$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: tzwLC3ZTtldhwrsrnZHsWtcRmDyXeBzGHlKKKupLBUw= Subject key identifier: D3:E1:56:75:68:D0:43:AF:31:33:7A:4A:56:D0:48:A8:75:1B:BC:07 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 092A Signing time: Sat 18 May 2024 21:10:29 +0000 Manifest this update: Sat 18 May 2024 21:10:28 +0000 Manifest next update: Sat 25 May 2024 21:10:28 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: M5z9myQqHRKwCQOUD1JOeLAkXguCOcf7djB9I4HLv58=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 72pvQSlnT9rABWVd/v/7K5BYXphu+YLZZNPRawfEZ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: May 18 21:10:28 2024 GMT Not After : May 25 21:10:28 2024 GMT Subject: CN=66491944-b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:ff:e4:80:31:78:2f:04:f9:88:16:c5:8e: a8:60:6f:c7:90:1c:0c:26:3a:5f:72:54:23:83:0f: 6b:22:c9:6b:1d:5d:3a:b2:44:8d:4a:1f:22:2f:94: ed:1e:30:06:d5:37:06:bd:bb:82:7c:14:c7:10:89: d3:59:b9:64:a4:2b:65:1c:37:9e:20:68:73:32:b5: 2e:5e:d2:bd:11:6f:48:80:46:66:3c:76:11:fa:73: 6a:2f:8e:00:d2:f0:b1:cf:80:ee:25:47:ac:ca:5e: e1:5c:20:09:f2:70:92:fa:f1:43:ad:a5:fb:b8:fc: f4:bd:16:98:1b:e8:e9:91:45:a2:94:b4:3f:b7:bc: 0e:b8:50:58:75:f2:a9:57:30:6e:8c:ae:7f:4f:a1: 74:5a:38:28:a9:c7:54:3c:83:30:27:e0:2c:bc:73: b5:34:d3:d6:5e:ec:49:fa:c3:77:2f:36:d8:4b:b6: f6:e9:ee:14:90:f7:3e:8e:fb:66:3b:b2:a1:14:4b: 03:3c:0d:5b:b4:bc:9f:f6:ea:7f:73:e5:57:cf:fb: 0c:e4:c3:62:89:44:0f:86:1d:5c:1d:76:33:e6:36: 0f:4e:76:05:f2:51:49:26:b5:58:b7:2e:65:04:10: 2a:75:9b:a8:27:ca:73:59:74:58:69:c0:0c:17:51: db:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:56:75:68:D0:43:AF:31:33:7A:4A:56:D0:48:A8:75:1B:BC:07 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cd:72:81:28:cd:35:04:cc:65:dd:57:f1:07:3d:a9:0c:fe: 0e:42:4a:fd:71:be:25:45:f8:b7:df:d3:b7:f8:fb:d3:a4:66: ca:ce:49:5e:3f:b2:0a:33:64:f3:de:a7:46:8e:d2:e7:d7:f9: ad:b7:74:92:f6:63:fc:28:49:53:ae:90:8f:a1:34:78:aa:7f: 3b:22:66:5f:1c:a0:3b:3e:90:45:56:dd:fa:e5:01:d4:4e:9d: 11:9e:cd:48:18:26:72:92:54:c4:df:6c:a3:c1:d4:0a:85:81: 21:22:45:4c:27:58:40:12:92:01:91:08:25:b7:ec:a3:91:28: 90:93:89:ad:24:12:c8:e0:1d:43:ba:78:49:7e:81:4f:49:10: d0:fe:bf:d2:0e:eb:68:fb:fa:fe:df:83:7b:c3:b4:a4:e1:7e: 4d:16:28:0f:80:ae:ff:9d:fb:84:66:72:09:25:f3:6e:47:c3: fc:a1:c1:cf:72:bd:e0:dc:44:17:1b:5f:22:2f:65:67:55:19: 89:4f:5e:df:d7:b0:98:80:66:f3:1e:b9:67:ea:5f:1e:27:d9: ab:a7:82:89:dd:09:59:9d:c8:e6:ec:fd:30:e2:0d:9a:c0:27: e6:bc:c1:af:66:7a:b7:6c:54:62:7b:6f:73:0b:74:7e:6e:a8: 3b:c7:75:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjQwNTE4MjExMDI4WhcNMjQwNTI1MjExMDI4WjAYMRYwFAYD VQQDEw02NjQ5MTk0NC1iMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80H/5IAxeC8E+YgWxY6oYG/HkBwMJjpfclQjgw9rIslrHV06skSNSh8iL5Tt HjAG1TcGvbuCfBTHEInTWblkpCtlHDeeIGhzMrUuXtK9EW9IgEZmPHYR+nNqL44A 0vCxz4DuJUesyl7hXCAJ8nCS+vFDraX7uPz0vRaYG+jpkUWilLQ/t7wOuFBYdfKp VzBujK5/T6F0WjgoqcdUPIMwJ+AsvHO1NNPWXuxJ+sN3LzbYS7b26e4UkPc+jvtm O7KhFEsDPA1btLyf9up/c+VXz/sM5MNiiUQPhh1cHXYz5jYPTnYF8lFJJrVYty5l BBAqdZuoJ8pzWXRYacAMF1HbGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPhVnVo 0EOvMTN6SlbQSKh1G7wHMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbzXKBKM01BMxl3VfxBz2pDP4OQkr9cb4lRfi339O3+PvTpGbKzkle P7IKM2Tz3qdGjtLn1/mtt3SS9mP8KElTrpCPoTR4qn87ImZfHKA7PpBFVt365QHU Tp0Rns1IGCZyklTE32yjwdQKhYEhIkVMJ1hAEpIBkQglt+yjkSiQk4mtJBLI4B1D unhJfoFPSRDQ/r/SDuto+/r+34N7w7Sk4X5NFigPgK7/nfuEZnIJJfNuR8P8ocHP cr3g3EQXG18iL2VnVRmJT17f17CYgGbzHrln6l8eJ9mrp4KJ3QlZncjm7P0w4g2a wCfmvMGvZnq3bFRie29zC3R+bqg7x3WT -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org