$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft File: BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json) Hash identifier: fmi+kddO2g6QdrYoozkHVSjUCPX6zz4EJME+pw21NK4= Subject key identifier: 98:D6:C4:22:A2:AB:BB:BD:CA:26:F9:68:54:45:B4:D7:C4:C5:7D:77 Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft Manifest number: 01AD Signing time: Fri 03 May 2024 04:40:27 +0000 Manifest this update: Fri 03 May 2024 04:40:26 +0000 Manifest next update: Fri 10 May 2024 04:40:26 +0000 Files and hashes: 1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: kG6rIXCFTo/xMv6wCOOvxG6e714RBGs5W22M46nYNxg=) 2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: mcE/IJHhNlxSeNevkXhbHkK77FCAYAyssZWA6yEpRCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: May 3 04:40:26 2024 GMT Not After : May 10 04:40:26 2024 GMT Subject: CN=66346abb-2dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b6:16:ab:c9:f6:9a:09:5d:3e:e3:45:a9:03: f3:ca:60:d4:e4:a6:6f:11:a0:dd:29:fd:eb:17:ce: f0:63:4e:2a:ae:70:be:d4:f2:62:e2:f2:f6:b6:81: a2:8a:f6:ec:b6:3d:eb:7a:95:f2:4b:d3:76:93:85: 38:69:f1:5c:30:70:7e:6a:f7:7f:fa:c3:d3:bd:b1: 69:8a:11:a4:ba:50:6e:30:41:89:e8:17:26:5a:52: 71:e9:cc:5e:e8:50:eb:0b:3f:ba:48:3d:aa:18:6b: d4:2b:0c:04:7b:28:0a:74:3f:e9:98:99:de:80:8c: 98:6e:70:4c:84:f0:47:d3:21:69:ec:94:32:20:7c: ec:d0:80:ae:38:86:b1:6e:11:34:5d:23:8d:6b:b9: 93:d1:7e:87:16:94:84:34:53:b2:76:a4:77:25:0e: f8:b0:a9:08:ba:03:39:74:f2:29:52:0b:de:7f:5f: e1:97:bb:d9:71:06:f8:39:00:71:71:14:09:03:f5: 76:75:23:64:0a:d6:4d:65:32:b8:88:96:2b:ee:87: fa:2b:1b:83:4e:15:92:2f:6e:73:71:bf:ec:68:d0: 35:53:49:7e:a9:62:d6:a9:20:cf:03:c9:fe:65:cd: 8b:80:34:70:65:00:6b:a9:6b:15:b8:46:ea:e9:8a: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:C4:22:A2:AB:BB:BD:CA:26:F9:68:54:45:B4:D7:C4:C5:7D:77 X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:25:38:b7:80:8e:f8:e8:c1:43:bc:1a:31:f4:2f:91:11:16: cd:14:74:dd:88:34:ef:79:67:44:e6:e4:60:8a:bb:63:4c:ea: fe:a9:c2:78:20:be:fa:00:47:63:e2:68:8b:95:f4:b7:89:65: df:da:66:11:2c:41:83:07:57:2e:b4:8d:73:3f:5a:f1:ff:c2: 19:c1:28:80:80:57:24:93:d0:38:9b:58:f6:ec:87:d2:62:f4: 65:21:70:39:d1:88:24:6a:2e:48:96:62:aa:4a:35:28:fc:2a: 81:00:9b:e1:54:be:89:d8:4b:2a:34:4a:c5:71:07:a1:ee:9f: 75:d9:c7:da:72:7c:64:5a:cc:3d:a8:a5:d3:5b:b9:87:22:03: 58:a6:1e:0c:ae:58:2a:31:95:9f:d7:75:2c:d9:3d:2b:9c:a6: 64:26:4d:21:ef:b4:8a:5f:c2:e5:ad:80:d9:33:72:6b:20:b0: 5c:db:4d:2b:31:ec:44:65:27:0b:c8:8d:c4:c1:f3:18:53:41: c2:e0:6f:bc:8e:ae:79:d6:d0:9a:6a:6e:26:1f:bd:07:8d:20: 73:de:b4:23:09:a8:02:36:21:9e:49:3a:7b:84:98:34:c4:99: 8d:20:8e:51:51:8e:70:8e:34:37:54:fe:05:f8:bc:51:a0:c9: c1:d3:79:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjQwNTAzMDQ0MDI2WhcNMjQwNTEwMDQ0MDI2WjAYMRYwFAYD VQQDEw02NjM0NmFiYi0yZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rYWq8n2mgldPuNFqQPzymDU5KZvEaDdKf3rF87wY04qrnC+1PJi4vL2toGi ivbstj3repXyS9N2k4U4afFcMHB+avd/+sPTvbFpihGkulBuMEGJ6BcmWlJx6cxe 6FDrCz+6SD2qGGvUKwwEeygKdD/pmJnegIyYbnBMhPBH0yFp7JQyIHzs0ICuOIax bhE0XSONa7mT0X6HFpSENFOydqR3JQ74sKkIugM5dPIpUgvef1/hl7vZcQb4OQBx cRQJA/V2dSNkCtZNZTK4iJYr7of6KxuDThWSL25zcb/saNA1U0l+qWLWqSDPA8n+ Zc2LgDRwZQBrqWsVuEbq6Yo/nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjWxCKi q7u9yib5aFRFtNfExX13MB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/JTi3gI746MFDvBox9C+RERbNFHTdiDTveWdE5uRgirtjTOr+qcJ4 IL76AEdj4miLlfS3iWXf2mYRLEGDB1cutI1zP1rx/8IZwSiAgFckk9A4m1j27IfS YvRlIXA50Ygkai5IlmKqSjUo/CqBAJvhVL6J2EsqNErFcQeh7p912cfacnxkWsw9 qKXTW7mHIgNYph4MrlgqMZWf13Us2T0rnKZkJk0h77SKX8LlrYDZM3JrILBc200r MexEZScLyI3EwfMYU0HC4G+8jq551tCaam4mH70HjSBz3rQjCagCNiGeSTp7hJg0 xJmNII5RUY5wjjQ3VP4F+LxRoMnB03mW -----END CERTIFICATE-----Generated at Fri May 3 05:32:32 2024 by rpki-client on console-ams.rpki-client.org