$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: PQ7Lzt615DDSiOiIyKNTC9YmvWB6FuM5jM+v85w+Nhk= Subject key identifier: 67:FC:82:7E:36:A1:80:41:AD:6B:85:59:C6:FD:47:DB:AE:AB:19:92 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0898 Signing time: Thu 02 May 2024 21:40:53 +0000 Manifest this update: Thu 02 May 2024 21:40:52 +0000 Manifest next update: Thu 09 May 2024 21:40:52 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: zG1+Fw6tSVX/daloth/oVkSkFlRnMGxaqrf4zOx+p8U=) 2: FD69130A94D211EA98E6DE1AC4F9AE02.roa (hash: yB1e2qL5T76I8RlDYls9mOLe9toKogCQSsApr8GkIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: May 2 21:40:52 2024 GMT Not After : May 9 21:40:52 2024 GMT Subject: CN=66340865-9995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:f6:07:f0:00:2d:3b:8c:71:47:d0:82:3d: 68:40:54:cd:36:da:9d:15:a2:9f:5c:c5:b1:db:f6: 1f:76:54:d8:75:9e:e2:f1:34:20:85:fd:2f:1b:26: 14:ad:80:2f:40:d8:92:ac:1d:e8:7e:56:53:7b:3f: 4e:a1:42:d1:45:6b:ac:55:59:1d:36:33:b5:00:fc: a6:42:5a:97:fc:4b:90:a2:97:51:27:ad:55:73:40: 23:be:d1:85:6b:da:b9:af:f0:32:3f:ca:3e:f4:0a: 2a:a9:f8:05:3f:01:85:3d:ea:da:de:95:bb:10:01: bb:ec:c5:5e:48:fc:da:d4:da:bb:98:bc:5f:26:4e: 79:a5:a6:2b:77:a7:0b:9d:3a:bb:f5:ec:69:10:b1: 04:55:08:c3:1c:b9:8d:35:03:0e:04:5e:e8:38:e2: 3f:77:2e:2d:89:3f:d8:7b:8a:96:5a:5d:b1:33:93: f9:41:f9:0c:d9:8d:11:e1:dd:4a:e2:9f:a2:8d:3a: 64:13:96:96:23:2f:fc:8d:95:6c:bb:ea:81:fe:45: c7:58:14:50:44:85:27:d7:1f:cc:7e:b4:5d:35:a9: ee:2d:1a:92:29:44:2f:31:03:b4:97:74:ab:78:f7: 73:42:f5:aa:f5:d1:5d:2b:2c:49:24:18:08:97:94: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:82:7E:36:A1:80:41:AD:6B:85:59:C6:FD:47:DB:AE:AB:19:92 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:84:23:d0:f1:3f:93:c0:ca:ca:a1:0e:fa:34:43:48:39:ac: 09:86:c3:dc:0b:50:a6:e2:dd:9e:9f:bd:bc:12:8e:5d:b1:98: b6:38:b9:ed:d2:7b:70:22:d2:95:56:6f:d6:e8:ba:a3:be:9b: ce:ca:de:88:d8:65:5d:d3:e8:9b:e7:18:04:bf:e8:0d:69:ac: 0a:49:79:f0:14:bb:fa:94:00:30:96:87:ef:c6:6c:ee:13:41: 18:b4:51:dc:cb:c8:78:d3:99:14:f7:d0:b5:b2:84:4f:29:42: e0:bb:c4:00:08:30:5d:06:fb:7b:96:aa:be:6a:59:06:ed:38: 1d:46:34:0e:cd:8e:17:86:22:58:d8:b6:69:12:b8:34:ef:20: e8:bd:d2:32:53:9a:24:b5:b2:2a:ea:3c:bc:39:86:fb:78:08: 64:1b:1c:26:a0:b3:67:49:53:09:a8:53:d3:83:44:a7:3b:42: 4f:97:f6:41:ab:5d:f0:91:97:80:80:d8:eb:c9:eb:dc:c4:0b: b1:a6:a6:29:90:9b:05:70:b2:f4:35:c5:f8:10:22:8f:9a:39: 87:2f:e0:c8:5a:63:25:16:07:13:d8:86:21:c1:ca:60:12:dc: 68:db:72:0b:c7:ce:3b:e2:07:32:a1:30:1c:ae:fd:06:9c:47: 5c:14:9c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjQwNTAyMjE0MDUyWhcNMjQwNTA5MjE0MDUyWjAYMRYwFAYD VQQDEw02NjM0MDg2NS05OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUP2B/AALTuMcUfQgj1oQFTNNtqdFaKfXMWx2/YfdlTYdZ7i8TQghf0vGyYU rYAvQNiSrB3oflZTez9OoULRRWusVVkdNjO1APymQlqX/EuQopdRJ61Vc0AjvtGF a9q5r/AyP8o+9AoqqfgFPwGFPera3pW7EAG77MVeSPza1Nq7mLxfJk55paYrd6cL nTq79expELEEVQjDHLmNNQMOBF7oOOI/dy4tiT/Ye4qWWl2xM5P5QfkM2Y0R4d1K 4p+ijTpkE5aWIy/8jZVsu+qB/kXHWBRQRIUn1x/MfrRdNanuLRqSKUQvMQO0l3Sr ePdzQvWq9dFdKyxJJBgIl5S0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf8gn42 oYBBrWuFWcb9R9uuqxmSMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPhCPQ8T+TwMrKoQ76NENIOawJhsPcC1Cm4t2en728Eo5dsZi2OLnt 0ntwItKVVm/W6LqjvpvOyt6I2GVd0+ib5xgEv+gNaawKSXnwFLv6lAAwlofvxmzu E0EYtFHcy8h405kU99C1soRPKULgu8QACDBdBvt7lqq+alkG7TgdRjQOzY4XhiJY 2LZpErg07yDovdIyU5oktbIq6jy8OYb7eAhkGxwmoLNnSVMJqFPTg0SnO0JPl/ZB q13wkZeAgNjryevcxAuxpqYpkJsFcLL0NcX4ECKPmjmHL+DIWmMlFgcT2IYhwcpg Etxo23ILx8474gcyoTAcrv0GnEdcFJw3 -----END CERTIFICATE-----Generated at Thu May 2 22:13:21 2024 by rpki-client on console-fra.rpki-client.org