$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: yboLvOIRhR6BbQMBCLpCnr8Xma7YyQUauuW4rE/ZNeU= Subject key identifier: 1F:80:37:3A:9B:62:56:4C:AF:82:CC:E5:A2:1C:47:9D:AA:B8:1E:B8 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 0307 Signing time: Sun 19 May 2024 03:11:06 +0000 Manifest this update: Sun 19 May 2024 03:11:06 +0000 Manifest next update: Sun 26 May 2024 03:11:06 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: o65c+4XMnfZjoyHwnSz6QftBANtx0Hd0tIj7lPMC5rw=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: HTGld4sG9yqqadz8T3In5bd8t3M3Vpo8qiuFWWL293M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: May 19 03:11:06 2024 GMT Not After : May 26 03:11:06 2024 GMT Subject: CN=66496dca-3abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:2c:ba:31:f8:01:89:77:01:52:54:66:4d: f6:2d:60:65:9f:e4:2b:4e:5c:53:c0:d2:1c:ac:de: 6b:b4:1b:4b:89:d9:55:65:b6:bd:ed:de:ec:17:65: a6:aa:e7:c8:7f:d0:97:07:72:73:28:d3:75:2c:cf: 4e:10:e2:d5:20:fa:04:94:97:12:58:9b:4a:04:11: 0c:b3:c3:38:33:92:05:7d:55:13:5e:04:16:ac:97: 11:1e:2e:0d:f0:a7:5a:31:df:a4:10:d6:f2:54:27: 60:88:bb:21:a3:07:5f:2e:5c:ab:d0:e4:75:87:a3: a0:0d:8f:6e:d7:3a:1a:98:c5:71:f8:35:56:19:18: f8:7e:7a:a0:30:50:ab:b4:61:d0:e0:c5:4d:46:d2: 18:75:9b:c5:17:14:9a:1e:35:30:1e:ae:3b:de:4f: e0:fd:77:d2:5e:a3:20:9a:e5:7b:27:06:d3:c5:d3: a4:8c:c3:d5:64:1f:c7:4f:c6:d7:03:35:6f:78:4b: 81:56:21:29:f4:fe:c4:a6:57:e2:92:3e:c6:c7:ab: 71:2d:b0:89:a3:11:e9:c2:a7:99:d6:ff:80:9a:c0: 98:c7:48:a5:ac:a9:e5:a6:07:7a:21:f9:9f:89:0e: 19:1c:a0:f1:67:b8:72:97:c1:f5:5e:a0:cf:cd:66: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:37:3A:9B:62:56:4C:AF:82:CC:E5:A2:1C:47:9D:AA:B8:1E:B8 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9e:02:44:89:3e:0a:7b:4e:ef:5e:4a:e4:41:9f:fc:d8:d3: 6e:d2:2a:7c:c5:52:f2:9b:c4:72:0e:7b:35:ea:7f:30:3b:7f: fc:0e:ae:db:81:57:5b:f0:49:8a:59:09:be:c9:f5:28:3b:3f: 30:87:ea:28:e8:08:96:ee:ff:92:c0:ec:94:c8:13:fa:a4:2d: 2d:1a:35:0f:49:6e:7a:7f:03:76:2a:18:c7:81:35:16:3d:ef: 82:bc:53:89:19:8e:83:61:c2:d5:93:cd:ea:09:f7:2a:a9:ed: 67:ce:b4:11:f0:6c:b6:e2:c2:9d:5a:0b:fc:6f:7c:c5:10:59: d6:9c:f8:6b:dc:36:0a:ba:96:0c:6e:17:16:30:1a:cd:10:ea: da:28:64:1b:14:cd:32:c5:46:dc:58:36:5f:d6:22:da:ff:47: c7:68:81:51:b0:2d:65:07:3e:00:b1:3c:a1:35:70:48:63:21: 59:8f:4c:43:be:5e:c6:2a:71:d0:55:19:08:f4:2f:4a:30:19: 02:fc:76:93:06:2b:f7:9b:72:6e:d3:35:ff:4d:1c:8c:77:c1: cc:80:d6:2c:de:dd:2f:06:15:33:68:5b:3a:7a:f5:d3:b3:0e: 76:f2:35:33:02:d1:19:20:e9:07:1d:74:42:59:a3:1c:f5:f8: 76:df:1d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjQwNTE5MDMxMTA2WhcNMjQwNTI2MDMxMTA2WjAYMRYwFAYD VQQDEw02NjQ5NmRjYS0zYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7YsujH4AYl3AVJUZk32LWBln+QrTlxTwNIcrN5rtBtLidlVZba97d7sF2Wm qufIf9CXB3JzKNN1LM9OEOLVIPoElJcSWJtKBBEMs8M4M5IFfVUTXgQWrJcRHi4N 8KdaMd+kENbyVCdgiLshowdfLlyr0OR1h6OgDY9u1zoamMVx+DVWGRj4fnqgMFCr tGHQ4MVNRtIYdZvFFxSaHjUwHq473k/g/XfSXqMgmuV7JwbTxdOkjMPVZB/HT8bX AzVveEuBViEp9P7Eplfikj7Gx6txLbCJoxHpwqeZ1v+AmsCYx0ilrKnlpgd6Ifmf iQ4ZHKDxZ7hyl8H1XqDPzWblfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+ANzqb YlZMr4LM5aIcR52quB64MB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCungJEiT4Ke07vXkrkQZ/82NNu0ip8xVLym8RyDns16n8wO3/8Dq7b gVdb8EmKWQm+yfUoOz8wh+oo6AiW7v+SwOyUyBP6pC0tGjUPSW56fwN2KhjHgTUW Pe+CvFOJGY6DYcLVk83qCfcqqe1nzrQR8Gy24sKdWgv8b3zFEFnWnPhr3DYKupYM bhcWMBrNEOraKGQbFM0yxUbcWDZf1iLa/0fHaIFRsC1lBz4AsTyhNXBIYyFZj0xD vl7GKnHQVRkI9C9KMBkC/HaTBiv3m3Ju0zX/TRyMd8HMgNYs3t0vBhUzaFs6evXT sw528jUzAtEZIOkHHXRCWaMc9fh23x3D -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org