$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: d/xzH46EUvN2rgmua2mLyPhfjsmdB4XiNbcb8s/pkjY= Subject key identifier: 17:43:36:EA:72:18:17:6E:6E:A7:FF:88:35:5D:17:38:3D:01:08:23 Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 17E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 17D1 Signing time: Fri 26 Apr 2024 17:00:01 +0000 Manifest this update: Fri 26 Apr 2024 17:00:00 +0000 Manifest next update: Fri 03 May 2024 17:00:00 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: FqpDZlIhhm1vf98wf9P0Igst0CSrSzdDZVkUqsuOrdI=) 2: 9D849C0C98FE11E7A3A5F161C4F9AE02.roa (hash: htda9TiOIlXHheUEzpXiQijOUgH7nA3aLWyRMRsqm6o=) 3: 8C00D5BC94F111EAB30E7682C4F9AE02.roa (hash: K4zc/Pb7wF5tJt5cymiyC6HJ+mYOvXugDRtcMKB/cgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Apr 26 17:00:00 2024 GMT Not After : May 3 17:00:00 2024 GMT Subject: CN=662bdd90-0de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:85:b1:59:f7:08:8c:60:f9:04:00:43:e7:7e: 41:20:b0:aa:fe:3d:4b:5e:e5:7a:05:70:b7:fc:58: 3c:28:7f:75:04:81:d0:fa:91:38:f6:6f:be:b3:ee: af:a0:31:39:3c:01:74:f5:84:fa:6e:27:b8:c4:16: 6d:09:4f:9d:ae:6e:2c:48:07:e0:97:66:82:b9:38: 9d:5b:3a:c9:fd:d3:0c:2e:9b:d3:3c:d5:d6:73:1d: 42:62:7e:ba:98:f7:85:85:fb:7a:c7:d4:c4:b9:59: 2b:4d:7a:a7:4a:1e:5c:85:1d:57:ed:b9:8b:b4:78: 93:58:b7:85:65:e1:1f:d1:09:4b:1b:af:1c:d5:b9: 25:d8:08:12:cf:c6:d6:2a:1e:23:1e:a5:17:b2:fe: 52:87:cb:e4:09:01:c2:ff:5d:8b:9a:db:05:67:42: 6a:7b:48:2f:af:bc:56:a6:80:d4:3e:b0:c9:62:b3: ee:71:c0:2a:9c:82:24:90:a2:63:68:76:16:23:1b: 30:75:08:a9:eb:b0:aa:33:3e:c5:40:ac:cf:1a:dd: 36:0b:14:40:c0:63:cd:cc:6f:99:5b:da:67:0e:c7: 7b:10:27:e3:97:13:4e:43:b0:c3:a1:77:0a:da:9e: ab:c2:36:a1:62:31:4a:9a:fc:9b:94:e5:11:42:90: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:36:EA:72:18:17:6E:6E:A7:FF:88:35:5D:17:38:3D:01:08:23 X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:41:c4:64:04:fe:1c:95:e0:fe:98:ed:47:5c:7d:7d:e1: 75:cd:bd:1a:49:e8:ae:62:41:13:6c:c9:56:9a:b6:84:9f:11: 10:f4:79:a1:95:60:73:a0:c7:97:df:82:64:ea:cb:a3:f3:01: c8:55:2a:13:1c:e8:c7:e6:40:f0:9e:21:32:3a:0f:5f:68:3f: 31:13:8d:b2:09:97:a1:ae:db:ca:82:7c:75:de:f4:28:fa:d5: 76:f1:f4:82:66:40:62:7c:14:44:ac:8e:97:fa:e4:52:43:aa: b8:9b:c6:ba:82:75:3c:88:37:a1:90:15:36:a5:86:0d:76:e0: d1:fb:4d:5c:b8:a0:4c:2b:31:f9:e4:47:33:b1:6b:29:1b:67: 51:a5:81:78:7c:4e:87:e6:a7:ba:53:65:ea:a2:a6:5a:e6:a2: 3f:b6:b9:6b:a8:25:86:3e:ca:78:02:e2:3f:5d:e6:36:ec:d3: 67:bb:da:e1:9f:5c:9f:b1:f4:0c:b4:50:73:c5:22:63:ac:dc: 3f:7f:60:d5:3c:01:0f:65:95:d3:a7:5a:80:d7:01:d9:ce:43: f8:cc:22:74:97:e3:08:ea:0e:d7:a6:d7:77:53:45:bd:8f:f8: 9b:07:8f:62:51:9e:3c:ee:1e:ee:2f:70:35:d1:d9:dd:6e:92: cd:2c:f5:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjQwNDI2MTcwMDAwWhcNMjQwNTAzMTcwMDAwWjAYMRYwFAYD VQQDEw02NjJiZGQ5MC0wZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+oWxWfcIjGD5BABD535BILCq/j1LXuV6BXC3/Fg8KH91BIHQ+pE49m++s+6v oDE5PAF09YT6bie4xBZtCU+drm4sSAfgl2aCuTidWzrJ/dMMLpvTPNXWcx1CYn66 mPeFhft6x9TEuVkrTXqnSh5chR1X7bmLtHiTWLeFZeEf0QlLG68c1bkl2AgSz8bW Kh4jHqUXsv5Sh8vkCQHC/12LmtsFZ0Jqe0gvr7xWpoDUPrDJYrPuccAqnIIkkKJj aHYWIxswdQip67CqMz7FQKzPGt02CxRAwGPNzG+ZW9pnDsd7ECfjlxNOQ7DDoXcK 2p6rwjahYjFKmvyblOURQpC0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdDNupy GBdubqf/iDVdFzg9AQgjMB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetUHEZAT+HJXg/pjtR1x9feF1zb0aSeiuYkETbMlWmraEnxEQ9Hmh lWBzoMeX34Jk6suj8wHIVSoTHOjH5kDwniEyOg9faD8xE42yCZehrtvKgnx13vQo +tV28fSCZkBifBRErI6X+uRSQ6q4m8a6gnU8iDehkBU2pYYNduDR+01cuKBMKzH5 5EczsWspG2dRpYF4fE6H5qe6U2XqoqZa5qI/trlrqCWGPsp4AuI/XeY27NNnu9rh n1yfsfQMtFBzxSJjrNw/f2DVPAEPZZXTp1qA1wHZzkP4zCJ0l+MI6g7Xptd3U0W9 j/ibB49iUZ487h7uL3A10dndbpLNLPW6 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:56 2024 by rpki-client on console-ams.rpki-client.org