$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: D9c/vBaVGwyzVZWQ+KPhSnLhuirJPi32zUxyOcFGiQs= Subject key identifier: F9:07:5D:58:6C:AE:F2:8B:A6:BE:9E:5E:50:E1:AE:61:CD:2B:95:68 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 45 Signing time: Sun 19 May 2024 08:07:23 +0000 Manifest this update: Sun 19 May 2024 08:07:22 +0000 Manifest next update: Sun 26 May 2024 08:07:22 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: Kn4WhE53yK+5iaouvfcZGCnqfLk4Kc5f1DOd2OsEfuM=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: zZYRuZju/6K1b+K/WY45YKEObvh7R4AMvppkXjmVq70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: May 19 08:07:22 2024 GMT Not After : May 26 08:07:22 2024 GMT Subject: CN=6649b33a-4648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:c3:29:b8:b7:a9:75:6e:27:aa:34:f3:d1: e1:ec:a2:97:e9:84:f1:7d:3b:60:28:b4:47:46:b6: 03:4b:30:0f:f7:d0:7d:68:c2:a8:94:ea:64:c1:96: b8:6d:44:f8:37:a7:e2:65:a1:46:d2:39:c7:12:7e: f4:6f:0b:0b:4a:d7:52:db:76:a5:fd:04:fa:1f:7b: be:6a:d8:20:03:8c:ae:df:a6:7e:f3:70:b6:08:e2: d6:48:19:b4:91:3f:a3:1f:d6:59:83:62:52:21:35: 29:a5:46:99:02:c3:c2:d0:7f:aa:af:b0:9e:36:0a: 31:27:7f:6d:70:42:b9:b4:6a:3b:6f:ee:04:94:e0: fc:1a:e6:d1:76:a4:34:46:74:7d:fc:0b:12:a2:b0: d6:84:4f:f9:2e:9b:ca:45:63:82:ab:36:e0:5d:02: c7:2b:1e:57:06:e9:87:c8:a6:ef:8e:83:44:c1:a6: 43:31:a9:da:50:dc:6b:44:3f:f3:07:ac:6e:6b:38: c4:f5:9b:3d:f6:1b:02:15:e4:5e:bb:7e:03:23:30: f2:01:9b:60:4d:8c:ae:f5:42:ce:01:9c:5d:ae:63: b6:08:06:74:c7:3d:56:ac:c8:8b:49:f1:53:f9:aa: 51:60:ca:a9:a4:61:44:f8:c9:96:15:04:4f:90:94: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:07:5D:58:6C:AE:F2:8B:A6:BE:9E:5E:50:E1:AE:61:CD:2B:95:68 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a8:00:d2:15:0f:3f:ec:11:50:88:19:fd:c2:db:13:a0:0a: 40:7e:cd:a7:88:9d:63:13:9d:27:d2:35:d5:4f:15:80:83:2a: b9:60:d5:31:11:b9:2b:db:cc:be:93:61:65:17:45:7a:ae:61: d8:2f:80:30:a3:03:ea:b7:a0:1a:59:0e:cf:ac:65:53:74:3c: 64:a1:a3:0b:a4:a4:5f:66:d8:d9:64:26:10:0c:33:da:16:bb: 23:f2:4b:97:d8:52:5a:ce:a7:ae:35:9a:80:10:60:60:52:54: 6d:09:e8:0b:62:c1:7b:92:a6:ce:cb:a1:e8:05:cf:d4:41:69: ff:14:20:59:3a:ca:ea:dc:f9:60:8b:37:02:65:36:31:61:d9: 2a:5a:37:80:a2:5e:fb:f5:f9:e2:fa:ef:a5:80:4a:a4:98:ef: d7:cd:65:cc:40:10:4c:64:ca:5d:f9:68:53:fc:5c:39:81:88: 0e:ca:2d:e9:9b:e8:cc:2b:b4:e1:d1:d3:cf:a8:f7:92:28:3e: f6:8f:af:2d:05:0f:5d:31:94:54:07:c1:ae:fa:ae:4e:1d:3f: 52:70:d8:ce:cd:cb:e1:2d:29:0f:ae:72:ad:87:7d:b0:51:8f: ff:18:f3:15:38:52:98:14:69:70:fa:f7:6a:45:af:e6:58:83: a2:62:de:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OTAwODExMC8GA1UEBRMoNkNCQjY3NjdGNjNBMENCOUI3QTc0OTE0QjRBNjU3NDE3 RTRDNTc4QTAeFw0yNDA1MTkwODA3MjJaFw0yNDA1MjYwODA3MjJaMBgxFjAUBgNV BAMTDTY2NDliMzNhLTQ2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNmMMpuLepdW4nqjTz0eHsopfphPF9O2AotEdGtgNLMA/30H1owqiU6mTBlrht RPg3p+JloUbSOccSfvRvCwtK11LbdqX9BPofe75q2CADjK7fpn7zcLYI4tZIGbSR P6Mf1lmDYlIhNSmlRpkCw8LQf6qvsJ42CjEnf21wQrm0ajtv7gSU4Pwa5tF2pDRG dH38CxKisNaET/kum8pFY4KrNuBdAscrHlcG6YfIpu+Og0TBpkMxqdpQ3GtEP/MH rG5rOMT1mz32GwIV5F67fgMjMPIBm2BNjK71Qs4BnF2uY7YIBnTHPVasyItJ8VP5 qlFgyqmkYUT4yZYVBE+QlCUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+QddWGyu 8oumvp5eUOGuYc0rlWgwHwYDVR0jBBgwFoAUbLtnZ/Y6DLm3p0kUtKZXQX5MV4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5MDA4LzBBOEZCQjFBQjQz MjExRUVBMjY0NDQwQ0M0RjlBRTAyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkx0blpfWTZETG0zcDBrVXRLWlhRWDVNVjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 MDA4LzBBOEZCQjFBQjQzMjExRUVBMjY0NDQwQ0M0RjlBRTAyL2JMdG5aX1k2RExt M3Awa1V0S1pYUVg1TVY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKCoANIVDz/sEVCIGf3C2xOgCkB+zaeInWMTnSfSNdVPFYCDKrlg1TER uSvbzL6TYWUXRXquYdgvgDCjA+q3oBpZDs+sZVN0PGShowukpF9m2NlkJhAMM9oW uyPyS5fYUlrOp641moAQYGBSVG0J6AtiwXuSps7LoegFz9RBaf8UIFk6yurc+WCL NwJlNjFh2SpaN4CiXvv1+eL676WASqSY79fNZcxAEExkyl35aFP8XDmBiA7KLemb 6MwrtOHR08+o95IoPvaPry0FD10xlFQHwa76rk4dP1Jw2M7Ny+EtKQ+ucq2HfbBR j/8Y8xU4UpgUaXD692pFr+ZYg6Ji3jc= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org