$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: FJUV5roKkFwGbbblixxhwYSXbl2xLmcqKkY0vPytjjI= Subject key identifier: B0:A6:8B:EE:C7:5D:42:C7:F5:CD:26:8E:28:05:6A:A1:51:8D:B5:A0 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 73 Signing time: Wed 15 May 2024 07:28:49 +0000 Manifest this update: Wed 15 May 2024 07:28:48 +0000 Manifest next update: Wed 22 May 2024 07:28:48 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: YcKgiI/liOSoaqjaI9UZnv7w088xk2l1xDw1PNA5fgw=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: A9Na0tIufSIhJLXSvubd6fWsNFXr228xDY11Z3v59wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: May 15 07:28:48 2024 GMT Not After : May 22 07:28:48 2024 GMT Subject: CN=66446431-3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:0d:99:50:73:4a:f4:a8:d4:d6:2a:d2:c2: 6a:5a:a3:f8:33:fb:fe:48:a2:df:85:8d:f6:36:d3: 33:48:37:f3:98:eb:72:98:d9:e5:79:92:02:e9:7e: 5a:f3:2c:ef:39:68:08:90:ee:58:ce:6f:e6:c8:58: d5:c2:90:23:a9:fe:e8:77:a1:c4:f9:74:c2:96:87: e9:09:75:29:88:26:b8:fa:a4:f2:92:56:eb:ec:77: 83:3c:03:ea:d5:96:e9:4d:93:d5:7e:a3:f5:a6:1f: c2:11:20:96:8b:a2:e4:56:08:52:0f:66:8d:d0:3e: 3e:65:f6:be:38:01:e6:43:3b:5e:30:ba:5b:18:e8: cc:f4:85:06:3e:f3:a1:fa:db:e6:c6:5b:6f:95:63: b6:db:25:71:6b:d6:8d:47:53:44:4c:18:00:c1:4c: 16:a0:0c:d1:7a:01:92:58:9d:1c:a8:3c:8e:83:29: 1a:2f:0e:71:33:0e:c0:5a:e3:41:1a:9c:d8:5b:d8: d3:35:4b:75:d8:cf:25:72:b5:c6:45:b1:14:f9:fc: b8:b0:b4:16:9c:12:2e:f2:bf:28:08:7d:13:a7:69: 9a:08:18:89:7a:89:79:c7:22:31:8c:6a:5f:59:8e: c1:a9:32:66:07:d8:a8:f3:5c:5c:de:1d:e0:cb:40: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:8B:EE:C7:5D:42:C7:F5:CD:26:8E:28:05:6A:A1:51:8D:B5:A0 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:d7:d3:65:ac:33:ec:22:bf:1c:32:e3:18:6a:4d:fa:3b: db:6a:0a:9d:f7:59:b9:3b:53:29:61:6b:ef:b5:4e:66:bd:0d: 65:52:89:75:e1:f4:09:e9:e6:c9:a2:d7:af:92:58:34:d9:28: 73:42:86:56:92:e9:2f:0b:b6:5f:22:1c:7d:57:cc:bd:49:4a: c7:6f:a9:ab:bf:2d:04:8b:7d:25:87:a8:6a:44:99:5c:a6:14: f5:56:6e:4b:da:f2:c2:09:4e:e3:99:22:16:0a:92:69:13:73: 62:c6:3c:e6:4e:e2:12:3b:2e:b9:6e:6e:c2:4f:28:8a:fa:0c: be:cd:07:50:db:61:92:f8:e9:12:fe:b0:ee:3f:4d:9a:ae:fd: 17:1e:b4:a4:92:d6:52:29:5e:72:dd:f8:38:4c:67:8b:5e:7d: 58:3d:7f:a0:43:ed:2f:08:e4:bc:be:36:a1:ec:9c:0e:a5:b2: 7f:9c:85:e8:25:60:22:eb:62:95:cc:be:13:55:ef:40:87:aa: 1f:3f:d7:1f:5e:1c:dd:9e:f0:76:c9:1a:5c:f6:c7:b3:e6:d4: 27:73:1c:5a:d7:05:3f:5b:7e:ee:31:c8:62:2e:1a:e5:8f:82: 89:a6:a2:c7:f9:a7:f4:37:a5:4e:99:e5:fa:2b:65:82:a5:7a: d1:f8:e9:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzdFRDExMC8GA1UEBRMoMDcxRjgxMTkxNzE0NDE4MDJCRTMyNjFGMTU2MjdEQUYy ODlEQjMzNjAeFw0yNDA1MTUwNzI4NDhaFw0yNDA1MjIwNzI4NDhaMBgxFjAUBgNV BAMTDTY2NDQ2NDMxLTNlNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQwA2ZUHNK9KjU1irSwmpao/gz+/5Iot+FjfY20zNIN/OY63KY2eV5kgLpflrz LO85aAiQ7ljOb+bIWNXCkCOp/uh3ocT5dMKWh+kJdSmIJrj6pPKSVuvsd4M8A+rV lulNk9V+o/WmH8IRIJaLouRWCFIPZo3QPj5l9r44AeZDO14wulsY6Mz0hQY+86H6 2+bGW2+VY7bbJXFr1o1HU0RMGADBTBagDNF6AZJYnRyoPI6DKRovDnEzDsBa40Ea nNhb2NM1S3XYzyVytcZFsRT5/LiwtBacEi7yvygIfROnaZoIGIl6iXnHIjGMal9Z jsGpMmYH2KjzXFzeHeDLQLvDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsKaL7sdd Qsf1zSaOKAVqoVGNtaAwHwYDVR0jBBgwFoAUBx+BGRcUQYAr4yYfFWJ9ryidszYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzN0VELzZEQjk1NEEyNjJB MzExRUU4MkI5MDA3NEM0RjlBRTAyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQngtQkdSY1VRWUFyNHlZZkZXSjlyeWlkc3pZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz N0VELzZEQjk1NEEyNjJBMzExRUU4MkI5MDA3NEM0RjlBRTAyL0J4LUJHUmNVUVlB cjR5WWZGV0o5cnlpZHN6WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE4D19NlrDPsIr8cMuMYak36O9tqCp33Wbk7Uylha++1Tma9DWVSiXXh 9Anp5smi16+SWDTZKHNChlaS6S8Ltl8iHH1XzL1JSsdvqau/LQSLfSWHqGpEmVym FPVWbkva8sIJTuOZIhYKkmkTc2LGPOZO4hI7LrlubsJPKIr6DL7NB1DbYZL46RL+ sO4/TZqu/RcetKSS1lIpXnLd+DhMZ4tefVg9f6BD7S8I5Ly+NqHsnA6lsn+chegl YCLrYpXMvhNV70CHqh8/1x9eHN2e8HbJGlz2x7Pm1CdzHFrXBT9bfu4xyGIuGuWP gommosf5p/Q3pU6Z5forZYKletH46Us= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org