$ rpki-client -vvf rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft File: bFY62kfKw3TTExmffblj-wqJnbM.mft (raw, json) Hash identifier: oZsggXV78O1kMyit156aA3598seoUcWKgtaQVZ0lCyM= Subject key identifier: A4:5E:80:2E:85:C0:4B:EB:22:EB:4F:94:D0:8C:BB:B0:08:DF:85:1A Authority key identifier: 6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3 Certificate issuer: /CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3 Certificate serial: 1721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft Manifest number: 171A Signing time: Sat 18 May 2024 17:04:13 +0000 Manifest this update: Sat 18 May 2024 17:04:12 +0000 Manifest next update: Sat 25 May 2024 17:04:12 +0000 Files and hashes: 1: bFY62kfKw3TTExmffblj-wqJnbM.crl (hash: zbRwJ8/tAPweQi/Q8tKvtwXwoEA0vZL8VOWcF6NnMuw=) 2: 55EF0CDEBDC911E7BBC5D915C4F9AE02.roa (hash: qGIseberimCY5DoTJHZt1e5i70gfisaouTnBn696yxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5921 (0x1721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3 Validity Not Before: May 18 17:04:12 2024 GMT Not After : May 25 17:04:12 2024 GMT Subject: CN=6648df8c-ea02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:f5:86:1a:9c:11:3f:fa:ea:f1:3b:74:d5: d0:f1:44:9f:8b:6e:55:6d:66:4f:3e:ce:f4:89:d4: d9:1b:46:9f:d8:13:93:93:ad:7b:52:a4:18:9b:93: 69:06:77:dc:ae:27:e1:f5:b6:9e:82:16:7c:d0:d3: d2:a9:0c:06:50:e8:e1:82:85:e4:26:d0:60:57:42: 55:ed:3a:b1:b9:99:a4:41:6b:ad:72:c0:05:30:82: f8:92:4e:53:9f:3f:6e:d7:51:9d:cd:1a:4d:95:43: e0:95:d6:e5:13:93:70:31:b6:d6:e6:ff:6c:dd:77: 7d:7c:12:c4:e3:4a:28:f7:89:c7:12:b7:ad:96:7e: 38:0d:e6:08:36:ea:b1:72:aa:72:e2:79:0e:d3:7a: e4:ee:ac:09:08:43:29:2a:51:85:bc:76:cc:7b:d9: e9:1b:ab:cc:58:dd:a7:d9:88:de:93:d9:24:67:71: 80:c0:5f:65:dc:f9:c0:86:5e:71:41:f1:75:c1:ee: 31:b2:75:bd:6e:5c:ce:f1:a0:ad:0a:5e:b5:eb:f7: 3f:6c:22:e2:51:72:c0:9d:38:4a:98:a3:b5:33:bf: 9a:ed:ee:aa:30:ce:44:1e:a2:37:9d:ff:b6:b2:8e: a8:f0:fd:fb:94:de:49:ff:27:78:d8:68:c7:96:a7: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5E:80:2E:85:C0:4B:EB:22:EB:4F:94:D0:8C:BB:B0:08:DF:85:1A X509v3 Authority Key Identifier: keyid:6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:61:15:9d:6b:bf:af:c4:6d:09:98:36:93:de:a3:e2:af: f6:84:5b:e8:67:ed:d5:cc:ae:11:60:8c:c7:7a:ce:d4:3e:da: 25:ee:24:d8:0d:55:dd:98:b8:ad:4a:09:51:5b:aa:fe:1f:4c: 9c:2c:69:ea:67:3d:a1:31:55:dd:04:4b:30:47:41:c2:e0:1b: 32:a9:37:8b:70:ff:d4:e0:da:4e:c8:d7:ae:26:31:d6:27:d0: a1:45:1e:53:bb:26:43:f8:2d:b1:b0:d6:e5:16:9f:78:23:01: 96:5a:5f:66:53:ce:d8:07:3d:b1:e4:55:16:17:a5:64:3a:1f: fe:8e:1e:ce:61:8b:c2:47:7e:6b:4b:9b:4a:6b:29:aa:74:14: 9d:40:a9:d4:7e:ed:c7:9f:a1:93:58:eb:3b:fb:5f:08:54:5b: e2:64:d5:f3:94:1b:4c:73:8c:36:87:18:68:50:61:87:41:b6: a4:c1:b3:1f:03:fd:42:63:76:8b:c3:f9:de:8f:ef:f7:99:55: 23:a4:23:f9:62:c9:33:ae:14:52:dc:29:e2:0f:1f:7e:95:ce: 2b:a2:85:e6:95:2d:73:27:a6:27:db:65:44:85:fb:2a:18:97: 6d:cc:39:45:54:1a:68:49:66:6a:4e:b3:66:71:80:88:72:c0: 32:dd:c9:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM0NEUxMTAvBgNVBAUTKDZDNTYzQURBNDdDQUMzNzREMzEzMTk5RjdEQjk2M0ZC MEE4OTlEQjMwHhcNMjQwNTE4MTcwNDEyWhcNMjQwNTI1MTcwNDEyWjAYMRYwFAYD VQQDEw02NjQ4ZGY4Yy1lYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mH1hhqcET/66vE7dNXQ8USfi25VbWZPPs70idTZG0af2BOTk617UqQYm5Np Bnfcrifh9baeghZ80NPSqQwGUOjhgoXkJtBgV0JV7TqxuZmkQWutcsAFMIL4kk5T nz9u11GdzRpNlUPgldblE5NwMbbW5v9s3Xd9fBLE40oo94nHEretln44DeYINuqx cqpy4nkO03rk7qwJCEMpKlGFvHbMe9npG6vMWN2n2Yjek9kkZ3GAwF9l3PnAhl5x QfF1we4xsnW9blzO8aCtCl616/c/bCLiUXLAnThKmKO1M7+a7e6qMM5EHqI3nf+2 so6o8P37lN5J/yd42GjHlqemSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRegC6F wEvrIutPlNCMu7AI34UaMB8GA1UdIwQYMBaAFGxWOtpHysN00xMZn325Y/sKiZ2z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ0RS9EMDFBNzU3MkJE QzcxMUU3OUJEMTI5MTJDNEY5QUUwMi9iRlk2MmtmS3czVFRFeG1mZmJsai13cUpu Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGWTYya2ZLdzNUVEV4bWZmYmxqLXdxSm5iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzQ0RS9EMDFBNzU3MkJEQzcxMUU3OUJEMTI5MTJDNEY5QUUwMi9iRlk2MmtmS3cz VFRFeG1mZmJsai13cUpuYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB++2EVnWu/r8RtCZg2k96j4q/2hFvoZ+3VzK4RYIzHes7UPtol7iTY DVXdmLitSglRW6r+H0ycLGnqZz2hMVXdBEswR0HC4BsyqTeLcP/U4NpOyNeuJjHW J9ChRR5TuyZD+C2xsNblFp94IwGWWl9mU87YBz2x5FUWF6VkOh/+jh7OYYvCR35r S5tKaymqdBSdQKnUfu3Hn6GTWOs7+18IVFviZNXzlBtMc4w2hxhoUGGHQbakwbMf A/1CY3aLw/nej+/3mVUjpCP5YskzrhRS3CniDx9+lc4rooXmlS1zJ6Yn22VEhfsq GJdtzDlFVBpoSWZqTrNmcYCIcsAy3ckP -----END CERTIFICATE-----Generated at Sat May 18 17:37:31 2024 by rpki-client on console-fra.rpki-client.org