$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: wHBgCNir8umKGPOmCYR/f8RHIceOInZY7fTWNnO+qiY= Subject key identifier: AA:04:9E:04:F8:12:66:A4:34:48:87:23:E7:EA:D4:7F:FF:F5:6C:FB Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 2460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 2448 Signing time: Sat 18 May 2024 16:05:13 +0000 Manifest this update: Sat 18 May 2024 16:05:12 +0000 Manifest next update: Sat 25 May 2024 16:05:12 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: W16GnG5FZePxUx7FZQ4O1TGwuzcRHhhfdAZncIkZP+M=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: FOz+uDL2D22lJCuQ1AmteerbbeonZiSVvd9VihdE6tg=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: EBO15MW174X/0lG9Tyg/d0MIdJqeD9aANY0+I0S/im0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9312 (0x2460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: May 18 16:05:12 2024 GMT Not After : May 25 16:05:12 2024 GMT Subject: CN=6648d1b8-b2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:ce:e4:2d:e7:fa:40:d0:e2:c2:bf:6e:5c: 62:ae:27:04:ec:b7:bc:b8:06:fe:49:21:8c:c3:97: a6:0e:67:37:12:6f:16:5b:4e:03:ec:cd:60:35:4e: 3e:1b:ff:85:a9:6b:62:17:da:82:cc:47:89:b5:79: 26:d2:fc:fa:b9:41:4c:2e:96:2d:6c:e2:8e:2d:7f: d7:0c:73:ba:e8:7c:c0:77:b8:a6:c6:e8:70:ed:67: 1f:0d:9f:13:16:b5:5e:cf:34:4f:7e:79:c1:4f:61: 96:f1:ae:55:ef:25:cb:e5:62:04:2c:ea:a8:ea:31: ea:e4:94:58:99:54:e3:84:74:99:f8:57:0e:ae:a5: db:de:74:a6:8a:5a:48:ad:9d:2b:39:fa:bb:61:b1: 01:d5:bf:4d:40:70:0f:fd:65:89:ff:0a:4a:7f:72: dc:2e:2d:3e:a8:12:52:96:84:7e:ad:1c:11:61:b9: 77:ca:98:45:bb:90:9e:74:f2:71:d2:9a:33:a4:54: fa:38:55:93:e4:80:d0:e3:76:33:38:5c:b6:e0:68: c8:6c:22:63:05:71:06:ed:b5:06:4b:13:8d:f4:a3: 93:37:53:fd:90:1e:7c:30:2a:d3:65:db:b7:87:0f: ff:ea:4e:06:d8:7b:86:de:b6:0b:ea:fb:bd:c0:51: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:9E:04:F8:12:66:A4:34:48:87:23:E7:EA:D4:7F:FF:F5:6C:FB X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:98:17:b1:a4:73:6f:a6:ab:a0:e9:f8:91:35:df:27:fe: 53:f3:00:88:7e:74:45:22:8e:00:50:3b:e6:e4:56:af:41:f1: 3b:8a:ef:0d:eb:25:86:5a:4d:89:2f:0a:7e:8c:0b:97:9f:71: d5:46:1c:f0:f1:2d:75:33:15:e6:45:b0:d9:1f:7d:7e:f6:c7: 24:7c:fb:e9:4e:5c:38:6d:8d:a1:53:5d:3c:ac:a3:55:a9:81: 43:b7:eb:ba:35:e4:22:4c:4b:bb:35:b9:d8:72:7c:cd:cb:ba: ad:4d:de:bc:1b:dc:d8:6c:7f:e5:79:b9:43:30:67:08:32:22: bd:60:d9:91:b1:a5:a6:d6:05:72:46:7c:ac:30:5a:91:df:28: a2:f2:73:b3:61:da:62:04:78:95:f6:fc:95:9e:4f:a6:08:3c: 61:9d:3b:fe:e4:50:a4:d0:be:ff:3e:36:b7:9e:ff:3d:8b:86: 85:6b:d7:b0:a4:87:6b:bd:96:48:1f:25:a4:4d:bf:ca:4b:0a: 97:88:d7:6a:c4:a4:5d:d7:99:d5:46:ff:cd:ab:d0:26:47:ef: a5:25:14:a7:d2:50:b3:98:8e:95:12:cc:7f:4e:60:8d:d0:c7: 7d:d5:3f:08:3b:d7:5a:2e:87:87:ab:08:e4:78:32:af:58:7d: 84:51:20:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjQwNTE4MTYwNTEyWhcNMjQwNTI1MTYwNTEyWjAYMRYwFAYD VQQDEw02NjQ4ZDFiOC1iMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RTO5C3n+kDQ4sK/blxiricE7Le8uAb+SSGMw5emDmc3Em8WW04D7M1gNU4+ G/+FqWtiF9qCzEeJtXkm0vz6uUFMLpYtbOKOLX/XDHO66HzAd7imxuhw7WcfDZ8T FrVezzRPfnnBT2GW8a5V7yXL5WIELOqo6jHq5JRYmVTjhHSZ+FcOrqXb3nSmilpI rZ0rOfq7YbEB1b9NQHAP/WWJ/wpKf3LcLi0+qBJSloR+rRwRYbl3yphFu5CedPJx 0pozpFT6OFWT5IDQ43YzOFy24GjIbCJjBXEG7bUGSxON9KOTN1P9kB58MCrTZdu3 hw//6k4G2HuG3rYL6vu9wFGh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoEngT4 EmakNEiHI+fq1H//9Wz7MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALY5gXsaRzb6aroOn4kTXfJ/5T8wCIfnRFIo4AUDvm5FavQfE7iu8N 6yWGWk2JLwp+jAuXn3HVRhzw8S11MxXmRbDZH31+9sckfPvpTlw4bY2hU108rKNV qYFDt+u6NeQiTEu7NbnYcnzNy7qtTd68G9zYbH/leblDMGcIMiK9YNmRsaWm1gVy RnysMFqR3yii8nOzYdpiBHiV9vyVnk+mCDxhnTv+5FCk0L7/Pja3nv89i4aFa9ew pIdrvZZIHyWkTb/KSwqXiNdqxKRd15nVRv/Nq9AmR++lJRSn0lCzmI6VEsx/TmCN 0Md91T8IO9daLoeHqwjkeDKvWH2EUSBY -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org