$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: YO30pTz7ZnSKwiEVqv7r3lcEOxxtwlGJUGSSkOPFMuA= Subject key identifier: 89:8D:B6:F1:20:49:6A:10:30:FD:35:0B:1C:D4:B6:09:9E:3E:70:0F Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1C16 Signing time: Fri 31 May 2024 16:46:36 +0000 Manifest this update: Fri 31 May 2024 16:46:35 +0000 Manifest next update: Fri 07 Jun 2024 16:46:35 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: G2fC1ETsFOKhttTBu7j+MEnUnMICbtXQtQBwsPbxEx4=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: Wf9gDz4SgwHMXZaATbqe72tgbhQrS+r0U7gGh2yqylk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7205 (0x1c25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: May 31 16:46:35 2024 GMT Not After : Jun 7 16:46:35 2024 GMT Subject: CN=6659feec-1db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:62:df:1f:7c:aa:cc:51:cd:35:b3:48:8d: d7:2d:28:9b:2e:6f:23:6c:bd:c9:91:11:84:94:8e: b2:4c:04:03:4f:98:64:67:74:fd:1e:5d:fd:31:03: fe:a4:7b:71:87:77:de:ff:38:47:66:97:db:a7:4c: fd:5b:99:54:45:57:eb:47:8c:bb:26:07:cf:aa:37: bc:88:c5:21:26:c3:89:ca:3f:43:71:95:2a:d6:dc: 03:5a:bf:d1:18:e3:a7:8e:1a:81:ed:71:98:52:00: 86:16:5b:19:f0:6e:02:4f:84:79:80:ed:4f:dd:c3: 5e:5c:6a:bc:06:88:28:ed:ad:ff:1a:c4:fd:6f:1e: 5d:f5:ba:4d:e0:5e:3c:93:49:f4:d3:f3:df:f1:ab: 71:d8:7d:33:68:3a:0b:3d:96:0a:b3:3b:2d:26:3a: 0d:58:07:b3:12:ef:76:ad:85:3a:e6:b2:16:cf:9d: bb:03:3d:84:84:c3:01:79:e8:c1:b5:c0:f4:58:7b: d0:94:46:02:d4:9d:cd:7b:0b:34:83:08:5b:d0:e4: 0c:c5:f9:11:ea:b6:b2:87:d8:8c:21:63:5c:a6:a4: 34:48:07:dc:ea:41:ca:39:7d:38:cd:44:b9:52:8f: 83:ab:43:90:83:a3:0a:eb:cd:fd:f9:cf:02:54:4b: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:B6:F1:20:49:6A:10:30:FD:35:0B:1C:D4:B6:09:9E:3E:70:0F X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:01:6a:90:a0:af:a7:4a:a6:05:77:e3:06:19:9a:3e:c6:eb: c9:06:3d:6f:0d:79:72:37:47:c8:7c:5d:43:b0:bf:a6:11:99: bc:a4:e9:24:92:24:62:c4:9f:61:4d:1c:82:67:19:55:64:fa: c9:b2:e9:7f:9f:c1:8b:30:e1:7b:ec:12:30:69:9a:27:22:e9: 84:a2:71:cd:22:8c:ff:69:12:67:3b:b4:fd:82:67:73:a9:3a: f0:33:0e:99:84:cd:63:02:cf:4c:42:06:26:9c:02:c8:69:70: 73:44:9f:eb:e2:50:1e:3b:ec:7d:e8:7f:5c:d4:65:8f:45:fd: cc:7d:b0:48:93:e7:fc:44:fe:f6:9c:02:04:fd:46:52:dc:d4: 34:6a:94:f3:ac:1a:1d:d7:74:d5:2d:c3:7a:46:80:e0:d7:7c: 83:de:28:fc:aa:e4:d6:82:f6:1f:e2:90:7d:76:5e:f6:4c:a6: df:ce:cf:6d:7f:e6:e9:43:bd:23:aa:2b:23:82:f8:11:6d:f7: 95:7f:25:54:20:97:3e:82:1d:94:2d:fb:3b:44:75:3e:07:35: 69:21:0f:73:0a:6a:a9:13:e7:6a:07:69:e5:31:c6:2a:64:a4: 59:8e:95:28:ae:12:40:f8:d8:ca:5f:97:d4:20:33:b3:e5:de: 65:a1:87:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjQwNTMxMTY0NjM1WhcNMjQwNjA3MTY0NjM1WjAYMRYwFAYD VQQDEw02NjU5ZmVlYy0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+xi3x98qsxRzTWzSI3XLSibLm8jbL3JkRGElI6yTAQDT5hkZ3T9Hl39MQP+ pHtxh3fe/zhHZpfbp0z9W5lURVfrR4y7JgfPqje8iMUhJsOJyj9DcZUq1twDWr/R GOOnjhqB7XGYUgCGFlsZ8G4CT4R5gO1P3cNeXGq8Bogo7a3/GsT9bx5d9bpN4F48 k0n00/Pf8atx2H0zaDoLPZYKszstJjoNWAezEu92rYU65rIWz527Az2EhMMBeejB tcD0WHvQlEYC1J3News0gwhb0OQMxfkR6rayh9iMIWNcpqQ0SAfc6kHKOX04zUS5 Uo+Dq0OQg6MK6839+c8CVEujuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImNtvEg SWoQMP01CxzUtgmePnAPMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRAWqQoK+nSqYFd+MGGZo+xuvJBj1vDXlyN0fIfF1DsL+mEZm8pOkk kiRixJ9hTRyCZxlVZPrJsul/n8GLMOF77BIwaZonIumEonHNIoz/aRJnO7T9gmdz qTrwMw6ZhM1jAs9MQgYmnALIaXBzRJ/r4lAeO+x96H9c1GWPRf3MfbBIk+f8RP72 nAIE/UZS3NQ0apTzrBod13TVLcN6RoDg13yD3ij8quTWgvYf4pB9dl72TKbfzs9t f+bpQ70jqisjgvgRbfeVfyVUIJc+gh2ULfs7RHU+BzVpIQ9zCmqpE+dqB2nlMcYq ZKRZjpUorhJA+NjKX5fUIDOz5d5loYdY -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org