$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft File: B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json) Hash identifier: jxY2o+FBL/OfJ/d9SEq07aGm6oW6lR5MLLfE7TzigYE= Subject key identifier: 1D:BA:02:DE:BF:4A:5B:39:E0:19:9C:49:FC:0B:85:53:71:21:8C:5C Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft Manifest number: 03DE Signing time: Sun 19 May 2024 02:27:46 +0000 Manifest this update: Sun 19 May 2024 02:27:46 +0000 Manifest next update: Sun 26 May 2024 02:27:46 +0000 Files and hashes: 1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: F5eVmQZipEjG/3ozLnpnfjbo8RZP0SvNKqiUZ97mXXw=) 2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: 4n59MrB81ty1dcd5z+mCqdyxNVOG4oHSBeY3w2FXxqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Validity Not Before: May 19 02:27:46 2024 GMT Not After : May 26 02:27:46 2024 GMT Subject: CN=664963a2-0c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:ea:6b:75:e7:a4:83:d9:c6:68:9d:a6:29: 15:70:08:53:f5:a0:6f:98:b7:ca:30:b4:1a:d6:72: 09:b9:3e:bf:fc:db:03:36:d6:7d:db:42:6b:e8:f8: a5:19:5e:fc:de:59:80:21:34:b3:f3:a4:ba:61:96: c2:03:30:2d:93:93:bd:28:d0:0f:56:9c:78:81:31: f4:83:23:3d:7e:63:5b:7f:1e:88:8d:b8:32:be:8d: 94:da:26:ec:42:7f:cb:0b:cd:7b:5b:a2:bf:98:9b: fb:02:8e:d2:b6:97:7a:a3:f7:83:0b:1b:a8:42:04: c4:26:67:56:77:10:c5:fe:17:3d:05:38:24:80:1e: 2b:38:ca:4d:d1:db:34:40:72:61:7c:40:15:5c:40: 52:e9:73:df:a3:e3:ca:a5:d3:ea:1a:b2:71:cd:3b: 18:65:a2:2c:5b:a4:71:24:d6:02:b7:fb:82:24:d4: 19:6a:5c:fa:9a:56:de:e7:27:46:10:8b:86:1e:8e: dd:87:8e:fa:39:96:d5:3f:97:24:fa:b3:8b:7e:c9: 1c:5e:28:78:ed:16:6a:86:1d:d5:86:a7:d6:ac:aa: e5:74:23:c6:00:39:64:cc:5e:e1:e5:8f:f8:94:3c: 89:2a:46:19:1a:39:77:9c:4c:dc:36:66:d0:0f:76: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:02:DE:BF:4A:5B:39:E0:19:9C:49:FC:0B:85:53:71:21:8C:5C X509v3 Authority Key Identifier: keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:77:28:6d:6e:46:a3:84:ef:79:ea:6e:fa:0e:18:6b:86:e3: 47:6f:b9:19:d7:ff:dd:04:b2:1d:64:7e:e7:d8:6c:b8:74:a4: 79:0d:ba:3a:cd:3a:9c:f1:50:31:5e:2e:b0:18:02:01:9b:b3: 7a:a7:4a:4c:5f:6d:c8:e5:aa:38:ef:ce:0b:86:31:0e:21:90: 47:4d:1e:5b:15:cd:8c:86:d3:cd:51:17:86:b5:ff:e0:cb:2e: 21:85:65:a5:69:63:ef:a4:a4:0b:cc:a4:4c:de:9c:09:a7:cc: 57:2f:7f:90:6b:9d:1b:3a:2f:19:7a:3d:36:0a:69:e3:d8:a8: a8:c0:39:48:a2:99:49:e0:f1:00:5c:3d:33:a2:2e:d0:67:cc: 39:5e:1a:44:a6:2d:31:69:29:b5:07:d3:73:76:f9:16:49:ce: 69:58:87:77:b0:6f:9b:ab:b3:00:e0:92:e6:83:ac:da:03:89: bb:a9:d7:b4:2e:f1:d2:69:32:46:14:5c:5b:bb:ad:42:10:1a: 6d:df:f2:d2:f1:45:e7:05:a8:66:3b:59:cf:4b:4f:08:ea:cd: 40:65:8b:86:6f:85:4d:b1:4b:b1:f3:ef:de:61:5a:04:2e:63: fc:b5:48:a7:40:bf:ee:4f:b3:8e:2d:27:8c:07:7e:83:fb:a7: 7a:ae:0f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD NDFDNzE2REUwHhcNMjQwNTE5MDIyNzQ2WhcNMjQwNTI2MDIyNzQ2WjAYMRYwFAYD VQQDEw02NjQ5NjNhMi0wYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV3qa3XnpIPZxmidpikVcAhT9aBvmLfKMLQa1nIJuT6//NsDNtZ920Jr6Pil GV783lmAITSz86S6YZbCAzAtk5O9KNAPVpx4gTH0gyM9fmNbfx6Ijbgyvo2U2ibs Qn/LC817W6K/mJv7Ao7Stpd6o/eDCxuoQgTEJmdWdxDF/hc9BTgkgB4rOMpN0ds0 QHJhfEAVXEBS6XPfo+PKpdPqGrJxzTsYZaIsW6RxJNYCt/uCJNQZalz6mlbe5ydG EIuGHo7dh476OZbVP5ck+rOLfskcXih47RZqhh3VhqfWrKrldCPGADlkzF7h5Y/4 lDyJKkYZGjl3nEzcNmbQD3ZRZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB26At6/ Sls54BmcSfwLhVNxIYxcMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFS aVJ2WTl5Y21HVkhFSEhGdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtdyhtbkajhO956m76DhhrhuNHb7kZ1//dBLIdZH7n2Gy4dKR5Dbo6 zTqc8VAxXi6wGAIBm7N6p0pMX23I5ao4784LhjEOIZBHTR5bFc2MhtPNUReGtf/g yy4hhWWlaWPvpKQLzKRM3pwJp8xXL3+Qa50bOi8Zej02Cmnj2KiowDlIoplJ4PEA XD0zoi7QZ8w5XhpEpi0xaSm1B9NzdvkWSc5pWId3sG+bq7MA4JLmg6zaA4m7qde0 LvHSaTJGFFxbu61CEBpt3/LS8UXnBahmO1nPS08I6s1AZYuGb4VNsUux8+/eYVoE LmP8tUinQL/uT7OOLSeMB36D+6d6rg9p -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org