$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: 8hP8P/LM+A3CJcQzbaR0Q9M8N6xM+Xb2mLZbnyq6gbA= Subject key identifier: C5:64:96:09:B4:A0:12:F6:C2:BB:B9:0F:7F:80:45:2D:83:EC:44:8B Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 042A Signing time: Sun 05 May 2024 02:09:06 +0000 Manifest this update: Sun 05 May 2024 02:09:06 +0000 Manifest next update: Sun 12 May 2024 02:09:06 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: UvOMeEzKa7zpqDeu9hhbQa3TLcicqPvqBO6vtd2t+/k=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: jSv6IgsRwIfkDcFXv1cYxosZDSuxpdCLwAe0M4CWKRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: May 5 02:09:06 2024 GMT Not After : May 12 02:09:06 2024 GMT Subject: CN=6636ea42-074e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:47:f5:c8:16:72:22:d5:07:d5:3c:95:4f: 12:62:22:eb:82:bc:a2:73:b8:d5:02:ed:23:86:6b: ab:05:cb:4e:ce:2e:fd:f2:32:62:76:e5:1d:54:d0: 03:fb:c8:1a:73:4c:90:93:33:75:20:b1:3f:31:8d: 12:34:a0:91:b8:50:c8:75:26:5b:e4:b6:c5:dd:5b: 35:98:f3:e7:f4:00:71:d8:1c:6b:e2:5c:37:60:6a: 52:44:a2:62:58:00:18:c2:83:a9:30:b9:36:07:87: b8:63:9a:cd:0d:ee:4c:57:4f:ac:27:60:42:c8:12: 3f:18:fb:d7:3c:d0:a4:88:a6:41:3c:76:6c:91:88: 60:0e:c0:93:11:54:e4:d1:ac:62:43:8d:4e:b8:8c: de:5d:f5:1b:50:4a:a8:bd:b1:d6:07:fb:52:10:ef: ca:6b:d0:8d:eb:8b:01:8f:36:3d:23:6c:b8:0f:87: 76:3b:42:ac:90:ad:a7:4f:61:f2:a9:3e:d7:98:0c: f5:c4:4b:60:f9:6b:9c:7d:d4:a3:6c:e5:59:75:15: b3:65:11:e1:81:eb:a9:04:ba:93:87:e5:7e:25:ec: 16:ac:80:54:72:aa:90:59:18:7a:56:f5:71:8f:9c: 7f:00:b3:7d:37:ae:a1:8d:70:fd:d4:d2:9b:64:c9: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:64:96:09:B4:A0:12:F6:C2:BB:B9:0F:7F:80:45:2D:83:EC:44:8B X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:80:76:3b:e4:96:84:82:73:cb:a7:7e:71:ee:85:d4:2d:23: 50:51:72:bc:88:4e:4f:31:86:e4:cb:a5:6e:83:00:1a:7f:e2: 49:85:44:1b:9c:58:b2:1c:05:c8:4c:42:d0:79:69:cc:f1:76: cd:5e:5f:74:40:69:c6:63:db:23:72:b1:0f:9e:d6:b7:17:5b: d9:f8:1a:1f:e1:1f:81:80:f5:2f:16:86:0e:8c:15:94:c5:86: 60:75:ad:19:0e:cf:34:06:92:fa:92:73:f4:e1:a7:58:71:dc: 0a:19:09:d2:f6:10:0b:dd:ba:df:16:f4:f7:85:1f:90:74:57: cf:52:dd:79:a3:22:c6:b1:ac:cd:b2:b7:3c:75:cc:3a:07:8b: 4f:2b:56:1e:bb:c1:23:99:38:42:2c:2d:02:0f:35:bc:51:84: 11:b8:93:92:6e:99:75:a4:05:19:a0:25:c4:9b:5a:77:d2:8b: 7a:7b:cd:e1:f4:63:c7:4d:39:4c:14:75:f9:61:bf:c7:b2:63: 0e:e5:4e:d7:29:7e:53:50:6a:56:01:ad:84:b2:7c:28:6f:fe: 5c:21:0b:ac:cf:bb:f6:64:91:5f:24:b7:72:08:32:16:dc:56: 04:87:9a:7b:48:4d:ef:fe:b3:ad:3c:d3:d7:31:0b:1d:d9:8a: 93:99:74:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjQwNTA1MDIwOTA2WhcNMjQwNTEyMDIwOTA2WjAYMRYwFAYD VQQDEw02NjM2ZWE0Mi0wNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqtH9cgWciLVB9U8lU8SYiLrgryic7jVAu0jhmurBctOzi798jJiduUdVNAD +8gac0yQkzN1ILE/MY0SNKCRuFDIdSZb5LbF3Vs1mPPn9ABx2Bxr4lw3YGpSRKJi WAAYwoOpMLk2B4e4Y5rNDe5MV0+sJ2BCyBI/GPvXPNCkiKZBPHZskYhgDsCTEVTk 0axiQ41OuIzeXfUbUEqovbHWB/tSEO/Ka9CN64sBjzY9I2y4D4d2O0KskK2nT2Hy qT7XmAz1xEtg+WucfdSjbOVZdRWzZRHhgeupBLqTh+V+JewWrIBUcqqQWRh6VvVx j5x/ALN9N66hjXD91NKbZMm4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVklgm0 oBL2wru5D3+ARS2D7ESLMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBgHY75JaEgnPLp35x7oXULSNQUXK8iE5PMYbky6VugwAaf+JJhUQb nFiyHAXITELQeWnM8XbNXl90QGnGY9sjcrEPnta3F1vZ+Bof4R+BgPUvFoYOjBWU xYZgda0ZDs80BpL6knP04adYcdwKGQnS9hAL3brfFvT3hR+QdFfPUt15oyLGsazN src8dcw6B4tPK1Yeu8EjmThCLC0CDzW8UYQRuJOSbpl1pAUZoCXEm1p30ot6e83h 9GPHTTlMFHX5Yb/HsmMO5U7XKX5TUGpWAa2Esnwob/5cIQusz7v2ZJFfJLdyCDIW 3FYEh5p7SE3v/rOtPNPXMQsd2YqTmXTR -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org