$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: mh6MOrHdSVyAPP8N3YF6gOtf2NyPtsAaKCs3v/rJ3Ns= Subject key identifier: 25:F1:08:A8:25:20:66:D5:E0:AE:73:C6:46:11:FC:38:70:91:A1:53 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 6E Signing time: Wed 29 May 2024 08:10:24 +0000 Manifest this update: Wed 29 May 2024 08:10:24 +0000 Manifest next update: Wed 05 Jun 2024 08:10:24 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: S1BQZDPEicDXqGmMB8dirqkiNIrUihLOc127rke/VPk=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: 0DcvxeyxeEvQN1X0ZwP9nl6328Dax3gab5pso/T3blw=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLiPmscsIFEzMDanx/2uks9ZaF4WqbF/SVD9lFpwzi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: May 29 08:10:24 2024 GMT Not After : Jun 5 08:10:24 2024 GMT Subject: CN=6656e2f0-f0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:3f:6b:4b:1e:d7:46:7a:ee:af:13:00:cd: f1:31:0c:e1:ac:b4:70:75:55:3f:a3:ec:1a:1e:15: 36:e8:4d:9a:46:66:35:f4:0e:6c:b5:ff:1c:09:69: 18:d9:1f:24:12:e6:87:96:9b:ac:9e:cf:58:6d:67: 88:27:d2:c8:2c:90:ad:5d:5d:62:5d:8a:33:18:eb: f1:a2:04:a5:20:57:7b:e3:68:64:b9:85:37:23:b9: 11:5c:50:07:c6:1d:86:79:e8:06:6b:49:92:58:6d: e7:4d:05:e4:0f:47:c0:d3:80:3c:ea:3e:9f:30:8d: d5:a8:0f:63:e3:73:7e:54:51:70:e8:55:bd:07:c7: 43:8f:c5:e1:d6:14:52:3a:24:e8:f7:5b:f4:7b:d3: 9b:ca:9b:d3:3c:d7:22:5a:de:4e:d2:95:82:77:a0: d7:c7:ce:10:16:91:02:94:b1:09:1c:7f:09:a0:8a: c2:1f:ca:44:11:db:20:30:7f:3f:e5:1d:a2:8a:76: e9:a9:e1:c3:12:eb:c9:2a:bb:17:79:ae:69:6f:5b: 20:e9:81:83:9f:4d:0b:78:99:06:7a:4d:6d:37:92: 73:52:05:72:18:63:33:67:eb:38:98:7f:38:f0:71: 06:c4:3b:d3:37:59:ab:ac:8b:f0:d2:ba:1b:96:c4: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F1:08:A8:25:20:66:D5:E0:AE:73:C6:46:11:FC:38:70:91:A1:53 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:37:68:bd:6b:04:5a:3b:c6:82:18:4b:86:a4:7f:4f:62:ca: ed:be:cd:5f:73:b5:7c:f6:db:e3:79:78:cc:04:c2:79:bc:60: 52:4c:a9:f6:2b:94:95:c6:c5:45:75:43:c6:89:de:c2:29:84: 74:27:01:aa:21:bc:09:68:b9:42:eb:5b:a8:41:bf:7f:d9:01: b2:08:2b:71:3d:39:6c:aa:0a:37:83:8d:8d:26:3e:4f:34:57: aa:93:93:e2:dd:39:77:9a:6d:31:c4:82:ee:42:d6:f2:c0:aa: 47:b4:59:61:9f:9a:7f:60:fc:f9:e5:d5:63:57:93:7f:19:b5: 48:17:13:d2:f0:8f:f7:67:16:56:53:0c:71:0d:21:ec:a5:c6: c3:b1:cb:b5:35:ab:10:34:7c:d4:3c:c1:5a:f9:47:be:59:41: 25:ff:63:69:11:77:7d:dc:52:bf:4d:d0:f9:09:8d:23:7f:36: 5c:3d:fa:fd:89:47:e0:b3:4a:5e:7c:f3:fd:35:ad:f0:00:14: bf:06:a4:a0:5c:20:91:6e:fb:1a:41:b7:3a:a2:0a:b0:fc:d9: f0:24:d5:87:3d:ee:b5:32:4a:e2:1b:e6:3b:d0:38:68:8e:7a: 4b:95:36:99:c4:a2:6f:9e:36:73:24:ba:23:ca:5c:4b:d4:c2: 43:ca:7a:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTYyQjExMC8GA1UEBRMoRjAxNDg2MDE3MkQ0RkI4Qjc5MDIyRkJENTlGMkVDQTBC RTc2NDhGMTAeFw0yNDA1MjkwODEwMjRaFw0yNDA2MDUwODEwMjRaMBgxFjAUBgNV BAMTDTY2NTZlMmYwLWYwZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSsz9rSx7XRnrurxMAzfExDOGstHB1VT+j7BoeFTboTZpGZjX0Dmy1/xwJaRjZ HyQS5oeWm6yez1htZ4gn0sgskK1dXWJdijMY6/GiBKUgV3vjaGS5hTcjuRFcUAfG HYZ56AZrSZJYbedNBeQPR8DTgDzqPp8wjdWoD2Pjc35UUXDoVb0Hx0OPxeHWFFI6 JOj3W/R705vKm9M81yJa3k7SlYJ3oNfHzhAWkQKUsQkcfwmgisIfykQR2yAwfz/l HaKKdump4cMS68kquxd5rmlvWyDpgYOfTQt4mQZ6TW03knNSBXIYYzNn6ziYfzjw cQbEO9M3Wausi/DSuhuWxEhTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJfEIqCUg ZtXgrnPGRhH8OHCRoVMwHwYDVR0jBBgwFoAU8BSGAXLU+4t5Ai+9WfLsoL52SPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NjJCLzNGMEY1Q0VDNzc5 QzExRUU4MjIxMzk2N0M0RjlBRTAyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEJTR0FYTFUtNHQ1QWktOVdmTHNvTDUyU1BFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NjJCLzNGMEY1Q0VDNzc5QzExRUU4MjIxMzk2N0M0RjlBRTAyLzhCU0dBWExVLTR0 NUFpLTlXZkxzb0w1MlNQRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAU3aL1rBFo7xoIYS4akf09iyu2+zV9ztXz22+N5eMwEwnm8YFJMqfYr lJXGxUV1Q8aJ3sIphHQnAaohvAlouULrW6hBv3/ZAbIIK3E9OWyqCjeDjY0mPk80 V6qTk+LdOXeabTHEgu5C1vLAqke0WWGfmn9g/Pnl1WNXk38ZtUgXE9Lwj/dnFlZT DHENIeylxsOxy7U1qxA0fNQ8wVr5R75ZQSX/Y2kRd33cUr9N0PkJjSN/Nlw9+v2J R+CzSl588/01rfAAFL8GpKBcIJFu+xpBtzqiCrD82fAk1Yc97rUySuIb5jvQOGiO ekuVNpnEom+eNnMkuiPKXEvUwkPKeoA= -----END CERTIFICATE-----Generated at Wed May 29 09:16:49 2024 by rpki-client on console-fra.rpki-client.org