$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: XysJoEa9Snpwu300OwEVHRm1J/Q1kllRMoFIoVZh9+Q= Subject key identifier: A2:AB:B5:06:75:2A:F3:84:40:24:32:30:07:9B:D2:85:D9:12:7D:70 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 0732 Signing time: Mon 06 May 2024 22:30:52 +0000 Manifest this update: Mon 06 May 2024 22:30:52 +0000 Manifest next update: Mon 13 May 2024 22:30:52 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: 1Fon/eBhI8xUhBu01MLmwiFNEBtHE4xWKL/ZtAvYEoA=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: bVIigg8Ts3woBy0lelHvCn/+BeHP8YKbpv6ObCwEtMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: May 6 22:30:52 2024 GMT Not After : May 13 22:30:52 2024 GMT Subject: CN=66395a1c-278d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:20:4a:ae:7b:0f:49:9f:14:51:8d:5e:d6: b6:cb:d5:16:a9:dc:ba:67:77:95:03:89:d3:cf:10: e4:9b:73:d4:5b:7b:f4:ec:2e:f5:a5:da:52:c7:97: 0f:3c:e9:ac:12:f4:e9:97:44:9c:17:be:fb:49:4e: fb:f3:67:71:15:14:cb:69:94:e7:f4:21:d1:76:16: e8:6b:64:90:07:75:3e:6b:6b:aa:c6:05:c9:57:c0: f3:26:53:10:6e:e8:c7:aa:6d:c0:07:0c:d6:7a:2b: d7:91:2c:85:e9:ab:ef:46:e7:94:cc:30:3f:e4:02: 45:c4:b9:66:75:61:91:e2:cf:dc:8e:04:90:c9:9e: f6:76:4b:49:b4:7a:4e:fc:dc:c4:e2:94:45:8e:07: 3b:1f:99:f2:6b:2e:1d:4d:1c:9f:0e:e7:ae:d0:6a: 54:b8:5e:4a:95:4b:37:df:36:3a:cd:4c:bf:f8:89: d4:7f:5e:20:52:99:29:df:b3:8f:d8:61:d1:65:6a: 78:31:dc:7a:b7:76:3e:0b:a3:30:63:ef:24:2c:98: cb:08:da:57:c9:e6:69:fd:41:e8:63:67:b9:68:b2: d4:12:7c:93:8f:96:06:31:9b:1a:55:96:c2:f7:fc: 22:a6:99:0c:c3:0b:e0:8b:2a:31:94:be:45:77:40: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AB:B5:06:75:2A:F3:84:40:24:32:30:07:9B:D2:85:D9:12:7D:70 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:35:ed:c9:34:2e:12:1b:cf:11:64:1f:b3:49:5c:3d:fd:0e: 0e:60:59:5d:e1:74:36:92:57:ef:79:58:7f:0b:1a:05:db:3a: 62:7f:87:9c:ff:d2:54:ac:6f:df:6d:4c:e4:ad:4f:1d:ca:60: 70:b8:36:6b:f7:6e:0a:52:07:f5:0c:49:03:1d:4e:4a:38:87: 56:c1:1d:76:fb:a5:7d:e8:1d:cc:f6:24:00:70:9b:22:a1:ea: eb:ff:56:25:b0:85:15:74:fb:4f:db:d5:f7:2b:2b:00:a8:a3: 9d:bb:1e:e9:b0:94:f9:ab:78:8f:7c:52:ac:b7:33:bd:32:d2: 77:80:cb:45:ca:d2:5e:10:bc:17:9e:ce:81:04:59:4e:53:87: b4:ef:97:41:86:c0:5c:ca:03:63:6c:bb:3a:00:b4:ad:a3:f6: cd:cc:e3:76:e7:cc:19:54:6b:29:b7:ff:86:a4:c0:f5:d5:29: e5:7c:fc:8f:10:13:ac:e6:6d:8e:4e:9e:5c:29:1f:c2:e7:4c: 98:0b:4c:e3:d2:65:6e:2e:42:c2:c9:ec:ed:68:6c:06:1e:27: c5:b6:b7:62:42:e8:74:ea:3f:f9:f1:b4:35:73:dc:7b:90:de: 05:a7:65:19:a8:98:20:97:7e:2b:0a:e4:1c:79:88:b1:df:9c: 2e:56:da:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjQwNTA2MjIzMDUyWhcNMjQwNTEzMjIzMDUyWjAYMRYwFAYD VQQDEw02NjM5NWExYy0yNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHYgSq57D0mfFFGNXta2y9UWqdy6Z3eVA4nTzxDkm3PUW3v07C71pdpSx5cP POmsEvTpl0ScF777SU7782dxFRTLaZTn9CHRdhboa2SQB3U+a2uqxgXJV8DzJlMQ bujHqm3ABwzWeivXkSyF6avvRueUzDA/5AJFxLlmdWGR4s/cjgSQyZ72dktJtHpO /NzE4pRFjgc7H5nyay4dTRyfDueu0GpUuF5KlUs33zY6zUy/+InUf14gUpkp37OP 2GHRZWp4Mdx6t3Y+C6MwY+8kLJjLCNpXyeZp/UHoY2e5aLLUEnyTj5YGMZsaVZbC 9/wippkMwwvgiyoxlL5Fd0BixwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKrtQZ1 KvOEQCQyMAeb0oXZEn1wMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwNe3JNC4SG88RZB+zSVw9/Q4OYFld4XQ2klfveVh/CxoF2zpif4ec /9JUrG/fbUzkrU8dymBwuDZr924KUgf1DEkDHU5KOIdWwR12+6V96B3M9iQAcJsi oerr/1YlsIUVdPtP29X3KysAqKOdux7psJT5q3iPfFKstzO9MtJ3gMtFytJeELwX ns6BBFlOU4e075dBhsBcygNjbLs6ALSto/bNzON258wZVGspt/+GpMD11SnlfPyP EBOs5m2OTp5cKR/C50yYC0zj0mVuLkLCyeztaGwGHifFtrdiQuh06j/58bQ1c9x7 kN4Fp2UZqJggl34rCuQceYix35wuVtq/ -----END CERTIFICATE-----Generated at Mon May 6 23:05:42 2024 by rpki-client on console-fra.rpki-client.org