$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: zBXMlWNwdDCf0mdfRQufiReK+cUtfMrA8qt/WP8tVlA= Subject key identifier: EC:51:87:02:A4:3F:02:AD:17:83:1D:B2:DF:27:B7:7E:41:BE:67:CA Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0C6E Signing time: Sat 18 May 2024 18:54:12 +0000 Manifest this update: Sat 18 May 2024 18:54:12 +0000 Manifest next update: Sat 25 May 2024 18:54:12 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: AbLRsNkfMPVg7ERN1T2+yfRfKUe64ShGSMQGowQpcYw=) 2: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: 2FP7e7gw78ziNTwpgl6+p7JSr0SareWjNhn+aYnzAJs=) 3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: QsGXNJhyly1Cy0cu8F4jtfSmyRJHgjGfwS+cLqakTAo=) 4: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: TDYDydBX1PxrqDWmEJLGeZLYBXFUNq2KeD+oxooLvK4=) 5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: BVKfghQ7tAg6bhpCne7JUjhk+MWk1O2HwLOjb+QyPOc=) 6: 4CD3C8DC14D011EA93366A85C4F9AE02.roa (hash: XB2QXLLzdZtLLUf24MhxFCrf2t9zzRGffOxjlSP+z00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: May 18 18:54:12 2024 GMT Not After : May 25 18:54:12 2024 GMT Subject: CN=6648f954-45ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:75:5f:68:15:e3:81:29:27:52:f2:ca:8a: 1f:9d:d9:0a:9b:c2:0e:f9:c9:69:b5:68:96:f4:2a: a3:3c:bc:ec:9c:5a:14:fe:63:41:50:ac:43:2d:91: aa:aa:35:53:c9:0e:77:07:2f:81:6f:4d:6b:b4:4e: 18:28:60:8a:d2:c4:67:10:d6:94:d4:15:1d:39:f4: cb:b6:26:36:1b:4c:16:c0:db:c0:21:66:8a:88:21: 00:fe:13:e0:af:a0:ad:e9:ac:be:fc:57:a2:c7:ac: 16:f1:43:a4:2d:eb:a5:1b:89:71:3e:65:b3:b4:c5: 73:92:4e:b3:e8:2b:a3:cf:f7:23:8c:b9:02:66:8f: f6:0e:25:d9:ae:94:65:47:91:ba:48:f2:cb:fa:3f: 1b:72:01:39:0f:ab:30:c8:a5:bc:d0:46:6f:58:5e: 5e:5e:0d:91:08:de:a0:a5:de:73:24:f5:91:90:c6: ca:b2:11:bd:43:2f:90:9a:31:c7:67:15:40:26:b9: 92:1c:f0:05:4f:7f:de:41:77:7b:43:85:f7:08:ba: 9b:35:31:2c:4f:d5:f1:ef:3c:c6:9e:3a:79:5c:5a: a4:d3:a1:fe:f0:30:b1:77:1a:37:48:6c:df:a6:40: d7:28:2f:96:07:38:56:1c:a3:1e:aa:1c:3c:0f:b1: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:87:02:A4:3F:02:AD:17:83:1D:B2:DF:27:B7:7E:41:BE:67:CA X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:d8:fb:1c:a2:9f:70:a3:5c:0b:b2:a6:6c:be:d9:15:85: b7:4c:9e:dc:9e:0e:34:49:70:df:89:9a:a0:c2:7a:5d:52:bb: 32:65:ff:ab:3c:4e:ce:17:53:a0:1c:29:64:d5:1e:fb:53:ab: 49:14:46:15:0a:7a:16:65:0b:76:41:6e:bb:a4:47:4d:02:52: 75:4d:73:f6:7e:d1:61:5b:f0:f0:87:52:b3:0c:98:cb:4e:41: 55:2f:b9:69:0e:30:a2:02:4c:48:76:2e:88:38:66:99:8a:a9: 95:86:1e:ab:84:5c:f2:d9:ed:b6:e6:e6:46:df:78:a0:d0:e2: ac:de:d7:9e:89:1b:3c:77:5b:10:49:5f:d3:3c:7a:ab:fe:8e: 72:59:70:89:1f:42:89:1f:0a:49:80:0b:5c:95:eb:cb:e0:15: 9e:c7:9a:4d:d5:0a:84:f7:6c:df:12:3d:92:7f:5d:8a:3a:4c: 22:56:26:30:f8:32:10:52:b8:5b:98:34:f6:e2:e8:9b:2d:42: dd:55:1e:c4:84:7b:bc:06:6a:0c:77:05:f5:26:93:b5:73:df: 12:24:50:d1:36:cc:1e:db:45:2a:1d:58:45:a4:ee:39:c9:dd: a6:e1:b0:c9:5c:88:71:ea:4d:58:46:c1:d8:8e:f9:03:e2:86: 92:e1:75:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjQwNTE4MTg1NDEyWhcNMjQwNTI1MTg1NDEyWjAYMRYwFAYD VQQDEw02NjQ4Zjk1NC00NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTR1X2gV44EpJ1LyyoofndkKm8IO+clptWiW9CqjPLzsnFoU/mNBUKxDLZGq qjVTyQ53By+Bb01rtE4YKGCK0sRnENaU1BUdOfTLtiY2G0wWwNvAIWaKiCEA/hPg r6Ct6ay+/Feix6wW8UOkLeulG4lxPmWztMVzkk6z6Cujz/cjjLkCZo/2DiXZrpRl R5G6SPLL+j8bcgE5D6swyKW80EZvWF5eXg2RCN6gpd5zJPWRkMbKshG9Qy+QmjHH ZxVAJrmSHPAFT3/eQXd7Q4X3CLqbNTEsT9Xx7zzGnjp5XFqk06H+8DCxdxo3SGzf pkDXKC+WBzhWHKMeqhw8D7H4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxRhwKk PwKtF4Mdst8nt35BvmfKMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Stj7HKKfcKNcC7KmbL7ZFYW3TJ7cng40SXDfiZqgwnpdUrsyZf+r PE7OF1OgHClk1R77U6tJFEYVCnoWZQt2QW67pEdNAlJ1TXP2ftFhW/Dwh1KzDJjL TkFVL7lpDjCiAkxIdi6IOGaZiqmVhh6rhFzy2e225uZG33ig0OKs3teeiRs8d1sQ SV/TPHqr/o5yWXCJH0KJHwpJgAtclevL4BWex5pN1QqE92zfEj2Sf12KOkwiViYw +DIQUrhbmDT24uibLULdVR7EhHu8BmoMdwX1JpO1c98SJFDRNswe20UqHVhFpO45 yd2m4bDJXIhx6k1YRsHYjvkD4oaS4XV8 -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org