$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: UQyQjbgiuQq/CwYz6JCVW4mlUJCsjlrL4pwGeXKztBY= Subject key identifier: A8:1D:AD:29:F4:EE:BF:1A:82:BC:BD:F8:08:CB:4E:4D:63:72:DF:E4 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 082C Signing time: Sat 18 May 2024 21:46:25 +0000 Manifest this update: Sat 18 May 2024 21:46:24 +0000 Manifest next update: Sat 25 May 2024 21:46:24 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: PhsfmI2KEBm8z8k7eUlmsucE5EqZ4WOPo1nyqb+czvw=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: Wdo4xbo2jThOBALG/swFdSWyPEiRkzeC/w2Ayzy6Ytc=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: 2VI2hY5UlARHpwuBqnULVT3ahtdexijvR2j0GUq/pso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: May 18 21:46:24 2024 GMT Not After : May 25 21:46:24 2024 GMT Subject: CN=664921b0-1419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:65:c7:2c:34:7b:67:d1:bd:76:d7:0c:bf: 33:79:e9:2c:99:73:33:7f:d1:73:6d:fa:a1:c7:7c: 05:97:09:b9:b9:05:e4:4b:06:d8:02:65:11:7d:61: e2:0b:e3:53:8f:69:e2:d5:fd:fc:6b:cc:ae:ed:8d: 0d:17:c5:b6:94:7a:a7:9a:ec:c8:f4:05:3c:f4:78: f5:92:bd:28:5f:08:1c:e2:23:48:d5:50:ce:fa:12: b4:19:87:8d:20:3e:01:d7:cf:27:6b:7f:6a:da:b1: 62:17:d8:88:9c:a7:81:ae:b7:ed:f0:8e:46:45:77: c6:37:c3:fe:18:f2:d1:ef:81:d8:4e:7c:bc:a3:7c: 04:2d:ca:43:31:be:ed:dc:96:0d:a4:7f:7d:1a:c5: 9f:0b:48:c8:0c:01:e4:f8:2e:98:27:5b:59:41:e5: 86:d8:79:3a:b5:ce:d7:bf:c0:bb:f5:8f:d4:ff:69: 88:a3:d6:a7:f2:a2:25:69:8e:39:ed:92:c5:78:4b: 56:71:a0:74:a8:ed:39:4b:4d:8d:02:56:05:f6:c2: c5:b2:57:30:91:0a:97:2a:e9:2d:7c:d9:42:34:df: ea:5f:72:c4:7b:75:c6:0a:8c:2f:17:ef:61:41:68: d8:ff:1a:ca:97:70:ee:47:92:5b:0b:ff:e8:a7:32: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1D:AD:29:F4:EE:BF:1A:82:BC:BD:F8:08:CB:4E:4D:63:72:DF:E4 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:84:fb:88:07:f9:2f:25:32:fb:f1:6d:70:62:f5:87:40:3a: 5d:24:4a:ef:c8:bb:73:e4:bc:ff:d9:2c:f7:9f:7b:01:39:32: fe:c7:95:e1:84:5a:9e:8c:c5:f9:84:b3:f7:57:7d:50:aa:4e: b6:91:de:40:6f:d8:81:d1:d6:55:2e:3a:eb:ca:f4:d4:10:5f: a9:d2:b0:17:eb:14:c1:cc:18:e4:1b:78:f4:44:1a:8a:f2:2d: 97:2d:97:da:ee:ac:32:59:87:ed:be:ae:9c:4c:14:25:62:59: ce:90:e5:f5:f0:6e:b2:af:3a:18:b3:94:10:43:6b:e6:9b:71: 66:75:9e:c1:ac:67:d6:9b:7e:02:e6:08:dc:df:f0:18:ff:f8: 28:aa:b6:34:c4:24:a2:ed:03:65:2f:29:ac:dc:5a:df:e5:7e: 53:0b:aa:0f:5f:e4:9b:23:bc:c7:38:54:32:02:48:fe:69:f2: 9d:25:0d:19:77:a5:55:ab:51:50:49:63:75:7d:2c:b4:9e:e4: d0:75:7c:0a:c8:c8:63:88:3a:cf:76:0f:1c:f3:6b:35:e0:33: b2:05:e5:0b:3e:e7:33:6f:f9:52:46:b0:ed:c1:14:ce:da:9c: 1e:54:b9:12:fb:a5:45:8d:bd:cb:f7:0d:ad:18:f4:ff:b6:8c: 75:73:10:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjQwNTE4MjE0NjI0WhcNMjQwNTI1MjE0NjI0WjAYMRYwFAYD VQQDEw02NjQ5MjFiMC0xNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgRlxyw0e2fRvXbXDL8zeeksmXMzf9Fzbfqhx3wFlwm5uQXkSwbYAmURfWHi C+NTj2ni1f38a8yu7Y0NF8W2lHqnmuzI9AU89Hj1kr0oXwgc4iNI1VDO+hK0GYeN ID4B188na39q2rFiF9iInKeBrrft8I5GRXfGN8P+GPLR74HYTny8o3wELcpDMb7t 3JYNpH99GsWfC0jIDAHk+C6YJ1tZQeWG2Hk6tc7Xv8C79Y/U/2mIo9an8qIlaY45 7ZLFeEtWcaB0qO05S02NAlYF9sLFslcwkQqXKuktfNlCNN/qX3LEe3XGCowvF+9h QWjY/xrKl3DuR5JbC//opzIuiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgdrSn0 7r8agry9+AjLTk1jct/kMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBohPuIB/kvJTL78W1wYvWHQDpdJErvyLtz5Lz/2Sz3n3sBOTL+x5Xh hFqejMX5hLP3V31Qqk62kd5Ab9iB0dZVLjrryvTUEF+p0rAX6xTBzBjkG3j0RBqK 8i2XLZfa7qwyWYftvq6cTBQlYlnOkOX18G6yrzoYs5QQQ2vmm3FmdZ7BrGfWm34C 5gjc3/AY//goqrY0xCSi7QNlLyms3Frf5X5TC6oPX+SbI7zHOFQyAkj+afKdJQ0Z d6VVq1FQSWN1fSy0nuTQdXwKyMhjiDrPdg8c82s14DOyBeULPuczb/lSRrDtwRTO 2pweVLkS+6VFjb3L9w2tGPT/tox1cxDf -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org