$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft File: BujrLhzBcw8rcm9PAAhEw0U_qlk.mft (raw, json) Hash identifier: XGGGVJ3EgOw0xAgR39Khd/jBdpAmz9/fa0t4CFSWVhE= Subject key identifier: 3F:7D:BE:2C:9E:80:9E:A6:98:91:34:85:51:FA:D3:C0:9C:AB:15:FF Authority key identifier: 06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59 Certificate issuer: /CN=A9177B64/serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft Manifest number: 09E4 Signing time: Sat 18 May 2024 20:44:10 +0000 Manifest this update: Sat 18 May 2024 20:44:09 +0000 Manifest next update: Sat 25 May 2024 20:44:09 +0000 Files and hashes: 1: BujrLhzBcw8rcm9PAAhEw0U_qlk.crl (hash: 4xRfOK7QjOR7tMUBqlb4F+IFSBGNARv39CKhsCs5H28=) 2: D490B9E456BE11EAA979861EC4F9AE02.roa (hash: in2s5nblYb/tpke9vnRbwWoyZYgNOrnPyRgkXN/g1XA=) 3: D5248EE456BE11EAA979861EC4F9AE02.roa (hash: GEUerLfa8AbS7w95wtfzPXRDAwXXkP8/j2LX+qI6QYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B64/serialNumber=06E8EB2E1CC1730F2B726F4F000844C3453FAA59 Validity Not Before: May 18 20:44:09 2024 GMT Not After : May 25 20:44:09 2024 GMT Subject: CN=66491319-42b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:01:17:2a:cb:50:e9:df:00:5f:1f:1f:f9: 32:21:c7:a9:f5:25:f2:20:5a:33:f8:db:46:a6:55: 0f:ed:95:4e:46:8a:8c:12:13:01:be:9e:e3:87:e9: 89:8b:f9:a5:48:a4:b7:15:30:75:7d:d1:a6:57:a4: 99:61:cd:08:7d:4e:f3:30:f9:20:e9:14:bc:ef:ab: dc:19:0c:f3:2c:ec:7b:c4:9c:ec:2f:7f:9d:4d:11: 87:5c:49:ef:3e:56:d5:2b:01:b5:b6:b2:cb:73:a1: 16:9d:c4:8b:be:2a:5c:0a:7a:c1:5c:7e:7f:f4:3e: 23:ed:c1:5c:7b:98:d4:ba:88:7d:74:0f:e4:44:da: a5:ec:1d:b1:1b:6e:cc:6c:4d:c1:cf:f4:a8:1e:06: 35:c8:1d:0f:9a:44:bc:18:ab:d7:5e:9e:43:fe:b8: c4:80:5d:fd:76:09:a5:e8:e7:47:0b:ff:79:c6:a1: ae:b0:77:6b:9f:bf:b8:87:10:1e:45:69:7c:df:3b: c0:f7:86:72:0a:26:b6:7f:3a:f1:a6:d2:ec:8c:85: c7:c4:ba:eb:9e:45:f7:43:72:e2:3f:06:5f:2c:f4: ca:18:7a:90:8c:ca:13:a2:46:e8:8a:c0:80:76:4d: 83:b6:b3:06:1f:a6:ad:10:d2:55:11:58:d1:c6:7a: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7D:BE:2C:9E:80:9E:A6:98:91:34:85:51:FA:D3:C0:9C:AB:15:FF X509v3 Authority Key Identifier: keyid:06:E8:EB:2E:1C:C1:73:0F:2B:72:6F:4F:00:08:44:C3:45:3F:AA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BujrLhzBcw8rcm9PAAhEw0U_qlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B64/ABF9796856BD11EAA503D61CC4F9AE02/BujrLhzBcw8rcm9PAAhEw0U_qlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4e:82:38:81:cd:e2:4c:fd:80:cf:e6:a5:71:d1:81:5b:13: 