$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: p5O/NQGNJEbUwRkkdJxc/yjtOX8SKd/LmexhfLKXub0= Subject key identifier: 85:D3:BF:62:6F:8F:D2:CD:90:A6:38:F0:0C:1A:5E:78:9B:FE:54:25 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1A5F Signing time: Sat 18 May 2024 16:44:49 +0000 Manifest this update: Sat 18 May 2024 16:44:49 +0000 Manifest next update: Sat 25 May 2024 16:44:49 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: 3yL4KA/UvwVLIlPj1jXC4VM4j9wjpkIIbXoXIoNVoV4=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: SWtO7q8oGVQaD7ju/Eh1rOFPuyOwEeNyQlQrFraUmqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6757 (0x1a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: May 18 16:44:49 2024 GMT Not After : May 25 16:44:49 2024 GMT Subject: CN=6648db01-ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:30:61:9e:7e:7b:0a:e1:0b:b4:1c:21:fe: ca:67:06:d0:65:19:e5:64:37:9e:93:da:7d:69:69: 1b:dd:cf:73:6d:bf:b5:1b:80:db:0b:9f:06:cb:6f: 69:a9:8c:1f:ed:39:1a:e3:34:4d:6a:38:3c:82:99: fb:ee:22:b7:35:5f:2c:f6:3a:74:eb:61:c2:51:56: 5a:29:a3:40:9a:9c:37:f7:5c:47:df:b4:a2:b2:62: 74:87:5c:32:65:bd:02:8d:ce:18:55:51:02:f9:ea: 5a:b9:7e:45:31:57:92:52:96:aa:51:cf:0a:49:7c: 67:18:37:1b:27:d3:86:67:f4:e0:7b:6e:06:88:ce: d7:56:10:90:7f:26:bf:60:7b:84:72:5e:cf:7e:10: 4e:2f:5c:1d:35:f0:e0:5c:e8:99:4a:83:62:ea:ea: f4:06:fe:40:18:10:b7:6a:18:2a:ce:f5:db:2d:ec: fb:ee:33:5e:a2:aa:c0:1d:11:91:b3:a3:4e:69:8c: 67:ed:86:da:9b:e6:2a:d9:f1:df:c8:31:a0:8e:24: 05:a6:4a:75:20:d2:d9:ca:45:3f:41:f6:de:7b:47: f6:73:5e:6d:94:57:23:a0:3a:90:84:ff:66:54:8e: fc:8b:5b:23:4d:60:67:52:79:f3:eb:aa:68:d6:d3: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:BF:62:6F:8F:D2:CD:90:A6:38:F0:0C:1A:5E:78:9B:FE:54:25 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f4:40:0f:60:0f:61:ab:0c:6f:f0:0f:e2:49:ef:2d:e3:13: 7f:19:4e:fb:25:36:eb:39:58:d4:53:a6:fc:6b:ec:5f:de:f7: c2:47:e7:fe:0f:4e:a9:5a:99:d9:15:56:14:44:3f:90:19:c1: b1:8d:70:b9:86:af:9d:6e:4b:73:a1:7c:02:75:30:04:f7:32: 42:88:db:02:ee:35:75:e1:a9:7d:12:d4:e4:2b:a9:ae:57:76: 68:d0:21:f6:bf:35:ef:c3:a5:85:1c:b7:f5:cf:b2:d5:14:89: 53:74:c8:04:54:ce:03:a3:e8:70:f0:1f:ae:be:22:5e:ea:17: 78:dd:8e:0b:14:42:2b:cf:9e:3f:22:61:1b:31:27:5b:a1:7b: 09:d5:f8:a1:58:f4:42:f2:a8:28:1d:b5:41:3d:59:34:57:3a: 48:ed:48:1d:11:ac:d7:ba:8f:ea:7a:58:d2:57:3e:b4:cf:ef: 16:ae:bc:65:d5:0d:aa:57:40:01:80:08:ba:94:6a:c6:e5:0e: 19:b9:a6:aa:83:6e:d6:04:35:7b:31:dd:0e:56:86:a2:3c:c4: 94:8c:5c:38:00:64:4e:56:0f:a9:f3:2f:12:6d:0d:54:e9:5f: f5:9d:85:6d:d4:26:b4:01:f6:e1:b5:6e:cb:27:9e:38:26:11: 5e:b6:b6:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjQwNTE4MTY0NDQ5WhcNMjQwNTI1MTY0NDQ5WjAYMRYwFAYD VQQDEw02NjQ4ZGIwMS1iYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0swYZ5+ewrhC7QcIf7KZwbQZRnlZDeek9p9aWkb3c9zbb+1G4DbC58Gy29p qYwf7Tka4zRNajg8gpn77iK3NV8s9jp062HCUVZaKaNAmpw391xH37SismJ0h1wy Zb0Cjc4YVVEC+epauX5FMVeSUpaqUc8KSXxnGDcbJ9OGZ/Tge24GiM7XVhCQfya/ YHuEcl7PfhBOL1wdNfDgXOiZSoNi6ur0Bv5AGBC3ahgqzvXbLez77jNeoqrAHRGR s6NOaYxn7Ybam+Yq2fHfyDGgjiQFpkp1INLZykU/Qfbee0f2c15tlFcjoDqQhP9m VI78i1sjTWBnUnnz66po1tMgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXTv2Jv j9LNkKY48AwaXnib/lQlMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9EAPYA9hqwxv8A/iSe8t4xN/GU77JTbrOVjUU6b8a+xf3vfCR+f+ D06pWpnZFVYURD+QGcGxjXC5hq+dbktzoXwCdTAE9zJCiNsC7jV14al9EtTkK6mu V3Zo0CH2vzXvw6WFHLf1z7LVFIlTdMgEVM4Do+hw8B+uviJe6hd43Y4LFEIrz54/ ImEbMSdboXsJ1fihWPRC8qgoHbVBPVk0VzpI7UgdEazXuo/qeljSVz60z+8Wrrxl 1Q2qV0ABgAi6lGrG5Q4Zuaaqg27WBDV7Md0OVoaiPMSUjFw4AGROVg+p8y8SbQ1U 6V/1nYVt1Ca0AfbhtW7LJ544JhFetrYc -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org