$ rpki-client -vvf rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft File: bkOcbhO3EI4ApuUbi74WKVOg6is.mft (raw, json) Hash identifier: AWBpQq0y40P9soLGqSnkNCVGALWlxjPR4uFjR8WDU+0= Subject key identifier: DA:C7:17:04:EB:A7:1B:3C:86:72:62:00:BA:2A:E0:6E:7F:15:60:D6 Authority key identifier: 6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B Certificate issuer: /CN=A91659DB/serialNumber=6E439C6E13B7108E00A6E51B8BBE162953A0EA2B Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft Manifest number: 0CB4 Signing time: Thu 02 May 2024 18:54:12 +0000 Manifest this update: Thu 02 May 2024 18:54:11 +0000 Manifest next update: Thu 09 May 2024 18:54:11 +0000 Files and hashes: 1: bkOcbhO3EI4ApuUbi74WKVOg6is.crl (hash: s0FuJs4tlEXRbOdw9NSkTD+mFWIF2DJw5BGT80QNkxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.crl rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91659DB/serialNumber=6E439C6E13B7108E00A6E51B8BBE162953A0EA2B Validity Not Before: May 2 18:54:11 2024 GMT Not After : May 9 18:54:11 2024 GMT Subject: CN=6633e154-fb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:84:08:d0:b4:8c:ad:61:dc:b4:50:af:f8: a7:06:ba:7b:f2:f1:a1:ce:6f:80:55:20:ac:ad:39: b6:26:81:86:e3:10:a7:8b:50:fd:1a:7a:1a:c9:b2: e6:92:a3:75:07:88:86:d2:e9:11:bf:7a:34:67:1b: b5:54:08:db:a7:1d:8c:d3:b7:66:fc:cc:36:bc:f5: de:85:23:1b:04:23:c7:60:30:bf:f0:18:f7:3a:50: 83:b5:32:38:12:4b:8b:af:e8:d6:ee:29:d8:49:84: d2:e4:bc:a1:81:70:8b:00:e8:23:44:d6:f8:20:0f: b8:49:d4:e5:a8:ee:cd:75:05:9f:84:95:11:63:82: 63:fc:89:43:0c:0e:ac:9c:1a:9c:2e:9d:ba:60:38: b2:73:92:4e:c2:d7:dd:e3:a5:86:24:34:5c:06:02: c2:e2:ca:61:14:7e:19:04:b1:e1:96:bb:e3:15:66: c2:75:4f:77:ad:5f:35:f0:63:6a:75:74:37:51:7c: 9c:0a:d4:f4:34:a8:c6:61:96:c1:b5:d4:4e:18:82: 63:56:8c:f6:0b:b6:d6:d3:49:37:d4:e9:2c:92:ea: 8a:30:97:75:a2:4b:a7:1e:f5:2e:ad:2e:b2:1d:b0: 62:de:c5:25:bf:0b:e0:58:08:4a:f2:ab:7e:4a:13: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:17:04:EB:A7:1B:3C:86:72:62:00:BA:2A:E0:6E:7F:15:60:D6 X509v3 Authority Key Identifier: keyid:6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:28:27:14:85:83:bb:ae:f2:72:96:4c:95:4b:9e:a8:6b: fd:cb:53:97:ec:df:5b:a7:b1:ca:96:01:11:34:bd:20:c7:58: af:d4:bc:af:71:46:02:be:17:9b:e0:10:04:2d:d0:5c:a9:63: c5:2b:47:9f:f0:71:92:c5:01:c9:b5:e6:45:1e:d4:be:00:ad: 65:09:db:e0:b4:77:48:bc:a6:03:17:af:73:3e:4b:de:60:89: e2:42:0f:44:91:de:42:1f:c4:92:1a:46:70:18:3f:59:f9:37: a6:d8:db:f7:11:c7:97:72:11:b4:a4:55:8b:28:f8:6d:62:4a: 28:d6:90:7d:b3:2c:32:7c:56:a7:31:c9:36:92:c1:68:0a:03: 12:d1:cf:bf:ca:68:fb:6a:d1:5d:d0:01:b9:2f:0d:cc:7d:e6: e6:2e:10:b0:06:a3:33:ef:61:6b:c2:38:4e:4c:99:95:c9:59: e3:d4:9c:9b:93:e7:e5:2a:83:39:4f:bf:92:dc:ab:68:b1:a3: 46:f4:30:8f:89:4b:bb:8b:8e:4f:9a:93:82:35:f0:be:be:46: 49:18:18:3b:df:29:05:1c:5e:d8:4d:61:f4:ce:38:f4:5d:91: 90:1a:36:5f:96:55:07:63:84:59:cb:13:2a:a6:2a:9d:6d:40: 4d:a5:98:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5REIxMTAvBgNVBAUTKDZFNDM5QzZFMTNCNzEwOEUwMEE2RTUxQjhCQkUxNjI5 NTNBMEVBMkIwHhcNMjQwNTAyMTg1NDExWhcNMjQwNTA5MTg1NDExWjAYMRYwFAYD VQQDEw02NjMzZTE1NC1mYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXGECNC0jK1h3LRQr/inBrp78vGhzm+AVSCsrTm2JoGG4xCni1D9GnoaybLm kqN1B4iG0ukRv3o0Zxu1VAjbpx2M07dm/Mw2vPXehSMbBCPHYDC/8Bj3OlCDtTI4 EkuLr+jW7inYSYTS5LyhgXCLAOgjRNb4IA+4SdTlqO7NdQWfhJURY4Jj/IlDDA6s nBqcLp26YDiyc5JOwtfd46WGJDRcBgLC4sphFH4ZBLHhlrvjFWbCdU93rV818GNq dXQ3UXycCtT0NKjGYZbBtdROGIJjVoz2C7bW00k31OkskuqKMJd1okunHvUurS6y HbBi3sUlvwvgWAhK8qt+ShMXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrHFwTr pxs8hnJiALoq4G5/FWDWMB8GA1UdIwQYMBaAFG5DnG4TtxCOAKblG4u+FilToOor MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTlEQi8yMzVGOTQ0NEM3 QjUxMUU5ODdGM0Y2MkNDNEY5QUUwMi9ia09jYmhPM0VJNEFwdVViaTc0V0tWT2c2 aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrT2NiaE8zRUk0QXB1VWJpNzRXS1ZPZzZpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTlEQi8yMzVGOTQ0NEM3QjUxMUU5ODdGM0Y2MkNDNEY5QUUwMi9ia09jYmhPM0VJ NEFwdVViaTc0V0tWT2c2aXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDBygnFIWDu67ycpZMlUueqGv9y1OX7N9bp7HKlgERNL0gx1iv1Lyv cUYCvheb4BAELdBcqWPFK0ef8HGSxQHJteZFHtS+AK1lCdvgtHdIvKYDF69zPkve YIniQg9Ekd5CH8SSGkZwGD9Z+Tem2Nv3EceXchG0pFWLKPhtYkoo1pB9sywyfFan Mck2ksFoCgMS0c+/ymj7atFd0AG5Lw3MfebmLhCwBqMz72FrwjhOTJmVyVnj1Jyb k+flKoM5T7+S3KtosaNG9DCPiUu7i45PmpOCNfC+vkZJGBg73ykFHF7YTWH0zjj0 XZGQGjZfllUHY4RZyxMqpiqdbUBNpZh4 -----END CERTIFICATE-----Generated at Thu May 2 20:50:26 2024 by rpki-client on console-fra.rpki-client.org