$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: fDjY/bVpE9ZgqWGNZKS/RRvyh2H6L1QeFJmXzp2vDlc= Subject key identifier: E5:69:B6:AC:AA:2B:F8:5C:45:86:CB:22:11:B9:68:F3:B8:46:B7:97 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: D1 Signing time: Fri 31 May 2024 06:55:55 +0000 Manifest this update: Fri 31 May 2024 06:55:54 +0000 Manifest next update: Fri 07 Jun 2024 06:55:54 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: buW94uohD0KTSvyADlLHGtAwOsgH9O9TWHJbx5QPjy8=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: HqQXHOvuK+VlHXKJD5jJO3nnn5w0PKEuLey9o5E60/s=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: Eof5iCyinI9zB4LAPlIHk/0h3EcPss7Rkc+r1JDBNOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: May 31 06:55:54 2024 GMT Not After : Jun 7 06:55:54 2024 GMT Subject: CN=6659747a-3d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:1e:8c:18:35:d2:97:6a:58:ad:da:7f:d8: f0:ea:82:67:cd:3d:9e:bc:b1:5b:72:46:b5:a0:78: 14:68:0d:0e:20:9c:3b:40:c8:fc:85:d9:4e:3c:02: d2:d3:ca:ad:f5:20:ea:88:c0:32:b0:ff:06:de:8f: 4e:8f:c5:e9:7e:ab:57:87:26:44:e8:22:da:3a:7c: 39:37:11:14:42:10:e6:ba:ce:1e:70:06:68:47:fb: f6:d4:24:15:24:65:42:43:1a:e4:b8:33:94:3d:42: b7:fd:c8:51:cc:db:d6:40:d5:9a:1a:cb:69:04:41: a1:96:b4:c4:2e:cf:af:ed:0a:36:9f:98:44:fc:a0: 2e:da:d7:2d:58:e5:b9:fe:9b:ba:c5:b6:f4:30:a3: 0e:d6:48:e4:36:c3:85:41:76:24:a6:d1:e5:e2:84: 6d:eb:3a:44:56:bc:20:4b:a3:c7:6a:3a:62:ae:7b: 4b:c1:e7:e3:07:ba:d7:ea:81:df:7e:98:dc:91:b5: df:a2:45:6d:ed:d2:fe:47:99:f8:0a:cf:20:04:5e: 63:6e:55:a7:47:ed:3d:da:0b:92:11:c8:cd:fd:e0: 8a:b3:4c:16:6b:0f:91:8a:8a:3f:56:fe:82:c0:64: 91:fd:a7:74:3e:52:59:22:4a:2c:6f:a3:48:a8:8b: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:69:B6:AC:AA:2B:F8:5C:45:86:CB:22:11:B9:68:F3:B8:46:B7:97 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:61:a0:2f:57:35:b5:dd:85:ba:05:94:ac:07:ba:50:1f:e3: 1c:9b:52:33:5e:50:b8:cc:f2:b5:a2:a2:bd:37:b4:ab:0f:26: db:20:57:71:e5:6a:43:70:35:18:bf:51:d5:cd:d5:68:df:3b: d7:20:a0:ac:0f:b8:71:97:10:f0:3c:55:42:97:9b:82:c7:a7: d1:57:a4:f1:4d:48:22:ff:bd:2a:cb:2e:22:8b:23:d1:1b:85: dd:71:5a:83:90:31:0a:2a:15:a0:6d:3e:6b:17:17:a7:ac:2c: 01:d0:7e:4c:99:22:c8:f3:15:2e:a2:7c:b0:5d:34:d8:e5:43: 13:42:da:8c:5f:35:b8:bf:26:cc:ec:dc:f6:92:ca:04:c7:55: ce:42:91:33:1c:fc:ea:fd:b1:03:f3:b6:ce:fc:1b:c5:55:a3: df:98:4b:6e:cf:63:da:4c:32:3e:ba:43:07:7e:62:38:c4:f6: d2:3b:b5:1a:65:22:20:98:61:5c:9b:27:9d:10:63:12:24:b7: b2:da:ad:6b:d0:97:c0:f2:47:93:62:c3:e8:5a:d0:ce:4d:39: ba:a2:25:5f:41:49:4d:2f:57:33:e4:17:03:c4:e0:5f:1c:f2: b8:3a:45:00:af:10:77:6f:92:5e:c2:05:90:1f:ae:46:9f:43: 57:ff:33:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjQwNTMxMDY1NTU0WhcNMjQwNjA3MDY1NTU0WjAYMRYwFAYD VQQDEw02NjU5NzQ3YS0zZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv30ejBg10pdqWK3af9jw6oJnzT2evLFbcka1oHgUaA0OIJw7QMj8hdlOPALS 08qt9SDqiMAysP8G3o9Oj8XpfqtXhyZE6CLaOnw5NxEUQhDmus4ecAZoR/v21CQV JGVCQxrkuDOUPUK3/chRzNvWQNWaGstpBEGhlrTELs+v7Qo2n5hE/KAu2tctWOW5 /pu6xbb0MKMO1kjkNsOFQXYkptHl4oRt6zpEVrwgS6PHajpirntLwefjB7rX6oHf fpjckbXfokVt7dL+R5n4Cs8gBF5jblWnR+092guSEcjN/eCKs0wWaw+Rioo/Vv6C wGSR/ad0PlJZIkosb6NIqIsZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVptqyq K/hcRYbLIhG5aPO4RreXMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqYaAvVzW13YW6BZSsB7pQH+Mcm1IzXlC4zPK1oqK9N7SrDybbIFdx 5WpDcDUYv1HVzdVo3zvXIKCsD7hxlxDwPFVCl5uCx6fRV6TxTUgi/70qyy4iiyPR G4XdcVqDkDEKKhWgbT5rFxenrCwB0H5MmSLI8xUuonywXTTY5UMTQtqMXzW4vybM 7Nz2ksoEx1XOQpEzHPzq/bED87bO/BvFVaPfmEtuz2PaTDI+ukMHfmI4xPbSO7Ua ZSIgmGFcmyedEGMSJLey2q1r0JfA8keTYsPoWtDOTTm6oiVfQUlNL1cz5BcDxOBf HPK4OkUArxB3b5JewgWQH65Gn0NX/zO3 -----END CERTIFICATE-----Generated at Fri May 31 10:01:37 2024 by rpki-client on console-ams.rpki-client.org