$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: N924hwD8bUjzQYpNW4igfU5Li1tbSXEjKG6coJfrv8c= Subject key identifier: 74:89:15:92:C2:A7:D7:9D:77:A3:DF:B4:57:86:43:AB:B4:6F:18:E3 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 33B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 5395 Signing time: Sat 04 May 2024 15:03:55 +0000 Manifest this update: Sat 04 May 2024 15:03:54 +0000 Manifest next update: Sat 11 May 2024 15:03:54 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: vuQ/Q4U+hOFSUr7HEh1pq2lBm9bUhR4Q9nHz5wlELgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13238 (0x33b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: May 4 15:03:54 2024 GMT Not After : May 11 15:03:54 2024 GMT Subject: CN=66364e5b-f1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:fa:87:ce:72:47:e6:89:59:80:06:5d:50: 2d:ea:02:1b:9e:63:ba:8c:d6:2d:47:72:fb:67:28: e5:3c:13:18:86:f2:a5:17:14:16:3d:54:0a:ba:4a: a0:22:47:48:33:91:0e:3e:5e:46:53:99:c7:f3:34: 09:bd:0b:fa:d7:7c:f6:16:88:36:88:88:8b:7d:e9: 24:60:c3:68:67:76:9b:bf:10:68:ca:ac:9d:1c:f6: d3:a1:fc:e2:38:11:a1:de:cc:98:e5:be:5a:59:81: e1:74:fe:30:c3:60:0b:c0:13:30:01:d9:68:92:c0: dc:2c:c2:5d:33:80:20:2f:cb:4c:9a:92:1b:cc:d3: e2:e0:6b:bc:07:c4:af:bc:04:ce:82:ba:3c:21:9b: 5e:63:67:69:ff:8d:c7:83:25:0c:77:a3:e2:70:01: d5:7a:e1:6a:fc:07:71:01:d2:0f:e8:c2:83:c1:6f: fb:16:3c:ef:54:97:b8:3a:34:90:81:23:22:d7:64: f7:3b:c1:28:2a:fd:ae:65:0a:8d:69:d5:fc:b0:70: 58:81:02:10:7d:98:6b:bb:e4:47:ab:85:3c:6f:9c: 14:26:e1:75:f9:c5:7b:03:24:33:49:b2:78:46:9b: 83:cb:73:57:ac:3f:b0:61:b4:99:4f:62:3b:ff:48: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:89:15:92:C2:A7:D7:9D:77:A3:DF:B4:57:86:43:AB:B4:6F:18:E3 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:ee:3e:f2:98:96:f7:b4:f9:63:e5:1f:5d:d7:f4:bf:bd:d3: b0:75:98:e5:a2:cc:cd:6c:ce:13:66:b1:f8:49:1f:53:f9:7c: a9:58:9e:d0:3c:8a:69:b9:9b:4f:c3:cb:f6:89:c0:a6:bd:c5: 6b:8d:eb:0e:67:6b:cf:70:a7:40:f1:32:bd:e4:95:0d:67:c3: ec:56:a1:3d:63:46:89:15:2b:f1:33:d5:04:82:3d:fb:b2:fe: 28:09:1a:02:48:7e:e0:72:35:d2:04:02:de:d8:f2:e6:33:6c: d6:99:a3:b2:da:5c:49:57:07:0d:ce:ce:06:44:86:8f:75:1a: 6f:e2:04:2c:ec:11:09:d9:93:16:b7:de:74:4c:ac:63:92:fb: 0e:cb:f3:3e:cb:40:58:09:ea:67:f8:3c:b4:f0:5b:36:47:c9: 74:3a:69:79:ea:c7:98:80:a9:51:65:87:2d:11:3f:89:3c:6b: 06:f0:61:ff:25:c6:5b:25:a9:21:d6:cd:03:3e:26:37:fb:69: 24:43:fb:3c:90:2a:cc:ef:4e:33:03:a1:89:32:88:41:89:20: a3:58:02:cb:74:83:85:9f:f9:5a:82:c7:1e:2a:42:71:5c:9a: 65:f1:fd:f1:03:95:29:f9:b9:f7:60:ea:ec:c9:27:82:47:cb: 9c:da:a1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjQwNTA0MTUwMzU0WhcNMjQwNTExMTUwMzU0WjAYMRYwFAYD VQQDEw02NjM2NGU1Yi1mMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cP6h85yR+aJWYAGXVAt6gIbnmO6jNYtR3L7ZyjlPBMYhvKlFxQWPVQKukqg IkdIM5EOPl5GU5nH8zQJvQv613z2Fog2iIiLfekkYMNoZ3abvxBoyqydHPbTofzi OBGh3syY5b5aWYHhdP4ww2ALwBMwAdloksDcLMJdM4AgL8tMmpIbzNPi4Gu8B8Sv vATOgro8IZteY2dp/43HgyUMd6PicAHVeuFq/AdxAdIP6MKDwW/7FjzvVJe4OjSQ gSMi12T3O8EoKv2uZQqNadX8sHBYgQIQfZhru+RHq4U8b5wUJuF1+cV7AyQzSbJ4 RpuDy3NXrD+wYbSZT2I7/0g5BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSJFZLC p9edd6PftFeGQ6u0bxjjMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDv7j7ymJb3tPlj5R9d1/S/vdOwdZjloszNbM4TZrH4SR9T+XypWJ7Q PIppuZtPw8v2icCmvcVrjesOZ2vPcKdA8TK95JUNZ8PsVqE9Y0aJFSvxM9UEgj37 sv4oCRoCSH7gcjXSBALe2PLmM2zWmaOy2lxJVwcNzs4GRIaPdRpv4gQs7BEJ2ZMW t950TKxjkvsOy/M+y0BYCepn+Dy08Fs2R8l0Oml56seYgKlRZYctET+JPGsG8GH/ JcZbJakh1s0DPiY3+2kkQ/s8kCrM704zA6GJMohBiSCjWALLdIOFn/lagsceKkJx XJpl8f3xA5Up+bn3YOrsySeCR8uc2qE5 -----END CERTIFICATE-----Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org