$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: RUTyOtqSbpb2pj6kW6pZIunovHZ2xeV2R40zF1blZjc= Subject key identifier: BD:81:D4:70:8F:52:48:41:22:40:12:2B:1D:E4:E9:0E:F8:0D:E1:90 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 038C Signing time: Fri 31 May 2024 03:16:15 +0000 Manifest this update: Fri 31 May 2024 03:16:15 +0000 Manifest next update: Fri 07 Jun 2024 03:16:15 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: a4Yr/iyUgLvT8i2/kfDX/rtgBV2E+Fxp1gUYwzCA3lo=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: wbQbC/y/BoLpuBcZscBy8Nrhi/a1crcaQwZZg6SBHJw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: KqdP0dpBiQajD3B3GJ5ylfFEtSefS6F+/jUA7AVd2/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: May 31 03:16:15 2024 GMT Not After : Jun 7 03:16:15 2024 GMT Subject: CN=665940ff-7be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:57:d8:03:b3:63:9a:e1:da:cd:fe:14:ce: a1:90:2a:e1:fc:d5:11:58:64:56:c7:67:2f:18:ec: 49:46:5a:7f:11:7f:b9:5c:28:28:17:48:4b:26:1d: 86:f0:34:74:05:ea:ea:16:ba:fa:cb:d4:6f:48:59: c8:df:90:39:d3:86:12:8d:35:1f:22:25:a0:fe:6c: cc:8f:1d:a5:c9:e6:29:cc:bc:06:86:6d:13:ef:a2: 7e:fc:a9:e8:fa:5c:f6:6e:ca:28:c5:c5:8a:3f:9e: cc:5f:08:6b:76:a6:e4:12:fe:38:ab:c8:5c:e3:31: 0a:bd:11:05:42:9e:b8:46:4b:0a:d0:f1:9c:a2:c2: 4f:d5:e5:98:1b:aa:db:0b:76:f5:c5:f6:ae:d1:8a: c2:31:d1:33:b9:a7:65:6b:3e:4a:3a:c4:72:8f:98: 7a:bd:2b:be:4f:6b:40:0c:ae:50:09:7a:3a:ab:2c: 93:5e:fb:a0:56:33:6b:47:b2:3e:04:32:92:c3:e4: 8c:c3:69:cc:0f:b5:06:68:e9:d9:bc:04:53:cc:50: 05:17:39:28:40:45:bd:2d:57:d2:e3:24:01:e1:3a: ef:24:e3:86:35:61:96:54:90:59:2e:65:7d:d2:3c: 0e:24:2d:55:4b:bf:59:48:3c:fa:9d:a3:f7:7c:6d: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:D4:70:8F:52:48:41:22:40:12:2B:1D:E4:E9:0E:F8:0D:E1:90 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a8:2c:83:96:d2:09:76:ab:28:5a:02:e2:36:2d:a2:07:89: df:07:0b:90:d7:5f:9d:cf:e7:d5:c7:f1:77:30:5b:40:6f:4d: 32:2e:8e:5b:62:2a:93:f3:7d:2d:8f:2c:b1:d8:56:ed:d2:40: 95:21:ab:98:2b:8b:00:cb:e0:e5:d8:ed:fc:ec:51:c8:ea:00: ca:cb:f0:a8:b6:6a:8d:21:fe:16:19:6c:7f:f1:b9:ba:79:cf: 41:9c:ee:81:8f:c9:ed:9d:82:a2:d2:9c:d5:b2:62:e9:1e:8b: 4a:32:ac:a8:ba:5e:27:d1:ed:b0:56:75:67:9a:c7:46:23:db: 50:3a:3b:86:94:47:90:09:39:8d:5c:67:74:40:b9:e1:92:da: 1e:a9:31:1c:1a:2e:53:96:61:d3:94:68:2d:32:5b:51:d2:ed: 88:80:94:91:00:f1:f9:09:b1:83:df:7b:2e:29:a8:c8:2a:cb: 82:cc:6b:99:c4:5e:b5:34:40:42:0f:6a:76:27:a7:49:31:41: cd:e0:df:31:86:ca:b3:7f:5f:ca:eb:08:e0:a1:e6:c9:bf:f7: f0:9a:4e:af:57:ff:fc:9f:37:d8:ca:a4:6c:f0:36:26:20:8b: 98:7e:3f:af:66:32:ad:4e:f4:50:bf:c0:a4:5a:f9:9c:5e:2d: c1:81:2e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjQwNTMxMDMxNjE1WhcNMjQwNjA3MDMxNjE1WjAYMRYwFAYD VQQDEw02NjU5NDBmZi03YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02FX2AOzY5rh2s3+FM6hkCrh/NURWGRWx2cvGOxJRlp/EX+5XCgoF0hLJh2G 8DR0BerqFrr6y9RvSFnI35A504YSjTUfIiWg/mzMjx2lyeYpzLwGhm0T76J+/Kno +lz2bsooxcWKP57MXwhrdqbkEv44q8hc4zEKvREFQp64RksK0PGcosJP1eWYG6rb C3b1xfau0YrCMdEzuadlaz5KOsRyj5h6vSu+T2tADK5QCXo6qyyTXvugVjNrR7I+ BDKSw+SMw2nMD7UGaOnZvARTzFAFFzkoQEW9LVfS4yQB4TrvJOOGNWGWVJBZLmV9 0jwOJC1VS79ZSDz6naP3fG01UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2B1HCP UkhBIkASKx3k6Q74DeGQMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsqCyDltIJdqsoWgLiNi2iB4nfBwuQ11+dz+fVx/F3MFtAb00yLo5b YiqT830tjyyx2Fbt0kCVIauYK4sAy+Dl2O387FHI6gDKy/CotmqNIf4WGWx/8bm6 ec9BnO6Bj8ntnYKi0pzVsmLpHotKMqyoul4n0e2wVnVnmsdGI9tQOjuGlEeQCTmN XGd0QLnhktoeqTEcGi5TlmHTlGgtMltR0u2IgJSRAPH5CbGD33suKajIKsuCzGuZ xF61NEBCD2p2J6dJMUHN4N8xhsqzf1/K6wjgoebJv/fwmk6vV//8nzfYyqRs8DYm IIuYfj+vZjKtTvRQv8CkWvmcXi3BgS6R -----END CERTIFICATE-----Generated at Fri May 31 04:53:59 2024 by rpki-client on console-fra.rpki-client.org