$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: ClzxKPLqx+g/ihRK6FAYzSC0nbB8G9Et7Xn3E9sjYgY= Subject key identifier: 52:97:0C:B4:07:EF:88:CD:DB:EE:48:2E:07:71:92:4C:39:06:79:55 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0A54 Signing time: Tue 30 Apr 2024 20:42:43 +0000 Manifest this update: Tue 30 Apr 2024 20:42:43 +0000 Manifest next update: Tue 07 May 2024 20:42:43 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: 4iNH3woDKfPdO9nABayqylbNYkEao56IeATapCZPJWM=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 0grWoPbIw7eqZ5KWG4fjW4iWTJDkl1s1OqL5n5v7b8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Apr 30 20:42:43 2024 GMT Not After : May 7 20:42:43 2024 GMT Subject: CN=663157c3-e3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:e0:62:05:0f:e1:ee:c6:91:fb:ae:c5:0c: 89:b0:8f:36:79:79:eb:24:29:37:94:ef:6d:6a:2d: 24:d1:e6:e2:5c:b3:f4:69:6e:ce:9f:33:66:4b:a3: dd:fa:60:7f:25:58:a9:8d:ed:25:c3:06:df:12:2b: a1:90:4f:0b:75:27:59:eb:08:3d:fd:8b:49:91:40: d3:2d:03:43:e4:f1:ee:96:79:1b:34:cf:7c:75:74: bf:91:f8:7f:87:bd:c2:73:fc:34:02:10:11:b4:e1: f8:25:5d:71:18:bf:1a:9e:a6:1a:d5:b2:a8:24:60: 74:99:61:43:bc:50:19:5c:5e:0e:96:6f:54:fd:07: 5d:64:d1:87:fb:90:5f:9b:c9:f9:99:f0:7e:9d:11: c0:4b:c1:50:c9:89:12:3b:b9:25:77:07:cb:f4:ff: f2:60:f1:2e:6f:96:c6:dd:ab:2b:40:08:0e:fb:e1: 6a:16:19:d2:20:40:d0:47:4a:0d:75:30:d7:9f:cc: 11:5a:e7:3e:ea:fb:a8:9b:73:85:75:82:5b:8a:50: 22:76:64:1e:4a:37:e5:e3:9a:f8:a5:3e:33:90:c9: ca:60:84:c3:d0:c7:0b:51:b7:0b:2b:64:75:58:07: 17:22:56:75:c6:e1:2b:51:9c:3c:fe:2c:de:9a:e8: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:0C:B4:07:EF:88:CD:DB:EE:48:2E:07:71:92:4C:39:06:79:55 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:92:a6:69:72:da:15:13:93:a9:9c:54:00:69:a3:51:a5: fa:b6:66:2d:8d:34:1e:a7:f1:68:7b:09:87:c6:f0:d8:a5:8d: f9:16:37:0a:3b:32:4f:79:5a:e2:b6:6a:7a:a6:25:73:b3:e5: 08:44:f7:11:88:79:a0:c7:8e:5e:63:ef:81:15:6e:82:2a:46: 55:a4:13:a3:29:cc:ec:46:ff:46:d6:28:55:fc:04:17:21:97: dc:e0:ce:d6:7e:20:8a:61:65:f5:ea:8b:65:99:8f:31:ce:a1: 16:74:a3:2a:3b:07:28:71:2b:cf:18:46:0d:84:49:f3:18:68: fb:5b:39:c3:ed:85:ab:e4:3d:91:d9:f9:4d:6a:ea:5e:f5:d6: 76:7a:e1:f8:c4:38:12:f3:91:a5:15:16:51:aa:16:36:1a:91: ce:cf:c6:14:49:be:45:d8:05:0d:4b:f5:79:d5:ec:c8:98:e3: e6:a9:56:8d:72:06:6d:36:6a:39:64:22:37:80:9e:45:fd:52: 13:0a:9d:a9:f5:c3:42:f6:b2:e6:d8:51:d2:76:c2:63:a4:bb: 82:e3:80:b1:18:7c:94:17:a7:50:ab:9b:2c:86:69:a8:e6:85: f3:13:de:b5:2d:23:f4:b7:5f:47:6f:a9:cb:d9:0b:d5:6a:62: ff:4b:a7:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjQwNDMwMjA0MjQzWhcNMjQwNTA3MjA0MjQzWjAYMRYwFAYD VQQDEw02NjMxNTdjMy1lM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuXgYgUP4e7GkfuuxQyJsI82eXnrJCk3lO9tai0k0ebiXLP0aW7OnzNmS6Pd +mB/JVipje0lwwbfEiuhkE8LdSdZ6wg9/YtJkUDTLQND5PHulnkbNM98dXS/kfh/ h73Cc/w0AhARtOH4JV1xGL8anqYa1bKoJGB0mWFDvFAZXF4Olm9U/QddZNGH+5Bf m8n5mfB+nRHAS8FQyYkSO7kldwfL9P/yYPEub5bG3asrQAgO++FqFhnSIEDQR0oN dTDXn8wRWuc+6vuom3OFdYJbilAidmQeSjfl45r4pT4zkMnKYITD0McLUbcLK2R1 WAcXIlZ1xuErUZw8/izemuiWJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKXDLQH 74jN2+5ILgdxkkw5BnlVMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXepKmaXLaFROTqZxUAGmjUaX6tmYtjTQep/FoewmHxvDYpY35FjcK OzJPeVritmp6piVzs+UIRPcRiHmgx45eY++BFW6CKkZVpBOjKczsRv9G1ihV/AQX IZfc4M7WfiCKYWX16otlmY8xzqEWdKMqOwcocSvPGEYNhEnzGGj7WznD7YWr5D2R 2flNaupe9dZ2euH4xDgS85GlFRZRqhY2GpHOz8YUSb5F2AUNS/V51ezImOPmqVaN cgZtNmo5ZCI3gJ5F/VITCp2p9cNC9rLm2FHSdsJjpLuC44CxGHyUF6dQq5sshmmo 5oXzE961LSP0t19Hb6nL2QvVamL/S6eD -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:58 2024 by rpki-client on console-ams.rpki-client.org