$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: 2GPdfeJjhaY+XeWofGrTw0YNbhbtWTh6osbGq4z1+oc= Subject key identifier: 3B:4F:8F:12:0F:37:C2:6B:95:4F:90:67:8B:BE:3B:63:C8:D8:DC:00 Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 23FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 23ED Signing time: Sat 18 May 2024 16:06:18 +0000 Manifest this update: Sat 18 May 2024 16:06:17 +0000 Manifest next update: Sat 25 May 2024 16:06:17 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: 5PLPKCcqBPw5Nxb8Qnz0Tb9lGc4kGcBeNPjuvZyqkgk=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: U2yrRKU3HbDoIBWBQu4qm/wky6pQMgcQfh+AO7HPjc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9210 (0x23fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: May 18 16:06:17 2024 GMT Not After : May 25 16:06:17 2024 GMT Subject: CN=6648d1fa-c35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:2b:59:3e:54:e7:40:6e:83:f8:8c:13:c3: 59:ff:bb:d0:a2:3b:74:89:4e:83:2e:54:a6:70:df: 7d:91:84:60:fa:c6:34:2a:a2:91:4f:72:7c:e9:95: 67:7f:9c:69:d1:d8:d2:1c:fd:8b:e6:bc:27:73:a6: 08:6f:31:9b:71:df:a9:d8:78:73:90:d5:d9:9c:c2: 10:77:37:ea:e1:9a:91:8c:2a:6a:ff:38:de:e8:a1: d2:b8:2d:a3:0a:70:c7:38:34:71:46:2f:21:fe:c1: 5e:62:c7:b9:8a:1b:f7:94:a6:b8:bb:7b:8b:09:10: dc:75:74:42:dc:8a:96:0e:06:9b:b9:3c:fe:9e:8c: a8:b4:9b:d5:65:b6:fc:89:02:47:03:d3:a6:a8:86: 07:5d:62:70:86:c1:ab:c2:9c:7c:a1:b8:e0:d3:a5: 09:0d:d3:b0:ff:e3:55:a5:a1:98:72:1b:a0:d9:b6: 1e:7d:11:2b:06:b4:81:c6:fd:a9:69:bf:20:9d:93: ec:dd:3b:eb:8f:d9:e6:5f:ad:f8:ac:25:69:fa:52: f3:39:97:0d:fd:be:b1:d4:af:7d:fc:4d:65:07:c9: 72:7c:67:c8:6a:bf:2a:20:da:f1:2b:7b:2d:b9:07: 22:75:1b:f4:91:72:0b:78:cc:86:e8:39:6e:35:a0: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:8F:12:0F:37:C2:6B:95:4F:90:67:8B:BE:3B:63:C8:D8:DC:00 X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:78:ee:0f:90:ea:25:5c:fd:91:2d:d6:cc:ef:65:9f:bf:c3: 46:b7:9b:f0:6a:00:24:15:87:9b:50:40:3c:94:22:90:a2:35: c1:b4:62:b2:da:aa:72:45:a1:b1:ef:e6:dd:07:53:98:1a:f9: 4e:75:ea:f3:fd:4d:3f:10:ea:2d:a1:d9:c1:33:5c:19:a4:05: ae:66:78:87:02:99:e0:d9:6d:fc:4e:d9:27:dc:e8:21:0b:d6: ac:98:2d:f7:72:b5:f8:a8:fa:26:5c:3b:58:8f:b8:b1:d9:e5: 04:dd:4e:ab:83:a0:46:90:60:08:e4:2d:ad:53:f9:eb:c3:bb: 66:5a:81:d8:04:7c:9c:fe:b6:e3:f9:ec:90:f2:1a:c4:6f:0e: 0f:1e:2b:26:2b:6f:6e:a8:fb:f2:41:e0:df:84:e9:c1:18:2b: 97:32:0e:57:0d:70:43:5e:64:73:e5:46:df:15:e2:ee:da:43: f2:39:a6:7b:ff:5f:74:7c:2e:4b:bb:5f:47:17:ed:49:a8:0b: 2d:13:05:30:fa:ae:8f:9d:dc:d1:e0:25:5a:60:4f:90:87:60: 24:04:19:e1:60:c9:75:95:f9:02:86:a1:d9:e9:15:6c:dc:85: 68:17:25:4d:d6:93:cf:93:1c:3d:ed:16:cf:06:4c:d7:a9:a3: 6e:81:ae:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjQwNTE4MTYwNjE3WhcNMjQwNTI1MTYwNjE3WjAYMRYwFAYD VQQDEw02NjQ4ZDFmYS1jMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NorWT5U50Bug/iME8NZ/7vQojt0iU6DLlSmcN99kYRg+sY0KqKRT3J86ZVn f5xp0djSHP2L5rwnc6YIbzGbcd+p2HhzkNXZnMIQdzfq4ZqRjCpq/zje6KHSuC2j CnDHODRxRi8h/sFeYse5ihv3lKa4u3uLCRDcdXRC3IqWDgabuTz+noyotJvVZbb8 iQJHA9OmqIYHXWJwhsGrwpx8objg06UJDdOw/+NVpaGYchug2bYefRErBrSBxv2p ab8gnZPs3Tvrj9nmX634rCVp+lLzOZcN/b6x1K99/E1lB8lyfGfIar8qINrxK3st uQcidRv0kXILeMyG6DluNaA6MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtPjxIP N8JrlU+QZ4u+O2PI2NwAMB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7eO4PkOolXP2RLdbM72Wfv8NGt5vwagAkFYebUEA8lCKQojXBtGKy 2qpyRaGx7+bdB1OYGvlOderz/U0/EOotodnBM1wZpAWuZniHApng2W38Ttkn3Ogh C9asmC33crX4qPomXDtYj7ix2eUE3U6rg6BGkGAI5C2tU/nrw7tmWoHYBHyc/rbj +eyQ8hrEbw4PHismK29uqPvyQeDfhOnBGCuXMg5XDXBDXmRz5UbfFeLu2kPyOaZ7 /190fC5Lu19HF+1JqAstEwUw+q6PndzR4CVaYE+Qh2AkBBnhYMl1lfkChqHZ6RVs 3IVoFyVN1pPPkxw97RbPBkzXqaNuga6R -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org