$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: M2TTGGbgs8+G5Fbxfr8/BOsnzv0EVLwdbdFJqxkYmng= Subject key identifier: D1:45:7B:EB:B0:11:3F:F5:6F:EF:82:F5:AC:D4:70:31:F0:5E:B0:18 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 058F Signing time: Fri 03 May 2024 00:35:20 +0000 Manifest this update: Fri 03 May 2024 00:35:20 +0000 Manifest next update: Fri 10 May 2024 00:35:20 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: r0YBCLqPRvOMuJnWmfdUid7fFsxU/EtnbPkkM8Wah+s=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: ygu/teShuRAARLfnHY0MVr7IThbUwZUoVSpw0+Yx1As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: May 3 00:35:20 2024 GMT Not After : May 10 00:35:20 2024 GMT Subject: CN=66343148-3de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:d4:8a:1c:67:2c:4e:b3:7c:85:7b:31:58: 7e:f0:78:5b:b6:b7:4f:52:2e:96:68:1b:02:c9:df: bd:cc:80:dc:9e:28:68:63:9b:32:59:c5:84:82:11: 69:54:5c:b5:ad:41:84:ec:09:57:00:db:48:2b:1e: 3a:24:8c:44:a2:97:7c:7e:49:42:85:b5:79:17:18: 74:4a:cc:f6:e7:40:29:11:ea:d2:3b:0a:5d:54:4c: dc:aa:e5:6f:73:72:7d:9a:16:6b:63:e9:3c:ae:b2: f9:13:8d:4e:2d:36:12:26:1d:d0:a5:86:e1:43:d1: 65:cb:f2:68:81:37:9d:a4:e8:f1:de:64:9c:f7:67: 92:37:3f:44:ca:43:fd:87:68:56:e2:17:05:ed:4c: 38:b1:d3:28:49:a4:e7:2e:f6:91:1d:cf:c5:39:43: 20:09:9e:d2:c6:24:82:8b:d0:bb:6c:c3:d9:cd:25: b3:c2:ed:39:c4:e6:51:76:d7:1f:38:ff:11:09:4f: e0:16:58:b1:27:3f:10:51:55:16:d8:c9:67:ad:98: 64:0e:ae:d9:6c:40:e5:9b:af:79:32:1d:67:e4:cf: ae:a4:71:fb:3e:e8:74:f3:72:6e:99:c4:0a:49:d6: 87:e1:6d:97:0a:17:d4:0e:e4:20:86:0d:03:01:76: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:7B:EB:B0:11:3F:F5:6F:EF:82:F5:AC:D4:70:31:F0:5E:B0:18 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2c:83:6d:5c:ca:d1:94:b2:c6:57:3b:cc:1b:f7:e0:c5:9f: c4:3c:25:df:f8:1d:b4:a5:ae:fc:ff:4e:08:90:21:35:01:bf: 9a:1f:b2:d3:96:6a:c1:65:02:fd:69:81:6d:9f:37:d8:07:1a: cd:44:73:97:04:de:a0:14:32:98:10:bd:fa:5f:58:59:f7:29: 1c:ce:ee:f4:f1:87:12:a4:85:85:9c:97:36:eb:2e:a0:14:cd: d6:df:0c:39:d7:a9:8d:dd:81:1d:4c:ac:64:1e:45:b5:a1:7f: 1e:9e:fb:43:34:69:cb:99:94:f4:bf:9b:d3:2e:90:10:9c:9e: e8:36:b5:b1:ab:88:c0:85:5c:f8:51:16:18:14:15:be:19:28: 93:6a:78:6d:15:e1:34:de:6a:49:65:f2:76:cb:56:f8:c0:ba: 22:ce:9c:7f:e5:11:67:f8:0e:e2:5e:4d:0e:94:4f:e6:6b:a5: dd:30:42:00:e9:cf:6e:cb:d5:81:ab:f1:45:94:7f:c6:43:ff: 2b:d9:aa:2c:01:61:0d:b3:07:88:47:5e:02:d7:59:f0:59:6e: c4:ba:01:13:62:95:fc:e3:9e:f6:3b:41:aa:42:0f:de:09:e5: 18:a6:f3:95:29:fb:f7:46:13:83:2f:1f:bc:bd:41:be:fa:75: 58:fa:95:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjQwNTAzMDAzNTIwWhcNMjQwNTEwMDAzNTIwWjAYMRYwFAYD VQQDEw02NjM0MzE0OC0zZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KvUihxnLE6zfIV7MVh+8HhbtrdPUi6WaBsCyd+9zIDcnihoY5syWcWEghFp VFy1rUGE7AlXANtIKx46JIxEopd8fklChbV5Fxh0Ssz250ApEerSOwpdVEzcquVv c3J9mhZrY+k8rrL5E41OLTYSJh3QpYbhQ9Fly/JogTedpOjx3mSc92eSNz9EykP9 h2hW4hcF7Uw4sdMoSaTnLvaRHc/FOUMgCZ7SxiSCi9C7bMPZzSWzwu05xOZRdtcf OP8RCU/gFlixJz8QUVUW2MlnrZhkDq7ZbEDlm695Mh1n5M+upHH7Puh083JumcQK SdaH4W2XChfUDuQghg0DAXaeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFFe+uw ET/1b++C9azUcDHwXrAYMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKLINtXMrRlLLGVzvMG/fgxZ/EPCXf+B20pa78/04IkCE1Ab+aH7LT lmrBZQL9aYFtnzfYBxrNRHOXBN6gFDKYEL36X1hZ9ykczu708YcSpIWFnJc26y6g FM3W3ww516mN3YEdTKxkHkW1oX8envtDNGnLmZT0v5vTLpAQnJ7oNrWxq4jAhVz4 URYYFBW+GSiTanhtFeE03mpJZfJ2y1b4wLoizpx/5RFn+A7iXk0OlE/ma6XdMEIA 6c9uy9WBq/FFlH/GQ/8r2aosAWENsweIR14C11nwWW7EugETYpX84572O0GqQg/e CeUYpvOVKfv3RhODLx+8vUG++nVY+pUh -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org