$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: l6+qygwQ1hwLm9kkFN3SBMEBVJ2Ztr0qhjVT/PmzQiU= Subject key identifier: 3D:0D:DE:DB:AC:C6:41:78:20:6F:62:D8:65:FA:17:3F:58:F6:F8:8A Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: CD Signing time: Sun 19 May 2024 06:13:17 +0000 Manifest this update: Sun 19 May 2024 06:13:17 +0000 Manifest next update: Sun 26 May 2024 06:13:17 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: vBcFJkPGyMQ3+gHOY+SRmlop/yC+JirSYm8UeNEa8iw=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: t308APOJrn10MPw3DSxFkEvQxuY9WYVLshqW46DmSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: May 19 06:13:17 2024 GMT Not After : May 26 06:13:17 2024 GMT Subject: CN=6649987d-cf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:69:97:a3:0b:ec:f0:f3:59:4c:ea:07:58: 23:ac:aa:ad:cc:ac:55:e0:e3:22:5e:a8:e0:cd:b9: fe:76:b9:60:90:27:08:bf:5a:34:bf:06:c3:4a:07: 95:00:e5:58:bc:c5:aa:07:44:df:f4:2a:79:27:bc: a4:26:c6:b8:f9:e0:91:56:35:cd:31:ca:62:8d:89: 88:fe:64:b2:35:30:7a:ee:11:8d:01:03:7a:d6:5a: 9a:7e:cf:fc:b5:54:49:0e:ed:45:5f:7e:6d:68:18: 11:71:c3:52:24:98:07:0a:f7:65:29:b1:62:4e:47: 9f:34:17:b7:6f:fd:1a:88:3b:c3:30:88:bc:e3:aa: bb:d8:e4:e0:65:ce:7b:87:d0:9c:57:c4:a5:19:00: 2b:dd:d2:83:d8:d2:ee:45:c3:67:94:d5:15:ed:57: 6d:30:50:6d:4a:6e:c3:d5:db:67:27:e3:1f:33:e0: 70:55:54:86:70:3b:4e:b7:82:f2:2c:0c:84:69:74: 46:2f:c9:c5:42:7f:55:d2:ad:46:57:92:ba:e0:80: 05:03:44:97:1b:e3:f1:f8:ba:01:d0:2c:28:e5:e0: 1e:bd:41:d8:6f:5d:6f:a8:97:df:2d:5a:46:b9:4b: 7a:6f:05:91:2f:a0:99:28:bf:45:87:27:37:86:77: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:DE:DB:AC:C6:41:78:20:6F:62:D8:65:FA:17:3F:58:F6:F8:8A X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:a1:18:39:54:03:85:44:d3:ec:d4:b6:95:50:7f:5f:66: fc:b0:e7:99:c1:a8:d1:27:67:6f:ad:09:d2:1d:6e:f1:d6:c7: de:05:02:55:05:ef:1c:c8:79:74:c0:68:d3:47:8d:b7:09:b9: bd:df:a6:c0:7e:65:13:8d:31:82:16:7d:02:f9:36:4c:41:39: ba:e0:e8:45:b5:4f:a3:ab:23:24:c6:b3:53:73:66:25:b5:a5: cf:58:b1:45:69:4a:c7:3f:93:25:21:4d:db:49:20:0f:e6:c2: 2c:16:37:67:24:91:7b:52:5a:5f:63:9a:10:d4:5d:15:f4:ac: b2:64:d7:6a:fd:d0:a3:27:e5:46:3a:9a:7b:59:2f:17:1a:7a: 7f:8f:12:a1:79:30:cc:09:5b:e0:1b:22:f1:45:34:00:75:ac: 37:d5:55:4f:50:8e:97:d7:6e:58:e3:ad:b6:84:a4:e0:7d:20: 0d:7a:de:3a:e6:87:46:41:93:92:de:28:c2:ad:69:66:de:1b: d2:7d:ec:2b:d5:e9:63:b3:ea:ca:fb:08:bf:ee:da:e4:50:99: 67:e6:66:bc:7c:43:cf:e2:2d:b1:45:d1:e5:ce:fd:a2:4d:d7: 7c:f9:1b:d0:ae:d8:f3:7e:5e:d0:c9:92:29:9a:30:aa:50:dc: 98:73:4f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjQwNTE5MDYxMzE3WhcNMjQwNTI2MDYxMzE3WjAYMRYwFAYD VQQDEw02NjQ5OTg3ZC1jZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA74dpl6ML7PDzWUzqB1gjrKqtzKxV4OMiXqjgzbn+drlgkCcIv1o0vwbDSgeV AOVYvMWqB0Tf9Cp5J7ykJsa4+eCRVjXNMcpijYmI/mSyNTB67hGNAQN61lqafs/8 tVRJDu1FX35taBgRccNSJJgHCvdlKbFiTkefNBe3b/0aiDvDMIi846q72OTgZc57 h9CcV8SlGQAr3dKD2NLuRcNnlNUV7VdtMFBtSm7D1dtnJ+MfM+BwVVSGcDtOt4Ly LAyEaXRGL8nFQn9V0q1GV5K64IAFA0SXG+Px+LoB0Cwo5eAevUHYb11vqJffLVpG uUt6bwWRL6CZKL9Fhyc3hndS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0N3tus xkF4IG9i2GX6Fz9Y9viKMB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbiKEYOVQDhUTT7NS2lVB/X2b8sOeZwajRJ2dvrQnSHW7x1sfeBQJV Be8cyHl0wGjTR423Cbm936bAfmUTjTGCFn0C+TZMQTm64OhFtU+jqyMkxrNTc2Yl taXPWLFFaUrHP5MlIU3bSSAP5sIsFjdnJJF7UlpfY5oQ1F0V9KyyZNdq/dCjJ+VG Opp7WS8XGnp/jxKheTDMCVvgGyLxRTQAdaw31VVPUI6X125Y4622hKTgfSANet46 5odGQZOS3ijCrWlm3hvSfewr1eljs+rK+wi/7trkUJln5ma8fEPP4i2xRdHlzv2i Tdd8+RvQrtjzfl7QyZIpmjCqUNyYc08n -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org