$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json) Hash identifier: ZojL8E8/fXmly/y9vUQ4Vc6+0KGPGTAJ7iZcbw/c598= Subject key identifier: 60:33:CE:26:54:E6:4B:DE:FC:59:EA:DF:93:A4:FA:AC:06:0E:A6:4F Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 15C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft Manifest number: 15B3 Signing time: Sat 18 May 2024 17:15:13 +0000 Manifest this update: Sat 18 May 2024 17:15:13 +0000 Manifest next update: Sat 25 May 2024 17:15:13 +0000 Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: evKSs2257f09HonOMCwM5TfyyfLqycMwPrq9O7yLpdU=) 2: DA8B814E931011EDB92FFC5FC4F9AE02.roa (hash: gTxrLoXouX5xFa9fXnpDCItE5eIlxdUF6xZmbmgyf7Y=) 3: 20A2C900115711EB8E58CE15C4F9AE02.roa (hash: NsMEJco1Cbnm7CTmba+MzKbnVDI/T5E3H5+hP+qM9tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5577 (0x15c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: May 18 17:15:13 2024 GMT Not After : May 25 17:15:13 2024 GMT Subject: CN=6648e221-8682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d8:eb:8f:2d:20:30:d4:21:65:03:c3:94:1e: 0b:df:ef:25:d1:76:1c:b2:6b:4b:88:87:42:b3:3a: fb:ec:49:3a:2b:6f:cb:2b:fe:47:38:6e:64:f6:90: 94:2b:e6:20:34:84:b7:36:2f:9d:71:57:3d:99:c8: cc:ec:2b:cf:65:aa:8d:7f:77:d7:27:30:f3:b9:fd: 42:a5:09:f1:8f:0e:88:f9:0e:c2:65:2d:9c:40:18: 88:96:72:70:a1:4a:66:c9:42:35:a0:f7:f6:6b:88: fe:60:94:4b:f2:a8:d5:29:1c:52:4c:c5:91:b1:4d: fe:60:eb:ce:67:8e:75:e0:a2:15:1c:00:2c:38:7d: 63:75:28:d2:23:a8:3f:1f:e9:7b:8b:09:97:08:71: 22:84:53:54:0c:2b:a6:42:90:08:0a:f9:93:d3:0f: 36:84:34:4a:c5:57:03:1a:1b:ce:0b:65:e8:c3:3f: 98:f5:a2:04:3e:22:19:a9:50:ee:2c:d3:36:22:2b: ac:bf:f0:29:cf:29:ff:5b:29:41:85:6e:57:6c:db: 7c:88:ec:25:98:c3:c7:3c:d0:c5:07:de:59:4f:f8: eb:0d:0a:7a:10:35:1c:d8:b3:63:0a:f8:63:63:b2: ee:84:a1:11:71:ef:16:57:ef:38:75:4c:d7:74:a2: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:CE:26:54:E6:4B:DE:FC:59:EA:DF:93:A4:FA:AC:06:0E:A6:4F X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:00:04:b8:7a:23:59:60:ce:a0:56:18:4f:47:3e:a8:a3:8c: 9f:1d:f9:8d:16:c1:e3:53:fa:01:3c:0e:45:ad:86:ed:48:d1: 6e:fb:22:84:fb:30:42:a1:84:db:b5:b3:c7:b7:02:15:cc:57: 71:9c:ec:77:57:74:49:5b:82:c9:2e:54:53:93:fd:18:7b:48: a7:85:8b:de:f6:f6:85:28:39:49:9a:b9:17:6b:77:2a:cd:d2: de:85:b1:c7:73:01:2e:60:c5:b4:0f:dd:e4:e5:89:11:0e:e0: 98:8c:ce:34:22:a6:ed:94:ed:78:8f:ab:f9:91:ba:ac:5c:eb: 80:17:91:67:4f:a5:5b:fe:cb:39:88:17:66:2b:24:19:48:11: 04:52:07:a6:d4:f8:be:f0:70:78:b0:79:1f:77:9c:ba:c8:0a: 1d:8c:15:ca:77:86:d6:a7:93:ba:46:22:2e:c1:11:1a:4c:3d: fa:a5:e2:80:67:63:1b:fd:c8:f3:c3:09:b1:2b:a8:67:e6:a0: 1a:a7:0b:3b:18:2d:d3:3c:a7:38:34:25:85:fc:2a:86:5e:ed: a8:3e:d6:30:71:15:4e:58:00:37:68:28:07:dd:a5:30:07:48: d2:3b:4d:a8:14:d4:9b:25:55:8c:3e:74:02:c0:8b:1b:87:8f: 16:ac:94:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjQwNTE4MTcxNTEzWhcNMjQwNTI1MTcxNTEzWjAYMRYwFAYD VQQDEw02NjQ4ZTIyMS04NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Njrjy0gMNQhZQPDlB4L3+8l0XYcsmtLiIdCszr77Ek6K2/LK/5HOG5k9pCU K+YgNIS3Ni+dcVc9mcjM7CvPZaqNf3fXJzDzuf1CpQnxjw6I+Q7CZS2cQBiIlnJw oUpmyUI1oPf2a4j+YJRL8qjVKRxSTMWRsU3+YOvOZ4514KIVHAAsOH1jdSjSI6g/ H+l7iwmXCHEihFNUDCumQpAICvmT0w82hDRKxVcDGhvOC2Xowz+Y9aIEPiIZqVDu LNM2Iiusv/Apzyn/WylBhW5XbNt8iOwlmMPHPNDFB95ZT/jrDQp6EDUc2LNjCvhj Y7LuhKERce8WV+84dUzXdKLSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAzziZU 5kve/Fnq35Ok+qwGDqZPMB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3 UjlIRHBUdEVkVm9RcG9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvAAS4eiNZYM6gVhhPRz6oo4yfHfmNFsHjU/oBPA5FrYbtSNFu+yKE +zBCoYTbtbPHtwIVzFdxnOx3V3RJW4LJLlRTk/0Ye0inhYve9vaFKDlJmrkXa3cq zdLehbHHcwEuYMW0D93k5YkRDuCYjM40IqbtlO14j6v5kbqsXOuAF5FnT6Vb/ss5 iBdmKyQZSBEEUgem1Pi+8HB4sHkfd5y6yAodjBXKd4bWp5O6RiIuwREaTD36peKA Z2Mb/cjzwwmxK6hn5qAapws7GC3TPKc4NCWF/CqGXu2oPtYwcRVOWAA3aCgH3aUw B0jSO02oFNSbJVWMPnQCwIsbh48WrJQf -----END CERTIFICATE-----Generated at Sat May 18 18:12:34 2024 by rpki-client on console-fra.rpki-client.org