$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: DOdF6DsOIbnUwxZycFkfb88IKfU++2uNngL3hi3mH6o= Subject key identifier: FA:73:C7:C9:CD:EA:B6:74:86:B2:C5:96:75:56:D6:B5:22:78:7E:31 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 089E Signing time: Thu 02 May 2024 21:40:16 +0000 Manifest this update: Thu 02 May 2024 21:40:15 +0000 Manifest next update: Thu 09 May 2024 21:40:15 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: hUplqSZZsX8pXTMnBVCgDRVC4tyt7een7IeAq3yG8qM=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 5NJNOx8hKsZ/n2lsqH6TSwk6s0TV/KvXa5g4FKROVZE=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: zgBZvuEhEZmLL+2N9meHPjo9N8bwibNf/BFL27F0otg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 2 21:40:15 2024 GMT Not After : May 9 21:40:15 2024 GMT Subject: CN=6634083f-056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:d1:02:32:28:0b:e3:5b:0d:a6:d1:0c:9e: 41:37:5f:61:2b:58:84:28:bb:89:ec:06:19:fb:4d: a5:70:51:0b:49:a0:93:89:ea:9b:c9:ad:30:70:72: 33:32:95:01:49:3a:4a:67:f8:8d:58:54:76:3f:f2: 57:9f:42:f0:63:61:3b:5b:54:96:43:c7:ae:e1:22: 4b:46:96:8d:f8:61:99:ec:22:94:35:15:84:0f:09: b2:31:62:22:1e:2b:7b:39:4d:1e:d7:cc:f1:09:3d: 24:40:8e:28:d0:f6:1f:aa:ef:c7:0e:85:f2:95:eb: e5:f9:08:d9:6c:01:1e:8b:eb:14:93:33:19:b0:55: 74:0b:24:01:9d:85:5b:ac:f2:4e:ca:b6:d1:86:cc: d1:f1:0e:bb:e6:ba:ac:56:1d:6d:cc:aa:2f:4c:fb: bb:93:95:7f:c4:e9:20:f6:f3:65:96:a3:01:b1:13: d2:3c:be:5d:6f:c0:49:06:e1:1d:d7:00:7a:05:28: e3:bf:fd:65:e4:0e:a0:25:fc:19:d1:27:89:22:26: 7a:ec:5d:63:cf:a0:22:e4:a1:7c:45:cb:1a:21:5c: 9d:6d:fc:64:42:c4:b7:87:98:0a:54:4f:5d:5d:16: bc:72:02:a9:87:91:11:17:b1:99:6f:9d:a9:53:ec: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:73:C7:C9:CD:EA:B6:74:86:B2:C5:96:75:56:D6:B5:22:78:7E:31 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:f9:1e:46:84:3f:38:32:e0:06:db:3e:50:25:92:4e:5a: 26:ea:39:4c:3b:23:8b:7c:ec:8b:5d:08:1a:cd:41:14:43:0e: 3a:6c:14:d8:01:6e:34:89:64:a8:b0:92:ab:83:c6:a9:9d:d2: 1d:39:0e:b5:4f:c5:00:40:91:ce:9a:89:ab:50:93:e0:49:e4: 8a:bf:14:8d:ca:29:f7:2b:4e:0d:65:74:c5:59:9f:7e:94:5b: 5b:c8:43:ca:6b:f7:5e:23:04:01:67:9f:e6:1c:bf:d5:8b:ec: d7:f3:ea:12:d6:2b:7a:ff:92:c4:8f:27:e4:58:77:90:ac:28: 12:1f:c9:80:62:48:0d:9c:e8:69:eb:fb:86:d0:9b:16:0c:42: bb:93:d0:f1:85:17:f7:73:ac:50:e7:ed:b9:54:74:0d:75:39: f1:01:16:30:09:aa:ec:fa:06:03:7c:b1:d9:ad:0e:cb:84:29: f4:df:1c:ef:07:e3:ee:5d:09:cb:20:99:71:7c:fb:6b:24:c6: e4:31:8d:d6:33:4d:15:32:01:eb:ec:1a:01:7a:a1:b2:a1:9d: fc:3e:6f:96:9f:31:9f:88:44:ea:ad:07:69:f1:4b:6c:53:41: bd:7e:f4:eb:c4:0a:14:18:31:90:0d:95:b6:cc:e6:6a:da:89: ad:f0:98:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjQwNTAyMjE0MDE1WhcNMjQwNTA5MjE0MDE1WjAYMRYwFAYD VQQDEw02NjM0MDgzZi0wNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymjRAjIoC+NbDabRDJ5BN19hK1iEKLuJ7AYZ+02lcFELSaCTieqbya0wcHIz MpUBSTpKZ/iNWFR2P/JXn0LwY2E7W1SWQ8eu4SJLRpaN+GGZ7CKUNRWEDwmyMWIi Hit7OU0e18zxCT0kQI4o0PYfqu/HDoXylevl+QjZbAEei+sUkzMZsFV0CyQBnYVb rPJOyrbRhszR8Q675rqsVh1tzKovTPu7k5V/xOkg9vNllqMBsRPSPL5db8BJBuEd 1wB6BSjjv/1l5A6gJfwZ0SeJIiZ67F1jz6Ai5KF8RcsaIVydbfxkQsS3h5gKVE9d XRa8cgKph5ERF7GZb52pU+x6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpzx8nN 6rZ0hrLFlnVW1rUieH4xMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASVPkeRoQ/ODLgBts+UCWSTlom6jlMOyOLfOyLXQgazUEUQw46bBTY AW40iWSosJKrg8apndIdOQ61T8UAQJHOmomrUJPgSeSKvxSNyin3K04NZXTFWZ9+ lFtbyEPKa/deIwQBZ5/mHL/Vi+zX8+oS1it6/5LEjyfkWHeQrCgSH8mAYkgNnOhp 6/uG0JsWDEK7k9DxhRf3c6xQ5+25VHQNdTnxARYwCars+gYDfLHZrQ7LhCn03xzv B+PuXQnLIJlxfPtrJMbkMY3WM00VMgHr7BoBeqGyoZ38Pm+WnzGfiETqrQdp8Uts U0G9fvTrxAoUGDGQDZW2zOZq2omt8JjG -----END CERTIFICATE-----Generated at Thu May 2 22:13:18 2024 by rpki-client on console-fra.rpki-client.org