$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json) Hash identifier: iglfAGdnuUVZG6hG8LUbirPXl7Ig3n2IrJEdmaGdan8= Subject key identifier: 40:F9:9D:E4:D0:D7:1E:4E:18:C0:9C:A0:1C:B5:07:7F:AE:75:B7:7F Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft Manifest number: 08AE Signing time: Sat 18 May 2024 22:10:46 +0000 Manifest this update: Sat 18 May 2024 22:10:46 +0000 Manifest next update: Sat 25 May 2024 22:10:46 +0000 Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: AoFQ20irbsjjB8k3aaV8G3G7hNKuTfQXikJy9U4dlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Validity Not Before: May 18 22:10:46 2024 GMT Not After : May 25 22:10:46 2024 GMT Subject: CN=66492766-ef9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:c2:c6:04:4d:b5:00:ab:de:ca:c1:f6:0d: 3d:ba:03:c6:a4:ed:70:a3:e3:5d:c7:37:f9:5e:c4: ac:4f:b2:5c:ee:88:48:83:5a:49:50:9e:b1:c3:5e: 81:8d:77:20:d4:79:a3:4b:ab:ed:cf:f1:75:e1:47: 3a:a4:5d:12:fe:65:99:b1:6f:26:3e:0e:81:54:5b: 76:e6:99:49:31:48:9e:5a:b1:65:0a:d4:9b:af:1c: 7b:64:45:e6:af:3e:53:2e:be:d8:37:69:78:5b:b2: 6e:ab:ab:bc:b1:0a:56:a3:9e:7d:e3:3b:c9:91:9a: f5:5b:20:e0:4b:9c:a5:88:57:0b:b3:dd:1d:72:90: 6b:6e:1f:a4:a4:42:d2:55:d4:97:74:89:3c:e8:db: f0:d7:0c:23:b5:87:14:84:3f:45:52:78:b5:88:2c: 39:60:50:a1:df:5b:f5:d6:46:ab:4f:3f:31:8d:9c: d5:da:d0:f8:05:d9:ba:f2:dc:88:da:40:b2:02:89: b6:83:6c:b7:89:ef:bc:ed:44:c1:98:e5:41:d6:6a: 67:16:1d:8c:65:d2:ed:10:43:3d:61:7a:a7:f8:f0: d0:db:b6:ef:cf:28:8a:4b:1f:8f:18:d3:73:5c:fa: 51:84:e3:bf:cf:ea:38:82:92:75:b7:ec:8f:b1:ab: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:9D:E4:D0:D7:1E:4E:18:C0:9C:A0:1C:B5:07:7F:AE:75:B7:7F X509v3 Authority Key Identifier: keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:01:7d:c3:4d:da:8e:3b:73:9d:85:48:40:a1:c5:07:c9:bd: 70:09:91:da:39:21:ed:b0:7b:0f:91:a1:ee:f8:70:d1:d7:82: 44:ae:aa:67:a7:80:0f:22:e2:05:22:fa:bb:08:92:b6:4e:99: 4a:c3:33:90:57:3d:8f:07:0f:65:fe:30:13:62:65:a7:68:3e: f9:1a:e5:23:15:ab:a6:18:8a:a2:f7:cd:52:e6:aa:2c:ce:6a: 0a:8f:40:b8:55:a3:0e:96:55:01:bd:8a:85:08:11:74:9b:ac: aa:42:c8:d1:24:e7:4d:0f:ca:19:c1:0e:cd:07:f4:b8:7b:5c: 5d:3f:42:95:9e:46:49:e1:ca:68:5e:cd:f2:bf:d0:e8:74:82: 50:13:f8:80:e4:e6:d2:95:eb:08:f3:22:e5:48:2b:94:d0:2d: c0:d1:93:52:e4:c3:df:ca:86:d8:49:dd:c4:96:4b:b7:c5:56: df:4a:79:0b:62:ee:b8:c0:e8:d3:b0:2d:8f:e7:ae:ef:63:ad: 25:7b:5d:f0:92:e7:ae:60:49:fa:5e:ad:9a:f7:2d:86:87:20: 1b:1f:35:03:2f:9e:1b:67:c0:75:6e:00:19:25:88:36:33:80: 1c:11:78:4d:cf:f8:fc:d0:41:cb:38:ff:77:ca:d9:03:0a:e4: 3e:8f:39:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD ODcyODk0OUMwHhcNMjQwNTE4MjIxMDQ2WhcNMjQwNTI1MjIxMDQ2WjAYMRYwFAYD VQQDEw02NjQ5Mjc2Ni1lZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnvCxgRNtQCr3srB9g09ugPGpO1wo+Ndxzf5XsSsT7Jc7ohIg1pJUJ6xw16B jXcg1HmjS6vtz/F14Uc6pF0S/mWZsW8mPg6BVFt25plJMUieWrFlCtSbrxx7ZEXm rz5TLr7YN2l4W7Juq6u8sQpWo5594zvJkZr1WyDgS5yliFcLs90dcpBrbh+kpELS VdSXdIk86Nvw1wwjtYcUhD9FUni1iCw5YFCh31v11karTz8xjZzV2tD4Bdm68tyI 2kCyAom2g2y3ie+87UTBmOVB1mpnFh2MZdLtEEM9YXqn+PDQ27bvzyiKSx+PGNNz XPpRhOO/z+o4gpJ1t+yPsavDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED5neTQ 1x5OGMCcoBy1B3+udbd/MB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0 eFB6Wk1ZNmxLbG5JY29sSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjAX3DTdqOO3OdhUhAocUHyb1wCZHaOSHtsHsPkaHu+HDR14JErqpn p4APIuIFIvq7CJK2TplKwzOQVz2PBw9l/jATYmWnaD75GuUjFaumGIqi981S5qos zmoKj0C4VaMOllUBvYqFCBF0m6yqQsjRJOdND8oZwQ7NB/S4e1xdP0KVnkZJ4cpo Xs3yv9DodIJQE/iA5ObSlesI8yLlSCuU0C3A0ZNS5MPfyobYSd3Elku3xVbfSnkL Yu64wOjTsC2P567vY60le13wkueuYEn6Xq2a9y2GhyAbHzUDL54bZ8B1bgAZJYg2 M4AcEXhNz/j80EHLOP93ytkDCuQ+jzmI -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org