$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json) Hash identifier: DnZIY2W63ORKHeqsvANswv2WIm7RjgzY5md6gYHLrUg= Subject key identifier: EE:72:F5:E7:40:7A:10:D0:56:4F:FF:42:8F:25:48:89:65:F3:A5:FB Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft Manifest number: 45 Signing time: Wed 15 May 2024 08:12:58 +0000 Manifest this update: Wed 15 May 2024 08:12:58 +0000 Manifest next update: Wed 22 May 2024 08:12:58 +0000 Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: BFigB/TxsOa3fGzN6LibFyCtRZCE8dSY/rCfERGlIWk=) 2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: uv95cs01At/PuOV4xL+9RS+LdOUsC64NaC6OR5bgD2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C Validity Not Before: May 15 08:12:58 2024 GMT Not After : May 22 08:12:58 2024 GMT Subject: CN=66446e8a-5ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:95:9d:79:23:62:44:c2:16:e3:52:66:cb: 24:0c:f3:52:e3:42:0f:ff:99:72:c0:af:68:2e:ba: 1f:27:f4:29:36:49:5b:f0:67:e1:c0:ee:07:02:f7: a4:ed:66:cc:d2:b4:33:8d:e6:7e:6f:63:fc:f3:ef: e0:30:1c:47:2b:34:30:7c:8b:56:d8:f8:d7:9a:17: 64:89:61:d6:ca:80:b3:3c:c9:19:db:5a:46:4e:37: af:58:a4:d3:e4:d0:6b:df:f2:2c:91:8a:7e:82:2f: e8:bf:77:fc:86:37:8f:36:6f:a7:4f:9b:ed:9d:9f: 01:72:a7:c0:56:e1:c2:30:c4:3c:61:06:77:79:87: cd:b5:80:54:f2:15:b7:f4:11:49:7b:c1:dd:c6:2f: da:03:45:d6:00:ba:71:dc:a9:2e:9c:8d:1c:69:92: 37:b8:21:3f:22:65:49:65:f6:1f:38:d4:15:c2:97: e4:0d:0c:a4:52:bd:59:5a:32:75:f2:e1:83:87:0b: a8:49:a8:f9:c5:72:9e:34:e0:7d:25:71:b1:7e:5c: 05:18:90:9e:59:62:95:fd:59:54:8f:a0:f7:59:8c: 45:40:cd:f7:dd:a6:13:e7:4d:42:d3:3d:97:8e:b5: da:79:e6:ee:11:3d:e4:90:5f:6f:d1:01:ba:ea:9f: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:F5:E7:40:7A:10:D0:56:4F:FF:42:8F:25:48:89:65:F3:A5:FB X509v3 Authority Key Identifier: keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:56:88:71:56:fb:ce:55:7c:5a:e5:ef:16:43:20:2f:6f:a3: de:be:3e:c7:bb:9b:2b:82:27:1c:43:b1:66:f1:f4:06:10:9b: ac:2f:79:0c:52:d2:15:3d:5f:bb:7c:de:81:d8:03:66:97:c1: 9b:b3:49:ca:32:d9:3c:4f:54:e6:6e:76:e5:27:ee:67:6e:ba: 4a:9f:76:74:b8:ab:bc:6c:b2:83:c0:0a:0a:6e:69:e2:fc:87: 1a:9e:57:8a:68:e4:14:be:bc:c8:84:b8:55:67:77:15:a9:00: e5:01:25:ff:0e:04:94:ec:3f:7e:4c:6a:40:c8:c6:87:11:8e: 4e:1c:f1:98:e4:da:0d:54:03:0c:fa:19:8d:92:7d:a6:40:cd: cc:bc:09:ea:67:27:5d:63:f1:f4:d3:fe:8e:11:66:e9:4d:7e: 16:c6:22:a5:7e:ff:d6:8d:e5:ed:4c:a8:8e:a1:80:e3:d1:ec: b0:c7:93:fb:d6:7b:76:23:e4:17:1f:55:d5:e8:14:c7:a7:19: fb:c1:40:bf:fa:03:ce:0f:28:c4:a9:d3:b0:93:68:a3:ca:0a: 12:b2:6e:00:c0:c5:e5:78:c5:63:c8:71:8c:65:02:d6:8a:b0: 3a:ca:6f:11:02:75:8d:66:1d:51:35:af:05:1f:39:f0:8e:65: 12:2e:ed:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDAyRTExMC8GA1UEBRMoMDRBNTVGN0FCM0FFMzk5RDRGMjU3RDRGRDI4OUIxMDU4 MDhFNUMzQzAeFw0yNDA1MTUwODEyNThaFw0yNDA1MjIwODEyNThaMBgxFjAUBgNV BAMTDTY2NDQ2ZThhLTVlYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjapWdeSNiRMIW41JmyyQM81LjQg//mXLAr2guuh8n9Ck2SVvwZ+HA7gcC96Tt ZszStDON5n5vY/zz7+AwHEcrNDB8i1bY+NeaF2SJYdbKgLM8yRnbWkZON69YpNPk 0Gvf8iyRin6CL+i/d/yGN482b6dPm+2dnwFyp8BW4cIwxDxhBnd5h821gFTyFbf0 EUl7wd3GL9oDRdYAunHcqS6cjRxpkje4IT8iZUll9h841BXCl+QNDKRSvVlaMnXy 4YOHC6hJqPnFcp404H0lcbF+XAUYkJ5ZYpX9WVSPoPdZjEVAzffdphPnTULTPZeO tdp55u4RPeSQX2/RAbrqn6BTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7nL150B6 ENBWT/9CjyVIiWXzpfswHwYDVR0jBBgwFoAUBKVferOuOZ1PJX1P0omxBYCOXDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwMDJFL0YyODdEMzBBQjAx MTExRUVCQzU4Njk2NEM0RjlBRTAyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktWZmVyT3VPWjFQSlgxUDBvbXhCWUNPWER3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw MDJFL0YyODdEMzBBQjAxMTExRUVCQzU4Njk2NEM0RjlBRTAyL0JLVmZlck91T1ox UEpYMVAwb214QllDT1hEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGJWiHFW+85VfFrl7xZDIC9vo96+Pse7myuCJxxDsWbx9AYQm6wveQxS 0hU9X7t83oHYA2aXwZuzScoy2TxPVOZuduUn7mduukqfdnS4q7xssoPACgpuaeL8 hxqeV4po5BS+vMiEuFVndxWpAOUBJf8OBJTsP35MakDIxocRjk4c8Zjk2g1UAwz6 GY2SfaZAzcy8CepnJ11j8fTT/o4RZulNfhbGIqV+/9aN5e1MqI6hgOPR7LDHk/vW e3Yj5BcfVdXoFMenGfvBQL/6A84PKMSp07CTaKPKChKybgDAxeV4xWPIcYxlAtaK sDrKbxECdY1mHVE1rwUfOfCOZRIu7Zg= -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org