19:2d:be:27:61:91:ef:6d:8e:2f:a6:a4:30:29:84:7e:c1:a3: 29:d9:8f:bc:7f:ee:8c:87:db:a2:9f:6f:52:ec:fd:af:09:14: 71:44:96:95:ee:c8:7e:49:9e:c7:15:0d:47:88:c7:8a:5b:62: 6a:ad:40:0b:c4:bd:f0:18:10:04:3f:ed:5c:2b:7e:26:0b:ac: 7a:9a:34:0a:99:52:87:34:f7:cf:83:ee:62:da:4d:48:d2:bd: fe:e4:4a:04:07:9e:e4:aa:f7:78:46:34:b4:8d:6c:4d:79:5d: 9c:a8:7e:44:7d:b2:29:6a:af:d7:f4:cb:5b:b0:05:8b:10:5b: f7:a9:0c:ef:18:ba:1b:52:87:73:cf:2c:49:66:c9:f5:91:69: f8:88:b1:77:a4:37:f4:26:1d:2b:dc:df:6e:f5:02:43:58:51: 10:cd:30:95:0d:0b:7e:11:50:5c:b1:2f:cc:b8:8d:39:07:fb: e5:f2:a1:43:24:7e:97:b3:2d:7a:fe:d7:7f:41:27:09:b2:1c: 93:9b:e5:21:f7:11:0f:83:36:1f:e3:1c:5e:a3:2d:5b:51:d5: d6:24:cb:85:ce:fc:b3:b2:73:1b:5d:b6:e2:3d:e4:5b:d8:6c: 88:d3:45:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdCNjQxMTAvBgNVBAUTKDA2RThFQjJFMUNDMTczMEYyQjcyNkY0RjAwMDg0NEMz NDUzRkFBNTkwHhcNMjQwNTE4MjA0NDA5WhcNMjQwNTI1MjA0NDA5WjAYMRYwFAYD VQQDEw02NjQ5MTMxOS00MmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lABFyrLUOnfAF8fH/kyIcep9SXyIFoz+NtGplUP7ZVORoqMEhMBvp7jh+mJ i/mlSKS3FTB1fdGmV6SZYc0IfU7zMPkg6RS876vcGQzzLOx7xJzsL3+dTRGHXEnv PlbVKwG1trLLc6EWncSLvipcCnrBXH5/9D4j7cFce5jUuoh9dA/kRNql7B2xG27M bE3Bz/SoHgY1yB0PmkS8GKvXXp5D/rjEgF39dgml6OdHC/95xqGusHdrn7+4hxAe RWl83zvA94ZyCia2fzrxptLsjIXHxLrrnkX3Q3LiPwZfLPTKGHqQjMoTokboisCA dk2DtrMGH6atENJVEVjRxnpy0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD99viye gJ6mmJE0hVH608CcqxX/MB8GA1UdIwQYMBaAFAbo6y4cwXMPK3JvTwAIRMNFP6pZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0I2NC9BQkY5Nzk2ODU2 QkQxMUVBQTUwM0Q2MUNDNEY5QUUwMi9CdWpyTGh6QmN3OHJjbTlQQUFoRXcwVV9x bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J1anJMaHpCY3c4cmNtOVBBQWhFdzBVX3Fsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0I2NC9BQkY5Nzk2ODU2QkQxMUVBQTUwM0Q2MUNDNEY5QUUwMi9CdWpyTGh6QmN3 OHJjbTlQQUFoRXcwVV9xbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKToI4gc3iTP2Az+alcdGBWxMZLb4nYZHvbY4vpqQwKYR+waMp2Y+8 f+6Mh9uin29S7P2vCRRxRJaV7sh+SZ7HFQ1HiMeKW2JqrUALxL3wGBAEP+1cK34m C6x6mjQKmVKHNPfPg+5i2k1I0r3+5EoEB57kqvd4RjS0jWxNeV2cqH5EfbIpaq/X 9MtbsAWLEFv3qQzvGLobUodzzyxJZsn1kWn4iLF3pDf0Jh0r3N9u9QJDWFEQzTCV DQt+EVBcsS/MuI05B/vl8qFDJH6Xsy16/td/QScJshyTm+Uh9xEPgzYf4xxeoy1b UdXWJMuFzvyzsnMbXbbiPeRb2GyI00VC -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org