$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json) Hash identifier: B0WsNE6WZaPSNDfl5iBhSe4WGMOmW4ODg6BRDl2Ba6w= Subject key identifier: D7:4C:21:55:62:FE:C9:A4:51:DB:13:78:02:BB:90:E4:42:BE:D1:E0 Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft Manifest number: 0410 Signing time: Sun 19 May 2024 02:06:09 +0000 Manifest this update: Sun 19 May 2024 02:06:08 +0000 Manifest next update: Sun 26 May 2024 02:06:08 +0000 Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: 9BNUURD5tNJFX8+j0Lg8DnQfSWz0KdbL6e/1LBBAYwg=) 2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: yt/XWmPKG67uSFXOn2w5Gq2AOftyWkDm+CLBqYzlJTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Validity Not Before: May 19 02:06:08 2024 GMT Not After : May 26 02:06:08 2024 GMT Subject: CN=66495e91-6c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:1b:1d:36:66:e9:f7:d8:35:3a:77:3a:ab: 03:f5:cb:90:cb:e0:32:fd:7a:6b:73:ca:f0:c6:df: 16:af:14:95:7a:fe:e7:60:86:4b:8c:e0:6c:94:5a: e3:cf:69:16:5c:e0:77:35:85:48:f9:b1:62:45:99: 7b:b1:b2:a3:33:bb:71:86:6a:ff:fa:b9:d0:e0:52: 5e:7e:bd:8f:80:1d:e1:6f:37:b5:47:ca:94:b3:fe: 2c:b5:de:6c:f5:b6:db:54:e2:0b:ea:ea:b4:c7:7e: a1:c2:c1:e6:4c:6c:c2:56:ef:73:3a:22:76:d5:4d: b6:6b:7e:b6:9a:04:b5:d8:b3:50:4f:a8:6e:dc:4f: b7:6f:1a:c7:f9:ad:a7:d0:97:8d:04:6a:b8:6c:13: 5c:c3:0a:f4:90:4c:a9:8c:13:1f:59:ff:69:a9:43: b2:05:db:61:c1:42:f5:a3:c4:65:a4:09:84:7f:e1: 9e:c4:e9:01:9e:7a:66:7e:80:ed:21:73:ab:95:a1: 5e:9a:69:70:1e:6f:c7:c5:0d:c1:0c:4f:74:91:31: 19:73:32:43:18:96:08:80:04:49:0e:f5:40:af:c7: 2f:9e:23:f0:cd:f1:84:50:12:f9:52:92:19:0c:49: 13:1d:d7:6a:8d:aa:c0:97:bd:a1:d3:14:e0:aa:52: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:21:55:62:FE:C9:A4:51:DB:13:78:02:BB:90:E4:42:BE:D1:E0 X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:e5:00:17:df:0a:b6:4d:95:5a:b2:8d:f9:d9:f0:b6:49:da: 60:a2:87:f1:37:24:20:4d:4b:74:8f:c4:a1:6e:df:ae:21:49: c3:dc:fb:db:67:81:06:95:38:7e:f5:5b:50:a9:75:18:51:2f: f6:40:ef:a0:90:52:51:47:67:cd:db:ed:37:ae:c8:5d:0c:fe: 7f:01:ae:e2:34:a3:c5:fc:f2:1c:8e:7b:b5:6f:29:51:c1:38: 50:17:1d:a5:ee:a5:d6:df:15:9e:8a:59:2b:63:83:27:f4:e3: e7:77:df:6e:35:80:c7:e1:55:f6:48:a6:b8:4c:87:43:fe:34: f3:c7:18:31:fe:f5:47:09:27:61:d6:29:4f:99:0a:61:ff:54: 3f:7c:28:52:9c:61:fe:b8:a2:b7:09:b5:c2:a5:49:be:b0:21: c5:9d:d8:ff:37:d4:9b:dc:e0:dd:11:60:c9:0e:e2:32:15:31: 7b:a6:2a:42:51:74:bc:bb:a3:6c:f1:06:ea:c1:bf:ef:63:dc: b9:53:64:a3:87:28:82:98:23:eb:67:1e:ab:2d:63:d1:ad:87: c5:fd:b9:14:5e:35:ae:d4:6b:a2:66:f5:d9:78:a4:92:4f:1d: e7:40:80:f5:04:01:f7:51:8a:41:f6:11:78:69:fe:ca:8b:9d: b0:33:42:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjQwNTE5MDIwNjA4WhcNMjQwNTI2MDIwNjA4WjAYMRYwFAYD VQQDEw02NjQ5NWU5MS02Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxsbHTZm6ffYNTp3OqsD9cuQy+Ay/Xprc8rwxt8WrxSVev7nYIZLjOBslFrj z2kWXOB3NYVI+bFiRZl7sbKjM7txhmr/+rnQ4FJefr2PgB3hbze1R8qUs/4std5s 9bbbVOIL6uq0x36hwsHmTGzCVu9zOiJ21U22a362mgS12LNQT6hu3E+3bxrH+a2n 0JeNBGq4bBNcwwr0kEypjBMfWf9pqUOyBdthwUL1o8RlpAmEf+GexOkBnnpmfoDt IXOrlaFemmlwHm/HxQ3BDE90kTEZczJDGJYIgARJDvVAr8cvniPwzfGEUBL5UpIZ DEkTHddqjarAl72h0xTgqlKU3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdMIVVi /smkUdsTeAK7kORCvtHgMB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjJDMS8yRUE1MUQ1NjIwREMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVK YUFUNDJsTGl6M2pZa2F4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC95QAX3wq2TZVaso352fC2SdpgoofxNyQgTUt0j8Shbt+uIUnD3Pvb Z4EGlTh+9VtQqXUYUS/2QO+gkFJRR2fN2+03rshdDP5/Aa7iNKPF/PIcjnu1bylR wThQFx2l7qXW3xWeilkrY4Mn9OPnd99uNYDH4VX2SKa4TIdD/jTzxxgx/vVHCSdh 1ilPmQph/1Q/fChSnGH+uKK3CbXCpUm+sCHFndj/N9Sb3ODdEWDJDuIyFTF7pipC UXS8u6Ns8Qbqwb/vY9y5U2SjhyiCmCPrZx6rLWPRrYfF/bkUXjWu1GuiZvXZeKSS Tx3nQID1BAH3UYpB9hF4af7Ki52wM0KB -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org