$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: Csrj5Q92tNIAkfWcUuRgSH4f5ToopB/3qpRoOjlRFlA= Subject key identifier: 83:10:4E:63:79:62:3F:D0:E8:FA:01:F3:11:25:70:66:B3:DC:C3:F6 Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: FB Signing time: Wed 01 May 2024 05:55:41 +0000 Manifest this update: Wed 01 May 2024 05:55:40 +0000 Manifest next update: Wed 08 May 2024 05:55:40 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: XKhYtKzbEyMINuq2qOh1c4CQeBvsHegEhnZ1PIRFo5s=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: 2C7sMzeq2LtkwEJGz1AXTQjxV1r/E9/E1qwgnOjFR/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Validity Not Before: May 1 05:55:40 2024 GMT Not After : May 8 05:55:40 2024 GMT Subject: CN=6631d95d-deed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7e:78:bf:b4:f0:ad:24:4b:85:44:63:bb:26: 74:c4:99:14:f1:55:22:a4:60:a0:52:f0:4f:ab:41: 37:a6:7b:2a:aa:57:c9:5c:ee:c9:d3:56:96:17:06: 60:5a:ce:27:e3:d0:f7:0f:9f:f5:0e:3d:06:00:83: 2d:c2:dc:ea:df:ce:d5:5b:d2:91:f6:70:15:51:77: b7:96:04:1e:e4:64:07:82:b6:df:21:13:82:c4:5c: 8e:2c:a0:b3:8a:40:ff:9f:a3:ee:0c:68:14:7a:71: 49:e8:e6:a6:67:16:1b:87:a3:d4:70:2e:c9:9d:02: 47:b5:b6:08:92:10:1c:06:c8:82:7c:34:8c:32:42: 1f:81:4c:33:4f:09:d3:53:c1:5f:37:37:62:39:95: cf:47:bd:fc:50:34:53:ac:d8:c5:53:e9:9c:54:1a: 22:38:80:50:21:f8:48:91:e7:7a:d7:5c:22:8e:7c: 5f:22:71:5a:34:ae:09:58:61:2b:fb:c6:f7:d1:58: 4b:d8:e9:ef:14:4b:e8:be:1b:39:34:ae:38:ff:64: 8b:df:58:cd:0d:5b:6c:08:0f:95:88:cb:87:f4:80: 36:91:81:70:65:06:46:fd:a1:e2:8f:58:50:7a:28: 4f:ad:6f:14:8c:2b:28:5d:14:04:12:9c:4a:9c:9c: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:4E:63:79:62:3F:D0:E8:FA:01:F3:11:25:70:66:B3:DC:C3:F6 X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:59:11:cb:b2:45:3a:0b:9b:59:13:5f:b9:d8:c3:7b:45: b5:3d:ac:89:f9:81:4c:21:80:e6:d0:d3:e6:93:f8:57:0f:31: 2c:b2:d0:2f:f9:94:c6:54:64:4d:c1:35:15:8b:ee:dc:69:43: 7a:84:6d:0a:7e:4d:b2:f7:bf:d2:b4:9d:ea:6e:d8:de:55:bb: 3a:b4:39:f3:83:aa:69:6f:36:61:b8:eb:cb:8b:f1:3c:dd:4f: 7d:98:cc:ab:04:fb:08:7a:0e:b1:4e:fe:ec:1a:d0:83:c8:62: 8f:78:b9:bf:81:ad:05:7c:ce:28:81:1c:b3:4d:d8:08:42:f6: 5d:62:7e:8b:91:5f:c0:30:8a:cf:8d:81:5e:3b:d7:ee:95:51: 75:7f:8b:74:e3:0b:18:5b:ed:11:24:18:f1:4e:69:fc:43:b0: 86:24:e3:bd:bf:2c:5c:46:36:48:77:2f:f7:7b:8f:96:c5:2e: 56:3b:b8:7d:90:6f:bc:75:0f:ff:24:74:69:a4:d6:cf:eb:16: bd:f7:77:ad:e2:6e:76:15:2b:bb:07:cf:d4:7c:f5:b1:1c:b4: f4:86:51:09:22:db:ed:53:1b:ce:ba:5b:db:6e:51:98:c5:e7: 6b:4a:a8:d4:5d:a4:03:c9:23:bc:94:8f:21:4f:1b:ea:ad:20: 6d:21:f1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjQwNTAxMDU1NTQwWhcNMjQwNTA4MDU1NTQwWjAYMRYwFAYD VQQDEw02NjMxZDk1ZC1kZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5354v7TwrSRLhURjuyZ0xJkU8VUipGCgUvBPq0E3pnsqqlfJXO7J01aWFwZg Ws4n49D3D5/1Dj0GAIMtwtzq387VW9KR9nAVUXe3lgQe5GQHgrbfIROCxFyOLKCz ikD/n6PuDGgUenFJ6OamZxYbh6PUcC7JnQJHtbYIkhAcBsiCfDSMMkIfgUwzTwnT U8FfNzdiOZXPR738UDRTrNjFU+mcVBoiOIBQIfhIked611wijnxfInFaNK4JWGEr +8b30VhL2OnvFEvovhs5NK44/2SL31jNDVtsCA+ViMuH9IA2kYFwZQZG/aHij1hQ eihPrW8UjCsoXRQEEpxKnJwuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMQTmN5 Yj/Q6PoB8xElcGaz3MP2MB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5llkRy7JFOgubWRNfudjDe0W1PayJ+YFMIYDm0NPmk/hXDzEsstAv +ZTGVGRNwTUVi+7caUN6hG0Kfk2y97/StJ3qbtjeVbs6tDnzg6ppbzZhuOvLi/E8 3U99mMyrBPsIeg6xTv7sGtCDyGKPeLm/ga0FfM4ogRyzTdgIQvZdYn6LkV/AMIrP jYFeO9fulVF1f4t04wsYW+0RJBjxTmn8Q7CGJOO9vyxcRjZIdy/3e4+WxS5WO7h9 kG+8dQ//JHRppNbP6xa993et4m52FSu7B8/UfPWxHLT0hlEJItvtUxvOulvbblGY xedrSqjUXaQDySO8lI8hTxvqrSBtIfHn -----END CERTIFICATE-----Generated at Wed May 1 06:34:28 2024 by rpki-client on console-ams.rpki-client.org