:a4:aa:10:d6:b4:c7:1c:1e:9a:5c:b2:f6:c0: 8d:fa:ec:f7:34:a5:2e:87:fb:6e:f4:10:88:56:37: 90:ce:c7:68:aa:b8:85:c6:9a:5f:bd:e6:b5:10:f2: 29:01:36:1e:69:15:c1:06:ea:84:30:9b:cf:b9:1e: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D4:EB:97:65:26:C2:C2:43:15:A8:8A:02:15:BB:DA:18:CA:84:98 X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4e:03:11:cf:82:ad:ef:a5:cf:e5:c1:ac:06:6b:5f:21:15: 90:05:70:26:cb:e2:e6:7d:2a:7a:85:35:23:8a:85:91:20:ef: 30:39:32:c1:e5:85:ca:ff:2c:69:a0:e8:8b:42:08:61:92:90: 7d:62:ed:c8:0b:30:cf:0a:eb:24:ff:7c:e3:d9:d4:9c:e6:bf: 8b:38:8c:7b:b5:47:c5:e6:01:1b:c0:f0:08:90:01:e2:85:d2: 6e:3b:25:9d:07:92:6e:6b:0d:26:12:f9:b5:76:4b:32:24:b0: 3c:b1:59:a6:5b:66:b0:74:e2:0e:d8:10:17:00:ce:b5:10:cb: d9:ef:9c:72:40:bc:68:1d:dc:8e:3f:67:6e:7c:7b:2f:c7:0c: 45:39:aa:2f:b1:b7:84:de:47:50:27:a6:74:cd:d0:f3:3a:c2: eb:c1:e6:b9:e4:52:d6:0b:57:38:a3:ca:27:46:1a:5b:15:c1: 79:52:8c:e1:7e:21:90:99:50:24:2a:6e:97:da:e9:63:cb:da: 37:8e:8a:d1:66:44:4f:ae:3f:c7:48:3e:4c:70:42:3e:ed:da: a5:15:68:cd:bc:60:eb:31:8d:7e:04:e5:3d:6f:b6:df:a9:63: cf:bb:79:87:36:62:9b:ec:8b:84:c4:ec:f4:36:e7:7f:91:e7: 31:74:0b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjQwNTA2MjE1MjE5WhcNMjQwNTEzMjE1MjE5WjAYMRYwFAYD VQQDEw02NjM5NTExMy1lMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp06FjjSA6YKVoLXA4bBKD1JD8HaatVbQAbXX2njYcIrNqkUwaF/yPcdlm02H vVxFDFHAkQhgti73ROK93AD17Gw+2sCAhaBtyWjmMw3nqGVE9IVdEu9t/s3lExN9 nDP0AQtZMDU33TmQX87p28Qc+pQX0O5H2S3+lr4MycqHH4zJkaxmbuwTmyBa7H7/ vNLqqwkBfJhdHgKAAOnOAn4GJ+FyynhMaSzATBaKvd2t4xa4AdF16FgoJdcrYPw8 1EvHxfOVKqSqENa0xxwemlyy9sCN+uz3NKUuh/tu9BCIVjeQzsdoqriFxppfvea1 EPIpATYeaRXBBuqEMJvPuR51gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3U65dl JsLCQxWoigIVu9oYyoSYMB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzAwNS84Q0E2ODI3NkFBRTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9N ZjZmWHE1bUoyaU5EM3RMQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXTgMRz4Kt76XP5cGsBmtfIRWQBXAmy+LmfSp6hTUjioWRIO8wOTLB 5YXK/yxpoOiLQghhkpB9Yu3ICzDPCusk/3zj2dSc5r+LOIx7tUfF5gEbwPAIkAHi hdJuOyWdB5Juaw0mEvm1dksyJLA8sVmmW2awdOIO2BAXAM61EMvZ75xyQLxoHdyO P2dufHsvxwxFOaovsbeE3kdQJ6Z0zdDzOsLrwea55FLWC1c4o8onRhpbFcF5Uozh fiGQmVAkKm6X2uljy9o3jorRZkRPrj/HSD5McEI+7dqlFWjNvGDrMY1+BOU9b7bf qWPPu3mHNmKb7IuExOz0Nud/kecxdAta -----END CERTIFICATE-----Generated at Mon May 6 23:05:35 2024 by rpki-client on console-fra.rpki-client.org