$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft File: GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json) Hash identifier: TCJUWsCHwI8cv8uKiX+EnQinfddCZRW13aV78vPlHpE= Subject key identifier: E0:5A:9A:EE:BF:25:5D:82:D2:BE:0D:BB:86:65:92:A9:45:CE:CE:D8 Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft Manifest number: 15 Signing time: Wed 15 May 2024 08:56:28 +0000 Manifest this update: Wed 15 May 2024 08:56:27 +0000 Manifest next update: Wed 22 May 2024 08:56:27 +0000 Files and hashes: 1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: jKzyySR3diNCLHWSfJJQtnnOu0XNa4UsTlLtx2jteyM=) 2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: 7p7VjinwL3w0mIDvdC/+VoKlpaveAeKNLD3q7R+HydE=) 3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: kU3/vBoIEfiO4tYJxD39GFfNZGe0oBmTGfM6rg3pB5g=) 4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: 9B+FZQBA+ID6mfEwHbGU4CvthxlT7m1s13yr/gj3u94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: May 15 08:56:27 2024 GMT Not After : May 22 08:56:27 2024 GMT Subject: CN=664478bb-649a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:00:11:fd:7a:24:71:35:05:05:25:6a:a8: 28:5c:f9:1e:ba:7e:7c:b3:b9:54:2f:eb:b0:1a:02: 22:5e:a0:2a:ce:f7:d0:7f:6f:c7:e8:b2:8e:a1:d7: f0:12:fb:8c:98:31:e9:58:2d:96:e4:e0:25:6d:e5: 8c:8b:28:df:10:f2:d9:32:45:f3:43:be:f9:f2:10: a4:a8:18:cb:25:83:8c:d2:71:ef:ff:8d:0a:28:ea: 84:33:e2:bf:10:2c:d7:c1:ff:8d:3a:88:73:83:2a: 65:63:cf:4c:38:1e:1a:15:4b:e3:ba:dd:98:9f:6e: 46:cd:66:00:32:11:d7:65:8e:9d:94:20:90:e6:50: e7:a6:58:1a:1c:8c:2c:13:ca:fe:d8:f8:c9:7b:56: 05:88:d4:5c:31:8e:6e:7b:85:1a:4c:0b:e8:0a:54: bd:32:7c:e9:73:9e:04:2f:eb:61:75:3e:f6:0c:f3: 0c:14:b6:0a:9d:46:ca:8b:da:89:ec:dc:d6:ea:67: cd:5c:f5:14:0f:d6:82:54:95:60:07:96:2e:ee:9d: ee:4a:36:68:b2:02:6d:ab:3a:72:8e:1c:e5:50:88: 05:2f:7c:aa:43:a0:5a:aa:c3:f7:1e:b4:ea:01:56: 99:8c:02:72:d1:d6:ce:49:4c:72:ae:fb:fd:4f:48: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:9A:EE:BF:25:5D:82:D2:BE:0D:BB:86:65:92:A9:45:CE:CE:D8 X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:22:c3:fd:d2:4c:15:51:36:c0:f4:b5:85:28:f4:7c:f1:67: fe:a7:80:84:4d:f4:78:1c:17:a4:2d:78:0d:47:e9:59:00:d9: a3:3d:96:63:89:69:86:11:41:8f:a4:87:ba:e0:dd:b7:69:53: cb:23:5a:9e:94:c7:a4:b1:41:3f:31:05:d6:63:71:7a:c3:65: 45:57:97:81:d4:7d:8b:5e:75:a2:89:61:a4:62:12:79:5f:45: 10:73:10:8b:83:e0:8d:30:24:e6:a9:f3:e9:eb:3c:e1:bc:85: 35:b5:a7:2d:5b:ef:d1:78:d8:a9:a4:06:43:ac:df:5e:b5:c6: 59:ca:eb:c7:3c:12:4f:7d:e9:f6:15:b7:41:c4:57:f3:77:23: 95:51:c6:14:dc:4f:48:77:ab:1d:9c:82:63:40:c4:6e:90:60: f4:51:cb:d2:f8:6e:bc:3b:2e:af:f0:40:bd:b9:f7:a3:92:82: 56:17:ce:7a:17:eb:1b:85:a7:cb:f3:df:e6:bc:98:a2:f7:6c: 4c:2b:1d:d3:10:d4:6e:af:9c:52:ae:8b:94:92:9e:65:d1:29: cb:2e:5b:65:f8:cd:50:0b:98:a6:43:06:ce:61:2a:b9:91:9c: 52:8a:f5:71:4b:db:9d:41:d9:9e:f1:16:ff:a9:bc:76:4b:1f: 1f:4f:0f:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzkzMTExMC8GA1UEBRMoMTk4QzQzNjRDRjAzMkM3MzBEOTU4NTgzNDk4MjA5NkQ1 MEE3NTJDOTAeFw0yNDA1MTUwODU2MjdaFw0yNDA1MjIwODU2MjdaMBgxFjAUBgNV BAMTDTY2NDQ3OGJiLTY0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5hgAR/XokcTUFBSVqqChc+R66fnyzuVQv67AaAiJeoCrO99B/b8foso6h1/AS +4yYMelYLZbk4CVt5YyLKN8Q8tkyRfNDvvnyEKSoGMslg4zSce//jQoo6oQz4r8Q LNfB/406iHODKmVjz0w4HhoVS+O63ZifbkbNZgAyEddljp2UIJDmUOemWBocjCwT yv7Y+Ml7VgWI1Fwxjm57hRpMC+gKVL0yfOlzngQv62F1PvYM8wwUtgqdRsqL2ons 3NbqZ81c9RQP1oJUlWAHli7une5KNmiyAm2rOnKOHOVQiAUvfKpDoFqqw/cetOoB VpmMAnLR1s5JTHKu+/1PSCqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4Fqa7r8l XYLSvg27hmWSqUXOztgwHwYDVR0jBBgwFoAUGYxDZM8DLHMNlYWDSYIJbVCnUskw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDOTMxLzRBMjVCNkEwRjU1 RDExRUU5QkUxOTc4MEM0RjlBRTAyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVz ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1l4RFpNOERMSE1ObFlXRFNZSUpiVkNuVXNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD OTMxLzRBMjVCNkEwRjU1RDExRUU5QkUxOTc4MEM0RjlBRTAyL0dZeERaTThETEhN TmxZV0RTWUlKYlZDblVzay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUiw/3STBVRNsD0tYUo9HzxZ/6ngIRN9HgcF6QteA1H6VkA2aM9lmOJ aYYRQY+kh7rg3bdpU8sjWp6Ux6SxQT8xBdZjcXrDZUVXl4HUfYtedaKJYaRiEnlf RRBzEIuD4I0wJOap8+nrPOG8hTW1py1b79F42KmkBkOs3161xlnK68c8Ek996fYV t0HEV/N3I5VRxhTcT0h3qx2cgmNAxG6QYPRRy9L4brw7Lq/wQL2596OSglYXznoX 6xuFp8vz3+a8mKL3bEwrHdMQ1G6vnFKui5SSnmXRKcsuW2X4zVALmKZDBs5hKrmR nFKK9XFL251B2Z7xFv+pvHZLHx9PD8c= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org