$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: b3sz/GBCtUC3gl3Kyd3GftOTJq1PbMRG5Oo5iBtKoDA= Subject key identifier: 94:E9:36:B4:D3:19:AE:9A:E9:57:7E:85:86:28:1A:51:80:D7:5F:05 Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 06D2 Signing time: Thu 02 May 2024 23:04:25 +0000 Manifest this update: Thu 02 May 2024 23:04:25 +0000 Manifest next update: Thu 09 May 2024 23:04:25 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: MxnyDpqHNwxQIcebEbEG4P2HOkVIUIK37nkYYsQ5T0A=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: McmqPkZiC0Dcs2DMydhDCPJxSh64MkkJT3vmji/H8eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: May 2 23:04:25 2024 GMT Not After : May 9 23:04:25 2024 GMT Subject: CN=66341bf9-1089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:11:f3:6d:30:99:56:dc:97:9a:41:ba:66: 5c:61:4a:d8:0f:7c:3e:ee:f8:de:46:0c:90:a9:80: 42:10:7c:2d:b1:da:1e:4a:22:b1:e9:95:62:f3:8b: 06:5f:f7:7e:22:29:71:39:6a:08:26:d3:1d:70:22: 2f:10:2f:e1:bf:94:d0:cf:29:5e:c6:b4:2c:66:6c: 9d:13:aa:fa:f2:0d:39:54:b0:8e:44:4e:ee:db:da: 08:15:43:20:67:a4:fc:85:d9:c7:1b:ff:d2:4e:37: b5:d1:bf:29:32:93:9e:5a:3b:42:96:f5:05:9e:8a: f0:d2:95:95:f4:84:a3:0e:0c:50:a1:31:fe:21:67: 7f:9e:09:46:2f:6d:ed:c9:98:3f:7a:ab:4a:ae:46: 52:96:b3:fb:6c:db:ad:6b:33:78:9c:a8:70:f2:01: 98:34:4a:2d:31:de:f1:59:b2:c9:67:b5:4f:3f:f7: ae:d9:f7:23:15:31:87:f0:58:0a:cd:3f:be:33:23: 7c:98:c3:2c:ba:97:44:52:7e:b0:b4:16:38:09:54: 27:47:dd:e1:63:81:d9:2c:87:67:1d:4e:80:ac:b9: 62:8a:e1:97:a7:07:c5:45:9f:4f:87:df:94:ce:07: f9:2b:75:7b:34:ba:3f:de:9c:d6:a9:43:8e:ee:72: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E9:36:B4:D3:19:AE:9A:E9:57:7E:85:86:28:1A:51:80:D7:5F:05 X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:46:3d:78:9c:1e:17:e3:04:66:97:28:62:9a:9f:f6:75:f3: cb:49:31:bb:f2:4a:54:c4:69:42:04:a5:c6:d3:7c:25:f6:f4: 93:11:91:44:84:14:71:88:f2:cb:c4:00:fa:6e:c6:f2:d8:8a: 61:43:cb:45:b8:68:58:db:af:90:5e:96:81:68:c5:10:e4:08: a4:da:4f:26:8a:96:26:f9:6a:7f:61:15:f4:fb:09:d0:67:5f: 1c:c3:0e:1e:d8:07:9b:e1:63:3d:cb:0a:33:64:14:89:bc:78: d6:b2:09:c9:ba:ae:98:b3:4b:e2:03:15:b1:cb:9d:50:9c:4d: 40:be:1f:51:d2:95:87:22:f4:a9:71:bf:e3:d1:f5:86:81:ac: ea:f9:5b:f2:97:79:12:83:77:0a:0d:36:48:88:8d:a0:bb:62: d6:7e:b9:de:39:05:23:bc:54:5c:e4:36:d1:6a:17:f8:6e:b6: d1:a7:83:3d:21:36:cc:ff:ef:f3:c9:4e:52:36:40:8a:fa:27: 07:b7:80:c3:4b:80:12:3c:93:35:09:a5:6b:15:93:d4:39:ac: a9:34:4e:23:8f:3f:07:f4:12:19:97:87:6d:3e:4e:3d:0d:a8: 8c:4c:1f:07:48:88:c3:a6:c4:ba:49:a3:a4:9a:6f:e0:7d:d5: 50:2b:67:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjQwNTAyMjMwNDI1WhcNMjQwNTA5MjMwNDI1WjAYMRYwFAYD VQQDEw02NjM0MWJmOS0xMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmoR820wmVbcl5pBumZcYUrYD3w+7vjeRgyQqYBCEHwtsdoeSiKx6ZVi84sG X/d+IilxOWoIJtMdcCIvEC/hv5TQzylexrQsZmydE6r68g05VLCORE7u29oIFUMg Z6T8hdnHG//STje10b8pMpOeWjtClvUFnorw0pWV9ISjDgxQoTH+IWd/nglGL23t yZg/eqtKrkZSlrP7bNutazN4nKhw8gGYNEotMd7xWbLJZ7VPP/eu2fcjFTGH8FgK zT++MyN8mMMsupdEUn6wtBY4CVQnR93hY4HZLIdnHU6ArLliiuGXpwfFRZ9Ph9+U zgf5K3V7NLo/3pzWqUOO7nLxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTpNrTT Ga6a6Vd+hYYoGlGA118FMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzRj14nB4X4wRmlyhimp/2dfPLSTG78kpUxGlCBKXG03wl9vSTEZFE hBRxiPLLxAD6bsby2IphQ8tFuGhY26+QXpaBaMUQ5Aik2k8mipYm+Wp/YRX0+wnQ Z18cww4e2Aeb4WM9ywozZBSJvHjWsgnJuq6Ys0viAxWxy51QnE1Avh9R0pWHIvSp cb/j0fWGgazq+Vvyl3kSg3cKDTZIiI2gu2LWfrneOQUjvFRc5DbRahf4brbRp4M9 ITbM/+/zyU5SNkCK+icHt4DDS4ASPJM1CaVrFZPUOaypNE4jjz8H9BIZl4dtPk49 DaiMTB8HSIjDpsS6SaOkmm/gfdVQK2de -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org