$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft File: B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json) Hash identifier: v7jy01E5UmurMFTOvEv+9iraxQTG04RWR2HXQKsIC/Y= Subject key identifier: CF:4C:18:2D:C4:67:4D:28:78:35:7A:FE:63:B4:67:82:DC:21:4A:C3 Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74 Certificate issuer: /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374 Certificate serial: 1415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft Manifest number: 1414 Signing time: Fri 31 May 2024 17:39:55 +0000 Manifest this update: Fri 31 May 2024 17:39:54 +0000 Manifest next update: Fri 07 Jun 2024 17:39:54 +0000 Files and hashes: 1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: r1CEM+yaMFhPwaS6Nodzvnl92wgn+V2HPg+cWk+B6dA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374 Validity Not Before: May 31 17:39:54 2024 GMT Not After : Jun 7 17:39:54 2024 GMT Subject: CN=665a0b6b-1b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:38:69:78:c2:7e:0f:f1:c8:67:c6:94:ef: b9:18:a4:35:8a:b1:09:ad:f9:e5:21:a1:51:c3:58: 58:9e:b4:95:71:be:9b:57:c7:f6:10:f2:5c:c7:8f: 7e:3a:3f:eb:ad:1b:5a:67:cd:c1:68:58:6f:a2:d3: f7:e4:e1:69:4a:94:f9:c4:c7:ac:7f:0f:b2:77:79: 22:ba:aa:85:25:81:46:73:d6:0f:fe:cb:0f:0e:b5: 1b:32:5f:32:bc:36:d4:92:d7:a6:04:51:5c:f1:bd: 55:33:5a:0f:f3:ea:11:41:83:1f:e6:86:77:de:09: 5f:ef:65:1e:17:48:a3:a2:82:98:29:d3:e9:b6:fd: 57:08:bb:d5:c3:28:48:e1:69:d4:81:72:3e:ec:80: 2a:e2:14:a3:bd:2e:2e:82:e5:b7:a0:72:08:93:ee: 43:17:4d:65:1b:8e:fa:37:ed:39:26:56:98:a6:01: f4:c3:44:82:3a:20:09:89:3b:e7:59:30:8c:c8:af: a5:45:68:e5:99:1e:f2:81:cb:42:e6:09:0a:bb:cc: b6:99:7c:d3:2e:7c:2d:61:99:b6:4c:7e:f4:c3:35: 01:82:5c:84:0e:e9:cd:17:44:8b:20:ee:0b:3e:5a: 61:d3:22:e7:82:66:45:ea:b3:6d:29:d6:0f:3a:e4: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4C:18:2D:C4:67:4D:28:78:35:7A:FE:63:B4:67:82:DC:21:4A:C3 X509v3 Authority Key Identifier: keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:81:aa:f4:5c:4f:3d:b9:e3:71:fa:9a:76:7f:83:b3:72:77: af:e9:9e:3a:cd:7f:61:fd:be:d1:00:9c:9b:50:c2:1c:4e:61: e8:3c:4b:43:17:7f:8f:81:72:97:44:1f:57:f2:96:17:68:da: ae:8d:a7:ef:a9:3a:fe:88:91:ce:dd:1a:d7:b8:07:17:90:a2: 12:6a:5b:6f:98:9d:82:63:9c:44:7b:0c:0f:91:97:06:3f:c3: 20:c9:f1:7a:1f:df:2f:c2:b6:08:be:77:c1:52:38:6d:78:94: 11:eb:0f:02:93:03:0f:82:49:d7:ba:5c:a9:d5:8f:ba:1c:bc: 7c:31:3b:7f:1a:85:7f:29:20:0a:6e:63:84:2f:ae:7a:e3:13: 43:49:04:b4:5c:07:cf:9f:70:18:15:b8:18:df:22:13:79:7f: 7e:1f:ae:83:e7:87:a7:2e:9b:7e:ae:48:d3:e1:7e:c6:c6:5d: b3:a5:f0:fd:e9:c0:56:30:9f:02:0a:5d:5f:c7:a6:74:33:52: 40:f2:7b:3d:f1:74:38:b6:8c:c0:9a:90:75:74:22:67:23:a3: 3e:d7:33:b7:94:d4:3f:93:9e:ab:94:27:72:8e:fd:76:ee:1c: 37:7c:3d:fe:f5:d2:81:b6:69:cc:03:a6:9e:27:94:89:3a:91: 59:b9:3d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RjkxMTAvBgNVBAUTKDA3NTNGRTIyRkZFRDZCMDBCNkU2RTNDNUFCMUMzQzg0 MjAyQTYzNzQwHhcNMjQwNTMxMTczOTU0WhcNMjQwNjA3MTczOTU0WjAYMRYwFAYD VQQDEw02NjVhMGI2Yi0xYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnN04aXjCfg/xyGfGlO+5GKQ1irEJrfnlIaFRw1hYnrSVcb6bV8f2EPJcx49+ Oj/rrRtaZ83BaFhvotP35OFpSpT5xMesfw+yd3kiuqqFJYFGc9YP/ssPDrUbMl8y vDbUktemBFFc8b1VM1oP8+oRQYMf5oZ33glf72UeF0ijooKYKdPptv1XCLvVwyhI 4WnUgXI+7IAq4hSjvS4uguW3oHIIk+5DF01lG476N+05JlaYpgH0w0SCOiAJiTvn WTCMyK+lRWjlmR7ygctC5gkKu8y2mXzTLnwtYZm2TH70wzUBglyEDunNF0SLIO4L Plph0yLngmZF6rNtKdYPOuSy8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9MGC3E Z00oeDV6/mO0Z4LcIUrDMB8GA1UdIwQYMBaAFAdT/iL/7WsAtubjxascPIQgKmN0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGOS9DNTFGMzk0QTU1 OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3QzI1dVBGcXh3OGhDQXFZ M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxUC1Jdl90YXdDMjV1UEZxeHc4aENBcVkzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGOS9DNTFGMzk0QTU1OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3 QzI1dVBGcXh3OGhDQXFZM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCgar0XE89ueNx+pp2f4Ozcnev6Z46zX9h/b7RAJybUMIcTmHoPEtD F3+PgXKXRB9X8pYXaNqujafvqTr+iJHO3RrXuAcXkKISaltvmJ2CY5xEewwPkZcG P8MgyfF6H98vwrYIvnfBUjhteJQR6w8CkwMPgknXulyp1Y+6HLx8MTt/GoV/KSAK bmOEL6564xNDSQS0XAfPn3AYFbgY3yITeX9+H66D54enLpt+rkjT4X7Gxl2zpfD9 6cBWMJ8CCl1fx6Z0M1JA8ns98XQ4tozAmpB1dCJnI6M+1zO3lNQ/k56rlCdyjv12 7hw3fD3+9dKBtmnMA6aeJ5SJOpFZuT0B -----END CERTIFICATE-----Generated at Fri May 31 20:34:00 2024 by rpki-client on console-ams.rpki-client.org