$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: YVLCx79ZdnGQGGW3b4a4u7QHgCmXGvLzOIuMGhSdDho= Subject key identifier: 2E:0F:D3:55:DC:D6:61:14:73:41:25:46:3F:42:EC:D7:05:D5:C5:91 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: 38 Signing time: Sun 19 May 2024 08:18:18 +0000 Manifest this update: Sun 19 May 2024 08:18:17 +0000 Manifest next update: Sun 26 May 2024 08:18:17 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: 3OyZEYV9dsdt5mvjlMIEyaoIFVSckzpDVSdJ6hWMu5E=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: th+RZ3xcn9sdtuIwJJBmfy4OKtZmVHO5KksRG1wLXTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: May 19 08:18:17 2024 GMT Not After : May 26 08:18:17 2024 GMT Subject: CN=6649b5c9-7207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:bd:e0:d5:0a:80:33:75:aa:47:30:9f:6c: 2f:8c:ad:8d:5c:1a:52:3f:88:57:a1:91:5d:5f:a8: 81:3a:31:ec:18:61:ea:cb:40:33:9c:97:da:e5:5e: a0:cb:ff:26:04:b4:b7:99:8b:ec:46:02:a4:3d:75: d5:f0:37:2d:53:7c:04:5b:45:0f:5f:00:25:d1:d6: 6a:37:05:c6:d3:01:9a:e8:6f:f8:2b:c3:6d:bc:b3: 2c:41:47:5a:31:fd:6d:9d:0f:52:21:cb:2b:98:87: e8:5c:09:f3:e7:4e:d2:a1:02:bc:fb:9e:06:4d:64: cf:1d:2f:8a:92:e8:d4:89:0a:8a:7c:3c:7d:c2:0c: bc:5f:e6:52:68:c1:e5:0e:bf:2e:d1:22:25:91:aa: 10:b2:16:79:79:6a:77:f9:43:63:e5:0f:55:20:70: fb:f3:3b:61:75:f3:23:1f:40:54:31:5d:d1:e1:12: 60:db:a6:ae:53:01:b3:e2:53:2f:7f:82:fe:6a:5c: 47:c2:9c:04:ce:91:82:38:a7:2d:fa:dd:3b:38:65: d4:19:fb:6e:81:76:74:25:88:ae:4d:0c:27:8f:6d: 26:09:ac:e3:54:b0:8c:40:6f:07:ee:6a:13:4d:ab: 13:8b:7b:d6:d3:50:1e:d5:1e:de:55:55:31:92:16: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:D3:55:DC:D6:61:14:73:41:25:46:3F:42:EC:D7:05:D5:C5:91 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:f4:97:9b:6a:ac:34:2b:b4:7c:f0:ee:9b:3d:51:68:ce: f3:01:77:88:8b:37:22:8f:57:e7:b1:42:74:41:e6:f7:2a:35: 37:e4:3a:7f:ff:35:4b:a4:39:42:55:ac:93:6e:95:1b:ea:78: 86:71:1d:56:be:98:d3:54:ce:bd:ad:4b:8f:2a:60:0a:05:a7: 4a:0b:12:ed:b1:d6:e9:b9:cc:ee:0b:95:2b:cb:fc:12:0c:7a: 8d:9f:9b:6b:dc:26:2c:b8:ba:6b:ec:27:1e:25:16:bf:46:90: c3:71:c0:fe:f6:12:b2:44:24:8d:2c:7c:b1:23:48:eb:b5:47: 76:0a:e9:12:0b:49:51:ab:bc:cc:ec:a5:c5:7b:f9:28:c5:82: 9a:b3:85:7e:03:cb:4a:be:43:5d:e7:98:c8:b7:7c:b1:48:28: e4:dd:18:cf:44:87:6f:00:95:78:31:4c:d7:30:23:7d:e5:9d: 7a:a1:52:31:83:3f:d0:78:77:00:46:1a:93:e4:d6:e0:b4:18: 95:93:65:47:8c:6f:24:a7:af:0b:82:b9:82:eb:7e:ef:b2:cf: e2:1d:fe:2a:06:27:9a:e2:c8:21:4a:94:f9:82:1d:35:9c:20: bf:2d:56:2e:b8:6b:44:a7:a5:f0:0d:6a:cc:6e:95:6d:f7:78: b3:c2:48:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlBMjExMC8GA1UEBRMoNkM4MDMwNTJCRjk2QzJBQjRBQkFBOUVEMjZBM0E5QjQ2 Mzk2MDVBMzAeFw0yNDA1MTkwODE4MTdaFw0yNDA1MjYwODE4MTdaMBgxFjAUBgNV BAMTDTY2NDliNWM5LTcyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDo1r3g1QqAM3WqRzCfbC+MrY1cGlI/iFehkV1fqIE6MewYYerLQDOcl9rlXqDL /yYEtLeZi+xGAqQ9ddXwNy1TfARbRQ9fACXR1mo3BcbTAZrob/grw228syxBR1ox /W2dD1IhyyuYh+hcCfPnTtKhArz7ngZNZM8dL4qS6NSJCop8PH3CDLxf5lJoweUO vy7RIiWRqhCyFnl5anf5Q2PlD1UgcPvzO2F18yMfQFQxXdHhEmDbpq5TAbPiUy9/ gv5qXEfCnATOkYI4py363Ts4ZdQZ+26BdnQliK5NDCePbSYJrONUsIxAbwfuahNN qxOLe9bTUB7VHt5VVTGSFsOLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULg/TVdzW YRRzQSVGP0Ls1wXVxZEwHwYDVR0jBBgwFoAUbIAwUr+WwqtKuqntJqOptGOWBaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUEyL0JDQkFFMENFQzU0 MTExRUVBQkMyQzM4NUM0RjlBRTAyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0Jh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYklBd1VyLVd3cXRLdXFudEpxT3B0R09XQmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUEyL0JDQkFFMENFQzU0MTExRUVBQkMyQzM4NUM0RjlBRTAyL2JJQXdVci1Xd3F0 S3VxbnRKcU9wdEdPV0JhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADt19Jebaqw0K7R88O6bPVFozvMBd4iLNyKPV+exQnRB5vcqNTfkOn// NUukOUJVrJNulRvqeIZxHVa+mNNUzr2tS48qYAoFp0oLEu2x1um5zO4LlSvL/BIM eo2fm2vcJiy4umvsJx4lFr9GkMNxwP72ErJEJI0sfLEjSOu1R3YK6RILSVGrvMzs pcV7+SjFgpqzhX4Dy0q+Q13nmMi3fLFIKOTdGM9Eh28AlXgxTNcwI33lnXqhUjGD P9B4dwBGGpPk1uC0GJWTZUeMbySnrwuCuYLrfu+yz+Id/ioGJ5riyCFKlPmCHTWc IL8tVi64a0SnpfANasxulW33eLPCSOQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org