$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: qhALyzUVPJJe+wBHJqm7YQMjixNQbpHR6VCNN0twMn4= Subject key identifier: CD:61:F8:B7:B9:60:A3:E7:02:6C:9E:12:D5:AC:36:34:B5:EF:9A:E5 Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 05A8 Signing time: Sun 19 May 2024 00:16:50 +0000 Manifest this update: Sun 19 May 2024 00:16:49 +0000 Manifest next update: Sun 26 May 2024 00:16:49 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: fFfWO9VPzrWymRqJwXe0K+BUoDY+KPPCuLBvuOe8lwk=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: fB9P3KH/a3CnkgreCt0I7vz1IwmZUbQHhZFouAVH5UY=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: E1mbrjatcBQGvzNE43uIvU6SHzDKCeDrxFEzCGlzOo4=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: PINEqptHm0CJeX7CW8cAbNAbERK5tklVb8QL+cmfYFg=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: 1bWzJRcM1ZYHgmkOH7WcubfHf6+XQ+/NzwqHg0XnnvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: May 19 00:16:49 2024 GMT Not After : May 26 00:16:49 2024 GMT Subject: CN=664944f2-440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:a9:32:45:1d:ed:35:a2:92:bd:1d:7b:48: 20:37:f5:44:83:0f:30:52:63:d8:3c:46:e0:92:b0: 94:a2:c9:2e:08:a8:7a:d4:53:c8:b6:a3:30:42:ff: 4c:b0:04:d5:21:a3:f7:0a:02:58:82:32:17:bf:99: f7:dd:d6:5f:44:9b:ff:b0:77:f1:1d:31:4a:7f:99: 25:de:00:dd:12:e2:df:ac:d3:8e:9e:0f:60:49:80: 86:8b:6f:ec:de:e7:b3:ef:70:bb:b9:bb:6f:b5:70: e4:f4:b2:8b:b5:f5:50:a0:57:72:e0:fb:53:d2:93: 9e:b0:e3:4f:e7:25:07:9e:3e:39:5e:78:d8:bf:e1: 37:99:c9:56:c8:0e:2a:94:df:65:77:b3:a6:a7:30: f9:e7:a0:64:49:00:7e:9e:63:68:af:62:cf:2c:a7: ef:66:d9:74:c4:86:22:26:75:da:3b:82:5b:59:d8: e4:d2:b3:8c:a2:73:44:85:46:ae:80:90:9e:c9:ce: 05:8b:40:51:c0:f4:55:97:03:7a:aa:b4:80:df:02: c5:0c:cd:e7:8f:54:0e:ad:c9:07:99:c6:48:b5:19: ea:b4:fc:b7:ce:1e:b0:bf:bb:12:8d:1e:75:b3:33: 68:d5:57:1c:b6:f4:da:c9:04:27:0d:1d:f7:f7:43: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:F8:B7:B9:60:A3:E7:02:6C:9E:12:D5:AC:36:34:B5:EF:9A:E5 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6f:26:83:48:46:fe:af:33:2e:af:51:4c:97:46:48:3e:ce: b0:75:5e:bd:52:01:e0:d8:24:47:1d:25:96:56:c7:72:ae:5b: fb:d5:61:94:ea:bd:da:3f:a0:a8:75:ad:e6:bd:5c:ac:58:64: 30:90:4f:fe:af:d2:43:3c:40:af:96:81:5e:c4:d1:e9:f3:ca: 13:09:7b:1c:1c:f3:99:e3:aa:ad:80:7d:ab:96:85:a3:8c:c3: 4f:45:cd:7a:d9:3f:b6:6c:ca:70:fb:a8:6c:6c:a0:47:20:c5: d9:0a:ec:2f:e4:b9:28:1a:9f:e7:ed:eb:30:47:24:cd:64:91: 20:ec:3a:86:fc:6e:2c:05:e9:9a:20:64:c4:72:e3:8c:e8:fd: 98:74:fd:d0:a8:40:11:11:34:3c:28:8e:39:b8:88:f3:54:ea: c5:02:f5:0a:a1:21:b3:a8:16:28:d2:b8:bc:7e:37:e9:ab:9f: 9a:02:07:3f:dd:b6:03:a5:3a:a8:33:81:56:7d:d0:84:e0:ec: 5a:ed:c9:e7:be:f1:9f:df:2a:14:19:c2:d5:5d:43:87:92:c3: 68:56:fc:f6:2c:d5:e0:88:8e:33:de:e4:09:90:7a:3c:86:40: 9d:62:03:69:57:9e:07:71:51:7a:b4:f3:80:ed:b9:47:89:c1: 9d:ad:bd:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjQwNTE5MDAxNjQ5WhcNMjQwNTI2MDAxNjQ5WjAYMRYwFAYD VQQDEw02NjQ5NDRmMi00NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKSpMkUd7TWikr0de0ggN/VEgw8wUmPYPEbgkrCUoskuCKh61FPItqMwQv9M sATVIaP3CgJYgjIXv5n33dZfRJv/sHfxHTFKf5kl3gDdEuLfrNOOng9gSYCGi2/s 3uez73C7ubtvtXDk9LKLtfVQoFdy4PtT0pOesONP5yUHnj45XnjYv+E3mclWyA4q lN9ld7OmpzD556BkSQB+nmNor2LPLKfvZtl0xIYiJnXaO4JbWdjk0rOMonNEhUau gJCeyc4Fi0BRwPRVlwN6qrSA3wLFDM3nj1QOrckHmcZItRnqtPy3zh6wv7sSjR51 szNo1VcctvTayQQnDR3390NBlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1h+Le5 YKPnAmyeEtWsNjS175rlMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebyaDSEb+rzMur1FMl0ZIPs6wdV69UgHg2CRHHSWWVsdyrlv71WGU 6r3aP6Coda3mvVysWGQwkE/+r9JDPECvloFexNHp88oTCXscHPOZ46qtgH2rloWj jMNPRc162T+2bMpw+6hsbKBHIMXZCuwv5LkoGp/n7eswRyTNZJEg7DqG/G4sBema IGTEcuOM6P2YdP3QqEARETQ8KI45uIjzVOrFAvUKoSGzqBYo0ri8fjfpq5+aAgc/ 3bYDpTqoM4FWfdCE4Oxa7cnnvvGf3yoUGcLVXUOHksNoVvz2LNXgiI4z3uQJkHo8 hkCdYgNpV54HcVF6tPOA7blHicGdrb0z -----END CERTIFICATE-----Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org