$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: 2zukiz1RZh4n05EOQiSeize0cS3pKbx49IohYyzdG54= Subject key identifier: 6D:D5:A1:84:D3:70:DD:1C:26:9F:74:DA:14:1A:0D:19:D1:BD:95:CE Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: E1 Signing time: Fri 03 May 2024 05:58:28 +0000 Manifest this update: Fri 03 May 2024 05:58:27 +0000 Manifest next update: Fri 10 May 2024 05:58:27 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: 5HdEn5FsXZuVuX9v1wE7QZmzCXb1AxPgcoXf8mkmkjI=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: 9pZw51RMY8f+N/Au2Y/vvtY+MBxGFT8ZPDNyzQSdAP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: May 3 05:58:27 2024 GMT Not After : May 10 05:58:27 2024 GMT Subject: CN=66347d03-8a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:97:b0:9b:8c:ff:81:06:c5:b2:c0:70:84: f1:92:3c:50:b3:c7:dc:51:5f:4c:b8:e9:d1:89:93: f8:90:bb:8d:39:6a:1e:f8:c2:94:6d:d7:b9:f2:7e: 65:d8:d7:50:95:0f:9f:94:37:cf:5c:17:8f:c1:8b: 13:9d:6b:e4:dc:b1:cd:6e:62:96:b7:1d:da:1c:34: f7:d9:b0:f2:cb:a3:bd:08:3d:28:e8:7b:a5:31:88: 7b:c9:f9:25:0e:53:01:61:59:e3:f6:93:ad:aa:cb: 77:fe:d9:52:57:45:ab:eb:47:64:c5:7e:98:51:27: a6:bb:a9:75:d2:aa:ee:94:fe:bc:9d:6e:df:9a:b4: b7:ca:e3:1f:a0:d6:41:0b:aa:dd:2a:68:65:30:80: 9b:4f:bf:d7:92:88:a2:83:7a:37:d0:7f:a4:e6:e7: b5:0a:f5:21:86:fe:13:46:c0:78:ee:9e:1b:be:73: fd:f5:c6:c1:9c:b6:ea:f2:10:d7:13:19:4f:fb:80: cc:bb:4d:ff:6d:2a:b0:69:fe:58:9f:de:38:91:5b: 01:23:0c:89:ff:7c:bf:b6:74:ca:e8:34:b4:8a:c8: 73:cf:17:40:2c:f1:47:4a:91:69:e2:82:a2:52:2f: 54:8f:ce:f7:0f:79:d5:74:70:65:be:ef:67:0f:d7: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D5:A1:84:D3:70:DD:1C:26:9F:74:DA:14:1A:0D:19:D1:BD:95:CE X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:eb:90:c8:c8:49:ae:90:63:cd:99:37:88:b3:80:68:57: 3e:d3:9e:10:49:80:1b:e4:cb:a7:1e:9f:57:e1:1f:64:eb:1e: f1:25:1c:b9:4f:3a:12:65:46:cf:ed:43:90:2c:19:09:ef:38: 60:ce:08:61:73:96:a4:78:c9:5f:41:b8:3c:ea:3a:8f:4d:3b: 99:fe:78:bb:5a:8b:71:8b:11:74:68:06:26:16:3f:b1:db:ec: 2e:0c:42:e1:55:e2:89:21:68:08:da:1d:f4:fc:06:ad:7c:d0: 14:af:38:d5:13:ad:59:a6:e0:01:a9:51:45:87:c4:2f:a8:08: 31:bf:a0:78:f2:b2:e7:79:ae:d7:a5:64:15:b4:15:1c:69:68: 75:94:49:32:df:28:49:48:aa:c7:88:65:e7:03:87:e0:da:65: 36:4f:6a:10:14:d0:19:8d:e6:09:0f:d9:0f:f3:cd:23:53:63: 39:bf:c1:2b:4d:56:d1:6c:83:38:1c:a3:14:5a:39:72:b1:c7: cc:0c:90:cd:ec:85:c5:23:e2:8b:59:90:25:29:1f:ab:dd:55: 3d:00:2a:b2:01:ac:cd:ca:da:38:40:c5:84:7a:65:83:56:2c: 28:cd:95:34:f6:54:55:fa:03:cf:b1:4f:94:86:05:4e:52:50: a7:96:c2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjQwNTAzMDU1ODI3WhcNMjQwNTEwMDU1ODI3WjAYMRYwFAYD VQQDEw02NjM0N2QwMy04YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSaXsJuM/4EGxbLAcITxkjxQs8fcUV9MuOnRiZP4kLuNOWoe+MKUbde58n5l 2NdQlQ+flDfPXBePwYsTnWvk3LHNbmKWtx3aHDT32bDyy6O9CD0o6HulMYh7yfkl DlMBYVnj9pOtqst3/tlSV0Wr60dkxX6YUSemu6l10qrulP68nW7fmrS3yuMfoNZB C6rdKmhlMICbT7/Xkoiig3o30H+k5ue1CvUhhv4TRsB47p4bvnP99cbBnLbq8hDX ExlP+4DMu03/bSqwaf5Yn944kVsBIwyJ/3y/tnTK6DS0ishzzxdALPFHSpFp4oKi Ui9Uj873D3nVdHBlvu9nD9clDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3VoYTT cN0cJp902hQaDRnRvZXOMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcj+uQyMhJrpBjzZk3iLOAaFc+054QSYAb5MunHp9X4R9k6x7xJRy5 TzoSZUbP7UOQLBkJ7zhgzghhc5akeMlfQbg86jqPTTuZ/ni7WotxixF0aAYmFj+x 2+wuDELhVeKJIWgI2h30/AatfNAUrzjVE61ZpuABqVFFh8QvqAgxv6B48rLnea7X pWQVtBUcaWh1lEky3yhJSKrHiGXnA4fg2mU2T2oQFNAZjeYJD9kP880jU2M5v8Er TVbRbIM4HKMUWjlyscfMDJDN7IXFI+KLWZAlKR+r3VU9ACqyAazNyto4QMWEemWD ViwozZU09lRV+gPPsU+UhgVOUlCnlsKG -----END CERTIFICATE-----Generated at Fri May 3 06:28:39 2024 by rpki-client on console-fra.rpki-client.org