$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: l5P0dIEzYMZXg8LJ606HTgfxgTb0fDfdIpU0gAT9upY= Subject key identifier: 31:CD:7B:2A:1C:0E:E7:A3:FA:AB:61:9C:71:85:74:FF:9F:82:F8:11 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 08D1 Signing time: Tue 30 Apr 2024 21:45:24 +0000 Manifest this update: Tue 30 Apr 2024 21:45:24 +0000 Manifest next update: Tue 07 May 2024 21:45:24 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: YySWmFGWKEplsmgg/eec8L3EOaUimZxOhr8PltrfpNk=) 2: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: 3sRqg4lZyDDXGUzqLBUb+ZExh0wrRh+8FyVCH1KpgVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Apr 30 21:45:24 2024 GMT Not After : May 7 21:45:24 2024 GMT Subject: CN=66316674-3988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:26:9f:63:3c:a6:af:65:85:41:c6:ca:ad:65: 6a:23:02:56:8e:9f:b4:a9:ff:80:3d:b6:6c:0b:96: 7a:6d:22:67:e9:61:ba:44:b8:20:d0:09:dd:79:f3: d6:ce:5b:b4:da:d7:51:7a:b5:61:ff:3d:87:ce:0b: 4a:17:8d:0c:a6:b0:88:62:c9:ee:e8:d2:2b:7d:0b: 65:54:c8:4f:3e:0a:a4:5e:b5:66:c8:f2:7c:e0:06: c4:d4:77:d8:29:cb:7f:59:ec:74:c1:0d:7d:5c:16: 35:cd:94:ec:1e:08:4d:2f:71:e0:32:d6:ae:41:36: eb:9f:4b:41:ca:1e:b9:b7:59:81:7b:c4:4d:e0:e1: 80:0f:ae:26:1e:94:f9:eb:6b:ed:c2:f6:a2:65:a5: fd:af:f5:d9:00:91:d1:7c:d6:65:57:18:a0:b4:91: 7d:28:c5:65:17:16:5d:dc:04:81:6d:6d:b8:02:1b: 22:77:d7:c1:fe:b5:76:3e:69:2f:03:b8:84:9a:27: 83:ae:33:a4:a5:01:cf:bb:d8:8e:b2:0d:86:69:4f: e5:22:d9:40:95:33:50:97:ad:c8:eb:74:b1:7f:e8: b6:8d:8a:c5:e1:fa:c6:97:75:e4:aa:40:29:5c:16: 3f:15:83:25:95:c7:76:59:ba:e2:d3:61:08:90:fe: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:7B:2A:1C:0E:E7:A3:FA:AB:61:9C:71:85:74:FF:9F:82:F8:11 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:60:de:c3:04:03:c2:ec:ad:28:15:9a:a8:e7:7c:2b:c8:59: 4f:41:60:58:51:1e:97:8e:3e:71:11:fd:50:1e:de:4f:48:43: 8a:cd:94:fc:0f:20:3b:6b:0d:c5:0d:f7:2d:e2:c3:be:7d:88: e8:9d:b9:b4:a9:53:4b:b4:12:ef:65:b0:28:f2:26:12:db:d4: 56:ea:03:ba:77:84:78:6a:f0:ec:64:b1:b3:0b:5f:cb:1b:5a: 94:84:11:f5:10:c8:90:db:80:a6:76:29:60:b6:5d:12:a5:ca: 87:a9:21:9b:c5:47:90:e6:04:6a:53:17:1f:8a:cd:94:34:36: 62:f3:b7:2e:b1:74:40:04:ec:a6:0a:d1:8f:94:59:1c:42:bb: 9f:77:2c:75:86:77:0e:45:d4:2d:7e:94:9e:ba:f6:e0:02:11: 89:a2:08:74:b7:57:56:91:dd:61:66:d6:eb:e9:54:c3:8b:17: 00:82:63:b2:34:0f:c7:8d:e2:24:74:66:67:dc:75:11:0d:64: 65:cf:42:ce:a1:d1:d4:32:ba:d3:a4:93:38:6f:13:8d:e5:15: 36:f3:c4:65:06:99:0b:29:91:68:d9:0b:d7:a0:58:b4:3a:ff: 5a:59:34:64:d7:ef:31:b4:b7:c4:1a:75:27:86:e6:61:ac:33: b8:75:ac:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjQwNDMwMjE0NTI0WhcNMjQwNTA3MjE0NTI0WjAYMRYwFAYD VQQDEw02NjMxNjY3NC0zOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9iafYzymr2WFQcbKrWVqIwJWjp+0qf+APbZsC5Z6bSJn6WG6RLgg0AndefPW zlu02tdRerVh/z2HzgtKF40MprCIYsnu6NIrfQtlVMhPPgqkXrVmyPJ84AbE1HfY Kct/Wex0wQ19XBY1zZTsHghNL3HgMtauQTbrn0tByh65t1mBe8RN4OGAD64mHpT5 62vtwvaiZaX9r/XZAJHRfNZlVxigtJF9KMVlFxZd3ASBbW24Ahsid9fB/rV2Pmkv A7iEmieDrjOkpQHPu9iOsg2GaU/lItlAlTNQl63I63Sxf+i2jYrF4frGl3XkqkAp XBY/FYMllcd2Wbri02EIkP5fuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHNeyoc Duej+qthnHGFdP+fgvgRMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmYN7DBAPC7K0oFZqo53wryFlPQWBYUR6Xjj5xEf1QHt5PSEOKzZT8 DyA7aw3FDfct4sO+fYjonbm0qVNLtBLvZbAo8iYS29RW6gO6d4R4avDsZLGzC1/L G1qUhBH1EMiQ24Cmdilgtl0SpcqHqSGbxUeQ5gRqUxcfis2UNDZi87cusXRABOym CtGPlFkcQrufdyx1hncORdQtfpSeuvbgAhGJogh0t1dWkd1hZtbr6VTDixcAgmOy NA/HjeIkdGZn3HURDWRlz0LOodHUMrrTpJM4bxON5RU288RlBpkLKZFo2QvXoFi0 Ov9aWTRk1+8xtLfEGnUnhuZhrDO4day8 -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:10 2024 by rpki-client on console-ams.rpki-client.org