$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: UEeAz7Q3mpnCFwRRqoLhFyxwjOBdYeoryQBEfXcjo/o= Subject key identifier: 27:94:65:D6:EF:55:9E:D1:9E:AA:14:45:F0:21:91:90:A8:55:7B:41 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 0824 Signing time: Tue 30 Apr 2024 22:06:54 +0000 Manifest this update: Tue 30 Apr 2024 22:06:53 +0000 Manifest next update: Tue 07 May 2024 22:06:53 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: sBnxxDkcFDSV94UUsMBXv/XqUtlO2Nhkzy4pca/pEpk=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: Wdo4xbo2jThOBALG/swFdSWyPEiRkzeC/w2Ayzy6Ytc=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: 2VI2hY5UlARHpwuBqnULVT3ahtdexijvR2j0GUq/pso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Apr 30 22:06:53 2024 GMT Not After : May 7 22:06:53 2024 GMT Subject: CN=66316b7e-751d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:bc:2f:1d:f5:1b:b3:94:61:97:52:47:16: 86:27:df:e6:91:a6:75:0c:b6:c7:eb:90:2c:b5:68: 39:e8:de:41:ae:6a:5b:ad:42:a8:f2:80:51:a5:a8: 38:c5:37:79:ff:48:40:5a:5f:11:0a:fd:a8:69:a4: cf:c0:ed:07:89:16:3e:61:28:17:0b:94:ae:17:66: 1f:71:4f:b6:a8:b8:15:0a:fb:f8:28:2d:8f:b4:12: f2:c9:6e:dd:ea:d1:27:ab:04:13:09:87:ff:b5:a2: 2a:62:47:15:0c:6c:d4:4a:b9:15:a0:cb:0f:36:db: f2:5c:3e:75:99:49:97:40:03:6b:be:75:d3:8a:fd: 98:38:f5:87:a9:fa:ed:5b:ff:8d:e8:c6:29:10:66: 9e:cc:f4:47:18:bb:dc:59:46:92:a0:c6:16:17:81: 19:fb:18:f9:68:23:ae:b2:c5:d8:07:ee:57:9d:26: f2:98:80:99:99:15:70:39:d0:83:43:8b:b4:ec:79: 36:f7:65:ab:f7:a4:35:a1:00:41:ce:fe:e6:ed:4e: ca:e8:4e:8e:6a:8f:c0:ef:ee:e6:fc:21:c9:60:53: 34:00:ef:92:b0:80:7d:00:77:dc:39:3f:dd:f5:05: 96:89:15:7e:fb:7a:0e:cb:dd:08:26:ae:93:1f:69: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:65:D6:EF:55:9E:D1:9E:AA:14:45:F0:21:91:90:A8:55:7B:41 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6b:43:74:ed:74:55:84:f9:14:8d:e5:8c:a0:40:6c:b7:5d: b9:46:18:0c:ce:24:48:80:81:0c:c4:e1:d2:3b:4b:b2:fd:55: 4c:da:9c:76:aa:8d:d0:61:21:cc:3a:c6:80:f1:d1:b2:8c:b9: bd:ec:07:49:b9:7c:c1:7a:49:e3:fc:8b:4d:9b:d6:4c:ee:ea: a4:e2:80:13:45:b4:98:06:56:84:2a:9f:ec:ca:72:77:f2:c5: 9e:62:6e:d6:38:e5:56:ec:21:14:cf:25:35:07:9f:1d:f9:e8: e2:e7:05:6c:82:2b:77:68:cf:50:79:50:05:94:28:b5:25:b7: 5e:e6:51:01:b6:1f:dc:92:49:af:aa:4e:9c:13:32:42:c8:1b: b8:a5:a4:64:7a:73:0e:f6:40:6b:0d:3c:c9:6b:35:af:8f:75: ed:ba:97:a0:e5:ae:84:f7:89:98:24:b3:1e:3f:19:ed:33:ba: d6:2f:ef:ea:b4:8d:e3:74:e6:0c:66:17:82:45:31:56:ad:e3: e5:8a:7c:c3:d5:9e:20:a2:03:04:a3:6c:db:f7:5b:b4:33:ea: 24:b1:99:21:70:ce:7f:48:15:67:a3:c7:28:d2:ca:be:cb:88: 2c:4a:a8:20:5f:47:7a:e7:c3:83:77:06:8a:90:5a:74:e5:94: 2a:da:a9:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjQwNDMwMjIwNjUzWhcNMjQwNTA3MjIwNjUzWjAYMRYwFAYD VQQDEw02NjMxNmI3ZS03NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/a8Lx31G7OUYZdSRxaGJ9/mkaZ1DLbH65AstWg56N5BrmpbrUKo8oBRpag4 xTd5/0hAWl8RCv2oaaTPwO0HiRY+YSgXC5SuF2YfcU+2qLgVCvv4KC2PtBLyyW7d 6tEnqwQTCYf/taIqYkcVDGzUSrkVoMsPNtvyXD51mUmXQANrvnXTiv2YOPWHqfrt W/+N6MYpEGaezPRHGLvcWUaSoMYWF4EZ+xj5aCOussXYB+5XnSbymICZmRVwOdCD Q4u07Hk292Wr96Q1oQBBzv7m7U7K6E6Oao/A7+7m/CHJYFM0AO+SsIB9AHfcOT/d 9QWWiRV++3oOy90IJq6TH2m5QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeUZdbv VZ7RnqoURfAhkZCoVXtBMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4a0N07XRVhPkUjeWMoEBst125RhgMziRIgIEMxOHSO0uy/VVM2px2 qo3QYSHMOsaA8dGyjLm97AdJuXzBeknj/ItNm9ZM7uqk4oATRbSYBlaEKp/synJ3 8sWeYm7WOOVW7CEUzyU1B58d+eji5wVsgit3aM9QeVAFlCi1Jbde5lEBth/ckkmv qk6cEzJCyBu4paRkenMO9kBrDTzJazWvj3Xtupeg5a6E94mYJLMePxntM7rWL+/q tI3jdOYMZheCRTFWrePlinzD1Z4gogMEo2zb91u0M+oksZkhcM5/SBVno8co0sq+ y4gsSqggX0d658ODdwaKkFp05ZQq2qln -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:12 2024 by rpki-client on console-fra.rpki-client.org