$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft File: BdNlUA2kssABifPGyllQ4AdMfEo.mft (raw, json) Hash identifier: qGnMe1deV+dPc/7l6b4pYAkFu4RXtW1bqLbI4rHvr8Y= Subject key identifier: 00:AD:D8:D1:4F:6D:88:07:54:10:AE:BC:D9:A0:E7:9A:CF:8E:B7:B9 Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft Manifest number: 0110 Signing time: Wed 01 May 2024 05:49:55 +0000 Manifest this update: Wed 01 May 2024 05:49:55 +0000 Manifest next update: Wed 08 May 2024 05:49:55 +0000 Files and hashes: 1: BdNlUA2kssABifPGyllQ4AdMfEo.crl (hash: 5LW4bQPcvViEYkdbpZXjIW0RvbTCqv8tnx3hdZfmFZA=) 2: A6524550C4E411EEAFF83C50C4F9AE02.roa (hash: zeOZPrdq1QYgQ7FqLmTlQVfbrQDcr8FRd1myKoEPr/Y=) 3: C44A1D987E0511EDBA2BAF7FC4F9AE02.roa (hash: QFxZjY9gepscppIE/Uca9rqzFdisePbNZRWKpDghEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Validity Not Before: May 1 05:49:55 2024 GMT Not After : May 8 05:49:55 2024 GMT Subject: CN=6631d803-1d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:c3:57:bc:55:5a:98:0a:55:4b:94:7f:0f: 85:62:87:79:a5:2a:52:8c:bb:9f:bf:ed:27:37:c4: 98:33:f5:9f:86:50:ff:5f:56:c3:c0:45:ad:5b:3d: 20:b6:90:c5:08:b0:9b:f8:00:c9:da:38:3c:bd:70: d0:2e:9e:6d:fb:43:f7:5d:a4:9b:e8:11:25:d4:92: 4c:dc:01:4e:01:eb:86:db:4e:20:f2:8e:f6:ad:b4: 62:10:dd:f5:3c:d5:cc:92:27:28:d3:72:ae:f5:45: bd:3f:05:12:01:b7:75:01:10:05:79:91:1d:98:1d: 5d:ae:70:1e:82:a3:57:be:3a:d3:a3:85:a7:c2:12: 49:10:06:7d:ec:db:5a:a3:5f:2e:6f:91:5d:8d:2c: c6:08:42:04:2b:97:20:c0:b6:b3:d2:7d:6d:d1:94: 2d:8a:ae:25:03:9d:fe:9b:44:8d:5e:7c:38:0b:e9: 32:85:ec:f8:e9:42:eb:79:01:1e:38:22:de:9d:72: fb:18:af:bb:1c:7f:b4:93:64:3e:59:43:bd:85:b9: 86:cf:0f:d9:0e:a1:69:08:ff:f6:2f:c2:a8:be:d1: af:90:6f:c2:92:2f:b1:80:50:b7:42:3f:79:d2:7c: d8:6e:56:64:b5:2b:03:e7:49:74:6f:c7:71:81:58: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:D8:D1:4F:6D:88:07:54:10:AE:BC:D9:A0:E7:9A:CF:8E:B7:B9 X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c0:67:e5:d7:24:b4:91:df:76:84:b1:b5:a2:98:92:0e:74: bc:25:06:44:48:f8:82:80:a3:79:09:99:87:cb:c9:11:de:36: 97:dd:7d:a2:a6:35:8c:4f:05:d7:bf:0d:04:65:06:5a:8d:e3: b5:e3:55:f8:5a:09:86:2f:83:56:fd:9a:f6:58:0a:2e:3c:04: 22:79:71:ff:85:6e:f8:eb:a4:54:2c:fe:07:74:bf:e2:cb:e1: e8:d0:63:43:fe:94:bd:65:ef:af:b3:93:28:c7:7e:f4:61:62: 69:e3:7e:ce:49:25:65:50:f4:fb:d2:b2:49:f4:f0:30:cf:be: b6:3c:6e:53:55:17:ca:44:7c:9e:b6:89:ca:89:8f:07:dd:b0: 8f:f0:5b:68:6c:22:91:86:33:4f:52:fc:2e:fc:1b:bf:75:89: da:dc:ef:df:7d:ac:5f:aa:95:42:91:5d:49:52:1c:b2:4a:01: eb:8d:4a:23:92:ce:c2:c5:e4:a9:75:ad:32:eb:ab:d5:11:11: 2f:57:a5:75:2f:d2:4f:54:3d:6f:56:24:ee:30:5d:dd:7e:17: 79:73:fe:18:e7:69:cc:2b:44:f2:db:97:12:e7:bb:87:19:d4: 22:36:9e:5c:d6:5b:ac:90:a7:1b:c4:2d:a5:f0:c2:55:ea:94: d9:c6:05:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjQwNTAxMDU0OTU1WhcNMjQwNTA4MDU0OTU1WjAYMRYwFAYD VQQDEw02NjMxZDgwMy0xZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM3DV7xVWpgKVUuUfw+FYod5pSpSjLufv+0nN8SYM/WfhlD/X1bDwEWtWz0g tpDFCLCb+ADJ2jg8vXDQLp5t+0P3XaSb6BEl1JJM3AFOAeuG204g8o72rbRiEN31 PNXMkico03Ku9UW9PwUSAbd1ARAFeZEdmB1drnAegqNXvjrTo4WnwhJJEAZ97Nta o18ub5FdjSzGCEIEK5cgwLaz0n1t0ZQtiq4lA53+m0SNXnw4C+kyhez46ULreQEe OCLenXL7GK+7HH+0k2Q+WUO9hbmGzw/ZDqFpCP/2L8KovtGvkG/Cki+xgFC3Qj95 0nzYblZktSsD50l0b8dxgViqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACt2NFP bYgHVBCuvNmg55rPjre5MB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9FQTY3QTk4QzdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3Nz QUJpZlBHeWxsUTRBZE1mRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOwGfl1yS0kd92hLG1opiSDnS8JQZESPiCgKN5CZmHy8kR3jaX3X2i pjWMTwXXvw0EZQZajeO141X4WgmGL4NW/Zr2WAouPAQieXH/hW7466RULP4HdL/i y+Ho0GND/pS9Ze+vs5Mox370YWJp437OSSVlUPT70rJJ9PAwz762PG5TVRfKRHye tonKiY8H3bCP8FtobCKRhjNPUvwu/Bu/dYna3O/ffaxfqpVCkV1JUhyySgHrjUoj ks7CxeSpda0y66vVEREvV6V1L9JPVD1vViTuMF3dfhd5c/4Y52nMK0Ty25cS57uH GdQiNp5c1luskKcbxC2l8MJV6pTZxgVk -----END CERTIFICATE-----Generated at Wed May 1 07:07:06 2024 by rpki-client on console-fra.rpki-client.org