$ rpki-client -vvf rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft File: bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft (raw, json) Hash identifier: jPnp60tbMbK5DqLImNUy+4o0rc03speK18epzUHYQJM= Subject key identifier: C3:25:FD:76:19:6F:1D:1F:0E:07:D6:FA:24:BA:C0:17:0E:66:AF:82 Authority key identifier: 6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23 Certificate issuer: /CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft Manifest number: 0AFF Signing time: Thu 16 May 2024 20:33:26 +0000 Manifest this update: Thu 16 May 2024 20:33:25 +0000 Manifest next update: Thu 23 May 2024 20:33:25 +0000 Files and hashes: 1: bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl (hash: vi3ISy6AS1wrz4bJO8PQfHTPkIkcBGwIm3p9bIA3BPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A220/serialNumber=6D5F05DD126BFF336BEF2281ECC78AA56B06A023 Validity Not Before: May 16 20:33:25 2024 GMT Not After : May 23 20:33:25 2024 GMT Subject: CN=66466d95-5880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:69:dd:99:88:0d:76:6c:e9:7e:9e:7b:ce: 00:f8:6a:ae:b0:67:81:8d:2a:9f:e0:7a:8e:3b:45: 3c:97:39:8f:c7:2d:8a:c6:e2:1b:c0:db:28:b2:1f: e9:f8:43:33:c5:ce:7f:ef:00:ec:f6:4c:9b:b9:2d: 52:61:6f:7f:9b:0e:b2:9a:ab:32:a8:c0:a9:88:6f: cc:e0:c2:df:cd:89:2a:59:51:17:7a:85:c2:6a:62: 2f:2f:41:ce:09:a7:26:95:80:14:3a:6e:ae:42:f5: 92:13:65:d2:ae:d2:a2:48:5b:54:99:30:52:9d:92: 14:3a:36:a5:e0:32:7a:0d:ee:66:24:44:6f:f3:b5: 48:07:b2:72:f2:0e:88:e6:e9:9a:7c:4e:f1:66:3e: 9e:93:ee:c2:fb:1d:e3:cb:88:58:de:8d:50:9b:8e: 46:db:8d:a3:17:13:60:57:24:cb:c6:e5:b8:54:cd: 35:1a:ea:2b:cd:15:5a:03:9f:92:53:83:0a:8f:5c: ad:a9:3f:29:a1:4a:0c:5a:23:a4:35:56:2b:a6:85: 2b:fb:d9:2f:ba:97:63:49:e0:80:27:5b:f4:c5:dc: 56:a8:d8:18:ed:4a:5f:b6:66:c1:91:29:1f:cd:a0: 7d:ec:1c:93:65:7b:da:db:6d:b8:4b:48:4b:87:53: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:25:FD:76:19:6F:1D:1F:0E:07:D6:FA:24:BA:C0:17:0E:66:AF:82 X509v3 Authority Key Identifier: keyid:6D:5F:05:DD:12:6B:FF:33:6B:EF:22:81:EC:C7:8A:A5:6B:06:A0:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV8F3RJr_zNr7yKB7MeKpWsGoCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/bV8F3RJr_zNr7yKB7MeKpWsGoCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b1:c4:26:92:dc:9a:4f:6c:81:38:7b:7b:2d:12:94:e5:56: a4:62:1f:e1:40:4f:95:f7:42:6a:7a:db:94:23:36:ae:4a:02: 72:b1:cb:5b:fd:25:ed:4e:09:f9:08:21:ac:25:57:86:d4:fd: e8:95:5d:a3:19:2d:bd:8e:cc:cd:f0:8e:08:f0:54:49:d4:74: 9e:8e:df:24:38:df:76:41:f6:14:85:b3:6f:cb:67:e9:bc:11: 92:c2:b3:a2:34:00:64:f8:d0:81:c7:05:fe:5a:7a:25:24:a8: 67:15:7c:f6:cf:a9:d7:d2:f4:10:3e:fb:cc:e4:6e:67:14:60: f7:80:0c:d9:0e:0a:9b:85:fb:92:22:f9:14:c2:2c:4d:f4:8c: 02:17:df:8a:b4:93:0f:22:d7:03:64:9c:58:1a:44:1f:9c:73: 5c:8e:73:53:d3:0e:ed:58:3a:72:c1:87:8e:da:ec:5f:89:b4: b0:75:35:b4:4a:c9:78:9b:3e:98:43:58:ec:bd:86:45:1a:22: 45:7f:2a:75:d2:d9:be:ed:cd:4d:ca:fb:09:34:81:83:43:18: 2e:10:ac:c2:cd:9b:a9:4a:85:67:ae:e5:14:3f:09:ff:df:96: 03:91:90:0d:da:f6:32:25:90:84:b9:6b:db:a3:1f:52:b5:71: c3:98:d2:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyMjAxMTAvBgNVBAUTKDZENUYwNUREMTI2QkZGMzM2QkVGMjI4MUVDQzc4QUE1 NkIwNkEwMjMwHhcNMjQwNTE2MjAzMzI1WhcNMjQwNTIzMjAzMzI1WjAYMRYwFAYD VQQDEw02NjQ2NmQ5NS01ODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ydp3ZmIDXZs6X6ee84A+GqusGeBjSqf4HqOO0U8lzmPxy2KxuIbwNsosh/p +EMzxc5/7wDs9kybuS1SYW9/mw6ymqsyqMCpiG/M4MLfzYkqWVEXeoXCamIvL0HO CacmlYAUOm6uQvWSE2XSrtKiSFtUmTBSnZIUOjal4DJ6De5mJERv87VIB7Jy8g6I 5umafE7xZj6ek+7C+x3jy4hY3o1Qm45G242jFxNgVyTLxuW4VM01GuorzRVaA5+S U4MKj1ytqT8poUoMWiOkNVYrpoUr+9kvupdjSeCAJ1v0xdxWqNgY7UpftmbBkSkf zaB97ByTZXva2224S0hLh1OvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMl/XYZ bx0fDgfW+iS6wBcOZq+CMB8GA1UdIwQYMBaAFG1fBd0Sa/8za+8igezHiqVrBqAj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTIyMC8wMEVFMDhENjQx MjgxMUVBOEU1RTRCODNDNEY5QUUwMi9iVjhGM1JKcl96TnI3eUtCN01lS3BXc0dv Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWOEYzUkpyX3pOcjd5S0I3TWVLcFdzR29DTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTIyMC8wMEVFMDhENjQxMjgxMUVBOEU1RTRCODNDNEY5QUUwMi9iVjhGM1JKcl96 TnI3eUtCN01lS3BXc0dvQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1scQmktyaT2yBOHt7LRKU5VakYh/hQE+V90JqetuUIzauSgJysctb /SXtTgn5CCGsJVeG1P3olV2jGS29jszN8I4I8FRJ1HSejt8kON92QfYUhbNvy2fp vBGSwrOiNABk+NCBxwX+WnolJKhnFXz2z6nX0vQQPvvM5G5nFGD3gAzZDgqbhfuS IvkUwixN9IwCF9+KtJMPItcDZJxYGkQfnHNcjnNT0w7tWDpywYeO2uxfibSwdTW0 Ssl4mz6YQ1jsvYZFGiJFfyp10tm+7c1NyvsJNIGDQxguEKzCzZupSoVnruUUPwn/ 35YDkZAN2vYyJZCEuWvbox9StXHDmNIQ -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org