$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: vJULdFEzJ6IBwGukWtjePhMajKK9MWloUR3jRz0Qe3s= Subject key identifier: 70:E0:3F:6D:16:41:55:D9:11:F2:2F:6E:16:75:05:A7:4D:7C:F5:C9 Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 0589 Signing time: Sat 18 May 2024 21:40:57 +0000 Manifest this update: Sat 18 May 2024 21:40:56 +0000 Manifest next update: Sat 25 May 2024 21:40:56 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: uX7m3PP3HKsaXermH+58/4PHOsfdmG7wOzNFUczHEG8=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: I+yy1tPGMA7mtXZ55UApqq0lWMqIkOxtH72LUG+NGYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: May 18 21:40:56 2024 GMT Not After : May 25 21:40:56 2024 GMT Subject: CN=66492068-65ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:e2:2b:78:44:94:71:18:d9:c1:5f:89:e7: e5:b3:9a:cc:0a:9b:3d:20:40:be:ad:bd:0a:9b:74: 50:6c:24:6b:9a:7d:40:8c:7d:f4:eb:a0:aa:36:81: 94:4b:be:bf:8e:00:66:1f:e6:12:77:e1:0d:1c:8c: 39:34:fc:30:c0:33:21:9d:f8:a8:34:f2:19:63:75: 80:b0:cc:35:6a:4e:73:b7:2a:37:b2:4c:ca:5c:38: 27:01:ee:81:40:76:4a:18:b3:82:16:fb:9f:d0:ee: f4:fa:39:c2:be:fb:2d:15:3a:f1:2b:56:3f:94:72: f7:8a:f2:44:e7:31:85:da:1f:d5:be:fb:be:a4:27: 63:2e:13:b6:58:20:9a:d8:ec:e6:ec:d5:02:c9:54: 10:26:17:47:7b:b5:a4:f4:6e:9e:e6:80:eb:2e:ca: b8:4d:e5:33:b5:e6:ec:ae:9c:83:08:bd:f0:25:7e: f2:6e:78:4f:83:f7:6b:63:81:4d:ae:33:2e:ba:76: cc:bb:72:3c:5e:3a:10:fe:e4:e7:fb:d0:15:b8:90: 36:24:bd:0f:cc:97:22:18:8c:95:18:06:49:70:4d: 5d:fc:75:7e:6a:a7:7c:ab:d5:7e:99:7c:57:e6:66: 4c:b0:b3:6e:33:6c:c1:ef:e8:9d:12:86:2f:d5:a3: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:3F:6D:16:41:55:D9:11:F2:2F:6E:16:75:05:A7:4D:7C:F5:C9 X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:39:21:2d:d2:b6:0d:55:4a:84:8f:9f:57:2b:99:24:b9:83: 71:dc:eb:b8:c2:43:3b:a3:5e:59:b8:73:4c:c0:47:55:8e:fa: 15:3e:1f:e4:f8:e4:e2:72:18:31:26:a6:4f:f3:6b:e1:77:e6: 85:db:28:34:f1:4e:27:6f:39:5e:4f:0b:f8:d4:f6:d6:21:56: 79:48:83:c9:64:9e:6b:c4:9b:ed:f3:c6:ce:54:69:17:9f:6e: 74:d6:a5:f0:bd:32:08:5b:5a:c0:a8:20:7f:da:2d:68:66:2d: fd:f8:cb:d6:ba:d8:d7:2b:55:20:1f:86:23:cd:d3:90:28:b2: 8d:86:39:31:8e:68:5a:b2:3d:9c:36:00:80:a0:43:71:e1:88: d8:b1:0c:57:81:28:d4:1a:2d:1d:98:39:2b:18:f1:3e:4b:77: f1:d6:5c:0d:3b:7f:8d:fd:29:e8:44:77:3c:7b:9d:a1:0c:4f: a2:75:51:78:c8:20:fe:74:f2:c3:9a:9c:24:fd:4d:0d:d4:17: 03:25:36:3c:60:33:56:1b:3c:f4:fb:68:f6:76:c0:e4:54:47: 0d:8a:3d:78:6f:44:75:9f:f4:86:b1:a2:33:e1:b3:dc:97:a7: 3d:67:7a:cf:12:3e:92:65:0a:29:88:bd:b9:68:92:68:57:d4: 2e:f8:cf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjQwNTE4MjE0MDU2WhcNMjQwNTI1MjE0MDU2WjAYMRYwFAYD VQQDEw02NjQ5MjA2OC02NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBXiK3hElHEY2cFfiefls5rMCps9IEC+rb0Km3RQbCRrmn1AjH3066CqNoGU S76/jgBmH+YSd+ENHIw5NPwwwDMhnfioNPIZY3WAsMw1ak5ztyo3skzKXDgnAe6B QHZKGLOCFvuf0O70+jnCvvstFTrxK1Y/lHL3ivJE5zGF2h/Vvvu+pCdjLhO2WCCa 2Ozm7NUCyVQQJhdHe7Wk9G6e5oDrLsq4TeUztebsrpyDCL3wJX7ybnhPg/drY4FN rjMuunbMu3I8XjoQ/uTn+9AVuJA2JL0PzJciGIyVGAZJcE1d/HV+aqd8q9V+mXxX 5mZMsLNuM2zB7+idEoYv1aMSCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDgP20W QVXZEfIvbhZ1BadNfPXJMB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+OSEt0rYNVUqEj59XK5kkuYNx3Ou4wkM7o15ZuHNMwEdVjvoVPh/k +OTichgxJqZP82vhd+aF2yg08U4nbzleTwv41PbWIVZ5SIPJZJ5rxJvt88bOVGkX n2501qXwvTIIW1rAqCB/2i1oZi39+MvWutjXK1UgH4YjzdOQKLKNhjkxjmhasj2c NgCAoENx4YjYsQxXgSjUGi0dmDkrGPE+S3fx1lwNO3+N/SnoRHc8e52hDE+idVF4 yCD+dPLDmpwk/U0N1BcDJTY8YDNWGzz0+2j2dsDkVEcNij14b0R1n/SGsaIz4bPc l6c9Z3rPEj6SZQopiL25aJJoV9Qu+M9L -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org