$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json) Hash identifier: TStmY411fICmZwDFgQ29SArQaWtMw27bhEWOrOtQeU8= Subject key identifier: 18:B7:D6:A0:88:88:9F:46:F8:D4:40:62:7B:0A:BA:17:66:15:D3:41 Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Certificate serial: 1689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft Manifest number: 166F Signing time: Thu 30 May 2024 17:28:41 +0000 Manifest this update: Thu 30 May 2024 17:28:40 +0000 Manifest next update: Thu 06 Jun 2024 17:28:40 +0000 Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: HQm7xJJ1bV8NJZ2vPU7Rd5Sn6ckHxqQ1G5Mp/px/UuA=) 2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: G60xcvS2Pyu4NkNwFSM5MoKiZ33tU2Bz3RM2bfV5OH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5769 (0x1689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Validity Not Before: May 30 17:28:40 2024 GMT Not After : Jun 6 17:28:40 2024 GMT Subject: CN=6658b749-f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:39:a3:59:c4:9e:5f:c5:48:b4:2f:ea:7f: 9e:20:b5:d8:e0:c7:5f:db:12:6f:0d:6b:99:58:49: 47:57:1e:5c:7b:3d:5c:cd:2f:b5:dc:af:b6:07:ef: 48:4d:96:81:83:e7:df:15:75:5f:0b:47:72:ce:04: 85:70:26:b5:56:3d:20:53:64:db:f2:a4:82:3c:8a: 27:b6:79:67:a1:dd:40:73:43:11:e1:73:43:f8:8f: bf:43:47:25:5c:55:f2:b1:af:81:e1:90:9e:80:73: 81:0f:53:99:e4:76:65:c8:76:94:48:d4:82:20:ad: 66:28:81:f4:2c:d6:f7:3a:52:fa:5c:1c:14:0a:2b: 58:bb:8a:e9:f8:fc:14:ea:9b:f8:bd:eb:07:38:e9: 1d:f9:2c:c7:e8:0c:b0:89:a6:59:01:d0:2a:2a:22: b3:fd:44:0b:38:3b:cd:ed:cb:70:79:99:75:34:ba: 21:62:75:3a:b2:04:83:5b:6e:1e:68:28:e3:d0:0b: 5e:fe:09:de:78:7d:92:ee:53:6b:5a:0b:e2:3d:7b: f8:fb:5c:d3:4d:6a:78:1d:4e:23:f3:c9:a8:cc:7c: 2b:d7:59:8c:ca:95:d1:66:26:13:f9:d9:ee:26:d6: 34:1d:95:82:39:25:3f:2d:10:7b:e5:1c:9d:46:c7: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:D6:A0:88:88:9F:46:F8:D4:40:62:7B:0A:BA:17:66:15:D3:41 X509v3 Authority Key Identifier: keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:64:24:dd:b1:7a:c6:15:70:46:d6:d4:bf:9f:b6:8d:f3:d9: 04:44:dc:63:1b:26:91:02:d2:85:42:7c:1d:f6:24:1e:a9:41: 65:92:ab:19:ce:36:b0:78:c2:a3:f0:53:31:4f:e3:0d:4a:40: a4:7e:bb:ec:8a:55:3b:1c:49:7e:9a:3a:8c:4d:7b:9b:9d:92: ee:a9:d6:45:27:ee:58:78:28:9c:1f:b7:c6:3c:c0:19:de:c0: 60:ee:04:81:73:1d:71:af:38:ff:3a:51:90:f0:c0:bb:f8:e8: 75:b6:ba:6d:61:4e:2b:38:0f:c2:7b:33:b8:53:1a:d0:b0:83: 08:a9:ec:97:57:a3:b3:bf:80:08:94:40:01:a6:55:87:68:78: cd:21:e9:88:7b:53:b7:5d:a0:20:55:0a:3b:fb:c4:25:4f:f3: 3f:b1:b7:a5:0b:fc:10:1c:d2:10:9a:84:2e:a6:87:c7:44:47: d6:69:27:06:73:f7:76:65:c6:bd:8f:94:ad:fa:a1:0c:eb:32: 72:9a:8e:62:b6:98:4e:c7:8f:df:73:9a:8a:70:d9:f3:4e:e3: 21:dd:73:c5:f5:79:b4:90:18:d4:d5:9b:b2:4d:34:4e:1c:a0: 68:5b:e6:bf:0a:5b:54:28:c5:d7:03:ec:08:fa:54:d6:61:68: 79:e2:cc:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBFM0UwNUEyOTZC QjA5QzVEM0QwHhcNMjQwNTMwMTcyODQwWhcNMjQwNjA2MTcyODQwWjAYMRYwFAYD VQQDEw02NjU4Yjc0OS1mMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozg5o1nEnl/FSLQv6n+eILXY4Mdf2xJvDWuZWElHVx5cez1czS+13K+2B+9I TZaBg+ffFXVfC0dyzgSFcCa1Vj0gU2Tb8qSCPIontnlnod1Ac0MR4XND+I+/Q0cl XFXysa+B4ZCegHOBD1OZ5HZlyHaUSNSCIK1mKIH0LNb3OlL6XBwUCitYu4rp+PwU 6pv4vesHOOkd+SzH6AywiaZZAdAqKiKz/UQLODvN7ctweZl1NLohYnU6sgSDW24e aCjj0Ate/gneeH2S7lNrWgviPXv4+1zTTWp4HU4j88mozHwr11mMypXRZiYT+dnu JtY0HZWCOSU/LRB75RydRscxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi31qCI iJ9G+NRAYnsKuhdmFdNBMB8GA1UdIwQYMBaAFASDL75wx7iFnKGg4+BaKWuwnF09 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzhFQy82MUQ0RjQ4QUUz RTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJV2NvYURqNEZvcGE3Q2NY VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJTXZ2bkRIdUlXY29hRGo0Rm9wYTdDY1hUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzhFQy82MUQ0RjQ4QUUzRTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5ESHVJ V2NvYURqNEZvcGE3Q2NYVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEZCTdsXrGFXBG1tS/n7aN89kERNxjGyaRAtKFQnwd9iQeqUFlkqsZ zjaweMKj8FMxT+MNSkCkfrvsilU7HEl+mjqMTXubnZLuqdZFJ+5YeCicH7fGPMAZ 3sBg7gSBcx1xrzj/OlGQ8MC7+Oh1trptYU4rOA/CezO4UxrQsIMIqeyXV6Ozv4AI lEABplWHaHjNIemIe1O3XaAgVQo7+8QlT/M/sbelC/wQHNIQmoQupofHREfWaScG c/d2Zca9j5St+qEM6zJymo5itphOx4/fc5qKcNnzTuMh3XPF9Xm0kBjU1ZuyTTRO HKBoW+a/CltUKMXXA+wI+lTWYWh54sxh -----END CERTIFICATE-----Generated at Thu May 30 18:33:06 2024 by rpki-client on console-fra.rpki-client.org