$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: 7CBv4Q8CHV4a5REfu9kjtbgNgh/txVu9Tj7aopKlGdQ= Subject key identifier: 6E:4B:52:E0:BC:F3:24:68:1E:8A:61:21:F6:E8:5F:42:80:D0:AA:8A Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 0311 Signing time: Tue 07 May 2024 03:08:21 +0000 Manifest this update: Tue 07 May 2024 03:08:21 +0000 Manifest next update: Tue 14 May 2024 03:08:21 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: RxmIcd20MT8Yu8FSEPIY/Qxj46rhn37va9gc1DIap9g=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: 1bNj00utl01JZwmdk6t3gkdScIvjc34rDYPrm1BEcP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: May 7 03:08:21 2024 GMT Not After : May 14 03:08:21 2024 GMT Subject: CN=66399b25-2ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:fa:88:b8:ad:77:1e:1b:1d:f5:fe:2e:8e: 0d:0e:e2:7a:77:2a:25:23:b6:87:3a:04:11:0d:b8: ad:d2:73:b3:ff:54:68:bf:e0:11:47:33:71:46:cd: 53:8b:2a:1a:a2:8a:10:2a:76:77:67:06:4c:9e:5f: f0:60:92:89:a4:94:17:c6:86:73:65:58:df:1a:90: 5f:4c:58:ec:7c:35:00:04:2f:45:ff:50:35:cc:97: 83:02:50:2a:68:31:a5:17:93:0f:f3:c5:d9:ae:98: 77:36:aa:db:d4:3d:f7:72:45:15:69:80:d8:c0:fd: c1:64:35:8e:e0:91:d8:9d:b8:9e:c9:f5:36:03:af: 13:4d:c3:a6:7b:73:81:36:47:93:c3:75:14:c3:68: 97:43:65:e0:5f:36:6f:89:6f:4d:69:8b:7b:38:50: ca:9f:1c:83:d5:81:ee:9c:00:2d:1b:40:5c:20:22: 0d:bb:d0:c6:28:15:9e:c6:ab:b1:7c:51:03:d2:4c: a7:92:f7:a6:b7:14:1f:4d:cd:84:93:42:67:d4:88: b0:c3:70:83:7a:f9:50:37:e6:ef:57:02:4e:39:e4: 23:74:fd:95:92:84:a7:d5:1f:09:6e:89:db:b6:ac: 35:8d:0d:bd:25:e5:95:1b:37:12:0f:7b:39:c6:82: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4B:52:E0:BC:F3:24:68:1E:8A:61:21:F6:E8:5F:42:80:D0:AA:8A X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ab:77:72:9c:0a:bf:99:91:53:b1:6c:07:22:53:19:f8:11: 77:48:27:e5:49:3a:86:bb:b7:58:df:a1:0c:7e:21:4b:9a:ac: da:83:e1:3f:ec:c8:28:96:c9:1a:de:98:93:d5:f9:8c:6a:d4: 0b:f4:37:8c:1e:8f:a8:a0:a0:be:c1:69:6d:da:94:2f:26:52: ec:a4:ac:9d:26:f8:5e:69:7e:42:04:85:6c:57:49:14:a2:f6: b3:e1:08:95:3f:bc:f6:5b:11:5e:04:01:9e:cf:d0:66:ac:ed: 9d:4c:28:a6:ee:9b:48:ab:4f:1d:24:de:a6:e3:07:b5:86:a4: e0:9c:97:73:91:49:56:75:f2:3c:37:ae:19:3f:22:a2:1c:39: 22:c2:f7:cb:11:44:e6:ec:fd:be:ec:9a:33:72:75:ee:fc:fc: 6b:04:35:72:1a:13:8d:d9:60:26:c4:83:e0:35:18:f4:b2:10: c8:66:d7:2f:40:7b:82:49:bc:25:f0:7c:20:df:8e:68:fd:97: 4e:f5:d3:f1:46:30:a6:4c:84:3b:97:eb:a8:e1:09:81:35:1f: 04:3e:80:47:5b:c1:f0:5e:05:1b:db:59:56:84:1a:68:01:40: 06:41:30:8a:e6:94:1c:07:9a:01:d7:0e:76:10:47:af:59:5a: 6f:cf:00:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjQwNTA3MDMwODIxWhcNMjQwNTE0MDMwODIxWjAYMRYwFAYD VQQDEw02NjM5OWIyNS0yYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJD6iLitdx4bHfX+Lo4NDuJ6dyolI7aHOgQRDbit0nOz/1Rov+ARRzNxRs1T iyoaoooQKnZ3ZwZMnl/wYJKJpJQXxoZzZVjfGpBfTFjsfDUABC9F/1A1zJeDAlAq aDGlF5MP88XZrph3Nqrb1D33ckUVaYDYwP3BZDWO4JHYnbieyfU2A68TTcOme3OB NkeTw3UUw2iXQ2XgXzZviW9NaYt7OFDKnxyD1YHunAAtG0BcICINu9DGKBWexqux fFED0kynkvemtxQfTc2Ek0Jn1Iiww3CDevlQN+bvVwJOOeQjdP2VkoSn1R8Jbonb tqw1jQ29JeWVGzcSD3s5xoIwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5LUuC8 8yRoHophIfboX0KA0KqKMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZq3dynAq/mZFTsWwHIlMZ+BF3SCflSTqGu7dY36EMfiFLmqzag+E/ 7Mgolska3piT1fmMatQL9DeMHo+ooKC+wWlt2pQvJlLspKydJvheaX5CBIVsV0kU ovaz4QiVP7z2WxFeBAGez9BmrO2dTCim7ptIq08dJN6m4we1hqTgnJdzkUlWdfI8 N64ZPyKiHDkiwvfLEUTm7P2+7JozcnXu/PxrBDVyGhON2WAmxIPgNRj0shDIZtcv QHuCSbwl8Hwg345o/ZdO9dPxRjCmTIQ7l+uo4QmBNR8EPoBHW8HwXgUb21lWhBpo AUAGQTCK5pQcB5oB1w52EEevWVpvzwAN -----END CERTIFICATE-----Generated at Tue May 7 03:49:58 2024 by rpki-client on console-ams.rpki-client.org