$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: UmjPqFGtbW8Cq7gCBl3mYI435zsHpxS5rNXozsoPBu8= Subject key identifier: 38:A7:9C:61:DB:B6:DF:28:8C:14:5B:34:C7:3A:E8:84:B9:0A:97:A0 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 02E4 Signing time: Wed 01 May 2024 03:35:55 +0000 Manifest this update: Wed 01 May 2024 03:35:54 +0000 Manifest next update: Wed 08 May 2024 03:35:54 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: ISMTdx/qf8h8C+YFYTAN0pgOnTi48GGFN5sK6yAwJSE=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: XiWwflIsuv/VhehmQullYCSTjJPi3vT5J53F2q66kVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: May 1 03:35:54 2024 GMT Not After : May 8 03:35:54 2024 GMT Subject: CN=6631b89a-2ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:53:77:d0:f8:64:d3:74:4d:63:29:38:d8: da:16:f9:41:bb:ee:61:65:61:d6:5d:85:7c:69:6a: db:ab:9c:02:9b:5e:79:91:05:22:c7:7c:e0:c8:17: d4:2e:78:83:c3:38:2e:21:7c:a9:57:97:c9:c6:92: 9a:0c:b3:11:ec:21:e3:6c:ca:71:a5:30:b8:1e:01: b9:38:39:a5:e0:01:55:32:e2:00:8a:9a:53:95:c6: ea:51:4a:21:27:11:fa:ab:bb:bf:39:ef:65:e1:a8: 5d:c8:f7:21:a8:42:9e:17:93:68:90:f3:ae:5c:70: 46:37:62:67:ea:31:78:1f:cb:54:51:42:db:ac:42: bf:06:91:a9:f4:c6:7e:6a:35:e6:59:bb:64:65:5f: c2:37:4b:cc:cc:e8:1f:10:85:ac:cf:32:7f:e6:07: 19:75:fa:09:44:7c:c9:e4:b9:f0:61:13:5e:1f:c2: 96:5e:cf:91:eb:12:37:0b:43:f0:a8:c5:6f:4f:fa: 50:54:0b:ec:75:84:2d:61:a3:45:d2:d0:1e:41:bb: 9c:14:19:6a:5b:dc:79:30:9a:cc:e3:27:f3:ae:22: 1e:b3:82:a9:03:ca:b7:fe:c3:53:01:cc:f5:a4:2b: ed:a8:77:ae:ac:b2:4c:dc:c8:0b:f0:71:9e:2f:29: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A7:9C:61:DB:B6:DF:28:8C:14:5B:34:C7:3A:E8:84:B9:0A:97:A0 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:11:ea:c7:6a:3a:fb:d9:89:9b:59:7e:d2:0d:db:09:58: 3d:76:b4:bb:0f:6f:7f:40:b9:f3:3e:7d:5d:2f:e6:de:8e:a0: ef:9a:a2:7b:f9:d3:65:44:c1:33:8f:7d:14:57:65:51:da:74: 9c:5c:e3:de:15:55:23:1a:e1:a7:7a:43:fc:a0:97:e2:ef:ee: e3:aa:65:fa:a4:57:9d:dc:38:03:b6:d6:6d:fc:3b:07:17:d6: 31:60:8f:16:f2:8a:b1:46:81:65:16:8b:05:53:75:7b:43:59: 00:bb:a8:bc:d4:8b:fd:be:a5:e0:0a:b1:dc:e4:05:fc:f0:07: 59:1e:26:d4:e9:2f:84:35:5d:ed:8d:24:56:9e:98:ba:d8:35: f3:12:9e:d5:f5:d4:ce:e2:98:df:64:ca:62:48:d3:be:2c:60: 6e:83:c2:54:7b:e9:af:70:ad:54:2b:19:56:0f:e9:92:88:03: 36:b3:28:f7:a7:89:1c:26:72:60:53:78:27:10:e1:66:75:43: 03:f5:92:93:c8:1a:bb:a5:e9:a4:c7:73:98:51:e6:95:66:2b: 2a:c7:9b:b2:e0:8c:e2:8c:0b:7f:a1:e1:6d:df:d2:4d:b7:30: c5:ea:e3:5c:34:bf:83:68:d9:c4:cf:61:cb:c6:4e:04:34:13: be:04:20:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjQwNTAxMDMzNTU0WhcNMjQwNTA4MDMzNTU0WjAYMRYwFAYD VQQDEw02NjMxYjg5YS0yYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI1Td9D4ZNN0TWMpONjaFvlBu+5hZWHWXYV8aWrbq5wCm155kQUix3zgyBfU LniDwzguIXypV5fJxpKaDLMR7CHjbMpxpTC4HgG5ODml4AFVMuIAippTlcbqUUoh JxH6q7u/Oe9l4ahdyPchqEKeF5NokPOuXHBGN2Jn6jF4H8tUUULbrEK/BpGp9MZ+ ajXmWbtkZV/CN0vMzOgfEIWszzJ/5gcZdfoJRHzJ5LnwYRNeH8KWXs+R6xI3C0Pw qMVvT/pQVAvsdYQtYaNF0tAeQbucFBlqW9x5MJrM4yfzriIes4KpA8q3/sNTAcz1 pCvtqHeurLJM3MgL8HGeLyngtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDinnGHb tt8ojBRbNMc66IS5CpegMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnbhHqx2o6+9mJm1l+0g3bCVg9drS7D29/QLnzPn1dL+bejqDvmqJ7 +dNlRMEzj30UV2VR2nScXOPeFVUjGuGnekP8oJfi7+7jqmX6pFed3DgDttZt/DsH F9YxYI8W8oqxRoFlFosFU3V7Q1kAu6i81Iv9vqXgCrHc5AX88AdZHibU6S+ENV3t jSRWnpi62DXzEp7V9dTO4pjfZMpiSNO+LGBug8JUe+mvcK1UKxlWD+mSiAM2syj3 p4kcJnJgU3gnEOFmdUMD9ZKTyBq7pemkx3OYUeaVZisqx5uy4IzijAt/oeFt39JN tzDF6uNcNL+DaNnEz2HLxk4ENBO+BCDg -----END CERTIFICATE-----Generated at Wed May 1 04:49:24 2024 by rpki-client on console-ams.rpki-client.org