$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: 7hhnGa5GwG6QOAm0vBzJj3aNQtJbre0UJ08OSsTnfbo= Subject key identifier: 1A:0C:8A:DE:48:C2:AF:7A:FB:EE:D7:28:60:4D:87:84:44:F9:C1:4D Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 0124 Signing time: Fri 03 May 2024 05:10:36 +0000 Manifest this update: Fri 03 May 2024 05:10:35 +0000 Manifest next update: Fri 10 May 2024 05:10:35 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: KFhwVTT/RVCT6SwVCnXypI10A5pu/sVE0iYgCDjaZd8=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: 6E3sLs/kB+HnBa8nei2eGP8ruohEmSmmLC77smf6NvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: May 3 05:10:35 2024 GMT Not After : May 10 05:10:35 2024 GMT Subject: CN=663471cb-dffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:57:5a:fc:1a:25:db:d1:31:1b:2d:49:ba: e1:f0:e4:6f:b8:14:f9:1c:5e:2c:36:cb:91:0d:7e: 50:1c:8b:b9:14:1c:0b:61:50:be:a0:a6:56:b4:61: 2d:a3:b2:89:b6:c1:72:a7:20:ae:b0:7f:04:47:e8: 37:11:e7:94:af:df:9c:ba:27:01:48:0a:23:dd:86: 92:f9:34:1b:ee:33:5d:19:a1:22:84:0a:8b:2d:bb: f0:1f:2e:73:e1:cb:5c:9c:46:6e:fd:97:cc:c1:24: db:3c:cc:47:7b:52:6f:ed:02:ed:d3:59:68:5f:14: 2b:7c:26:0a:5d:c3:a1:3a:25:82:0b:e8:52:63:e9: 24:cd:d3:dc:bc:96:43:26:50:17:96:ce:66:9f:72: ec:ac:a8:9f:eb:ea:60:ce:c3:81:22:79:48:e4:fa: 33:93:ca:f1:46:2d:3f:87:81:62:4d:c6:e7:2c:78: 14:26:12:c0:a5:35:ed:4d:b6:0e:84:09:4c:a5:3b: 07:80:44:17:a1:32:52:3c:cd:d6:76:3d:be:d8:d4: 62:71:5d:f7:91:61:c8:d3:96:ae:eb:e2:5f:54:69: 01:13:ae:38:aa:90:2c:d7:d5:16:27:fc:a5:44:2f: 97:97:4e:b2:33:e4:99:96:6a:67:73:c9:60:5c:3c: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0C:8A:DE:48:C2:AF:7A:FB:EE:D7:28:60:4D:87:84:44:F9:C1:4D X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:5b:4b:31:18:da:99:89:02:f1:26:0f:60:2b:3e:52:2f: 10:a9:85:78:bc:ac:d5:5f:f1:42:18:84:ab:97:a8:70:12:f9: 51:73:ee:b1:82:b8:33:a2:85:2a:7a:da:64:08:07:a7:41:91: 7b:b2:66:ab:65:db:64:af:7c:87:e8:3d:3f:9d:16:21:c2:0a: e5:ab:ce:de:e7:b7:7b:65:ed:ef:f2:33:14:1a:d2:05:94:1a: 4a:54:68:6d:89:0b:7e:b0:a0:df:40:c3:f2:c7:c9:8b:d0:76: 52:2b:75:56:ee:35:72:33:cd:cc:9c:b5:8b:a7:59:69:72:fe: 32:bd:31:5a:c6:5b:02:2a:38:24:03:a8:ff:60:ff:ad:46:d8: 6f:d6:c0:7e:9e:76:f1:0a:db:a9:af:82:03:ab:66:d1:01:4a: 82:66:c0:93:cc:90:1e:a2:dc:3e:87:57:b6:af:26:ce:ff:4d: 29:93:72:41:52:73:dc:d0:16:54:cb:7d:92:11:1a:0f:a1:04: 0a:e2:41:31:a8:cf:6c:c7:17:c4:2f:61:92:b4:50:b1:56:49: 39:73:8d:b2:bd:24:f8:86:ab:56:2e:ec:37:7c:16:bd:0f:3f: eb:62:eb:25:8e:6c:54:fd:24:77:7f:f6:a9:2f:bd:9d:c9:1e: ac:8e:58:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjQwNTAzMDUxMDM1WhcNMjQwNTEwMDUxMDM1WjAYMRYwFAYD VQQDEw02NjM0NzFjYi1kZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncBXWvwaJdvRMRstSbrh8ORvuBT5HF4sNsuRDX5QHIu5FBwLYVC+oKZWtGEt o7KJtsFypyCusH8ER+g3EeeUr9+cuicBSAoj3YaS+TQb7jNdGaEihAqLLbvwHy5z 4ctcnEZu/ZfMwSTbPMxHe1Jv7QLt01loXxQrfCYKXcOhOiWCC+hSY+kkzdPcvJZD JlAXls5mn3LsrKif6+pgzsOBInlI5Pozk8rxRi0/h4FiTcbnLHgUJhLApTXtTbYO hAlMpTsHgEQXoTJSPM3Wdj2+2NRicV33kWHI05au6+JfVGkBE644qpAs19UWJ/yl RC+Xl06yM+SZlmpnc8lgXDxR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoMit5I wq96++7XKGBNh4RE+cFNMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGvVtLMRjamYkC8SYPYCs+Ui8QqYV4vKzVX/FCGISrl6hwEvlRc+6x grgzooUqetpkCAenQZF7smarZdtkr3yH6D0/nRYhwgrlq87e57d7Ze3v8jMUGtIF lBpKVGhtiQt+sKDfQMPyx8mL0HZSK3VW7jVyM83MnLWLp1lpcv4yvTFaxlsCKjgk A6j/YP+tRthv1sB+nnbxCtupr4IDq2bRAUqCZsCTzJAeotw+h1e2rybO/00pk3JB UnPc0BZUy32SERoPoQQK4kExqM9sxxfEL2GStFCxVkk5c42yvST4hqtWLuw3fBa9 Dz/rYusljmxU/SR3f/apL72dyR6sjliT -----END CERTIFICATE-----Generated at Fri May 3 06:28:36 2024 by rpki-client on console-fra.rpki-client.org