$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: ukdhYSCB02xlACZNMxMGwf7pABK1gl3C5igvPgLAkrc= Subject key identifier: 86:CD:F6:58:0F:B6:C4:76:1B:C8:78:B7:18:65:6E:99:BC:2B:4D:A8 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 081C Signing time: Sat 18 May 2024 21:49:34 +0000 Manifest this update: Sat 18 May 2024 21:49:34 +0000 Manifest next update: Sat 25 May 2024 21:49:34 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: lcGDjH6iH7uyyqfgezrSZ3amRdL3oY0EJms/lTWuHH0=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: gPKeAauxJO04bI49waq1qk9LVY9PKcMS2qliPpV085E=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: RxGNhACs7/UV6hxkSDABvNxydLsRaGDxmO3r/o8h07c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: May 18 21:49:34 2024 GMT Not After : May 25 21:49:34 2024 GMT Subject: CN=6649226e-245b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:85:9a:b7:38:33:bd:43:e4:e1:7f:c4:26:8f: fb:4d:d5:e2:1d:a3:3c:c1:8a:50:60:3b:bc:17:d6: f3:72:d2:0b:f9:6a:57:19:df:c2:48:b0:7e:f0:66: c7:ff:6d:c6:0f:e0:79:ff:fe:6c:05:8a:d4:7e:e5: 22:93:cc:04:35:2d:d2:d2:40:cc:57:8f:cf:85:b6: b8:67:3e:28:3f:4b:ee:0e:62:ca:a0:13:59:ed:28: 84:1b:70:ed:0f:8a:99:10:94:fe:43:71:38:d2:1d: 4b:03:cd:67:7f:67:2c:36:22:23:d0:33:33:3a:77: bf:1f:34:66:22:dd:d3:65:7f:92:25:69:6a:d7:61: 5f:fd:a3:da:8d:ef:53:f2:94:01:c5:6a:df:06:43: 8a:2b:83:42:a1:b4:68:87:ee:f3:af:06:ef:c6:68: 96:20:e9:eb:2d:52:ac:8d:f7:60:fb:9e:fc:9b:ab: ca:8e:71:7b:dd:1e:ee:01:2d:1d:d4:ec:65:e6:fe: c7:2f:f7:d9:69:69:35:49:17:2d:3c:e1:08:d6:53: 12:bd:d3:a1:0a:37:e0:3c:44:48:19:de:3f:14:e7: d7:39:0a:de:2b:4e:29:f8:bf:37:6f:ac:28:8f:21: c7:4c:a9:97:d6:df:b5:aa:9c:3a:d8:6b:30:2d:27: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CD:F6:58:0F:B6:C4:76:1B:C8:78:B7:18:65:6E:99:BC:2B:4D:A8 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2a:17:2a:03:db:2b:93:d3:1d:75:98:90:07:93:2b:37:0e: 74:f0:fb:b5:1f:c5:a6:47:0f:00:3c:77:a5:23:8f:94:a4:0b: 94:0d:73:28:ae:38:b3:98:31:1a:c5:bb:1a:21:71:b2:00:f4: 1e:a6:73:f8:c1:59:e5:3c:e2:79:5b:2d:c0:48:01:e6:11:07: ab:5c:ef:df:a3:97:7f:25:ad:56:66:48:e7:8d:5e:44:26:0b: 0b:88:5a:88:52:c4:3c:82:13:78:66:08:d8:6f:60:8a:5f:f5: 67:24:eb:69:a7:13:37:91:87:7c:5e:a8:47:8e:fb:1a:d5:0b: 38:37:7b:18:65:c3:29:25:f0:2b:2e:6a:43:cc:49:05:68:98: 7f:b0:50:58:54:e0:66:9e:83:46:24:43:3d:c5:64:67:7b:6e: ca:08:2b:e4:c1:74:59:f7:18:db:81:35:05:93:ac:0a:b4:d9: fd:d7:14:f3:22:f7:b3:cc:3d:ef:43:33:e9:2d:da:d9:26:8a: 1d:46:0e:db:2f:3e:b1:af:83:00:bf:23:47:b9:7f:ae:90:95: f5:e8:31:b6:21:fa:c8:c8:a5:30:4a:67:a6:2f:9c:79:d8:10: 6a:be:71:2d:bb:37:30:c3:84:6d:3b:df:ec:ec:be:47:2d:3d: 0b:5a:c6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjQwNTE4MjE0OTM0WhcNMjQwNTI1MjE0OTM0WjAYMRYwFAYD VQQDEw02NjQ5MjI2ZS0yNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64WatzgzvUPk4X/EJo/7TdXiHaM8wYpQYDu8F9bzctIL+WpXGd/CSLB+8GbH /23GD+B5//5sBYrUfuUik8wENS3S0kDMV4/Phba4Zz4oP0vuDmLKoBNZ7SiEG3Dt D4qZEJT+Q3E40h1LA81nf2csNiIj0DMzOne/HzRmIt3TZX+SJWlq12Ff/aPaje9T 8pQBxWrfBkOKK4NCobRoh+7zrwbvxmiWIOnrLVKsjfdg+578m6vKjnF73R7uAS0d 1Oxl5v7HL/fZaWk1SRctPOEI1lMSvdOhCjfgPERIGd4/FOfXOQreK04p+L83b6wo jyHHTKmX1t+1qpw62GswLSeiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbN9lgP tsR2G8h4txhlbpm8K02oMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArKhcqA9srk9MddZiQB5MrNw508Pu1H8WmRw8APHelI4+UpAuUDXMo rjizmDEaxbsaIXGyAPQepnP4wVnlPOJ5Wy3ASAHmEQerXO/fo5d/Ja1WZkjnjV5E JgsLiFqIUsQ8ghN4ZgjYb2CKX/VnJOtppxM3kYd8XqhHjvsa1Qs4N3sYZcMpJfAr LmpDzEkFaJh/sFBYVOBmnoNGJEM9xWRne27KCCvkwXRZ9xjbgTUFk6wKtNn91xTz IvezzD3vQzPpLdrZJoodRg7bLz6xr4MAvyNHuX+ukJX16DG2IfrIyKUwSmemL5x5 2BBqvnEtuzcww4RtO9/s7L5HLT0LWsaq -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org