$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft File: bKwrcgiF6COCTBln7fw2Psh0do0.mft (raw, json) Hash identifier: 5K0CdRdSutQ4NwNF9Z5IN3EzrtxB1U3I1CXk9/tm1LQ= Subject key identifier: 2F:80:C2:42:F2:06:29:2A:BC:F2:04:94:03:FE:79:2C:05:55:9A:2F Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft Manifest number: 0388 Signing time: Sun 19 May 2024 02:42:09 +0000 Manifest this update: Sun 19 May 2024 02:42:09 +0000 Manifest next update: Sun 26 May 2024 02:42:09 +0000 Files and hashes: 1: bKwrcgiF6COCTBln7fw2Psh0do0.crl (hash: aK6yYWaKGXs02euHwaLeBwgYpmMpzHNAqBODbqmcQU4=) 2: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (hash: cikoyhuqavK+MFZkdQ9w/OIVV8ZcalMBLZhc0JWWGjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Validity Not Before: May 19 02:42:09 2024 GMT Not After : May 26 02:42:09 2024 GMT Subject: CN=66496701-fdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:74:18:a7:5e:c0:0a:b6:6f:e1:e5:7b:70: 65:e7:47:5b:fb:7a:c8:04:6b:8d:79:d9:7d:8f:b8: 6c:b4:bd:23:32:d1:eb:8e:be:d1:a0:a8:11:21:9e: e5:18:28:f5:21:b1:a5:4a:c4:49:b2:df:42:24:11: 91:2e:eb:b7:f4:16:2f:b9:d8:1e:33:d4:ab:d5:28: 92:c3:67:87:19:1f:40:4c:75:75:f4:97:a5:1b:e7: a6:9c:21:58:30:a0:59:eb:7b:dc:d3:aa:6c:3a:f4: e9:05:fc:35:99:96:e2:7d:99:f6:29:66:20:c1:24: 14:7a:22:71:da:06:3f:fd:02:1b:45:aa:7f:ae:aa: 44:28:4a:16:66:82:1d:a6:3f:54:e3:64:ad:71:f7: 74:e2:df:75:5b:22:9b:0e:df:a6:17:38:95:8c:b7: 10:f1:60:07:44:95:87:10:3a:f1:01:0c:82:d2:66: 90:38:92:76:7e:6f:3b:fb:2e:80:4e:c0:bf:b8:da: a6:9b:ff:53:87:eb:0f:2a:ec:23:93:9e:39:98:00: 59:81:af:ef:cc:44:1a:e8:26:2c:74:0a:c6:a3:19: 94:97:d1:a6:63:39:88:25:71:2a:07:42:d5:3f:83: 66:be:f9:8c:d7:2f:1f:45:af:61:c3:bb:8b:12:08: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:C2:42:F2:06:29:2A:BC:F2:04:94:03:FE:79:2C:05:55:9A:2F X509v3 Authority Key Identifier: keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f4:4b:77:43:b6:84:d3:cc:f3:2d:59:7d:e3:d6:91:f9:e4: 46:ac:6c:55:38:4d:08:7c:65:43:2f:f5:61:a9:d6:7b:57:cf: b6:74:81:cc:12:bc:0f:06:4c:b7:50:3f:b0:05:33:f5:20:d5: 53:ad:12:13:7a:29:d4:2e:18:8a:a7:c1:2a:21:83:65:90:a4: d2:5c:dd:e5:b1:51:7c:70:13:1c:7b:8b:d5:90:63:27:6e:48: 90:d9:5a:e3:37:89:e2:54:81:c5:8f:7c:ad:bd:b1:f6:eb:d8: fb:10:14:d9:7d:3a:0f:b0:2b:40:0d:ee:1f:bc:aa:1d:14:d5: 66:c9:38:75:08:2c:50:29:02:a3:34:d5:61:0d:63:5a:a4:9d: 05:17:c9:fc:2c:62:72:17:ce:e0:20:c7:de:98:e4:a3:88:ed: b7:0a:28:83:59:6c:75:42:fe:f5:2f:41:f8:c8:81:46:58:c0: 1b:0d:0d:e6:0b:1c:41:29:8e:56:31:1a:55:c4:c4:59:8b:e2: e9:31:69:50:c8:f3:ac:4d:37:eb:1d:e7:9f:b9:6b:eb:54:f6: 45:cf:13:64:36:df:1c:0c:c3:87:73:bc:47:f6:b4:22:ed:f7: 9d:f1:ac:45:7f:27:66:bb:ad:50:7f:c6:9e:67:e1:f1:33:75: a1:ad:94:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCQTIxMTAvBgNVBAUTKDZDQUMyQjcyMDg4NUU4MjM4MjRDMTk2N0VERkMzNjNF Qzg3NDc2OEQwHhcNMjQwNTE5MDI0MjA5WhcNMjQwNTI2MDI0MjA5WjAYMRYwFAYD VQQDEw02NjQ5NjcwMS1mZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRh0GKdewAq2b+Hle3Bl50db+3rIBGuNedl9j7hstL0jMtHrjr7RoKgRIZ7l GCj1IbGlSsRJst9CJBGRLuu39BYvudgeM9Sr1SiSw2eHGR9ATHV19JelG+emnCFY MKBZ63vc06psOvTpBfw1mZbifZn2KWYgwSQUeiJx2gY//QIbRap/rqpEKEoWZoId pj9U42Stcfd04t91WyKbDt+mFziVjLcQ8WAHRJWHEDrxAQyC0maQOJJ2fm87+y6A TsC/uNqmm/9Th+sPKuwjk545mABZga/vzEQa6CYsdArGoxmUl9GmYzmIJXEqB0LV P4NmvvmM1y8fRa9hw7uLEghDMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+AwkLy BikqvPIElAP+eSwFVZovMB8GA1UdIwQYMBaAFGysK3IIhegjgkwZZ+38Nj7IdHaN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJBMi8xNEZFQzJFQzU3 OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZDT0NUQmxuN2Z3MlBzaDBk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLd3JjZ2lGNkNPQ1RCbG43ZncyUHNoMGRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJBMi8xNEZFQzJFQzU3OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZD T0NUQmxuN2Z3MlBzaDBkbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69Et3Q7aE08zzLVl949aR+eRGrGxVOE0IfGVDL/VhqdZ7V8+2dIHM ErwPBky3UD+wBTP1INVTrRITeinULhiKp8EqIYNlkKTSXN3lsVF8cBMce4vVkGMn bkiQ2VrjN4niVIHFj3ytvbH269j7EBTZfToPsCtADe4fvKodFNVmyTh1CCxQKQKj NNVhDWNapJ0FF8n8LGJyF87gIMfemOSjiO23CiiDWWx1Qv71L0H4yIFGWMAbDQ3m CxxBKY5WMRpVxMRZi+LpMWlQyPOsTTfrHeefuWvrVPZFzxNkNt8cDMOHc7xH9rQi 7fed8axFfydmu61Qf8aeZ+HxM3WhrZTt -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org