$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json) Hash identifier: WZf+rweSDT70vNKIH+KWuucBTqHLHGDABFMVBQL2Vo8= Subject key identifier: 9D:25:03:6C:EC:1E:7E:0E:FE:72:6C:13:CE:30:8F:4B:54:7A:6D:70 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft Manifest number: 01BB Signing time: Sun 05 May 2024 04:35:01 +0000 Manifest this update: Sun 05 May 2024 04:35:01 +0000 Manifest next update: Sun 12 May 2024 04:35:01 +0000 Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: L8wsEW9sX1zbxZoIzKhzusE0+QHgoV6qIBsVyBPpYKY=) 2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: 4D1pPdSdbqdCY5PZJLcDChnWlfH/s/pDWMp2AoBeRI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: May 5 04:35:01 2024 GMT Not After : May 12 04:35:01 2024 GMT Subject: CN=66370c75-b28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:5d:f3:c2:e1:1e:be:a0:51:88:67:39:d4: 5d:c8:86:a5:cd:c3:e5:f9:0f:b5:06:cb:de:b3:2b: 83:92:22:39:c9:10:14:14:c2:75:8f:fe:ed:20:e3: eb:32:2c:40:9c:e9:fd:d9:2d:14:4c:ac:a3:c4:58: a1:84:41:fc:9f:a6:39:e9:fa:c4:23:2d:d2:16:3a: 33:44:3f:fe:76:f4:8f:8f:98:5b:ac:dd:a7:25:07: 6c:36:63:7e:63:1a:da:8c:8f:c5:35:b9:57:dc:5c: 1b:cd:a4:55:15:8c:26:8e:68:1a:e3:2c:96:51:2f: a6:56:fa:d8:b9:90:d7:0b:e7:ae:f0:37:88:d5:11: 8f:15:39:3b:4b:2a:64:4b:eb:91:61:cf:ed:96:bd: 7f:62:9a:0b:c2:57:3c:17:03:d8:e9:1e:61:46:a2: 94:fc:9e:32:f8:1a:03:fe:99:81:e1:72:77:56:1f: 1b:87:38:58:f4:d5:f3:b8:6d:9d:c3:1b:a4:30:94: 37:cb:f3:5b:61:ac:5b:15:7a:68:fd:5c:af:e8:c7: be:11:50:64:a9:42:a9:1f:f0:0d:81:0d:55:31:7d: 13:25:a5:3a:2d:a3:44:c3:de:4d:31:a1:bd:29:b7: a4:dc:78:c7:8e:fc:de:7a:0a:52:0d:a2:80:c7:0c: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:25:03:6C:EC:1E:7E:0E:FE:72:6C:13:CE:30:8F:4B:54:7A:6D:70 X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:38:c6:76:b1:4a:5d:9a:c1:ff:83:8d:97:84:31:e0:1c:b5: c4:24:22:10:91:2b:da:16:f7:90:72:5f:e2:c1:23:7c:bb:4a: 48:f5:3c:02:12:75:47:84:73:7d:20:45:19:76:c4:37:99:a1: 1a:fa:33:e5:91:44:7f:0f:ec:be:77:4b:2c:bd:39:9b:ba:a3: 4c:c9:41:5d:66:7d:06:4a:58:be:bd:69:65:46:86:ad:77:c7: 34:8f:5a:8c:46:9f:41:d5:6c:75:8c:79:67:2f:96:88:36:e3: 40:38:51:e0:77:9c:7f:5f:09:5d:71:3e:2e:b9:63:53:bf:ca: c3:4e:6b:ce:7d:5e:ef:b6:a2:cc:3b:68:a8:4a:25:8b:15:d1: 60:bb:6b:1c:4b:5d:6d:22:9d:89:b3:34:ad:9b:79:80:24:c5: d9:e2:52:8c:0f:0b:8c:a9:81:10:e5:bd:63:f5:11:1a:3a:63: 61:f7:da:69:81:2c:ed:56:8f:00:a1:6f:61:24:33:15:c1:be: 66:f4:4c:80:46:e8:22:dd:cf:3d:ca:19:7d:f7:45:99:9f:da: df:bc:7b:67:d0:9b:52:ef:0c:d2:e9:14:c4:e3:2a:bf:85:0b: 87:d6:ba:f5:16:ab:26:cb:cf:10:f3:c2:d7:d9:b8:8d:3f:d5: 69:f4:cc:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjQwNTA1MDQzNTAxWhcNMjQwNTEyMDQzNTAxWjAYMRYwFAYD VQQDEw02NjM3MGM3NS1iMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA741d88LhHr6gUYhnOdRdyIalzcPl+Q+1BsvesyuDkiI5yRAUFMJ1j/7tIOPr MixAnOn92S0UTKyjxFihhEH8n6Y56frEIy3SFjozRD/+dvSPj5hbrN2nJQdsNmN+ YxrajI/FNblX3FwbzaRVFYwmjmga4yyWUS+mVvrYuZDXC+eu8DeI1RGPFTk7Sypk S+uRYc/tlr1/YpoLwlc8FwPY6R5hRqKU/J4y+BoD/pmB4XJ3Vh8bhzhY9NXzuG2d wxukMJQ3y/NbYaxbFXpo/Vyv6Me+EVBkqUKpH/ANgQ1VMX0TJaU6LaNEw95NMaG9 Kbek3HjHjvzeegpSDaKAxwyYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0lA2zs Hn4O/nJsE84wj0tUem1wMB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE0NC8wRUM4RTQyQTA4ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZS c2Q0ZGJ2WW9KVHFuQ0pLaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeOMZ2sUpdmsH/g42XhDHgHLXEJCIQkSvaFveQcl/iwSN8u0pI9TwC EnVHhHN9IEUZdsQ3maEa+jPlkUR/D+y+d0ssvTmbuqNMyUFdZn0GSli+vWllRoat d8c0j1qMRp9B1Wx1jHlnL5aINuNAOFHgd5x/XwldcT4uuWNTv8rDTmvOfV7vtqLM O2ioSiWLFdFgu2scS11tIp2JszStm3mAJMXZ4lKMDwuMqYEQ5b1j9REaOmNh99pp gSztVo8AoW9hJDMVwb5m9EyARugi3c89yhl990WZn9rfvHtn0JtS7wzS6RTE4yq/ hQuH1rr1Fqsmy88Q88LX2biNP9Vp9Mzm -----END CERTIFICATE-----Generated at Sun May 5 05:21:56 2024 by rpki-client on console-fra.rpki-client.org