$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json) Hash identifier: DmKPwEA/B2qEu5RSWON87OOrwNBaOffO1fnFUbqTTkU= Subject key identifier: 42:5B:3E:8E:B8:95:12:2D:A0:05:7A:1B:62:97:AB:B2:9C:B0:FC:93 Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA Certificate serial: 0E78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft Manifest number: 0E70 Signing time: Thu 30 May 2024 18:52:38 +0000 Manifest this update: Thu 30 May 2024 18:52:38 +0000 Manifest next update: Thu 06 Jun 2024 18:52:38 +0000 Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: OC/+qw/OEbofa9cvW5AGFUZaon0sj5xcV5Qn4uExYuE=) 2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: nPLVWy54o20K9NCgnKMQdW3UHlJN80xYDJGM9u1xe5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3704 (0xe78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA Validity Not Before: May 30 18:52:38 2024 GMT Not After : Jun 6 18:52:38 2024 GMT Subject: CN=6658caf6-3ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:8a:0a:42:9f:e1:7e:4d:e8:2b:eb:ec:76: 40:46:ca:80:33:c7:d7:15:cf:53:7c:9b:60:c6:45: b8:01:5f:2c:a7:a2:c3:9c:d1:fa:84:4d:7e:bd:47: 82:9d:e3:93:52:5c:aa:a5:76:e7:bb:08:1c:63:cb: 5a:e6:96:9e:c1:f2:98:7c:06:2f:83:73:4a:83:56: dd:b8:66:0c:47:af:5c:6b:d4:f6:c3:3e:aa:88:c1: 10:c9:ba:14:1d:58:6d:c5:3a:ae:87:44:d6:d7:0b: ea:7b:97:2b:ec:f7:4b:ea:0a:04:10:14:a8:0b:21: b3:46:cb:87:ec:99:47:d2:7c:6c:14:64:99:a1:b3: d0:e8:1d:30:3e:0a:19:2e:f1:f0:4f:ce:d6:9c:95: 65:be:a1:f4:38:5c:a2:c9:d1:c0:22:db:28:e3:12: ab:04:d6:6d:a3:7c:66:59:09:47:78:31:b6:f4:67: 3e:35:d7:ed:f8:d1:4a:62:55:16:6f:8b:62:eb:06: c6:e7:47:4c:e2:a6:af:50:04:d4:7f:1e:97:ce:12: f1:68:6d:aa:aa:f3:39:1b:cf:1c:21:8c:df:38:47: a0:38:84:22:c9:e3:ac:96:ff:9a:8c:2a:3c:cb:2f: ec:89:14:8d:d4:01:61:78:b5:90:d3:5b:ff:5a:91: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5B:3E:8E:B8:95:12:2D:A0:05:7A:1B:62:97:AB:B2:9C:B0:FC:93 X509v3 Authority Key Identifier: keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3a:77:6e:23:a1:ea:a6:24:38:df:2e:f2:55:f1:10:66:01: 4e:81:fb:6e:c0:65:1e:18:53:ab:41:7b:7e:83:8e:78:9b:23: 84:e4:6c:52:7f:6d:a5:20:5a:d4:33:d0:20:7a:8e:4f:29:77: 00:9d:7f:b6:ff:bf:23:9b:84:f2:76:f5:d0:f4:5d:e3:d8:70: 40:16:25:7b:97:5c:71:85:fe:78:45:27:c7:00:03:bd:8a:83: 96:3e:dd:88:30:84:5a:1e:0a:dd:3b:25:d6:65:0d:28:04:90: 6a:20:12:28:ff:17:db:e1:d7:9e:e9:91:75:72:f9:45:be:a7: 11:a0:9a:b9:c1:78:95:3e:04:01:e6:ed:d1:e3:8f:09:e3:90: c5:77:f7:23:ff:28:ab:33:2d:89:04:94:4f:9b:39:f1:ad:65: 5d:88:3d:2a:9b:8c:0f:44:bf:4e:38:17:82:50:ba:57:0b:0b: a1:27:ca:6b:0e:ce:ee:0e:90:4d:c5:af:3c:56:2c:8c:40:36: 67:0e:56:38:14:3c:90:d7:a4:ee:40:96:dd:ff:a1:4d:b2:31: ca:87:d2:90:5d:8d:f0:13:60:cb:2f:61:ca:fb:b3:b5:24:5d: 9b:2e:46:69:b4:0f:f6:2e:bc:67:11:22:7a:24:b7:86:44:3e: 91:7e:4a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMjcxMTAvBgNVBAUTKDZGMzNDMjVBRDMzNjE3ODQ0MTJDNDJCMDc5ODYzM0Qw M0IyNUJFQ0EwHhcNMjQwNTMwMTg1MjM4WhcNMjQwNjA2MTg1MjM4WjAYMRYwFAYD VQQDEw02NjU4Y2FmNi0zYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA472KCkKf4X5N6Cvr7HZARsqAM8fXFc9TfJtgxkW4AV8sp6LDnNH6hE1+vUeC neOTUlyqpXbnuwgcY8ta5paewfKYfAYvg3NKg1bduGYMR69ca9T2wz6qiMEQyboU HVhtxTquh0TW1wvqe5cr7PdL6goEEBSoCyGzRsuH7JlH0nxsFGSZobPQ6B0wPgoZ LvHwT87WnJVlvqH0OFyiydHAItso4xKrBNZto3xmWQlHeDG29Gc+Ndft+NFKYlUW b4ti6wbG50dM4qavUATUfx6XzhLxaG2qqvM5G88cIYzfOEegOIQiyeOslv+ajCo8 yy/siRSN1AFheLWQ01v/WpF78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJbPo64 lRItoAV6G2KXq7KcsPyTMB8GA1UdIwQYMBaAFG8zwlrTNheEQSxCsHmGM9A7Jb7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAyNy82OEY3NTkxMDcz NDYxMUU5QUQ1NjFCNDdDNEY5QUUwMi9ielBDV3RNMkY0UkJMRUt3ZVlZejBEc2x2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J6UENXdE0yRjRSQkxFS3dlWVl6MERzbHZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAyNy82OEY3NTkxMDczNDYxMUU5QUQ1NjFCNDdDNEY5QUUwMi9ielBDV3RNMkY0 UkJMRUt3ZVlZejBEc2x2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjOnduI6HqpiQ43y7yVfEQZgFOgftuwGUeGFOrQXt+g454myOE5GxS f22lIFrUM9Ageo5PKXcAnX+2/78jm4TydvXQ9F3j2HBAFiV7l1xxhf54RSfHAAO9 ioOWPt2IMIRaHgrdOyXWZQ0oBJBqIBIo/xfb4dee6ZF1cvlFvqcRoJq5wXiVPgQB 5u3R448J45DFd/cj/yirMy2JBJRPmznxrWVdiD0qm4wPRL9OOBeCULpXCwuhJ8pr Ds7uDpBNxa88ViyMQDZnDlY4FDyQ16TuQJbd/6FNsjHKh9KQXY3wE2DLL2HK+7O1 JF2bLkZptA/2LrxnESJ6JLeGRD6Rfkqu -----END CERTIFICATE-----Generated at Thu May 30 21:49:40 2024 by rpki-client on console-ams.rpki-client.org