$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: PWPFeLm/Iav2TSbWOuHAnM2BA0oivjecZuQrtlwZv0A= Subject key identifier: 75:75:A1:09:CC:3B:42:65:9A:E6:7E:EB:B8:47:97:7E:49:1D:4A:E9 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 0180 Signing time: Sun 19 May 2024 04:45:00 +0000 Manifest this update: Sun 19 May 2024 04:44:59 +0000 Manifest next update: Sun 26 May 2024 04:44:59 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: HgQm08AMqRD/3g8KwpIqjUEHr6iJ4aCoVR9JNuc9H6w=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: fvux1k7GikvVMbvsyR+ZqxhQBbFbbVFEy4QXKcI06RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: May 19 04:44:59 2024 GMT Not After : May 26 04:44:59 2024 GMT Subject: CN=664983cb-a8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:12:19:23:88:45:14:5f:a1:97:17:3b:b4: 60:83:f9:f3:30:c1:47:90:18:58:7f:74:bb:eb:43: 9a:02:24:da:39:cb:5a:6f:14:29:34:52:e1:fb:30: 93:05:a9:3e:c7:d4:19:f5:15:ba:3b:27:47:25:c1: 59:91:09:b3:77:87:aa:86:9a:5e:6f:50:91:04:67: 6e:67:87:cd:9b:dd:a2:ae:88:a5:2c:8c:e8:56:a4: 55:6d:9f:ca:3f:74:6b:18:c1:ed:15:20:14:c8:6c: bf:fb:23:2c:4d:3a:f3:70:5c:38:5b:96:48:0d:29: a5:90:a8:64:b9:0e:77:05:9e:f9:4c:6e:be:98:dd: 56:15:81:dd:2a:09:19:05:2d:4e:ab:7f:68:05:72: d3:b6:41:03:43:78:8e:23:66:e0:82:0f:72:e2:c0: b3:c8:5a:89:75:4e:7a:0a:a0:d5:ab:7b:45:61:fa: 21:49:2a:0b:9b:31:e6:5f:71:51:05:8c:cc:79:f1: 7e:04:7d:96:d5:e7:fe:38:11:cd:35:cd:ab:07:79: 8a:ab:86:74:d0:5d:cb:62:d2:95:e2:6b:9c:63:59: dd:54:49:b8:4c:0d:eb:25:a8:8e:b3:5f:2c:1a:e2: 0d:33:53:67:45:7d:01:68:56:4b:e1:cf:15:27:e1: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:75:A1:09:CC:3B:42:65:9A:E6:7E:EB:B8:47:97:7E:49:1D:4A:E9 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:f1:e5:1e:1a:01:07:27:46:06:9f:a9:f0:c4:81:e7:da: 9c:d5:c1:4d:76:77:1b:a0:36:c0:dc:a3:3c:f7:84:94:10:4a: 69:dd:be:57:77:bf:71:c9:be:39:75:e8:2b:6b:7c:a0:c4:13: 8d:4b:2b:2e:92:dc:a4:0b:d3:d7:90:28:bf:b3:ca:72:6a:b5: 1d:c3:6e:69:8b:d1:1b:13:70:d9:03:84:c8:01:98:e0:31:e2: 16:cb:e6:1b:2c:2b:60:68:ff:b8:c5:4d:77:72:3c:ba:c1:20: c3:c3:67:6c:1e:bb:c8:a4:15:09:fe:16:bb:79:fe:35:b4:fb: 3f:42:7c:07:c1:eb:62:52:9a:59:92:b3:9b:23:8f:9e:18:c0: 3e:e1:08:0d:c1:2a:b1:09:2b:e4:e5:ee:57:5b:98:06:8b:48: 57:74:39:86:a8:53:a3:2a:93:4d:84:ef:1b:98:b5:ab:41:d6: df:23:1e:b7:e7:df:e2:d6:64:d4:2f:d6:86:3c:1a:2d:64:da: d9:c3:7d:89:6f:2c:1b:4a:83:e9:43:5e:38:d3:a5:b8:d6:ee: 2b:8b:79:21:9a:5f:7f:2e:75:c0:f2:61:01:df:65:d6:71:99: 2c:03:a9:04:90:b0:e0:96:80:1e:e2:59:94:5f:5f:dc:05:c6: ab:d2:0d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjQwNTE5MDQ0NDU5WhcNMjQwNTI2MDQ0NDU5WjAYMRYwFAYD VQQDEw02NjQ5ODNjYi1hOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c8SGSOIRRRfoZcXO7Rgg/nzMMFHkBhYf3S760OaAiTaOctabxQpNFLh+zCT Bak+x9QZ9RW6OydHJcFZkQmzd4eqhppeb1CRBGduZ4fNm92iroilLIzoVqRVbZ/K P3RrGMHtFSAUyGy/+yMsTTrzcFw4W5ZIDSmlkKhkuQ53BZ75TG6+mN1WFYHdKgkZ BS1Oq39oBXLTtkEDQ3iOI2bggg9y4sCzyFqJdU56CqDVq3tFYfohSSoLmzHmX3FR BYzMefF+BH2W1ef+OBHNNc2rB3mKq4Z00F3LYtKV4mucY1ndVEm4TA3rJaiOs18s GuINM1NnRX0BaFZL4c8VJ+F6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV1oQnM O0JlmuZ+67hHl35JHUrpMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOG/HlHhoBBydGBp+p8MSB59qc1cFNdncboDbA3KM894SUEEpp3b5X d79xyb45degra3ygxBONSysuktykC9PXkCi/s8pyarUdw25pi9EbE3DZA4TIAZjg MeIWy+YbLCtgaP+4xU13cjy6wSDDw2dsHrvIpBUJ/ha7ef41tPs/QnwHwetiUppZ krObI4+eGMA+4QgNwSqxCSvk5e5XW5gGi0hXdDmGqFOjKpNNhO8bmLWrQdbfIx63 59/i1mTUL9aGPBotZNrZw32JbywbSoPpQ14406W41u4ri3khml9/LnXA8mEB32XW cZksA6kEkLDgloAe4lmUX1/cBcar0g2K -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org