$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: eMXIkG99WbOyc2U7pliotL20hPGsYJg9FKQzJSCa4LE= Subject key identifier: 75:01:82:54:48:82:F7:39:FE:3A:0F:E2:B3:50:65:C8:52:90:F5:13 Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 05DE Signing time: Fri 31 May 2024 23:00:08 +0000 Manifest this update: Fri 31 May 2024 23:00:08 +0000 Manifest next update: Fri 07 Jun 2024 23:00:08 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: cCoG77YPbR4VuTCSxuOwzrtYfwQ1XoeFLVauo9oHg6E=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: iwdB1nxGqs+gQ8A1MeI/NRaSpbPdDyxT09qg19TlxT4=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: G0pNS2leTFFrSijocSln6pPdL61D3MzyUqD2tiAmWUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: May 31 23:00:08 2024 GMT Not After : Jun 7 23:00:08 2024 GMT Subject: CN=665a5678-cd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:63:ca:b3:e3:3d:c2:5e:df:06:f8:b1:a6: 2e:49:f2:24:7d:4c:57:96:9b:ef:f2:fd:a6:a1:17: 79:a4:00:20:e6:68:18:d8:84:c0:6d:ea:18:96:7e: fc:46:20:1b:8d:60:c9:b9:e6:b0:75:45:ea:1c:65: b9:72:7b:bd:ab:62:56:71:1f:5f:ad:14:d4:b8:64: 9e:2b:dc:5b:fb:e6:03:05:3f:56:db:72:d9:74:05: 47:b1:e6:83:e2:42:09:bf:31:37:32:c6:b9:b9:62: 3d:40:f2:8e:a6:29:2e:41:76:85:6d:5d:18:21:d0: 7c:8b:0f:3b:37:c4:af:b4:c7:54:1c:f4:72:b7:37: 1b:fd:10:8e:b1:b1:ce:b9:88:aa:67:ef:d3:70:13: 25:7b:51:ce:4c:c8:86:41:86:e0:9e:9e:fc:a2:d6: 8b:8c:13:55:0f:10:a1:bf:27:4f:2d:5a:d2:24:d7: 3f:12:df:ae:0a:f4:4d:96:f1:a7:c2:fc:db:a9:c2: ee:a0:8e:65:fb:42:29:07:95:6f:e4:07:d1:c8:00: 91:cb:44:87:12:57:bf:b9:ef:58:aa:6e:64:02:d8: 4f:7b:d8:21:8b:e9:d8:36:da:f4:af:c2:43:41:d5: 9e:93:6b:d1:64:25:9a:0b:de:b1:47:15:05:d4:fb: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:82:54:48:82:F7:39:FE:3A:0F:E2:B3:50:65:C8:52:90:F5:13 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7b:23:7b:05:6b:55:df:75:5c:85:0b:b1:d6:06:8e:1a:35: 8f:2c:c1:22:cd:45:5c:4b:f0:1c:d3:96:fd:3d:58:18:b0:59: fa:ed:88:b5:04:f3:aa:cd:19:6f:2f:96:c1:26:b2:33:71:88: 8a:ef:96:fd:be:9c:32:bc:d4:09:8d:23:93:f1:12:6b:27:b2: 3f:47:23:ba:e4:78:ec:da:ee:6b:4c:cb:8a:2f:ea:da:d2:07: f9:4d:3e:0b:11:68:ef:9d:13:49:c9:a2:ed:db:52:6e:78:39: d6:c2:0f:dd:93:1f:b8:c4:61:ef:7a:7f:51:bd:a7:75:11:e6: c3:c1:16:33:d5:0a:94:ee:c4:59:3e:ab:ad:06:d9:ae:af:00: de:08:02:74:5f:01:ce:ff:75:89:e9:9a:18:9c:27:86:88:97: e3:77:b5:90:25:7a:c6:65:e6:26:a3:4e:c1:38:43:66:c2:ae: 76:71:a8:0c:df:92:5c:76:57:d6:d6:8d:1c:77:e1:b6:18:59: 3e:6a:49:29:d7:82:99:0c:38:24:bb:fa:16:93:74:e5:ed:a5: 4f:ae:a6:be:32:a2:17:1c:7a:ea:e9:4d:45:7a:aa:16:9a:4d: 06:ce:a7:b0:9f:41:94:a1:fc:cd:a9:5a:08:dd:58:a2:ea:43: 2f:8e:2f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjQwNTMxMjMwMDA4WhcNMjQwNjA3MjMwMDA4WjAYMRYwFAYD VQQDEw02NjVhNTY3OC1jZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+1jyrPjPcJe3wb4saYuSfIkfUxXlpvv8v2moRd5pAAg5mgY2ITAbeoYln78 RiAbjWDJueawdUXqHGW5cnu9q2JWcR9frRTUuGSeK9xb++YDBT9W23LZdAVHseaD 4kIJvzE3Msa5uWI9QPKOpikuQXaFbV0YIdB8iw87N8SvtMdUHPRytzcb/RCOsbHO uYiqZ+/TcBMle1HOTMiGQYbgnp78otaLjBNVDxChvydPLVrSJNc/Et+uCvRNlvGn wvzbqcLuoI5l+0IpB5Vv5AfRyACRy0SHEle/ue9Yqm5kAthPe9ghi+nYNtr0r8JD QdWek2vRZCWaC96xRxUF1PuYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUBglRI gvc5/joP4rNQZchSkPUTMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbeyN7BWtV33VchQux1gaOGjWPLMEizUVcS/Ac05b9PVgYsFn67Yi1 BPOqzRlvL5bBJrIzcYiK75b9vpwyvNQJjSOT8RJrJ7I/RyO65Hjs2u5rTMuKL+ra 0gf5TT4LEWjvnRNJyaLt21JueDnWwg/dkx+4xGHven9Rvad1EebDwRYz1QqU7sRZ PqutBtmurwDeCAJ0XwHO/3WJ6ZoYnCeGiJfjd7WQJXrGZeYmo07BOENmwq52cagM 35JcdlfW1o0cd+G2GFk+akkp14KZDDgku/oWk3Tl7aVPrqa+MqIXHHrq6U1FeqoW mk0Gzqewn0GUofzNqVoI3Vii6kMvji9c -----END CERTIFICATE-----Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org