$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: ASXMMC0LFlZ00AAh5jVxROJ1y8P7hZH9KB6jnQ7KnqY= Subject key identifier: D3:AB:C9:80:57:7C:85:B9:65:55:4D:3C:91:E2:45:3E:39:8C:E3:37 Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: A4 Signing time: Wed 15 May 2024 06:48:59 +0000 Manifest this update: Wed 15 May 2024 06:48:58 +0000 Manifest next update: Wed 22 May 2024 06:48:58 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: 5+lvEVBJED8sh28e02U3fi3YvoEpDHGnZKPoeDQ7d2E=) 2: 6001781C1A6411EE8DCBF20BC4F9AE02.roa (hash: jVCqRx69iTNEzM+5hsZCrWTKfkpXDLC4bC/S0QuEirA=) 3: 608D76E61A6411EE8DCBF20BC4F9AE02.roa (hash: 6RJL6RzumDSYS3r6wXOLDStDH0YKEVYFft2xjryTc6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: May 15 06:48:58 2024 GMT Not After : May 22 06:48:58 2024 GMT Subject: CN=66445ada-f346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:ac:b0:1d:53:5e:85:20:63:31:e5:2e:e6: 57:89:40:3e:79:4c:67:b2:93:33:54:af:64:51:47: 3b:ce:ca:a5:b0:8c:f7:68:6b:e8:b1:96:af:81:01: f4:71:a1:a1:ea:f6:c1:10:b5:9d:2f:35:69:0e:5a: 1e:21:12:dd:4b:85:18:e7:d5:e1:c4:cb:42:5e:6b: 27:f9:c2:dd:a7:e4:53:b2:bf:fd:3c:49:30:66:7e: e6:c8:5c:44:3c:f7:ba:b1:20:b7:6e:b5:75:ac:21: 62:09:1e:7e:ef:c2:55:59:6d:a5:45:4f:fd:42:4a: 4f:4b:91:25:de:b4:75:17:8c:d1:36:c5:a5:ac:ba: 6e:fa:9c:42:c8:66:6a:fe:15:b4:0a:23:76:03:a7: 02:a8:d1:21:fd:f3:0b:4e:ed:ae:1f:e0:ca:8c:31: 45:1c:d2:dd:ab:73:11:0c:ab:b7:5e:c0:bb:45:6f: 3f:6b:ee:a1:23:6b:46:c7:5f:ea:f2:46:7d:ab:b2: 15:e6:d6:0f:07:6e:b2:57:58:24:c2:d9:c7:86:d0: 47:01:9c:11:bf:1c:cc:99:53:06:2b:8a:7d:7c:f3: c1:b5:06:bb:0f:e0:c8:2d:11:73:18:93:fb:78:1f: ed:a2:77:4e:28:a5:40:54:6f:61:c6:4b:0a:a6:cc: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:C9:80:57:7C:85:B9:65:55:4D:3C:91:E2:45:3E:39:8C:E3:37 X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6a:d1:7a:87:71:d0:cb:95:7f:b1:bb:83:c8:54:96:41:78: 9b:15:c2:8c:93:e0:a1:a9:39:3b:ac:a4:b7:7b:1d:ec:79:9c: a1:b4:2c:83:af:3d:d2:c3:f0:a7:5d:12:af:3a:7c:9b:54:40: 2f:46:2b:42:8f:60:ed:64:58:e3:ce:c8:1a:1e:9e:cd:a8:99: 54:aa:c3:18:7a:bf:81:05:8f:7e:2e:36:73:23:b8:86:07:89: 0b:1f:2f:2a:6c:37:c6:ec:85:51:3c:97:f6:8a:13:16:ba:ba: 74:73:ff:f4:84:f2:ad:d9:cd:ba:05:4f:be:07:b7:9f:fb:95: 9e:e2:bd:14:9d:34:43:82:6e:5d:b5:21:4d:24:1e:a3:21:5d: 32:2c:12:3f:c4:3c:84:78:b0:8b:c7:76:8d:6e:5c:61:94:9f: a9:b2:90:68:00:3f:ac:38:1d:a5:77:d0:79:8a:b1:82:0a:4c: 25:52:79:60:14:f3:14:aa:96:7d:85:c3:bc:3d:33:2b:15:32: 4c:44:a0:29:3b:91:5c:01:e3:c3:a7:94:19:d0:54:2c:e3:93: 03:83:3d:66:25:b3:06:60:dd:4e:d2:62:4d:68:51:c0:ed:d7: a9:cb:8e:51:d3:f3:c9:31:ab:68:be:2a:a3:31:ee:ad:08:4a: a1:d6:8f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjQwNTE1MDY0ODU4WhcNMjQwNTIyMDY0ODU4WjAYMRYwFAYD VQQDEw02NjQ0NWFkYS1mMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvSssB1TXoUgYzHlLuZXiUA+eUxnspMzVK9kUUc7zsqlsIz3aGvosZavgQH0 caGh6vbBELWdLzVpDloeIRLdS4UY59XhxMtCXmsn+cLdp+RTsr/9PEkwZn7myFxE PPe6sSC3brV1rCFiCR5+78JVWW2lRU/9QkpPS5El3rR1F4zRNsWlrLpu+pxCyGZq /hW0CiN2A6cCqNEh/fMLTu2uH+DKjDFFHNLdq3MRDKu3XsC7RW8/a+6hI2tGx1/q 8kZ9q7IV5tYPB26yV1gkwtnHhtBHAZwRvxzMmVMGK4p9fPPBtQa7D+DILRFzGJP7 eB/tondOKKVAVG9hxksKpszjBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOryYBX fIW5ZVVNPJHiRT45jOM3MB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNatF6h3HQy5V/sbuDyFSWQXibFcKMk+ChqTk7rKS3ex3seZyhtCyD rz3Sw/CnXRKvOnybVEAvRitCj2DtZFjjzsgaHp7NqJlUqsMYer+BBY9+LjZzI7iG B4kLHy8qbDfG7IVRPJf2ihMWurp0c//0hPKt2c26BU++B7ef+5We4r0UnTRDgm5d tSFNJB6jIV0yLBI/xDyEeLCLx3aNblxhlJ+pspBoAD+sOB2ld9B5irGCCkwlUnlg FPMUqpZ9hcO8PTMrFTJMRKApO5FcAePDp5QZ0FQs45MDgz1mJbMGYN1O0mJNaFHA 7depy45R0/PJMatoviqjMe6tCEqh1o/M -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org