$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: UYyWMSpI5/EzjF+3LtodVzTCmvtEJcC9raEz7qxhNTU= Subject key identifier: 33:91:B0:EA:C3:8D:38:1F:64:F9:13:55:14:77:63:8B:C7:46:A8:E8 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 04B3 Signing time: Fri 31 May 2024 21:31:12 +0000 Manifest this update: Fri 31 May 2024 21:31:11 +0000 Manifest next update: Fri 07 Jun 2024 21:31:11 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: FSDwIRltCrr6QNT2zbZmnH0STkDo8ZUI09erpqZx1FE=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: +5HXeZzaqL8Fd/KKvyuXF2mNME+6yWjEsjlZ9TCANS8=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: k1c7GSyH3WoRbwuja3aZP/eqPGFzjIJTKfDzkLI42LM=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: WDAtZkvVBWCh4sdS393tb7mD2RpYvoRQQWQo7es9q/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: May 31 21:31:11 2024 GMT Not After : Jun 7 21:31:11 2024 GMT Subject: CN=665a419f-96f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:ea:9e:a4:8c:e0:84:16:65:1e:fa:b7:ad: 91:26:e4:52:e4:27:ce:81:5d:50:6b:a1:5a:a9:72: b4:a9:73:d1:66:9d:a5:cd:57:dd:b1:04:f3:70:e1: dd:17:2d:1b:bd:2f:df:38:d8:44:0c:33:3e:65:41: f3:28:50:65:a2:ad:84:48:6c:5a:8a:7d:1a:d6:98: e3:e0:03:97:60:4e:9e:d8:b0:87:89:27:86:b6:5e: de:c1:39:4e:91:82:e3:26:c5:d7:c9:ea:6a:8b:f2: 93:fe:8f:50:5e:aa:e6:b3:80:3d:5c:b7:0b:da:5b: a5:5f:49:2d:77:58:24:2c:11:91:ea:78:e0:ea:a3: a0:08:a3:2b:7b:49:cd:ea:4e:16:c2:f9:d6:40:d3: bb:81:bb:f7:bc:c5:22:f3:c9:bf:88:46:12:27:c2: 79:84:0e:12:6c:33:a0:03:9e:c5:03:91:11:04:c2: a9:1c:d2:34:f7:e6:11:f8:7b:06:64:a6:59:94:ae: b5:f9:e6:d1:f9:72:df:2e:ee:f7:39:dd:53:f4:17: db:2e:96:e6:1c:df:a8:10:22:fa:0e:57:c6:ec:60: 00:8c:d0:e9:ed:81:ed:7e:28:d6:21:ed:cf:96:b4: ae:79:ed:0a:54:13:ba:8b:c5:88:fc:82:1c:3c:75: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:B0:EA:C3:8D:38:1F:64:F9:13:55:14:77:63:8B:C7:46:A8:E8 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:00:d2:ad:27:94:af:8c:15:1d:5c:0c:89:de:8b:20:cc:27: d1:28:68:9c:e3:16:a8:50:96:0f:f1:89:39:34:38:30:57:90: 6e:39:ee:03:0e:58:5b:85:46:cf:63:25:05:88:a1:22:d7:be: 1a:ab:f9:f6:ef:cd:8f:44:3f:76:88:6e:a6:cc:b9:4b:66:29: dd:1e:53:51:a5:67:59:00:4b:0c:5f:c0:61:06:59:8d:bc:27: 59:dc:c7:eb:24:72:e0:df:c1:e0:2a:1a:2c:5d:de:e0:7a:c9: 51:d4:8b:6b:db:53:6b:ee:b7:57:6a:17:57:6d:87:84:bc:e2: 0c:2a:c7:fa:3a:48:2d:a5:65:3f:5c:d6:20:85:d6:cb:94:53: f7:69:1f:10:72:24:6a:76:d5:ec:0f:3d:c8:c5:87:47:f8:57: 4a:db:a4:e5:bf:04:20:52:63:04:2e:72:25:46:4d:e0:35:c8: 68:2e:0c:ad:bc:58:e6:e9:e6:0f:17:94:5a:c5:b8:e4:5a:4e: ad:f3:dd:96:32:64:83:fc:e6:01:64:dd:93:02:2b:bf:cc:03: 20:30:e2:a7:c8:c4:06:c9:11:fd:5c:fc:04:01:7f:c4:4d:a4: d3:a8:9c:40:0e:6e:80:e9:ec:0f:4b:db:02:cf:ec:e3:70:80: 03:89:fd:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjQwNTMxMjEzMTExWhcNMjQwNjA3MjEzMTExWjAYMRYwFAYD VQQDEw02NjVhNDE5Zi05NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bXqnqSM4IQWZR76t62RJuRS5CfOgV1Qa6FaqXK0qXPRZp2lzVfdsQTzcOHd Fy0bvS/fONhEDDM+ZUHzKFBloq2ESGxain0a1pjj4AOXYE6e2LCHiSeGtl7ewTlO kYLjJsXXyepqi/KT/o9QXqrms4A9XLcL2lulX0ktd1gkLBGR6njg6qOgCKMre0nN 6k4WwvnWQNO7gbv3vMUi88m/iEYSJ8J5hA4SbDOgA57FA5ERBMKpHNI09+YR+HsG ZKZZlK61+ebR+XLfLu73Od1T9BfbLpbmHN+oECL6DlfG7GAAjNDp7YHtfijWIe3P lrSuee0KVBO6i8WI/IIcPHVKAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDORsOrD jTgfZPkTVRR3Y4vHRqjoMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcANKtJ5SvjBUdXAyJ3osgzCfRKGic4xaoUJYP8Yk5NDgwV5BuOe4D DlhbhUbPYyUFiKEi174aq/n2782PRD92iG6mzLlLZindHlNRpWdZAEsMX8BhBlmN vCdZ3MfrJHLg38HgKhosXd7geslR1Itr21Nr7rdXahdXbYeEvOIMKsf6OkgtpWU/ XNYghdbLlFP3aR8QciRqdtXsDz3IxYdH+FdK26TlvwQgUmMELnIlRk3gNchoLgyt vFjm6eYPF5RaxbjkWk6t892WMmSD/OYBZN2TAiu/zAMgMOKnyMQGyRH9XPwEAX/E TaTTqJxADm6A6ewPS9sCz+zjcIADif3f -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org