$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft File: bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json) Hash identifier: QVGN983ITf791pPPko4Cx/nDQ7tJfzuFcJnlBMXib2w= Subject key identifier: 9A:E3:77:C4:1D:E2:AB:B3:F8:B0:AB:EB:18:F8:DF:2F:2D:A3:97:FD Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 Certificate issuer: /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft Manifest number: 6C Signing time: Sun 19 May 2024 07:30:54 +0000 Manifest this update: Sun 19 May 2024 07:30:54 +0000 Manifest next update: Sun 26 May 2024 07:30:54 +0000 Files and hashes: 1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: YWG/H+Dzy+e0puQ6H6ErSPi9n9gpwYeYwvMapmhifN8=) 2: 52531292718111EEA2596A60C4F9AE02.roa (hash: 7m5gCq4zk9c382aEQDqvdyja5r7ee2pi303b5+aWrU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9 Validity Not Before: May 19 07:30:54 2024 GMT Not After : May 26 07:30:54 2024 GMT Subject: CN=6649aaae-afe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3a:04:55:0a:f0:2c:f6:81:f7:4f:1f:76:ca: 43:87:e0:aa:0e:1b:4c:e0:d5:ac:7f:e6:17:34:5c: 19:d7:e7:2f:82:01:b7:c2:ec:60:62:04:59:03:73: d5:6a:a0:0a:fc:a2:e5:a2:4c:3b:16:cc:4d:79:d0: 7e:2e:2d:0e:d5:e9:5b:fe:93:10:f4:dc:2d:9c:37: 0a:0b:1b:3f:b8:fb:68:28:47:7a:8e:7e:c4:bb:7b: 39:56:bb:40:1f:fb:49:6d:16:10:65:6f:3d:c6:1b: e9:d4:8b:bc:58:6a:f0:a9:2d:ee:27:2d:65:9b:70: 39:42:75:30:94:62:4f:f5:08:a2:af:94:fd:f2:68: e9:e2:f0:22:9e:bc:4a:12:63:a1:c8:18:ae:12:7a: 0b:56:36:4f:a5:2a:b3:d7:3e:b8:e4:28:ae:49:98: f1:ef:66:3d:b4:12:11:1d:49:0d:4f:4c:7b:ff:98: b0:29:bf:5c:11:91:13:19:a9:d5:f8:f8:7d:1a:25: 9f:bb:9e:98:14:98:00:28:f4:5f:b4:ff:ad:70:2f: 6d:a3:1d:5a:f5:2b:ab:8c:04:07:c9:d7:74:04:09: 55:f2:3a:bd:aa:d8:1d:3d:96:1c:4b:b9:e9:9f:7a: 46:14:65:52:b1:f6:0b:06:48:f2:87:8c:5d:06:2b: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:77:C4:1D:E2:AB:B3:F8:B0:AB:EB:18:F8:DF:2F:2D:A3:97:FD X509v3 Authority Key Identifier: keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:1f:7e:33:8b:8e:8c:72:65:58:f3:33:a2:46:ba:5a:cb:f3: c6:83:58:0e:40:6b:47:b4:aa:0c:80:1d:fa:7f:87:43:86:e4: 4e:f5:0a:f0:4c:95:e9:d9:60:ad:f0:e1:20:30:51:98:1b:40: 0e:7c:d6:20:da:de:a8:dc:24:ef:4b:40:51:97:5b:4d:48:50: 48:1c:c2:6f:74:77:18:57:8c:43:a5:6c:56:3d:c8:8d:23:27: 04:6c:36:b9:76:98:81:47:9f:bc:b8:69:ea:aa:2d:cf:5a:83: 85:dd:aa:3a:8f:bf:65:a6:65:7c:09:86:d3:84:14:c3:4b:15: 28:03:0f:64:9c:d4:76:7c:94:cc:32:fb:91:8d:30:1d:b4:84: f4:3e:73:25:81:70:0d:fe:f6:0e:a1:fa:c5:2f:de:e2:92:a2: 76:22:cb:aa:7b:76:c3:ef:d4:d0:f2:b0:d1:31:3f:e8:71:c3: 8e:ea:b3:92:be:e1:5c:2f:c3:b8:c8:09:ca:c6:8f:e4:4b:4e: 54:c0:0d:ba:fd:78:3f:a0:d4:b5:3b:40:c0:cf:c7:c4:ee:13: c3:3b:26:6b:ed:e9:91:3c:de:74:ca:ea:c3:2f:c2:69:61:e6: ac:f9:53:3f:74:ad:21:9c:77:95:2c:bc:68:6f:07:cc:b3:1e: 58:2b:05:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTQ5RTExMC8GA1UEBRMoNkUzNDVDMDE1NTZERTNFREExRDkxMzRENEEyRDdFQTUy M0ExNDhGOTAeFw0yNDA1MTkwNzMwNTRaFw0yNDA1MjYwNzMwNTRaMBgxFjAUBgNV BAMTDTY2NDlhYWFlLWFmZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuOgRVCvAs9oH3Tx92ykOH4KoOG0zg1ax/5hc0XBnX5y+CAbfC7GBiBFkDc9Vq oAr8ouWiTDsWzE150H4uLQ7V6Vv+kxD03C2cNwoLGz+4+2goR3qOfsS7ezlWu0Af +0ltFhBlbz3GG+nUi7xYavCpLe4nLWWbcDlCdTCUYk/1CKKvlP3yaOni8CKevEoS Y6HIGK4SegtWNk+lKrPXPrjkKK5JmPHvZj20EhEdSQ1PTHv/mLApv1wRkRMZqdX4 +H0aJZ+7npgUmAAo9F+0/61wL22jHVr1K6uMBAfJ13QECVXyOr2q2B09lhxLuemf ekYUZVKx9gsGSPKHjF0GK9xHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmuN3xB3i q7P4sKvrGPjfLy2jl/0wHwYDVR0jBBgwFoAUbjRcAVVt4+2h2RNNSi1+pSOhSPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5NDlFLzgwNzg1RjUwNzE2 OTExRUVCNTFCMzgwREM0RjlBRTAyL2JqUmNBVlZ0NC0yaDJSTk5TaTEtcFNPaFNQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmpSY0FWVnQ0LTJoMlJOTlNpMS1wU09oU1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 NDlFLzgwNzg1RjUwNzE2OTExRUVCNTFCMzgwREM0RjlBRTAyL2JqUmNBVlZ0NC0y aDJSTk5TaTEtcFNPaFNQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALcffjOLjoxyZVjzM6JGulrL88aDWA5Aa0e0qgyAHfp/h0OG5E71CvBM lenZYK3w4SAwUZgbQA581iDa3qjcJO9LQFGXW01IUEgcwm90dxhXjEOlbFY9yI0j JwRsNrl2mIFHn7y4aeqqLc9ag4XdqjqPv2WmZXwJhtOEFMNLFSgDD2Sc1HZ8lMwy +5GNMB20hPQ+cyWBcA3+9g6h+sUv3uKSonYiy6p7dsPv1NDysNExP+hxw47qs5K+ 4Vwvw7jICcrGj+RLTlTADbr9eD+g1LU7QMDPx8TuE8M7Jmvt6ZE83nTK6sMvwmlh 5qz5Uz90rSGcd5UsvGhvB8yzHlgrBeU= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org