$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json) Hash identifier: 0WwZSFV9i/qhv+JqwWvGdsG1DsscjEieDpnl8Y2hjfI= Subject key identifier: 75:68:BA:BF:EC:A8:95:FB:52:44:23:4A:C7:00:B9:2E:C2:B0:68:B9 Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Certificate serial: 11FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft Manifest number: 11F0 Signing time: Sat 18 May 2024 17:43:17 +0000 Manifest this update: Sat 18 May 2024 17:43:17 +0000 Manifest next update: Sat 25 May 2024 17:43:17 +0000 Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: COWuXqG21FA6JGYJvJk0hkdlyK5FdF77uUz+VMgm8gA=) 2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: 9SmWWOaHymnZUSB2T6K0Qc9CExvFs7l1sZE6rcEX2Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4602 (0x11fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Validity Not Before: May 18 17:43:17 2024 GMT Not After : May 25 17:43:17 2024 GMT Subject: CN=6648e8b5-ebff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:4f:34:5b:89:bb:66:aa:70:63:cb:ad:f5: 3c:c1:68:08:34:a2:4d:a9:82:41:e2:72:f0:88:83: 53:59:1d:fc:9a:96:4f:73:cb:64:e0:16:95:43:7e: 0b:28:17:da:ca:bf:6a:da:aa:f7:30:06:54:04:b8: 77:dc:65:02:00:a8:80:52:70:fa:64:05:f6:b2:bb: b7:07:05:be:0c:39:df:94:2e:cc:aa:47:06:57:0e: ac:b2:c7:54:48:fa:ed:e7:92:fb:64:b9:82:0d:c9: 88:16:8c:54:42:d9:76:b0:bb:1c:b3:41:59:86:5c: e9:37:bd:7a:7f:ed:a1:da:52:7f:23:fd:cc:a8:9f: 6b:50:83:9a:e1:16:63:13:83:d8:32:7f:e5:43:03: f7:03:4a:5a:76:46:1a:3f:2c:5e:b5:3c:df:02:55: 80:a6:b5:56:e8:78:76:a0:84:49:bc:bf:1d:45:02: 9d:30:8e:52:2e:ae:0a:42:1d:0c:a5:4f:6d:8c:86: b2:b1:56:e5:ce:02:c4:b5:fc:3e:c8:48:f2:62:c9: d5:2c:4c:46:a1:21:a3:e7:3b:3f:93:6b:bc:70:3e: e0:8c:5e:ac:4f:bf:17:e6:1e:aa:5f:2b:c2:b8:14: fa:9a:90:95:2c:8f:ad:1b:91:fb:0d:6e:53:25:f7: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:68:BA:BF:EC:A8:95:FB:52:44:23:4A:C7:00:B9:2E:C2:B0:68:B9 X509v3 Authority Key Identifier: keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:6f:5b:60:41:70:0c:92:6e:da:e6:28:51:d0:af:74:db: 8b:3e:bb:1b:1c:45:5d:7d:5c:ef:d8:6a:b3:dc:cf:ef:8a:75: 91:00:2c:1e:4b:a9:03:ce:cc:aa:3b:6a:bc:31:9d:e1:f0:f5: 42:d5:1a:a0:95:cf:30:d9:b7:19:84:96:5d:84:82:c8:49:89: 9f:40:f1:c0:a1:be:2f:29:5d:60:e2:0c:72:64:ad:91:ac:53: 09:50:7d:cf:a5:4e:56:7f:33:cb:13:5a:b4:32:12:5b:4e:30: 03:45:ac:32:ac:60:92:4e:fb:0c:c4:7f:6b:e2:2c:37:9c:e0: 4e:36:4c:08:d6:71:f2:bf:43:09:25:6b:d1:93:0f:33:51:c0: c1:8d:cf:ed:83:df:f3:3e:a9:bc:54:fd:76:7b:bd:36:d8:c3: 7b:a7:76:8c:91:82:1a:05:7f:1b:2f:f8:9b:b9:3f:f4:54:e7: b9:57:fe:37:7b:44:2c:45:c8:13:c5:f2:29:fc:7e:2a:ee:63: e8:58:a9:b8:ff:33:b4:50:e9:74:95:6f:9a:a3:48:32:52:bf: 36:17:75:2d:6c:b6:9b:be:46:8d:1c:d1:1a:ca:19:ab:7c:93: 03:5c:23:2e:e2:cd:2e:fa:fb:6c:79:45:05:32:15:8f:ad:99: 99:e1:31:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy QUI4NUJFOTQwHhcNMjQwNTE4MTc0MzE3WhcNMjQwNTI1MTc0MzE3WjAYMRYwFAYD VQQDEw02NjQ4ZThiNS1lYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXZPNFuJu2aqcGPLrfU8wWgINKJNqYJB4nLwiINTWR38mpZPc8tk4BaVQ34L KBfayr9q2qr3MAZUBLh33GUCAKiAUnD6ZAX2sru3BwW+DDnflC7MqkcGVw6sssdU SPrt55L7ZLmCDcmIFoxUQtl2sLscs0FZhlzpN716f+2h2lJ/I/3MqJ9rUIOa4RZj E4PYMn/lQwP3A0padkYaPyxetTzfAlWAprVW6Hh2oIRJvL8dRQKdMI5SLq4KQh0M pU9tjIaysVblzgLEtfw+yEjyYsnVLExGoSGj5zs/k2u8cD7gjF6sT78X5h6qXyvC uBT6mpCVLI+tG5H7DW5TJfdLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVour/s qJX7UkQjSscAuS7CsGi5MB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBEMS9DQzc4MzBCMEMzMDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6 RHAzd1NjVlBPVmdxdUZ2cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2G9bYEFwDJJu2uYoUdCvdNuLPrsbHEVdfVzv2Gqz3M/vinWRACwe S6kDzsyqO2q8MZ3h8PVC1Rqglc8w2bcZhJZdhILISYmfQPHAob4vKV1g4gxyZK2R rFMJUH3PpU5WfzPLE1q0MhJbTjADRawyrGCSTvsMxH9r4iw3nOBONkwI1nHyv0MJ JWvRkw8zUcDBjc/tg9/zPqm8VP12e7022MN7p3aMkYIaBX8bL/ibuT/0VOe5V/43 e0QsRcgTxfIp/H4q7mPoWKm4/zO0UOl0lW+ao0gyUr82F3UtbLabvkaNHNEayhmr fJMDXCMu4s0u+vtseUUFMhWPrZmZ4TFe -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org