$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: 68lnBB3Xv4gRE7KkekzTphl5Ahs3Wga3iQujtX0cnPQ= Subject key identifier: 93:21:A5:4E:A5:F0:D6:93:47:1F:80:1D:EF:35:5E:BB:C1:8B:67:14 Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 04BD Signing time: Tue 07 May 2024 01:25:44 +0000 Manifest this update: Tue 07 May 2024 01:25:44 +0000 Manifest next update: Tue 14 May 2024 01:25:44 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: 7GozjkMXA8x20/wivT9W0DHti4IptYueGhmudPcz3PM=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: ekYcdmoLJ3hFE6yrHiP1rGDTn6Sb0zs5u3X6QAzW0W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: May 7 01:25:44 2024 GMT Not After : May 14 01:25:44 2024 GMT Subject: CN=66398318-8163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:6f:76:73:22:c7:dd:5d:d9:91:25:4a:80: 88:d6:ff:0d:50:07:dd:19:50:da:fd:b2:38:b2:83: 6e:ee:cc:d1:9b:f2:57:b3:2d:c9:2c:92:cb:aa:77: 69:bd:d6:ba:96:4c:47:93:6a:25:2f:63:9a:2a:1f: 5b:34:9d:b7:9d:07:df:de:86:89:c8:4d:08:a9:b8: 95:69:ab:95:49:12:34:14:58:fb:43:53:fd:d2:7a: d0:a4:e4:f4:c8:9c:b6:7a:da:d5:f6:d0:0f:35:3f: a4:8e:4e:a3:2b:5d:53:30:c1:d5:1b:6f:9e:f6:d6: 99:dc:2c:0e:53:93:0a:0e:31:e9:e6:47:99:cb:ca: 79:25:dd:21:6b:10:cb:59:1b:a8:9c:d7:6d:24:c2: 6e:11:80:74:94:f5:70:6c:c3:d7:b8:4f:a0:e1:c9: b2:99:6f:06:56:12:18:9d:d1:00:1c:15:42:20:4c: 02:3e:0d:f5:57:b7:da:67:d9:4a:07:d5:6b:55:e4: 35:8b:b6:14:e9:ac:01:b9:e0:8a:f4:94:c7:4f:9d: 31:bd:1e:e2:a5:16:28:6a:3f:c6:f5:4d:4d:a6:9c: 3d:59:b3:88:49:29:9a:6d:32:3c:7d:c9:b7:e4:26: f4:5c:56:a7:25:b6:43:3a:d6:e7:91:39:b3:0a:a2: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:A5:4E:A5:F0:D6:93:47:1F:80:1D:EF:35:5E:BB:C1:8B:67:14 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fd:cb:17:57:6a:36:a8:9a:11:9c:f1:33:e8:d8:e7:08:90: e8:0f:8d:f9:28:18:ea:5c:82:9a:c1:be:44:a0:07:e9:f4:da: 65:d1:53:1f:44:2d:4f:1d:58:53:b2:ff:a8:c6:ad:d6:1a:b5: 1b:2d:da:2e:83:24:58:30:31:a2:d3:b7:17:a0:d2:bc:72:2c: 6c:a2:24:12:37:6f:2a:7d:71:79:f3:35:93:c6:c1:12:93:f6: e9:47:0e:c0:1d:6c:30:38:75:4d:0b:6d:6f:a1:72:45:df:7c: ca:9c:a0:d1:5f:49:f5:64:c3:51:d7:32:40:f2:c7:5c:4a:b9: f7:e4:7d:4b:2b:f8:1b:72:03:fa:bc:4d:3d:64:6c:ef:5f:93: 43:46:5e:50:06:7e:77:b0:c8:c1:7b:c4:ed:b5:65:45:4b:29: cc:0d:8b:e1:93:1f:94:2e:93:78:a6:16:0d:d2:bf:5c:f9:c3: ac:5a:08:e5:fd:f7:4d:4a:7c:0e:95:d9:83:7d:aa:cb:92:80: f2:36:d1:c0:6c:3b:e0:61:cb:cf:f8:b5:73:9e:24:39:bd:93: 32:91:d7:99:1d:03:da:d2:7f:49:c6:61:3d:2c:57:80:18:1a: 83:1d:9e:65:04:9a:7f:53:c0:4f:5f:3f:bb:cd:6b:1d:d4:51: 5f:03:eb:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjQwNTA3MDEyNTQ0WhcNMjQwNTE0MDEyNTQ0WjAYMRYwFAYD VQQDEw02NjM5ODMxOC04MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMlvdnMix91d2ZElSoCI1v8NUAfdGVDa/bI4soNu7szRm/JXsy3JLJLLqndp vda6lkxHk2olL2OaKh9bNJ23nQff3oaJyE0IqbiVaauVSRI0FFj7Q1P90nrQpOT0 yJy2etrV9tAPNT+kjk6jK11TMMHVG2+e9taZ3CwOU5MKDjHp5keZy8p5Jd0haxDL WRuonNdtJMJuEYB0lPVwbMPXuE+g4cmymW8GVhIYndEAHBVCIEwCPg31V7faZ9lK B9VrVeQ1i7YU6awBueCK9JTHT50xvR7ipRYoaj/G9U1Nppw9WbOISSmabTI8fcm3 5Cb0XFanJbZDOtbnkTmzCqJY8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMhpU6l 8NaTRx+AHe81XrvBi2cUMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/csXV2o2qJoRnPEz6NjnCJDoD435KBjqXIKawb5EoAfp9Npl0VMf RC1PHVhTsv+oxq3WGrUbLdougyRYMDGi07cXoNK8cixsoiQSN28qfXF58zWTxsES k/bpRw7AHWwwOHVNC21voXJF33zKnKDRX0n1ZMNR1zJA8sdcSrn35H1LK/gbcgP6 vE09ZGzvX5NDRl5QBn53sMjBe8TttWVFSynMDYvhkx+ULpN4phYN0r9c+cOsWgjl /fdNSnwOldmDfarLkoDyNtHAbDvgYcvP+LVzniQ5vZMykdeZHQPa0n9JxmE9LFeA GBqDHZ5lBJp/U8BPXz+7zWsd1FFfA+uJ -----END CERTIFICATE-----Generated at Tue May 7 01:58:25 2024 by rpki-client on console-fra.rpki-client.org