$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: BYvPbCimPDCa2UPz2jMNvNnDZbZgJLTKnC+XKjaAYBg= Subject key identifier: 32:AF:74:3F:1A:11:05:FA:1A:FA:0C:A4:E6:08:0A:8A:DE:97:B8:46 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 024B Signing time: Fri 03 May 2024 04:02:34 +0000 Manifest this update: Fri 03 May 2024 04:02:34 +0000 Manifest next update: Fri 10 May 2024 04:02:34 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: rFLFpgMPDgGtjIxf5hILiNzw0x0PHEIr/JG1A/K7cgY=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: iwHeauz7WZYDU/Jd2gsJmb5xRInpR2juCJoiZqsMv4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: May 3 04:02:34 2024 GMT Not After : May 10 04:02:34 2024 GMT Subject: CN=663461da-ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:2a:ef:b8:72:95:57:0e:e8:aa:50:18:51: 3a:12:2c:7e:61:a8:d8:0f:dd:62:dd:31:f0:66:99: 14:13:cf:0c:4c:cf:00:58:a3:be:3d:d9:b8:45:31: 67:4b:4f:bf:57:33:d4:43:1d:26:f8:67:ea:0e:20: 56:fb:1c:00:fd:22:bf:36:49:72:c4:de:27:54:61: d5:8a:5a:f0:67:4e:34:4b:22:ef:20:32:98:9e:af: 3c:2f:ab:4b:25:a3:79:d5:32:62:7b:22:0c:ed:d0: f3:b2:e3:45:0e:08:63:34:0f:70:21:93:88:18:8e: 40:74:cb:e9:2a:4c:bf:05:81:ea:86:c5:10:e1:ad: 02:6d:b3:29:4a:0b:28:25:ad:cd:98:e0:29:79:a1: a5:a1:67:54:fb:cb:ac:35:4c:89:e7:c1:8f:cf:b1: 83:c9:33:37:fb:8c:cb:bd:f2:7f:34:32:55:4f:00: 02:51:05:e4:78:01:51:b1:4a:a8:c1:75:0a:65:06: c7:74:7c:5a:0d:3c:d8:a0:a6:7f:12:4c:8e:de:5d: 30:e6:12:2b:0d:51:bd:64:91:f7:eb:29:13:a7:28: 96:bb:af:85:4b:ca:c5:14:58:da:22:d9:d1:6d:42: 1b:7a:3c:6e:f7:fa:df:ab:a7:c2:90:e7:46:ef:68: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AF:74:3F:1A:11:05:FA:1A:FA:0C:A4:E6:08:0A:8A:DE:97:B8:46 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0b:9a:70:87:37:43:5f:42:73:a6:dd:b7:8d:0e:ac:d9:6a: 76:55:36:9e:83:b2:43:e1:2a:3b:b9:f7:45:fa:6a:b0:2e:ea: 39:36:20:af:1c:50:76:cd:ba:60:73:9d:91:93:10:7e:34:db: 73:0a:fa:8c:75:e2:56:07:2a:b0:0c:57:b2:bc:c6:30:3e:1e: 7a:fc:f7:a9:61:1f:d9:2b:61:a0:ad:48:86:ff:c5:98:34:5e: 08:b7:3f:d2:e0:ad:ff:df:a5:90:ae:dd:7a:10:7c:08:29:55: dd:4d:ae:b0:25:46:ac:20:34:b0:fa:fe:53:9c:d7:e9:4c:76: 70:43:89:54:67:bc:db:38:17:2b:76:8c:1e:70:f9:6c:21:37: b4:90:e4:d7:87:73:d9:68:7f:a7:c6:9f:a1:3f:d2:76:45:ae: 61:5f:cf:9f:fd:b2:43:53:00:b6:c6:e7:49:15:10:76:65:be: 96:48:81:a1:5d:ec:76:68:6d:e8:ff:fc:48:8c:f4:c2:db:b6: 13:12:89:e0:49:b9:74:12:b5:28:a9:a3:ee:74:65:de:54:02: 9a:bb:25:f7:72:95:dc:e3:39:31:d7:01:6a:95:7f:d6:8e:f0: e3:e9:9b:76:f8:3d:4f:8a:bd:1f:b3:bf:05:ad:af:1b:2e:86: d6:40:3e:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjQwNTAzMDQwMjM0WhcNMjQwNTEwMDQwMjM0WjAYMRYwFAYD VQQDEw02NjM0NjFkYS1lYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfwq77hylVcO6KpQGFE6Eix+YajYD91i3THwZpkUE88MTM8AWKO+Pdm4RTFn S0+/VzPUQx0m+GfqDiBW+xwA/SK/NklyxN4nVGHVilrwZ040SyLvIDKYnq88L6tL JaN51TJieyIM7dDzsuNFDghjNA9wIZOIGI5AdMvpKky/BYHqhsUQ4a0CbbMpSgso Ja3NmOApeaGloWdU+8usNUyJ58GPz7GDyTM3+4zLvfJ/NDJVTwACUQXkeAFRsUqo wXUKZQbHdHxaDTzYoKZ/EkyO3l0w5hIrDVG9ZJH36ykTpyiWu6+FS8rFFFjaItnR bUIbejxu9/rfq6fCkOdG72hIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKvdD8a EQX6GvoMpOYICorel7hGMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbC5pwhzdDX0Jzpt23jQ6s2Wp2VTaeg7JD4So7ufdF+mqwLuo5NiCv HFB2zbpgc52RkxB+NNtzCvqMdeJWByqwDFeyvMYwPh56/PepYR/ZK2GgrUiG/8WY NF4Itz/S4K3/36WQrt16EHwIKVXdTa6wJUasIDSw+v5TnNfpTHZwQ4lUZ7zbOBcr dowecPlsITe0kOTXh3PZaH+nxp+hP9J2Ra5hX8+f/bJDUwC2xudJFRB2Zb6WSIGh Xex2aG3o//xIjPTC27YTEongSbl0ErUoqaPudGXeVAKauyX3cpXc4zkx1wFqlX/W jvDj6Zt2+D1Pir0fs78Fra8bLobWQD75 -----END CERTIFICATE-----Generated at Fri May 3 04:45:08 2024 by rpki-client on console-fra.rpki-client.org