$ rpki-client -vvf rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft File: bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft (raw, json) Hash identifier: N45YAVLX6GFyzuwwgFCAwAdWkYY1R/pPEpnnF6b1kyE= Subject key identifier: 90:D8:4C:ED:90:E0:D7:0C:24:00:D1:77:0C:5A:47:E8:65:5B:11:6C Authority key identifier: 6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23 Certificate issuer: /CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft Manifest number: 0B01 Signing time: Sat 18 May 2024 20:23:48 +0000 Manifest this update: Sat 18 May 2024 20:23:48 +0000 Manifest next update: Sat 25 May 2024 20:23:48 +0000 Files and hashes: 1: bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl (hash: OMgHHynMprwY2epsm087XMq4GskynRAv7pKuMngmbR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023 Validity Not Before: May 18 20:23:48 2024 GMT Not After : May 25 20:23:48 2024 GMT Subject: CN=66490e54-4f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:dd:ab:db:b3:20:61:63:c6:28:80:c9:b9: 3e:0c:94:32:8e:9d:ff:35:49:f1:2d:cb:96:1f:96: 21:5e:01:59:92:57:9b:a8:fb:a9:66:fb:38:db:08: 6e:f2:4d:5f:17:bb:69:b9:20:3a:51:2e:27:9f:01: 08:ed:28:38:56:10:f4:0d:11:4f:84:2a:be:15:5d: 4d:fb:d3:82:66:30:13:86:8b:be:3d:41:a3:98:e3: 65:e3:94:92:04:ac:a9:c4:22:49:91:38:9a:4e:93: d2:1a:2b:44:97:7d:a2:5d:17:f8:77:78:e5:b7:27: aa:3b:00:68:a4:3a:09:d2:91:9d:e0:9c:09:24:c6: f0:44:ed:d5:c0:4b:47:a5:d5:07:b8:b3:ff:37:c7: 3d:2a:b7:34:2b:72:ba:ca:83:1b:f3:5b:96:d2:d5: 6a:86:36:0a:61:c8:16:f7:cb:c2:5a:e5:3e:ff:3c: 6b:92:02:a1:aa:77:ee:81:df:03:52:2d:11:06:c3: 7b:50:a7:d0:b6:b7:b9:92:c0:6e:48:c0:3a:7f:a0: dc:ab:fc:68:bd:db:b1:e5:3e:25:1e:26:d9:64:09: a7:8c:44:ce:55:21:65:04:fd:b4:0a:37:1f:a2:ec: e2:f3:38:ec:0c:5a:d4:51:4d:ca:07:79:e1:14:3b: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:4C:ED:90:E0:D7:0C:24:00:D1:77:0C:5A:47:E8:65:5B:11:6C X509v3 Authority Key Identifier: keyid:6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:22:85:88:4c:cd:31:d4:11:e6:6b:18:0d:12:21:ae:6a:62: 4e:a0:d8:ca:45:d4:62:00:45:96:29:28:80:db:1c:16:05:f3: 1b:48:f3:60:2f:ce:53:f1:3c:36:c9:51:91:3a:df:77:3c:c5: 75:24:1b:15:d9:43:4f:b2:cf:bf:77:91:09:5e:56:d2:eb:dc: cb:94:92:40:0a:ad:d6:54:a7:12:7b:df:55:7f:bc:1e:c7:84: 77:12:47:32:4e:a1:d0:2e:f6:56:3f:12:82:ab:30:c2:67:26: 3d:12:94:44:5f:42:3b:75:c1:21:61:ed:0e:cf:cc:21:83:2a: 4b:ff:21:54:85:c9:98:7e:9c:c7:96:a6:e1:5e:c8:98:30:a4: 17:73:04:ca:b8:e5:7f:11:97:61:69:50:4a:7a:0a:a2:a2:21: 45:51:30:c3:4a:64:03:ed:a8:cf:25:b4:9b:3b:4e:42:48:ec: 9d:0c:df:ae:53:15:85:bf:34:70:99:ce:ea:96:4a:e1:66:bd: ba:ba:15:c9:87:fd:71:16:79:e9:5d:a9:6e:95:65:5f:cf:81: 8c:5a:53:4b:ca:b7:79:1a:d3:1c:8b:db:c6:2a:b3:f5:ba:87: 7a:52:57:4e:5c:19:c2:f7:87:52:5f:f0:33:16:39:78:56:e7: 3f:25:95:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyMjAxMTAvBgNVBAUTKDZENUYwNUREMTI2QkZGMzM2QkVGMjI4MUVDQzc4QUE1 NkIwNkEwMjMwHhcNMjQwNTE4MjAyMzQ4WhcNMjQwNTI1MjAyMzQ4WjAYMRYwFAYD VQQDEw02NjQ5MGU1NC00ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfHdq9uzIGFjxiiAybk+DJQyjp3/NUnxLcuWH5YhXgFZklebqPupZvs42whu 8k1fF7tpuSA6US4nnwEI7Sg4VhD0DRFPhCq+FV1N+9OCZjAThou+PUGjmONl45SS BKypxCJJkTiaTpPSGitEl32iXRf4d3jltyeqOwBopDoJ0pGd4JwJJMbwRO3VwEtH pdUHuLP/N8c9Krc0K3K6yoMb81uW0tVqhjYKYcgW98vCWuU+/zxrkgKhqnfugd8D Ui0RBsN7UKfQtre5ksBuSMA6f6Dcq/xovdux5T4lHibZZAmnjETOVSFlBP20Cjcf ouzi8zjsDFrUUU3KB3nhFDvStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDYTO2Q 4NcMJADRdwxaR+hlWxFsMB8GA1UdIwQYMBaAFG1fBd0Sa/8za+8igezHiqVrBqAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTIyMC8wMEVFMDhENjQx MjgxMUVBOEU1RTRCODNDNEY5QUUwMi9iVjhGM1JKcl96TnI3eUtCN01lS3BXc0dv Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWOEYzUkpyX3pOcjd5S0I3TWVLcFdzR29DTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTIyMC8wMEVFMDhENjQxMjgxMUVBOEU1RTRCODNDNEY5QUUwMi9iVjhGM1JKcl96 TnI3eUtCN01lS3BXc0dvQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJIoWITM0x1BHmaxgNEiGuamJOoNjKRdRiAEWWKSiA2xwWBfMbSPNg L85T8Tw2yVGROt93PMV1JBsV2UNPss+/d5EJXlbS69zLlJJACq3WVKcSe99Vf7we x4R3EkcyTqHQLvZWPxKCqzDCZyY9EpREX0I7dcEhYe0Oz8whgypL/yFUhcmYfpzH lqbhXsiYMKQXcwTKuOV/EZdhaVBKegqioiFFUTDDSmQD7ajPJbSbO05CSOydDN+u UxWFvzRwmc7qlkrhZr26uhXJh/1xFnnpXalulWVfz4GMWlNLyrd5GtMci9vGKrP1 uod6UldOXBnC94dSX/AzFjl4Vuc/JZXA -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org