$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: vR1R/NQXDvzrNqyhNRe2e3W8kzvdOYb26jxDAqNgwh0= Subject key identifier: 4E:16:00:91:32:C3:61:6C:D8:C0:FE:4C:28:0C:ED:0E:51:BD:C6:7A Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0D5D Signing time: Thu 02 May 2024 18:41:53 +0000 Manifest this update: Thu 02 May 2024 18:41:52 +0000 Manifest next update: Thu 09 May 2024 18:41:52 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: K/7qs8hJGvdiH8TucuTbs430gBtm9ey50Tp13IbqjJM=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: re/ox5EHbX4AgbSgdttCWw4KM4XprMMRG7YhKjmQ4KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: May 2 18:41:52 2024 GMT Not After : May 9 18:41:52 2024 GMT Subject: CN=6633de70-3a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:af:60:2e:6f:6c:e1:6e:e0:8d:25:e1:18: f1:e3:e3:3f:06:66:fb:d1:fe:c9:35:e0:73:9a:d0: 0e:a2:cf:40:0b:be:7b:78:6f:0b:17:75:50:e3:56: 43:37:02:62:ea:e4:c8:72:08:83:1c:5f:72:b7:52: d2:2d:72:d6:e0:7e:a4:bc:79:f5:a3:d8:2c:18:2f: 39:bc:5b:2e:b1:46:f7:4e:b0:44:df:a3:df:cd:36: d3:3c:a0:fe:a0:57:9a:01:6c:68:db:40:a3:44:73: fb:54:18:a3:42:93:cd:a9:6a:09:35:e8:74:c1:b2: 38:4f:0f:6c:33:5e:0a:c0:45:b3:ea:dd:2e:db:7a: ba:fc:2d:2d:55:d4:bc:f9:c5:72:f8:b4:a9:fc:5a: ce:6f:00:79:ff:d6:ae:42:3e:49:93:e5:22:75:71: 07:19:1a:c5:08:62:2f:16:7a:57:b6:da:65:30:5f: a6:7c:71:b6:ed:95:e0:47:40:98:7b:7c:4b:dd:0b: 7d:7a:07:eb:18:5e:89:be:12:1e:b6:44:62:d4:65: 5c:4a:aa:8e:8c:db:80:e0:9c:91:33:2a:ea:99:bd: d6:c4:5f:5a:1a:11:58:ba:4c:77:b5:d1:ab:02:70: b1:fe:4f:db:18:08:1d:15:93:d0:28:3f:12:e3:0c: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:00:91:32:C3:61:6C:D8:C0:FE:4C:28:0C:ED:0E:51:BD:C6:7A X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:b3:60:2f:c2:d1:e4:f2:93:5a:8a:d4:57:1b:ae:a0:39:cf: 49:fe:06:12:2b:18:fc:a0:67:b4:19:0a:21:c0:06:ac:fb:ce: 9b:a4:de:20:78:ea:6b:ae:00:23:0b:d2:82:6f:8c:93:07:b4: ec:d4:fc:73:06:ed:17:a2:f9:2a:46:62:e3:6e:ee:a5:5a:7c: c8:0a:de:2d:62:4f:be:67:fd:f4:1e:09:2a:b7:0e:a4:5b:aa: 0a:7f:5a:d8:b5:f1:5c:6a:45:9b:ab:59:98:3c:5b:d3:ca:63: 18:3c:66:de:01:42:05:c8:d1:0e:12:c0:9e:f9:f6:85:c5:23: b7:50:61:e2:a9:8b:02:25:6f:28:4f:aa:93:bc:15:bf:ed:0c: e1:60:94:66:9b:ae:60:38:34:8f:26:46:36:67:df:af:7f:a6: 3b:e4:dc:fc:d9:bd:87:1b:32:06:ac:51:6a:c4:ce:24:69:c2: 0d:6c:46:1e:e5:9e:3f:60:64:37:86:4a:37:c2:b1:ef:ab:1a: 6e:f3:6b:87:d0:21:68:5b:6c:1e:b4:26:0e:92:c2:61:b1:da: a6:d7:8a:5f:00:cb:b0:4e:28:58:4e:3b:2c:e9:d3:fd:02:ea: c1:a3:ce:8e:43:ee:dd:9e:78:96:1d:6b:7c:da:cf:37:6c:69: 8f:fb:97:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjQwNTAyMTg0MTUyWhcNMjQwNTA5MTg0MTUyWjAYMRYwFAYD VQQDEw02NjMzZGU3MC0zYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP2vYC5vbOFu4I0l4Rjx4+M/Bmb70f7JNeBzmtAOos9AC757eG8LF3VQ41ZD NwJi6uTIcgiDHF9yt1LSLXLW4H6kvHn1o9gsGC85vFsusUb3TrBE36PfzTbTPKD+ oFeaAWxo20CjRHP7VBijQpPNqWoJNeh0wbI4Tw9sM14KwEWz6t0u23q6/C0tVdS8 +cVy+LSp/FrObwB5/9auQj5Jk+UidXEHGRrFCGIvFnpXttplMF+mfHG27ZXgR0CY e3xL3Qt9egfrGF6JvhIetkRi1GVcSqqOjNuA4JyRMyrqmb3WxF9aGhFYukx3tdGr AnCx/k/bGAgdFZPQKD8S4wwIWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4WAJEy w2Fs2MD+TCgM7Q5RvcZ6MB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUs2AvwtHk8pNaitRXG66gOc9J/gYSKxj8oGe0GQohwAas+86bpN4g eOprrgAjC9KCb4yTB7Ts1PxzBu0XovkqRmLjbu6lWnzICt4tYk++Z/30Hgkqtw6k W6oKf1rYtfFcakWbq1mYPFvTymMYPGbeAUIFyNEOEsCe+faFxSO3UGHiqYsCJW8o T6qTvBW/7QzhYJRmm65gODSPJkY2Z9+vf6Y75Nz82b2HGzIGrFFqxM4kacINbEYe 5Z4/YGQ3hko3wrHvqxpu82uH0CFoW2wetCYOksJhsdqm14pfAMuwTihYTjss6dP9 AurBo86OQ+7dnniWHWt82s83bGmP+5eJ -----END CERTIFICATE-----Generated at Thu May 2 20:50:34 2024 by rpki-client on console-fra.rpki-client.org