$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: HFPy5TKiRr6dmqsh6rrkUMlb91OU5BetGJtCOQXAy3o= Subject key identifier: 8A:48:36:15:31:AF:47:06:54:86:A2:72:14:B4:AD:B1:6D:E5:B4:47 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 073C Signing time: Mon 06 May 2024 22:31:46 +0000 Manifest this update: Mon 06 May 2024 22:31:45 +0000 Manifest next update: Mon 13 May 2024 22:31:45 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: NZzpZojQsQA/rx5UXgpww30Cw20hFy50T8FL543LRSs=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: yarKsg2U8YvvYfEm7F0GcX7kW9C/La3i1X0o1SxeiQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: May 6 22:31:45 2024 GMT Not After : May 13 22:31:45 2024 GMT Subject: CN=66395a51-3965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:b5:c0:c4:39:65:b0:3a:8d:00:b1:db:a3: dc:c2:e2:42:cd:f4:eb:f9:59:c9:66:9b:10:fc:b4: dd:e1:17:e6:4b:fa:5e:a7:59:5f:03:42:e3:d7:d2: 15:89:b8:28:af:17:23:32:b7:71:41:e2:c8:b3:a1: f9:d9:5f:b9:67:35:de:5a:80:86:19:9e:9b:b4:c2: 90:f7:37:3e:95:e2:cb:55:1a:c0:2a:7a:6e:c3:1a: e7:9a:b3:9a:f0:b0:7b:fa:aa:49:48:8c:bc:89:ac: 12:2d:d4:89:68:c4:98:de:2c:f2:59:a1:5a:fc:3c: 58:e6:cd:2e:17:82:90:09:b8:7d:65:ee:dc:5e:1a: 3c:a2:84:54:01:ef:48:50:7a:cd:95:f3:81:ab:3b: c3:4e:34:94:fb:18:54:b1:aa:06:18:d5:a7:bb:1e: 7d:fc:1f:8a:ee:07:35:82:df:dd:c1:1b:70:e3:61: f8:3f:5c:8c:68:3f:41:e0:a8:d7:66:cc:b6:7a:8b: 66:63:4a:ff:98:75:9e:60:5a:1b:bf:68:d3:9c:b6: 59:67:4d:bb:d6:de:9c:37:22:66:74:a2:29:ea:99: 2c:f3:30:06:33:4f:25:a8:e1:4d:8e:95:0c:f9:3a: 43:4a:19:ea:48:cb:cd:c1:c6:4b:a7:f5:16:51:2d: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:48:36:15:31:AF:47:06:54:86:A2:72:14:B4:AD:B1:6D:E5:B4:47 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:28:c2:03:ed:4b:74:37:f6:a6:a3:65:45:5d:f7:f7:42:91: c6:c2:14:7b:54:ef:2d:d1:4a:f9:11:83:41:65:29:b6:97:c7: b4:dc:b2:5f:a5:12:dc:79:dd:dd:c5:96:8e:cd:b1:98:80:6c: b8:0c:f1:87:a1:b8:4e:a0:31:77:06:d0:a9:86:c5:74:f1:7a: ec:b2:6f:aa:2f:0b:9a:f7:f6:ec:16:69:b3:0e:6f:f1:df:81: 12:1d:4d:38:28:2b:36:10:6e:85:d8:b7:3d:d4:d6:55:77:6b: be:7f:a5:3c:2b:40:34:c1:2b:5c:6c:49:12:89:f1:11:cc:6f: 35:d1:68:f3:b4:d1:81:29:cc:09:12:86:f2:ec:2c:92:83:0e: d9:f6:1f:0a:d1:69:dd:84:b8:f2:ae:22:14:61:ed:b8:66:5b: a3:ac:39:c4:09:f9:29:93:3f:92:27:2b:3d:fd:7f:d5:6b:f0: 2d:f3:db:5f:65:d6:42:a3:cf:3f:88:2a:63:99:d8:3f:e6:e9: 50:ea:05:25:02:b1:32:84:e1:29:99:62:38:05:8e:7e:59:36: 36:23:b5:d1:f6:32:80:7f:ef:e3:fe:72:c9:75:2a:58:ef:06: ce:03:f9:71:c2:05:30:44:43:91:84:ef:6f:43:3b:77:8c:6f: b7:9d:5b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjQwNTA2MjIzMTQ1WhcNMjQwNTEzMjIzMTQ1WjAYMRYwFAYD VQQDEw02NjM5NWE1MS0zOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2D21wMQ5ZbA6jQCx26PcwuJCzfTr+VnJZpsQ/LTd4RfmS/pep1lfA0Lj19IV ibgorxcjMrdxQeLIs6H52V+5ZzXeWoCGGZ6btMKQ9zc+leLLVRrAKnpuwxrnmrOa 8LB7+qpJSIy8iawSLdSJaMSY3izyWaFa/DxY5s0uF4KQCbh9Ze7cXho8ooRUAe9I UHrNlfOBqzvDTjSU+xhUsaoGGNWnux59/B+K7gc1gt/dwRtw42H4P1yMaD9B4KjX Zsy2eotmY0r/mHWeYFobv2jTnLZZZ0271t6cNyJmdKIp6pks8zAGM08lqOFNjpUM +TpDShnqSMvNwcZLp/UWUS0C9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpINhUx r0cGVIaichS0rbFt5bRHMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABKMID7Ut0N/amo2VFXff3QpHGwhR7VO8t0Ur5EYNBZSm2l8e03LJf pRLced3dxZaOzbGYgGy4DPGHobhOoDF3BtCphsV08Xrssm+qLwua9/bsFmmzDm/x 34ESHU04KCs2EG6F2Lc91NZVd2u+f6U8K0A0wStcbEkSifERzG810WjztNGBKcwJ Eoby7CySgw7Z9h8K0WndhLjyriIUYe24ZlujrDnECfkpkz+SJys9/X/Va/At89tf ZdZCo88/iCpjmdg/5ulQ6gUlArEyhOEpmWI4BY5+WTY2I7XR9jKAf+/j/nLJdSpY 7wbOA/lxwgUwREORhO9vQzt3jG+3nVu6 -----END CERTIFICATE-----Generated at Mon May 6 23:05:48 2024 by rpki-client on console-fra.rpki-client.org