$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: VubfZy0uyupEmIltkqHaEhDQ7dk4m+Y5vAT+PuxWuKk= Subject key identifier: AE:22:BE:1B:AA:56:09:13:A9:B9:21:5F:DB:C5:BF:62:77:E4:CC:B5 Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: 83 Signing time: Fri 17 May 2024 07:20:13 +0000 Manifest this update: Fri 17 May 2024 07:20:12 +0000 Manifest next update: Fri 24 May 2024 07:20:12 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: b7B85aB9PfiXdAJlKr1OptYYehnP0pfBc+RHu65wKBY=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: DXvJV9anvXFAzgO5tX20q/fodIojtgu7KxvrA7/9uV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: May 17 07:20:12 2024 GMT Not After : May 24 07:20:12 2024 GMT Subject: CN=6647052c-3baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:87:4a:e9:cb:38:99:10:bf:df:c0:a7:af: 67:3f:07:61:fd:85:2b:c7:3b:2b:60:1b:9c:91:aa: d9:28:ca:ff:57:4f:fe:2e:a8:f2:9d:ee:51:61:8d: 17:5f:24:ba:88:0d:00:07:ab:e0:c7:cf:d6:8b:16: 5f:a1:e5:cb:87:15:fa:ed:3b:95:64:3f:06:83:26: 67:2d:58:43:d5:ab:d6:c8:36:13:2e:0b:3c:aa:83: 1d:fc:62:20:87:35:b1:d2:53:c5:70:cf:72:1e:62: fb:cd:b5:eb:cd:44:05:56:f6:e6:9e:6e:98:8b:50: a6:bf:32:2d:44:e9:de:b0:3f:e1:6f:19:7c:a5:04: 07:4d:96:62:f3:84:df:e2:32:e6:25:dc:7c:46:69: 0d:7e:81:86:02:2f:66:3f:7d:8c:57:c4:46:30:51: a3:77:6f:8c:fc:dc:a7:67:de:64:85:69:72:0d:c3: c8:0d:04:eb:af:7e:93:62:7c:15:0f:f5:c7:47:a6: 95:1a:cb:c8:09:9b:0d:2f:83:4a:a5:94:8f:12:cd: c6:c8:f0:ad:2e:2f:db:dc:cb:26:67:15:b7:40:c8: 67:50:22:41:f8:38:3a:c6:9e:09:cd:8e:1b:79:59: a9:06:14:ad:89:05:2d:07:bd:93:f1:1a:71:d1:95: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:BE:1B:AA:56:09:13:A9:B9:21:5F:DB:C5:BF:62:77:E4:CC:B5 X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:e3:0a:89:94:02:e6:c0:cd:68:30:69:71:ab:98:f4:8a:5b: 95:8b:2e:61:93:a9:b2:ed:a1:37:5b:09:c5:39:18:42:03:7f: d4:2d:f0:cc:eb:a0:24:80:d8:c9:7c:cf:7e:54:06:a2:9e:64: ba:3c:7b:fc:85:3b:ff:39:29:60:1d:b9:20:bc:82:be:a0:c5: 02:8b:c6:7a:d2:b7:7d:69:26:f9:91:10:32:4e:d3:d7:e1:90: cc:be:7d:c0:89:30:65:96:be:94:2f:fe:54:02:5a:c7:a6:d2: 09:39:db:9e:54:f6:31:db:12:5a:dc:2e:14:b2:de:52:97:ef: d5:df:fe:bb:1b:5a:39:ba:6f:f5:0f:3b:17:56:c7:0c:69:aa: f8:40:92:d3:9a:60:e9:e4:cb:fe:a3:25:d6:76:5f:65:b9:91: 7c:c1:28:66:43:eb:49:b2:6e:a9:a4:8c:b2:0f:dc:77:f0:bb: f4:8f:e8:ce:a4:f9:e2:8c:64:d7:39:25:74:33:9a:e5:49:e0: 3f:c3:e0:16:af:40:f6:01:33:74:92:44:f5:b9:6a:d4:79:e4: 73:c9:4b:01:b3:6b:9e:45:71:e6:15:99:36:71:7d:6a:42:fe: 4f:3b:28:af:0f:69:cc:2d:a4:af:55:39:4d:12:89:85:98:3c: e7:de:72:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjQwNTE3MDcyMDEyWhcNMjQwNTI0MDcyMDEyWjAYMRYwFAYD VQQDEw02NjQ3MDUyYy0zYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKGHSunLOJkQv9/Ap69nPwdh/YUrxzsrYBuckarZKMr/V0/+Lqjyne5RYY0X XyS6iA0AB6vgx8/WixZfoeXLhxX67TuVZD8GgyZnLVhD1avWyDYTLgs8qoMd/GIg hzWx0lPFcM9yHmL7zbXrzUQFVvbmnm6Yi1CmvzItROnesD/hbxl8pQQHTZZi84Tf 4jLmJdx8RmkNfoGGAi9mP32MV8RGMFGjd2+M/NynZ95khWlyDcPIDQTrr36TYnwV D/XHR6aVGsvICZsNL4NKpZSPEs3GyPCtLi/b3MsmZxW3QMhnUCJB+Dg6xp4JzY4b eVmpBhStiQUtB72T8Rpx0ZU6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4ivhuq VgkTqbkhX9vFv2J35My1MB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG4wqJlALmwM1oMGlxq5j0iluViy5hk6my7aE3WwnFORhCA3/ULfDM 66AkgNjJfM9+VAainmS6PHv8hTv/OSlgHbkgvIK+oMUCi8Z60rd9aSb5kRAyTtPX 4ZDMvn3AiTBllr6UL/5UAlrHptIJOdueVPYx2xJa3C4Ust5Sl+/V3/67G1o5um/1 DzsXVscMaar4QJLTmmDp5Mv+oyXWdl9luZF8wShmQ+tJsm6ppIyyD9x38Lv0j+jO pPnijGTXOSV0M5rlSeA/w+AWr0D2ATN0kkT1uWrUeeRzyUsBs2ueRXHmFZk2cX1q Qv5POyivD2nMLaSvVTlNEomFmDzn3nLC -----END CERTIFICATE-----Generated at Fri May 17 08:52:46 2024 by rpki-client on console-ams.rpki-client.org