$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: iTRIVqN/AZ6zL7NeozYfGl6LLDNposs/lkR0c8WMpiE= Subject key identifier: 7A:9C:CB:08:E8:3F:59:BE:8B:0E:69:49:C9:58:AE:A9:91:D0:D1:FC Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 1788 Signing time: Sat 18 May 2024 17:27:44 +0000 Manifest this update: Sat 18 May 2024 17:27:44 +0000 Manifest next update: Sat 25 May 2024 17:27:44 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: gKd+4r5LW91VE0tszlc0gejlmZadJf5Z7micq3CR7PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: May 18 17:27:44 2024 GMT Not After : May 25 17:27:44 2024 GMT Subject: CN=6648e510-669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:b1:24:d6:7d:2a:2e:ba:d8:27:b9:b4:67: ed:98:12:3b:8d:7b:7a:1c:0e:c5:10:6f:45:76:1f: 76:28:d3:2c:a4:98:03:4b:e8:d5:05:67:bd:1d:5d: 51:6d:d0:15:dd:11:11:2d:32:89:63:96:0f:35:54: 36:26:80:94:ef:5a:e9:cd:b6:e2:ad:4d:0f:19:39: 1c:b8:92:32:ad:66:ae:47:37:48:04:84:29:bd:85: cd:1b:f4:db:aa:ed:71:29:87:56:8c:93:9a:6a:5f: a0:7e:1c:53:22:2e:3b:1f:04:87:01:e2:5e:b3:77: ec:55:60:a5:a8:a2:52:16:08:e9:c0:ed:dd:e6:ea: d4:87:90:ca:49:ad:eb:d4:49:96:67:6b:22:65:14: 2a:42:bb:da:5c:9d:d7:39:8d:d0:a6:70:d4:0f:6e: 8f:d4:bb:52:12:13:a9:01:b4:fb:35:07:dc:98:57: fc:72:10:d6:3b:af:a2:f0:af:b7:0f:c4:c1:0d:9a: d4:9f:34:0e:b0:8d:f2:98:6f:5c:19:5c:fe:40:3f: d2:6d:3e:60:26:59:c2:86:f5:e0:86:d9:de:d3:58: 14:7e:82:6a:3d:28:d7:0d:07:a3:71:ea:dd:53:b6: c8:0e:2c:5d:fd:41:d3:47:da:5a:8c:57:05:83:5b: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9C:CB:08:E8:3F:59:BE:8B:0E:69:49:C9:58:AE:A9:91:D0:D1:FC X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e9:53:14:01:1c:00:59:33:2f:00:fb:7c:2d:3a:4b:11:71: dc:f8:ff:9a:7d:9d:dd:f5:d6:bf:9a:7c:54:76:21:f9:b8:e6: 4e:0e:68:8d:88:84:57:6e:bd:7e:fb:2e:cf:57:a2:72:fc:26: 00:d9:34:06:e3:80:52:2d:42:d6:c2:ea:4d:56:3f:9e:07:7b: 10:34:d3:2f:37:3c:68:c4:8d:36:66:b9:7e:19:ae:53:dd:9a: 94:4a:fe:d1:39:84:30:d0:e6:25:81:53:1d:d7:4f:c4:48:a6: 04:f1:6f:e5:27:ff:b2:1d:72:9d:be:0a:61:0c:fe:b4:e8:4d: b6:7d:55:3b:a1:88:6d:79:48:9a:42:15:2d:36:1a:95:e1:36: 40:16:7d:e5:d0:03:a4:2f:5f:fa:cc:5f:f7:52:9c:a2:11:96: 6b:e8:91:d0:79:34:34:04:e5:3a:a0:11:f3:a2:7a:1b:e6:d6: 2d:4e:b0:82:85:b2:de:b9:89:a0:0a:6d:fa:a0:02:c0:47:d6: 27:35:81:a4:a8:d6:08:e0:43:66:cb:80:f5:ab:6d:6b:91:a4: 29:1a:bd:69:12:90:2a:93:cd:9c:c4:48:d9:e7:a9:c1:c4:7c: be:17:55:5c:92:e9:6e:e9:65:dc:96:ae:7d:fb:aa:08:c7:ab: 5a:e5:5e:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjQwNTE4MTcyNzQ0WhcNMjQwNTI1MTcyNzQ0WjAYMRYwFAYD VQQDEw02NjQ4ZTUxMC02NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya2xJNZ9Ki662Ce5tGftmBI7jXt6HA7FEG9Fdh92KNMspJgDS+jVBWe9HV1R bdAV3RERLTKJY5YPNVQ2JoCU71rpzbbirU0PGTkcuJIyrWauRzdIBIQpvYXNG/Tb qu1xKYdWjJOaal+gfhxTIi47HwSHAeJes3fsVWClqKJSFgjpwO3d5urUh5DKSa3r 1EmWZ2siZRQqQrvaXJ3XOY3QpnDUD26P1LtSEhOpAbT7NQfcmFf8chDWO6+i8K+3 D8TBDZrUnzQOsI3ymG9cGVz+QD/SbT5gJlnChvXghtne01gUfoJqPSjXDQejcerd U7bIDixd/UHTR9pajFcFg1uaUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqcywjo P1m+iw5pSclYrqmR0NH8MB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH6VMUARwAWTMvAPt8LTpLEXHc+P+afZ3d9da/mnxUdiH5uOZODmiN iIRXbr1++y7PV6Jy/CYA2TQG44BSLULWwupNVj+eB3sQNNMvNzxoxI02Zrl+Ga5T 3ZqUSv7ROYQw0OYlgVMd10/ESKYE8W/lJ/+yHXKdvgphDP606E22fVU7oYhteUia QhUtNhqV4TZAFn3l0AOkL1/6zF/3UpyiEZZr6JHQeTQ0BOU6oBHzonob5tYtTrCC hbLeuYmgCm36oALAR9YnNYGkqNYI4ENmy4D1q21rkaQpGr1pEpAqk82cxEjZ56nB xHy+F1Vckulu6WXclq59+6oIx6ta5V76 -----END CERTIFICATE-----Generated at Sat May 18 18:12:34 2024 by rpki-client on console-fra.rpki-client.org