$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: tyllqkd5skehqqNMUh8h+Epd9l1wGRdS31G7jjL1SBQ= Subject key identifier: 87:6C:DD:14:B7:04:DF:40:1A:E3:9F:BC:71:B1:94:E4:70:3F:6D:3D Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 013A Signing time: Sun 19 May 2024 04:58:00 +0000 Manifest this update: Sun 19 May 2024 04:57:59 +0000 Manifest next update: Sun 26 May 2024 04:57:59 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: PGgGLBX7qnejK3/bWHaJtMVT9bMVvXAbFcXC82LmB38=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: MYLSEvaWoD36c3eeZW9+ylz+N+Xp8Qut5hTaA29aOow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: May 19 04:57:59 2024 GMT Not After : May 26 04:57:59 2024 GMT Subject: CN=664986d7-e7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:72:e5:8a:69:cf:1c:fb:4a:c5:f2:d8:63: 1a:6c:95:56:d7:10:92:08:51:70:97:d7:01:47:55: 32:63:f0:93:08:33:07:f1:ff:1d:2e:f0:72:f0:f2: fd:f2:12:42:ad:0b:72:fa:a6:e3:44:3a:cf:b2:9f: 79:0d:65:27:29:54:6a:7b:db:4a:17:ce:48:13:c7: b2:6e:4a:91:2d:bd:fb:3a:ce:63:c3:54:05:21:3d: 61:dd:cf:cf:da:58:17:30:ba:d7:d1:82:e1:8e:c5: b3:7e:22:39:ae:29:4f:01:9d:2e:94:90:7f:7a:5d: 84:d6:3b:28:1a:49:e7:7a:50:b6:57:57:b9:92:7a: 8c:2e:19:10:1b:71:86:9f:d8:68:aa:8f:99:c2:f6: 5c:36:fa:e0:31:ed:e1:a5:82:3c:63:24:bb:7d:2f: 5d:ed:68:f3:35:87:e4:b8:dd:3c:c0:9f:b0:08:18: df:54:4b:5f:73:e6:85:f9:f7:ab:53:c2:21:69:fa: 7b:bc:be:bf:dc:a0:f6:c2:1c:5e:fd:23:84:f3:08: 48:7b:ea:29:83:16:5f:4c:b1:5c:44:14:5f:5e:ea: 29:fc:ff:7b:8b:e4:8a:e7:c4:2e:57:5f:23:6e:4f: 0f:b8:aa:85:43:1c:f7:84:f1:92:ee:42:c3:6b:84: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6C:DD:14:B7:04:DF:40:1A:E3:9F:BC:71:B1:94:E4:70:3F:6D:3D X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:6e:47:36:19:c1:68:04:aa:37:dd:d2:f3:8a:38:59:b8:82: 76:66:e4:10:8d:65:d3:6c:40:4a:5c:bd:fe:77:bd:95:2d:76: 27:ee:5c:72:f0:1d:da:bf:d2:96:b5:f0:f8:83:b7:df:64:95: 3d:32:9f:b9:f9:23:f1:b0:13:28:10:e2:25:61:b1:34:6f:cc: 8f:82:f5:6d:b3:f5:3c:56:28:01:ad:3e:bc:eb:7f:aa:aa:e4: 0d:ec:30:67:2b:4d:72:44:d5:3f:ad:81:37:e8:f5:8a:5c:b6: f4:a8:5f:2f:d6:56:02:f8:6c:6b:d6:0a:83:ce:43:f2:77:70: 02:4c:89:dd:91:5f:bd:91:80:4d:4b:e7:84:18:c8:85:b6:fd: 11:2a:0b:aa:9e:aa:68:0b:e3:e0:0b:44:10:cd:af:d2:76:c7: 1f:f0:7f:da:9a:7d:47:13:92:be:8e:05:98:10:fb:86:7e:5f: df:29:71:ca:fb:f7:0c:f7:26:5f:80:64:77:19:7a:d7:18:0c: 08:f6:5f:e5:da:1a:9a:ae:db:ed:0c:c7:d9:b2:43:14:f4:51: 88:90:17:8d:37:94:8c:e9:3e:d1:4a:ac:cb:02:fa:c4:c7:71: f0:20:85:26:3b:b3:ae:46:36:0e:4c:53:5f:51:cf:20:9c:6d: 3c:c6:6d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjQwNTE5MDQ1NzU5WhcNMjQwNTI2MDQ1NzU5WjAYMRYwFAYD VQQDEw02NjQ5ODZkNy1lN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTdy5Yppzxz7SsXy2GMabJVW1xCSCFFwl9cBR1UyY/CTCDMH8f8dLvBy8PL9 8hJCrQty+qbjRDrPsp95DWUnKVRqe9tKF85IE8eybkqRLb37Os5jw1QFIT1h3c/P 2lgXMLrX0YLhjsWzfiI5rilPAZ0ulJB/el2E1jsoGknnelC2V1e5knqMLhkQG3GG n9hoqo+ZwvZcNvrgMe3hpYI8YyS7fS9d7WjzNYfkuN08wJ+wCBjfVEtfc+aF+fer U8Ihafp7vL6/3KD2whxe/SOE8whIe+opgxZfTLFcRBRfXuop/P97i+SK58QuV18j bk8PuKqFQxz3hPGS7kLDa4QsLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIds3RS3 BN9AGuOfvHGxlORwP209MB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8bkc2GcFoBKo33dLzijhZuIJ2ZuQQjWXTbEBKXL3+d72VLXYn7lxy 8B3av9KWtfD4g7ffZJU9Mp+5+SPxsBMoEOIlYbE0b8yPgvVts/U8VigBrT6863+q quQN7DBnK01yRNU/rYE36PWKXLb0qF8v1lYC+Gxr1gqDzkPyd3ACTIndkV+9kYBN S+eEGMiFtv0RKguqnqpoC+PgC0QQza/Sdscf8H/amn1HE5K+jgWYEPuGfl/fKXHK +/cM9yZfgGR3GXrXGAwI9l/l2hqartvtDMfZskMU9FGIkBeNN5SM6T7RSqzLAvrE x3HwIIUmO7OuRjYOTFNfUc8gnG08xm2O -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org