$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: 0JrUDE1FRLvWaG232G//zeihdkaa9SOXWVz5nncejvI= Subject key identifier: 11:8C:B7:CB:43:D3:4A:27:01:DE:A6:BD:33:DE:11:65:82:0C:32:A8 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 91 Signing time: Sat 18 May 2024 16:07:34 +0000 Manifest this update: Sat 18 May 2024 16:07:34 +0000 Manifest next update: Sat 25 May 2024 16:07:34 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: sVQlKv6Kq2rerhBWkEHNLIwyTLj29jvFuaqd0lnPNEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: May 18 16:07:34 2024 GMT Not After : May 25 16:07:34 2024 GMT Subject: CN=6648d246-ba49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:49:8e:00:34:e5:8d:40:d2:aa:fc:7c:0a: ec:54:2b:d4:53:b3:71:d4:2c:32:ef:fa:a6:aa:f9: 00:3a:52:45:3f:a1:3c:e5:b6:33:1a:95:2a:9e:f5: 5c:92:cc:a5:4b:32:89:df:9b:48:96:b1:c3:58:8a: 4f:0d:91:7b:de:ea:b5:f0:15:37:da:23:b6:d4:dc: 9c:6c:6f:9a:f7:ed:93:a5:a3:1c:2b:a5:a5:aa:2d: 28:74:a6:10:6b:aa:30:e6:db:4b:ca:35:a1:9b:ec: aa:93:ce:b6:74:72:d2:df:b9:2b:04:72:2b:a1:aa: 0a:f0:69:d4:15:b3:d2:b2:9a:b0:50:db:d1:88:68: 77:ca:5e:86:0d:b8:27:e8:e9:8e:fb:80:4d:3f:85: 35:d3:a6:66:50:c8:cb:f5:f1:f0:13:fa:62:da:03: eb:24:49:20:81:e5:f7:7f:e3:5c:07:f5:d5:35:11: 18:93:e3:ea:13:2a:ee:77:e2:eb:fd:7a:e3:a9:dd: 07:ab:30:ad:72:df:ea:83:be:82:e3:cc:1b:c1:4e: b0:b8:9c:cd:e5:b7:a5:d4:49:91:76:75:a7:16:e2: 03:ca:5d:71:e1:f6:17:dc:31:0b:49:88:61:94:22: 96:0e:cf:d9:8f:5c:52:bc:2b:ce:8e:56:97:dc:84: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:B7:CB:43:D3:4A:27:01:DE:A6:BD:33:DE:11:65:82:0C:32:A8 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:83:95:7b:d4:1a:57:a4:72:9f:cc:18:e7:67:3b:57:d2: a3:bc:4e:3c:6d:0e:2a:0f:0f:46:ed:38:19:1d:8d:b3:f8:54: 91:3b:02:2e:f5:aa:78:ac:6a:d9:6c:0e:38:dd:f4:97:84:76: 3a:86:2e:74:a1:58:ac:0e:7e:8c:d2:a8:a2:6d:7a:1c:6b:3c: 51:e4:ac:9e:3c:ab:99:28:41:78:fb:84:de:34:7f:67:11:fa: e5:0a:c7:27:70:d2:95:31:85:14:5e:d8:23:e7:4c:3d:39:23: 73:d5:f2:ee:6e:a8:dd:72:fb:f8:b2:65:37:c7:7e:da:7d:f4: ed:7b:ea:c2:c7:b3:d7:06:c6:6d:62:6c:df:08:77:b3:e9:b5: 42:cb:fa:bd:90:eb:94:16:ae:98:3f:44:dc:06:06:0b:f6:cf: 8e:68:4a:83:be:92:e0:33:d1:6e:a5:37:f1:00:f2:05:88:3e: 3a:36:8f:fa:4f:80:6c:4a:55:15:23:12:f1:49:19:46:4f:9e: 22:89:45:df:c1:79:34:1d:ef:6c:06:96:38:bc:2d:8a:34:7c: 3c:7d:76:c7:61:02:29:ba:b4:f3:71:3d:46:db:14:ee:9b:7a: 7e:f2:67:17:7a:d8:e2:df:05:6c:0b:49:55:76:d7:38:8f:49: 3f:cd:40:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjQwNTE4MTYwNzM0WhcNMjQwNTI1MTYwNzM0WjAYMRYwFAYD VQQDEw02NjQ4ZDI0Ni1iYTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgNJjgA05Y1A0qr8fArsVCvUU7Nx1Cwy7/qmqvkAOlJFP6E85bYzGpUqnvVc ksylSzKJ35tIlrHDWIpPDZF73uq18BU32iO21NycbG+a9+2TpaMcK6Wlqi0odKYQ a6ow5ttLyjWhm+yqk862dHLS37krBHIroaoK8GnUFbPSspqwUNvRiGh3yl6GDbgn 6OmO+4BNP4U106ZmUMjL9fHwE/pi2gPrJEkggeX3f+NcB/XVNREYk+PqEyrud+Lr /Xrjqd0HqzCtct/qg76C48wbwU6wuJzN5bel1EmRdnWnFuIDyl1x4fYX3DELSYhh lCKWDs/Zj1xSvCvOjlaX3IQL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGMt8tD 00onAd6mvTPeEWWCDDKoMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO/IOVe9QaV6Ryn8wY52c7V9KjvE48bQ4qDw9G7TgZHY2z+FSROwIu 9ap4rGrZbA443fSXhHY6hi50oVisDn6M0qiibXocazxR5KyePKuZKEF4+4TeNH9n EfrlCscncNKVMYUUXtgj50w9OSNz1fLubqjdcvv4smU3x37affTte+rCx7PXBsZt YmzfCHez6bVCy/q9kOuUFq6YP0TcBgYL9s+OaEqDvpLgM9FupTfxAPIFiD46No/6 T4BsSlUVIxLxSRlGT54iiUXfwXk0He9sBpY4vC2KNHw8fXbHYQIpurTzcT1G2xTu m3p+8mcXetji3wVsC0lVdtc4j0k/zUB3 -----END CERTIFICATE-----Generated at Sat May 18 17:20:05 2024 by rpki-client on console-ams.rpki-client.org