$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft File: ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json) Hash identifier: v3kcFK35Hgl9sfXDkjaXaUJ9ByTkwOWzSaPPUgGodqM= Subject key identifier: 60:26:12:0C:79:0E:02:E6:AF:9A:BD:38:21:27:68:BA:E7:C8:C3:B9 Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft Manifest number: 07E9 Signing time: Thu 02 May 2024 22:07:49 +0000 Manifest this update: Thu 02 May 2024 22:07:49 +0000 Manifest next update: Thu 09 May 2024 22:07:49 +0000 Files and hashes: 1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: qF+SzdMEqHvqgxQbopQD7Jz3JcODIx+SKfbXuIdnwCU=) 2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: LBp2fTkshlklubRKB74aBh+RQThljaOTOSaCnEexi8g=) 3: 892D088A0FE411EE90944D75C4F9AE02.roa (hash: A1GqqpQN8T0098KbgpktVuMJw7+J/qVlNtrJHyhjSIU=) 4: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: Ocl3HidpkRYsHDLW83MnIFTm13n7uWYjmu59XFUc298=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: May 2 22:07:49 2024 GMT Not After : May 9 22:07:49 2024 GMT Subject: CN=66340eb5-c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:70:04:02:bd:7d:fa:5e:0c:96:f6:d9:f8:3e: 08:35:43:76:80:ec:a9:38:b7:3e:2f:f9:7b:8a:cb: 87:a6:02:60:ea:03:a6:92:d4:3c:93:95:08:04:b5: 79:51:fa:01:3c:bd:68:2d:b2:85:37:35:83:bf:11: 58:e4:69:48:de:28:1a:99:44:3f:ff:a7:44:20:a8: 19:7f:87:06:50:b8:0a:b9:9c:77:22:1e:5d:c2:e9: 36:48:d0:a6:fe:d7:28:01:a3:5c:87:f7:c6:64:27: 73:24:00:9a:5d:ef:2e:df:f9:4f:e5:f1:ca:da:97: b4:d6:ba:9a:3a:3b:82:43:c7:d8:1a:ed:81:54:aa: 1f:d5:ba:f6:48:ee:f6:bf:8e:56:7b:ae:49:92:20: fd:e0:b4:42:db:f8:ee:dc:3c:4d:76:94:ca:c6:53: da:35:35:75:1d:be:86:98:c4:da:f9:1b:b5:95:74: 51:d4:83:58:0b:a0:28:c8:c7:ad:f4:3c:39:7c:f0: 06:6b:e8:85:fb:d9:c7:f8:8c:4a:71:39:3f:57:a6: 85:17:d2:dd:9c:23:60:68:96:3a:74:13:53:19:6d: 34:cc:44:39:f9:5e:d0:97:38:c2:c6:ba:c0:7d:a6: 70:84:e0:5c:c5:e3:c6:34:6a:f1:d6:b6:6c:a7:f1: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:26:12:0C:79:0E:02:E6:AF:9A:BD:38:21:27:68:BA:E7:C8:C3:B9 X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:67:a1:dd:f5:14:b9:a9:14:54:15:d7:1d:a3:b0:cd:de:be: 99:92:68:46:1c:6a:82:83:33:2c:33:29:08:bf:66:d3:35:e5: 1f:79:7c:78:82:be:8b:8a:25:24:2d:f2:c0:10:d0:43:4d:4b: 76:3b:45:ba:83:23:20:f2:00:b1:53:2c:85:0f:37:9c:62:df: 40:06:8d:a7:71:35:3d:6c:65:91:5e:d0:b5:9b:5e:03:ff:e4: 36:e2:ec:af:55:70:be:b5:59:36:33:af:59:2a:d0:9a:78:f0: a6:9d:11:64:af:0f:a6:55:51:e4:66:90:b8:d0:fd:93:fa:ae: c8:81:ad:4b:5f:d0:40:dc:d3:9c:a5:46:d6:a1:87:bd:44:58: 6c:63:b2:97:51:2b:bf:42:c7:e9:8f:74:7c:e5:22:f2:ed:a0: 03:ea:bb:71:05:e8:6c:4f:fa:80:d1:3a:34:11:e7:b7:14:0e: ff:69:62:45:fc:96:cc:2b:78:18:35:27:48:c6:ef:2b:1d:10: 2a:e6:66:10:d3:32:0e:47:6c:ca:31:83:cf:36:3a:85:c6:80: c7:6d:4c:a5:c3:5a:65:91:15:ca:ad:54:06:c0:be:99:ab:a5: cb:44:fd:85:f6:de:3b:6f:1a:8b:cc:bd:5d:46:b7:7e:23:a6: d7:1d:82:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjQwNTAyMjIwNzQ5WhcNMjQwNTA5MjIwNzQ5WjAYMRYwFAYD VQQDEw02NjM0MGViNS1jNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nAEAr19+l4MlvbZ+D4INUN2gOypOLc+L/l7isuHpgJg6gOmktQ8k5UIBLV5 UfoBPL1oLbKFNzWDvxFY5GlI3igamUQ//6dEIKgZf4cGULgKuZx3Ih5dwuk2SNCm /tcoAaNch/fGZCdzJACaXe8u3/lP5fHK2pe01rqaOjuCQ8fYGu2BVKof1br2SO72 v45We65JkiD94LRC2/ju3DxNdpTKxlPaNTV1Hb6GmMTa+Ru1lXRR1INYC6AoyMet 9Dw5fPAGa+iF+9nH+IxKcTk/V6aFF9LdnCNgaJY6dBNTGW00zEQ5+V7QlzjCxrrA faZwhOBcxePGNGrx1rZsp/G/nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAmEgx5 DgLmr5q9OCEnaLrnyMO5MB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNCMS9EMDBERDQ5OEJDMDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExL LTlzRW1qTlduLXB1OXNsUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwZ6Hd9RS5qRRUFdcdo7DN3r6ZkmhGHGqCgzMsMykIv2bTNeUfeXx4 gr6LiiUkLfLAENBDTUt2O0W6gyMg8gCxUyyFDzecYt9ABo2ncTU9bGWRXtC1m14D /+Q24uyvVXC+tVk2M69ZKtCaePCmnRFkrw+mVVHkZpC40P2T+q7Iga1LX9BA3NOc pUbWoYe9RFhsY7KXUSu/Qsfpj3R85SLy7aAD6rtxBehsT/qA0To0Eee3FA7/aWJF /JbMK3gYNSdIxu8rHRAq5mYQ0zIOR2zKMYPPNjqFxoDHbUylw1plkRXKrVQGwL6Z q6XLRP2F9t47bxqLzL1dRrd+I6bXHYLW -----END CERTIFICATE-----Generated at Thu May 2 23:03:11 2024 by rpki-client on console-fra.rpki-client.org