$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: rhcCZxZB3v3MvmBjknNWwiSZjmiOKvlz3ahnD1lrSBk= Subject key identifier: 30:3B:B1:F5:94:C7:40:8F:27:76:1A:02:25:34:C5:F5:78:31:DA:80 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 80 Signing time: Wed 15 May 2024 07:16:08 +0000 Manifest this update: Wed 15 May 2024 07:16:07 +0000 Manifest next update: Wed 22 May 2024 07:16:07 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 47lV9N2jwJNv1fxTZC+09i0qDGSK98TLsSrZZf029F0=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: OnN3gNIZ/fCbsBg1DuMqFTew2UrHIqCTnUQyEN0vDoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: May 15 07:16:07 2024 GMT Not After : May 22 07:16:07 2024 GMT Subject: CN=66446137-1386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:b4:64:a0:94:d4:2c:2a:99:24:70:b1:5f: a5:5a:9e:00:13:1e:51:28:ea:99:bd:bd:43:5e:4a: 98:65:15:b2:f9:c6:dd:35:b6:09:bb:64:99:89:43: 63:eb:28:a4:df:c9:90:27:c5:16:4a:dd:e9:4b:04: d0:23:8a:ae:e9:f4:06:64:4c:cf:07:97:ed:1e:c5: 75:1a:53:72:cf:b3:8b:07:89:ab:41:f9:b6:79:a6: cf:4b:b0:85:2a:2a:9d:2f:f0:57:1e:59:c3:1a:33: 67:f4:b5:6a:c0:17:4a:5a:db:49:10:4b:78:ed:9c: 17:7b:18:30:98:00:19:29:52:5d:91:bb:0d:30:0d: d0:ad:04:59:dd:87:d9:7d:27:c3:02:b0:04:d0:58: 19:aa:f8:15:13:cb:b8:7b:42:98:b8:92:74:67:44: f1:d9:e8:4b:28:2c:12:bd:ba:ed:49:86:d1:51:b7: ea:f1:d3:fd:3c:d7:69:f4:90:37:dc:14:33:f1:f3: 58:29:d5:55:e3:67:0d:0b:d1:fb:9d:41:5f:07:91: 26:ad:93:d3:f2:2b:af:a1:f8:a8:f0:a8:2a:f5:f7: 14:e1:83:8e:b7:d0:35:84:d2:a4:0f:8b:50:2f:0f: 22:60:f7:ac:f3:76:cb:3c:b4:b6:7d:73:ae:18:76: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3B:B1:F5:94:C7:40:8F:27:76:1A:02:25:34:C5:F5:78:31:DA:80 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:21:68:dd:ba:ea:66:1c:b2:9d:9a:6b:c0:bf:2f:f2:02:35: 16:84:32:f8:73:26:81:e8:4b:bc:5a:e9:5a:d5:44:90:f5:5a: fd:4d:ec:5e:78:ce:65:cc:71:11:d9:68:6e:e6:39:34:86:23: 97:43:a5:e2:83:20:68:11:ce:6e:d2:d1:40:2c:39:b4:49:a2: 77:75:e8:ad:40:e5:7c:5d:45:b8:9a:0e:ef:8e:3a:6a:4b:da: b5:3d:8d:c6:e9:5d:43:f2:1a:5b:37:9d:4c:ff:1d:4a:d9:40: 69:a5:86:0f:8c:8c:6c:ea:9c:b3:95:5a:4e:b1:07:e1:23:9d: d8:64:4a:1a:3e:bb:c5:7a:0e:cb:9a:b5:f8:87:ee:ad:44:f5: 93:2a:73:1b:71:c6:a1:0b:a0:90:9c:8f:a4:d4:f5:b3:db:6b: ff:c1:0d:cc:9e:3e:a0:cd:22:2c:8e:70:f8:c2:77:22:79:51: cd:e1:00:95:14:20:57:f0:11:3d:ee:c7:73:ce:4f:90:0b:a3: 2f:76:05:62:1f:3c:78:5c:ae:1d:f5:25:cd:7f:16:2d:bc:21: 32:78:58:24:79:30:24:d5:d2:3c:dd:40:85:2b:5a:0e:29:9f: 10:4d:0f:f6:26:f9:d8:db:f2:9b:f8:6a:e6:74:4e:db:24:2e: e2:e7:23:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjQwNTE1MDcxNjA3WhcNMjQwNTIyMDcxNjA3WjAYMRYwFAYD VQQDEw02NjQ0NjEzNy0xMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlu0ZKCU1CwqmSRwsV+lWp4AEx5RKOqZvb1DXkqYZRWy+cbdNbYJu2SZiUNj 6yik38mQJ8UWSt3pSwTQI4qu6fQGZEzPB5ftHsV1GlNyz7OLB4mrQfm2eabPS7CF KiqdL/BXHlnDGjNn9LVqwBdKWttJEEt47ZwXexgwmAAZKVJdkbsNMA3QrQRZ3YfZ fSfDArAE0FgZqvgVE8u4e0KYuJJ0Z0Tx2ehLKCwSvbrtSYbRUbfq8dP9PNdp9JA3 3BQz8fNYKdVV42cNC9H7nUFfB5EmrZPT8iuvofio8Kgq9fcU4YOOt9A1hNKkD4tQ Lw8iYPes83bLPLS2fXOuGHYJtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA7sfWU x0CPJ3YaAiU0xfV4MdqAMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZIWjduupmHLKdmmvAvy/yAjUWhDL4cyaB6Eu8Wula1USQ9Vr9Texe eM5lzHER2Whu5jk0hiOXQ6XigyBoEc5u0tFALDm0SaJ3deitQOV8XUW4mg7vjjpq S9q1PY3G6V1D8hpbN51M/x1K2UBppYYPjIxs6pyzlVpOsQfhI53YZEoaPrvFeg7L mrX4h+6tRPWTKnMbccahC6CQnI+k1PWz22v/wQ3Mnj6gzSIsjnD4wncieVHN4QCV FCBX8BE97sdzzk+QC6MvdgViHzx4XK4d9SXNfxYtvCEyeFgkeTAk1dI83UCFK1oO KZ8QTQ/2JvnY2/Kb+GrmdE7bJC7i5yPw -----END CERTIFICATE-----Generated at Wed May 15 09:27:34 2024 by rpki-client on console-fra.rpki-client.org