$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft File: sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json) Hash identifier: Wp4Ip9/b7OzYEb0V9l9JkJoZYrCyoAlbpwdzjnOOsgw= Subject key identifier: 89:43:44:C4:FD:31:85:A9:6B:D5:E9:0C:2C:01:B2:77:72:62:3F:2A Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 Certificate issuer: /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft Manifest number: 0600 Signing time: Wed 01 May 2024 00:17:09 +0000 Manifest this update: Wed 01 May 2024 00:17:08 +0000 Manifest next update: Wed 08 May 2024 00:17:08 +0000 Files and hashes: 1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: PorFX6zai0guT9VeicBDWc6e/O8ODog0uJV91kgCEVM=) 2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: EL5OloZJb5XX3wW0IPlf/JxtkXGi8CDCTx5OK4yuKHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5 Validity Not Before: May 1 00:17:08 2024 GMT Not After : May 8 00:17:08 2024 GMT Subject: CN=66318a04-be36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:79:ed:57:44:f6:cd:c2:1c:c3:7d:7c:08: 21:3f:48:c8:0f:52:22:e9:e9:ca:cc:c2:f5:e1:08: 83:d7:f9:f4:65:94:ad:2e:b0:1c:e6:5a:2f:43:8f: 3e:b8:51:02:11:58:58:a8:07:90:57:9f:b4:47:44: 54:0b:e7:af:38:47:53:33:30:31:dd:0c:4b:6e:3f: a4:7e:d3:df:78:db:df:43:c1:a5:03:2c:5f:59:55: 05:21:94:d8:bd:aa:ef:d6:73:9c:4b:0b:de:14:3e: d0:e1:21:c2:e3:05:5e:0b:91:76:b5:9f:de:16:8b: e0:8c:4a:4f:40:90:65:2a:95:d3:18:84:ce:cb:6b: b0:8e:9b:be:06:80:3b:e0:df:a1:9d:88:07:df:7e: 09:3d:14:79:31:dc:5c:ad:d3:a2:4d:e1:5e:6e:2b: c2:2f:9e:fe:eb:2d:da:d0:68:6e:5e:9b:bf:fd:d0: 3d:a7:36:1f:05:1b:41:9e:f3:66:3b:72:24:b1:6e: 1c:fe:32:4b:91:54:c6:97:9b:74:78:29:9c:00:b0: 12:ff:ad:29:40:1b:1a:71:02:f9:e6:44:d2:a0:a9: b6:aa:2c:79:69:28:ad:a6:d5:d4:7b:21:97:0a:2e: 73:79:c4:f8:d0:77:37:f5:aa:a2:9c:ba:20:4a:19: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:44:C4:FD:31:85:A9:6B:D5:E9:0C:2C:01:B2:77:72:62:3F:2A X509v3 Authority Key Identifier: keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:12:e0:88:99:fb:32:de:2c:59:68:6b:f1:f6:0d:0b:8a:66: bc:be:f4:3d:8f:f0:ef:82:c0:8a:43:ce:d9:a1:dd:f5:d8:6c: 77:24:45:a5:0c:82:ae:fc:33:f7:1c:30:32:86:98:66:f2:9a: 9f:cf:81:0d:89:95:07:28:09:40:13:10:3f:4c:b7:b1:a6:59: 09:91:8f:ed:b3:45:02:4a:f9:38:48:e1:0a:cc:51:27:88:48: dd:00:f8:bc:16:40:5f:a8:ae:fc:1a:06:bd:5f:3b:b2:5b:19: 9c:e0:90:34:95:77:ab:52:42:f6:c3:a7:d3:8d:15:77:13:10: 26:c2:9e:cc:5e:3c:0c:21:1d:7f:e1:b2:82:09:97:8a:77:5f: f8:6a:0e:ce:99:64:da:cf:f5:03:40:e4:ed:d0:22:18:c7:3e: 29:d7:28:1e:37:bc:d9:3b:22:af:05:db:f5:8b:3c:ec:b4:ba: 34:46:35:ad:70:81:46:ce:be:d5:1c:17:21:fd:33:67:7c:9b: 37:41:56:0a:45:48:97:67:87:bb:b3:e0:f3:97:90:01:20:16: 3c:e6:d9:6e:48:7a:65:7f:14:7f:d5:9c:95:60:ee:04:f7:e2: 4d:74:b1:b7:68:10:32:d4:e6:89:ef:c9:06:7b:c4:08:c9:62: ab:af:78:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw MDcyNzhDRTUwHhcNMjQwNTAxMDAxNzA4WhcNMjQwNTA4MDAxNzA4WjAYMRYwFAYD VQQDEw02NjMxOGEwNC1iZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58V57VdE9s3CHMN9fAghP0jID1Ii6enKzML14QiD1/n0ZZStLrAc5lovQ48+ uFECEVhYqAeQV5+0R0RUC+evOEdTMzAx3QxLbj+kftPfeNvfQ8GlAyxfWVUFIZTY varv1nOcSwveFD7Q4SHC4wVeC5F2tZ/eFovgjEpPQJBlKpXTGITOy2uwjpu+BoA7 4N+hnYgH334JPRR5MdxcrdOiTeFebivCL57+6y3a0GhuXpu//dA9pzYfBRtBnvNm O3IksW4c/jJLkVTGl5t0eCmcALAS/60pQBsacQL55kTSoKm2qix5aSitptXUeyGX Ci5zecT40Hc39aqinLogShkeSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlDRMT9 MYWpa9XpDCwBsndyYj8qMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2 dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8EuCImfsy3ixZaGvx9g0Lima8vvQ9j/DvgsCKQ87Zod312Gx3JEWl DIKu/DP3HDAyhphm8pqfz4ENiZUHKAlAExA/TLexplkJkY/ts0UCSvk4SOEKzFEn iEjdAPi8FkBfqK78Gga9XzuyWxmc4JA0lXerUkL2w6fTjRV3ExAmwp7MXjwMIR1/ 4bKCCZeKd1/4ag7OmWTaz/UDQOTt0CIYxz4p1ygeN7zZOyKvBdv1izzstLo0RjWt cIFGzr7VHBch/TNnfJs3QVYKRUiXZ4e7s+Dzl5ABIBY85tluSHplfxR/1ZyVYO4E 9+JNdLG3aBAy1OaJ78kGe8QIyWKrr3jg -----END CERTIFICATE-----Generated at Wed May 1 01:04:04 2024 by rpki-client on console-fra.rpki-client.org