$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: gKGu9i4KCmnZKqA7f8AOYwqeit8bcCien/K7uaTcLIk= Subject key identifier: 01:A9:88:4D:6A:0F:3E:4F:9C:64:A4:32:8D:BE:24:CE:A1:51:22:67 Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: 84 Signing time: Sun 19 May 2024 07:13:39 +0000 Manifest this update: Sun 19 May 2024 07:13:38 +0000 Manifest next update: Sun 26 May 2024 07:13:38 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: Sxrn76T47+LpdJKgckDf/on948SmxG3s/eggAA6lm2g=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: DXvJV9anvXFAzgO5tX20q/fodIojtgu7KxvrA7/9uV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: May 19 07:13:38 2024 GMT Not After : May 26 07:13:38 2024 GMT Subject: CN=6649a6a2-05e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:ea:49:bf:0f:53:ed:00:4b:7f:4d:62:10: 58:5c:a5:ca:aa:7b:12:07:43:d5:da:29:81:3c:bd: bf:50:ac:57:50:b4:53:9d:43:3f:43:64:a4:55:67: da:07:34:31:2e:f4:17:5b:23:2f:51:96:48:67:ca: b8:68:60:43:5d:35:39:af:60:a6:bf:f3:c2:bf:37: c7:c0:05:90:2d:66:68:5f:bb:d1:06:65:44:25:53: 2e:9c:45:99:51:86:e1:50:52:b8:b0:52:55:c5:6e: ee:91:9b:dc:9d:9a:3f:9e:68:45:f8:13:2b:13:71: ac:f1:db:eb:da:03:84:92:16:db:0e:1c:0b:1b:d1: 3b:cd:11:b0:1d:d6:47:48:80:7c:e0:85:2b:78:cd: b6:e4:7b:53:c2:6c:01:a9:12:b0:7e:18:cd:ac:cb: 41:60:a0:da:ea:24:ad:ea:76:34:fc:7e:97:1d:0d: ee:0f:8e:22:46:34:a0:11:e2:20:72:93:7a:cc:2e: 6f:de:6b:ca:a2:6c:5a:79:1f:ba:8c:99:97:4f:73: 17:43:52:a8:fa:f0:22:71:05:ac:3d:68:77:9f:b8: eb:4b:e9:c5:b2:aa:f6:35:89:35:94:c7:78:0b:98: f1:bf:43:6c:a7:87:4b:32:49:34:8d:08:f4:fb:4b: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:88:4D:6A:0F:3E:4F:9C:64:A4:32:8D:BE:24:CE:A1:51:22:67 X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8a:92:39:0b:c7:8e:8e:df:bf:94:b4:09:1f:f7:cd:d7:5f: 4e:27:e6:e8:13:db:6f:af:fa:59:69:6b:e4:dc:2e:99:e0:7a: a5:66:78:b0:f1:1d:8f:35:f6:6d:6e:e5:a1:bf:58:72:7d:ed: 2f:bd:35:20:25:d4:87:d9:84:ba:cf:12:84:d2:03:5a:d8:6f: 9b:d3:52:0f:3a:7b:ef:93:6d:a4:5f:a5:db:b7:f1:7d:4b:f7: 5f:4d:98:36:c9:69:fc:66:75:c0:a3:f9:41:54:c7:15:08:c1: d0:e4:4a:af:0b:19:2d:f5:4c:1e:e4:2e:3c:b4:e2:50:69:7c: d6:a8:75:22:ae:8a:c8:ed:a2:e6:76:09:7d:a3:7d:8f:1f:8a: cb:5a:86:88:33:a5:d0:65:d8:bc:36:ec:37:6b:63:6e:76:7a: 38:45:29:97:40:e7:55:66:65:fa:9a:52:5b:c6:0e:2f:24:f7: 2b:18:f8:e5:27:0f:9a:c9:73:36:24:cb:23:03:9b:c8:56:9a: 72:5e:03:3a:19:42:89:52:af:da:54:e7:6a:6b:e0:5e:a8:bf: 58:dd:b8:ba:ac:74:78:74:a9:f4:53:2d:f4:af:91:63:19:3a: 95:ba:8e:33:d5:f4:9c:74:25:41:9f:a9:e7:65:15:7a:fc:0e: fa:57:4a:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjQwNTE5MDcxMzM4WhcNMjQwNTI2MDcxMzM4WjAYMRYwFAYD VQQDEw02NjQ5YTZhMi0wNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4nqSb8PU+0AS39NYhBYXKXKqnsSB0PV2imBPL2/UKxXULRTnUM/Q2SkVWfa BzQxLvQXWyMvUZZIZ8q4aGBDXTU5r2Cmv/PCvzfHwAWQLWZoX7vRBmVEJVMunEWZ UYbhUFK4sFJVxW7ukZvcnZo/nmhF+BMrE3Gs8dvr2gOEkhbbDhwLG9E7zRGwHdZH SIB84IUreM225HtTwmwBqRKwfhjNrMtBYKDa6iSt6nY0/H6XHQ3uD44iRjSgEeIg cpN6zC5v3mvKomxaeR+6jJmXT3MXQ1Ko+vAicQWsPWh3n7jrS+nFsqr2NYk1lMd4 C5jxv0Nsp4dLMkk0jQj0+0uArwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGpiE1q Dz5PnGSkMo2+JM6hUSJnMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPipI5C8eOjt+/lLQJH/fN119OJ+boE9tvr/pZaWvk3C6Z4HqlZniw 8R2PNfZtbuWhv1hyfe0vvTUgJdSH2YS6zxKE0gNa2G+b01IPOnvvk22kX6Xbt/F9 S/dfTZg2yWn8ZnXAo/lBVMcVCMHQ5EqvCxkt9Uwe5C48tOJQaXzWqHUirorI7aLm dgl9o32PH4rLWoaIM6XQZdi8Nuw3a2Nudno4RSmXQOdVZmX6mlJbxg4vJPcrGPjl Jw+ayXM2JMsjA5vIVppyXgM6GUKJUq/aVOdqa+BeqL9Y3bi6rHR4dKn0Uy30r5Fj GTqVuo4z1fScdCVBn6nnZRV6/A76V0p6 -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org