$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json) Hash identifier: vVNwvnKkctZz9dsUECFC0PGm+iRAUFGSr6nE2xKDYwE= Subject key identifier: CA:CB:C7:98:98:65:F2:09:CE:84:F4:CA:5E:F2:60:76:1B:9B:9A:A8 Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft Manifest number: 055D Signing time: Sun 19 May 2024 00:52:16 +0000 Manifest this update: Sun 19 May 2024 00:52:15 +0000 Manifest next update: Sun 26 May 2024 00:52:15 +0000 Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: ADyB+5mpv94+kTKhm7MpuG8NftPiGdFmBZS7S7Ncss8=) 2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: TgPklgLkA3xdg2IBb89UQztEAT8+HE02bwjfwGq7aRA=) 3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: ZNMqu5n7q8yqgioaOoz8FWOCKn32okK52a+TXFMlmIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: May 19 00:52:15 2024 GMT Not After : May 26 00:52:15 2024 GMT Subject: CN=66494d3f-3308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:fc:fd:00:e3:bd:d9:fa:b5:15:2d:eb:e1: cc:4b:84:39:65:b3:83:5c:53:d4:e4:ce:90:55:04: 5d:38:b1:42:0a:05:f0:8c:b7:6e:8a:b2:b1:20:c8: 01:a4:4c:32:7c:65:c2:33:de:cb:fd:14:9c:ee:f7: 63:36:81:b1:9d:96:7c:bc:85:1f:c1:15:be:3a:fd: ca:20:5f:6f:d1:54:e6:7d:00:c6:26:aa:88:f2:5d: b4:1f:9a:ba:38:a7:1c:fc:4b:73:4e:ac:5a:9a:d4: 85:37:10:df:7d:2b:25:67:42:4c:b0:98:63:9e:75: 6a:85:a4:c8:65:ba:6f:33:3c:23:fb:22:7f:04:50: 31:38:a8:77:ce:c7:7b:ce:bd:cf:76:d2:d1:80:33: 58:13:1e:d8:88:2b:d1:19:70:71:8d:a4:85:bc:0a: cc:c6:09:c7:20:6a:c6:8c:8d:0f:ae:23:ef:f5:3f: 7e:43:33:5a:54:c7:3a:01:63:7c:4c:8c:3f:a3:ee: da:8d:3a:18:95:d5:0a:ed:68:43:b9:23:4c:fa:db: 97:30:79:de:4d:26:2f:aa:8d:3f:a5:b8:2c:ec:36: 07:66:15:24:38:e1:f5:e1:a7:cb:c4:4f:8d:39:dc: 3b:5b:4b:b3:0f:7c:af:48:e5:aa:64:3e:68:6e:98: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:C7:98:98:65:F2:09:CE:84:F4:CA:5E:F2:60:76:1B:9B:9A:A8 X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0d:3d:a7:6a:91:7c:64:46:3d:5f:27:a2:47:a9:29:e9:a3: 55:f7:04:e9:69:e3:ec:1c:d3:af:f9:b2:51:96:8f:0f:e0:13: 76:9b:a9:a9:58:f7:23:29:ab:fe:a9:4a:de:8f:ce:02:d6:55: 8d:07:55:4a:fc:68:f0:91:24:88:2c:85:fd:c4:6b:32:b7:47: 9d:be:56:6d:52:a2:c4:f8:10:ad:fe:d2:d2:d0:8a:36:22:9a: 7e:14:95:20:39:0b:6e:21:e1:4c:51:d9:5e:10:3d:b0:70:87: f2:48:9c:23:11:a1:4b:50:6c:fb:70:6b:36:d8:9c:39:e6:00: 5c:76:38:4a:e9:91:e6:de:4d:fe:b1:f9:5f:43:be:54:90:06: 5e:cd:3d:06:04:75:e3:66:f0:31:c3:96:43:4f:41:8a:51:9a: ff:ae:95:25:0f:5d:14:4a:fc:9f:ec:5d:5b:24:c3:e5:6f:ff: b4:32:b5:da:79:6b:9c:36:55:0d:5c:59:8b:98:c6:71:d8:0d: 7a:5e:24:74:bc:c3:03:18:8b:af:a3:ac:f3:2e:5b:2e:ee:e4: 72:85:11:0a:5e:b7:38:0b:38:a8:f5:2d:fb:c5:dd:69:54:b8: 7c:d4:c4:cb:8a:6a:17:c3:a0:1e:64:74:c6:b8:5d:71:97:f2: 4a:d7:2f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjQwNTE5MDA1MjE1WhcNMjQwNTI2MDA1MjE1WjAYMRYwFAYD VQQDEw02NjQ5NGQzZi0zMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx38/QDjvdn6tRUt6+HMS4Q5ZbODXFPU5M6QVQRdOLFCCgXwjLduirKxIMgB pEwyfGXCM97L/RSc7vdjNoGxnZZ8vIUfwRW+Ov3KIF9v0VTmfQDGJqqI8l20H5q6 OKcc/EtzTqxamtSFNxDffSslZ0JMsJhjnnVqhaTIZbpvMzwj+yJ/BFAxOKh3zsd7 zr3PdtLRgDNYEx7YiCvRGXBxjaSFvArMxgnHIGrGjI0PriPv9T9+QzNaVMc6AWN8 TIw/o+7ajToYldUK7WhDuSNM+tuXMHneTSYvqo0/pbgs7DYHZhUkOOH14afLxE+N Odw7W0uzD3yvSOWqZD5obpgUzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrLx5iY ZfIJzoT0yl7yYHYbm5qoMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DT2napF8ZEY9XyeiR6kp6aNV9wTpaePsHNOv+bJRlo8P4BN2m6mp WPcjKav+qUrej84C1lWNB1VK/GjwkSSILIX9xGsyt0edvlZtUqLE+BCt/tLS0Io2 Ipp+FJUgOQtuIeFMUdleED2wcIfySJwjEaFLUGz7cGs22Jw55gBcdjhK6ZHm3k3+ sflfQ75UkAZezT0GBHXjZvAxw5ZDT0GKUZr/rpUlD10USvyf7F1bJMPlb/+0MrXa eWucNlUNXFmLmMZx2A16XiR0vMMDGIuvo6zzLlsu7uRyhREKXrc4Czio9S37xd1p VLh81MTLimoXw6AeZHTGuF1xl/JK1y+W -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org