$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: 5k49D1JGotF6ROrxzQj7abkxINHKO6SZUjcAbR3caKs= Subject key identifier: 57:32:B2:E6:CD:67:B0:79:20:49:06:7B:B0:E9:1E:16:F1:C7:C6:5E Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0A92 Signing time: Thu 02 May 2024 20:18:31 +0000 Manifest this update: Thu 02 May 2024 20:18:31 +0000 Manifest next update: Thu 09 May 2024 20:18:31 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 5Gn6UoOdcri4FbnNN1rcUWMEv5wWOd0DUAQ2Kl9TCK8=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0CVlwWdHMnQ7Gb1e3i5Vmz+DwnzV08tbLlKmynwufrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: May 2 20:18:31 2024 GMT Not After : May 9 20:18:31 2024 GMT Subject: CN=6633f517-ca8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:44:cc:50:a5:6b:16:64:58:5a:e7:7f:1a: 74:7c:32:bb:ee:43:a3:c3:4a:68:1f:b5:f2:bb:a0: ac:e4:24:7f:5e:0b:67:69:a9:a0:f8:7f:8e:67:ca: ef:59:43:fb:8a:db:45:ea:cb:7e:c3:e7:9a:b3:3b: 3f:94:4c:0b:bb:bc:47:5b:6d:57:10:bd:7b:12:7e: 9e:92:aa:3d:ea:4f:9a:fe:b3:26:4a:3d:b0:67:56: cd:f3:a0:18:3f:9c:91:e8:4c:a7:ff:1d:60:99:b4: a9:8a:5c:65:46:64:6f:09:be:d7:13:4f:86:7b:23: e0:7e:a6:a5:cc:ff:60:d6:de:60:83:4f:2c:db:00: 6b:d9:81:bf:03:7d:80:8b:84:4d:7b:d9:04:51:92: f4:0d:85:9c:f1:10:15:e2:e5:bf:ca:13:db:65:35: 59:e5:89:07:68:ab:00:85:74:fc:9a:1d:34:0d:32: aa:9a:47:fb:ad:a8:04:fb:21:8f:f7:3b:4c:0a:69: 82:4c:18:48:14:91:b7:26:31:62:02:36:2a:01:ec: 6b:d8:b7:c5:29:44:8a:56:c3:30:97:d2:5b:83:9a: e1:3c:43:8d:b4:68:2c:38:30:c9:e5:09:ae:fa:c4: ac:6d:57:26:69:a0:9c:8f:c9:67:8e:54:a5:ce:ae: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:32:B2:E6:CD:67:B0:79:20:49:06:7B:B0:E9:1E:16:F1:C7:C6:5E X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f4:ea:75:61:75:e2:bf:c8:ad:cd:90:e5:3f:60:d1:1e:03: 50:e9:76:bf:59:87:d6:dc:bd:3e:8b:f9:95:80:99:de:3c:94: b0:92:12:c7:ea:20:0b:21:25:cc:fb:39:fb:e5:6c:d8:8d:38: d6:6c:81:cf:f0:9b:0e:9a:75:65:48:bc:20:50:74:ee:6e:82: 1b:3b:07:a3:81:25:19:5f:7b:5c:94:56:e3:4a:ed:8a:2f:a8: 5a:8e:4c:ea:20:28:c6:27:02:81:4d:41:27:6b:fd:93:cc:ff: 29:97:65:73:32:84:18:dc:34:93:62:f2:9f:2a:4f:60:04:73: 58:62:5b:1b:9b:93:b1:64:6e:15:dc:f3:bd:04:18:b1:4b:2e: e1:5f:86:68:e8:3d:34:58:38:ec:07:af:37:82:be:fb:e5:d7: 61:e0:3c:6c:8f:aa:a7:3a:18:e6:5c:99:ae:7c:b8:71:d9:9a: 4d:1c:0c:39:82:df:44:a8:ba:b5:08:8a:c0:28:e1:22:b9:b6: e2:c3:00:04:26:50:33:b5:da:a1:e1:47:fa:32:e5:b1:2b:82: c7:60:e1:4f:d3:e4:81:25:1a:c0:55:47:20:07:e2:ef:9b:65: aa:ad:22:e9:63:ee:b8:14:83:2a:b2:9e:ce:e4:7c:52:93:c0: 31:4d:60:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjQwNTAyMjAxODMxWhcNMjQwNTA5MjAxODMxWjAYMRYwFAYD VQQDEw02NjMzZjUxNy1jYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkltEzFClaxZkWFrnfxp0fDK77kOjw0poH7Xyu6Cs5CR/Xgtnaamg+H+OZ8rv WUP7ittF6st+w+easzs/lEwLu7xHW21XEL17En6ekqo96k+a/rMmSj2wZ1bN86AY P5yR6Eyn/x1gmbSpilxlRmRvCb7XE0+GeyPgfqalzP9g1t5gg08s2wBr2YG/A32A i4RNe9kEUZL0DYWc8RAV4uW/yhPbZTVZ5YkHaKsAhXT8mh00DTKqmkf7ragE+yGP 9ztMCmmCTBhIFJG3JjFiAjYqAexr2LfFKUSKVsMwl9Jbg5rhPEONtGgsODDJ5Qmu +sSsbVcmaaCcj8lnjlSlzq7MAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcysubN Z7B5IEkGe7DpHhbxx8ZeMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP9Op1YXXiv8itzZDlP2DRHgNQ6Xa/WYfW3L0+i/mVgJnePJSwkhLH 6iALISXM+zn75WzYjTjWbIHP8JsOmnVlSLwgUHTuboIbOwejgSUZX3tclFbjSu2K L6hajkzqICjGJwKBTUEna/2TzP8pl2VzMoQY3DSTYvKfKk9gBHNYYlsbm5OxZG4V 3PO9BBixSy7hX4Zo6D00WDjsB683gr775ddh4Dxsj6qnOhjmXJmufLhx2ZpNHAw5 gt9EqLq1CIrAKOEiubbiwwAEJlAztdqh4Uf6MuWxK4LHYOFP0+SBJRrAVUcgB+Lv m2WqrSLpY+64FIMqsp7O5HxSk8AxTWBS -----END CERTIFICATE-----Generated at Thu May 2 22:13:15 2024 by rpki-client on console-fra.rpki-client.org