$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: dcMP7VwRYi56NL6BZI4tsEnHkHBSoZn612IOcpY1YPg= Subject key identifier: B4:C8:6A:E6:AF:53:35:A2:77:C5:60:E4:D6:71:6C:72:93:06:77:AE Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 04C7 Signing time: Wed 29 May 2024 01:43:59 +0000 Manifest this update: Wed 29 May 2024 01:43:59 +0000 Manifest next update: Wed 05 Jun 2024 01:43:59 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: fr5fRCejPQsA2zmBHMKwKuAKnke4nLVWXSNHZAw13o8=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: ekYcdmoLJ3hFE6yrHiP1rGDTn6Sb0zs5u3X6QAzW0W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: May 29 01:43:59 2024 GMT Not After : Jun 5 01:43:59 2024 GMT Subject: CN=6656885f-20ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:6a:07:98:12:92:f1:33:e5:3f:04:72:ac: b8:43:ba:ff:dd:e5:81:3d:11:89:bb:21:6f:88:be: 2b:be:8b:f2:d0:75:cf:61:9d:e0:ea:d8:25:bc:2f: 9b:5f:f9:fa:85:97:0c:f7:fe:96:ac:67:dc:d2:76: 12:8f:95:a6:01:ca:13:3a:e8:6d:13:fc:a2:35:82: 16:bd:dd:91:54:66:bb:25:63:43:f9:58:3a:d5:45: aa:7d:f1:c8:f8:13:6d:6e:a1:5e:76:1a:9d:59:ff: 46:eb:9f:53:a1:23:a4:b2:18:42:36:9f:ed:5d:1a: f9:45:86:51:90:97:8a:8c:71:9a:11:d4:e8:f0:30: 6d:7f:e0:dd:11:fc:3a:76:46:3b:f7:17:67:65:9c: 2d:6e:c7:8c:f8:1d:46:1d:fb:05:b0:57:39:bf:13: a9:53:74:b8:ce:f0:34:85:9b:9b:a9:8a:d5:26:12: 67:e8:e9:23:89:75:c7:68:27:30:48:b5:66:db:9f: e8:09:0f:e9:98:81:94:d7:a0:eb:c8:03:19:ac:a5: 1e:0a:17:7f:31:73:bf:16:01:a5:88:54:68:2f:f1: 2a:82:83:a2:e3:9f:4b:f4:2b:f5:10:21:da:31:43: 71:1b:5d:79:eb:59:6b:9e:2b:48:0b:96:49:32:59: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C8:6A:E6:AF:53:35:A2:77:C5:60:E4:D6:71:6C:72:93:06:77:AE X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:db:be:77:fe:7a:08:d1:61:df:b9:35:93:5b:bf:3e:dd:60: f7:17:ee:d9:68:fa:6e:ff:57:6e:5a:60:97:fc:82:58:63:ca: 88:fc:72:fb:a9:a4:a8:38:f8:fd:d3:68:65:60:70:0e:8a:b2: cd:57:95:56:d8:b0:67:4b:8e:13:48:58:f4:29:e9:ca:0d:fb: 01:59:69:eb:f1:4a:7d:f1:40:44:1e:57:a1:82:c9:6f:10:c2: db:12:77:78:17:65:ba:f9:28:21:02:ff:7f:00:30:84:b9:f0: ab:b6:50:be:30:2b:85:9f:62:b6:d5:fd:1c:a5:57:58:8f:60: e2:8e:14:43:a0:e0:5b:2c:6b:93:13:5b:97:28:90:65:7e:3a: 98:ae:83:5c:c2:9c:52:64:1c:b1:4d:49:02:8a:7e:83:27:7f: 3c:6d:e0:79:f9:5e:d3:34:9e:71:f6:87:4a:eb:29:9f:ea:70: 86:d8:25:a2:33:0a:79:32:8d:5b:b7:f8:f7:e7:19:27:e2:bf: 80:c2:07:45:91:a7:44:b0:e6:54:d2:73:c5:45:4c:96:bb:33: cb:62:9d:70:41:fa:f3:3c:60:80:27:98:57:ca:9c:10:dc:6d: e3:f7:a9:a5:c1:79:f6:82:91:ab:d9:8a:d6:5c:94:0a:ee:6d: 73:14:42:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjQwNTI5MDE0MzU5WhcNMjQwNjA1MDE0MzU5WjAYMRYwFAYD VQQDEw02NjU2ODg1Zi0yMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXNqB5gSkvEz5T8Ecqy4Q7r/3eWBPRGJuyFviL4rvovy0HXPYZ3g6tglvC+b X/n6hZcM9/6WrGfc0nYSj5WmAcoTOuhtE/yiNYIWvd2RVGa7JWND+Vg61UWqffHI +BNtbqFedhqdWf9G659ToSOkshhCNp/tXRr5RYZRkJeKjHGaEdTo8DBtf+DdEfw6 dkY79xdnZZwtbseM+B1GHfsFsFc5vxOpU3S4zvA0hZubqYrVJhJn6OkjiXXHaCcw SLVm25/oCQ/pmIGU16DryAMZrKUeChd/MXO/FgGliFRoL/EqgoOi459L9Cv1ECHa MUNxG11561lrnitIC5ZJMlltrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTIauav UzWid8Vg5NZxbHKTBneuMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA2753/noI0WHfuTWTW78+3WD3F+7ZaPpu/1duWmCX/IJYY8qI/HL7 qaSoOPj902hlYHAOirLNV5VW2LBnS44TSFj0KenKDfsBWWnr8Up98UBEHlehgslv EMLbEnd4F2W6+SghAv9/ADCEufCrtlC+MCuFn2K21f0cpVdYj2DijhRDoOBbLGuT E1uXKJBlfjqYroNcwpxSZByxTUkCin6DJ388beB5+V7TNJ5x9odK6ymf6nCG2CWi Mwp5Mo1bt/j35xkn4r+AwgdFkadEsOZU0nPFRUyWuzPLYp1wQfrzPGCAJ5hXypwQ 3G3j96mlwXn2gpGr2YrWXJQK7m1zFELi -----END CERTIFICATE-----Generated at Wed May 29 06:12:22 2024 by rpki-client on console-ams.rpki-client.org