$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: VU6m+CIww95qHM9/3UiX7O9rqob/I2fzIw5nbwX0wYU= Subject key identifier: AE:13:C9:67:9C:4A:1E:61:8F:64:D4:1C:27:7E:20:D8:55:1A:EF:E0 Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 05E2 Signing time: Sat 18 May 2024 23:31:15 +0000 Manifest this update: Sat 18 May 2024 23:31:15 +0000 Manifest next update: Sat 25 May 2024 23:31:15 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: rt7yBZsv8i1OsIy8oClegq1Q2eP7YKfVQH5gXY3H8u8=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: sCPCAo6oOyI04KFQDiQhCrcCuUDUQK3vYg13iEMSJ6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: May 18 23:31:15 2024 GMT Not After : May 25 23:31:15 2024 GMT Subject: CN=66493a43-bec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:b0:74:62:1b:18:52:56:80:8f:db:93:1e: d1:cc:ea:9e:4d:6b:ed:37:7e:7a:66:b5:73:c0:16: e7:5f:ba:63:c3:4e:5c:9e:3a:9a:90:1e:ef:d4:fa: 05:ca:47:c7:cb:e6:68:e8:c6:de:cd:4d:f7:a7:c4: 5c:e6:16:b5:04:14:b9:37:2a:4a:28:e4:9f:0d:aa: cf:d3:10:5b:3c:31:29:18:13:43:91:8c:08:8b:7f: 6e:52:22:f2:71:ad:a8:07:42:9b:78:5f:b7:4e:bc: 4b:6d:eb:5f:68:6f:0f:6a:a4:a9:10:10:4f:83:4d: 05:89:4c:f7:d8:51:d6:b4:f1:b7:fe:2e:e7:6d:fb: 64:0b:b4:f3:54:71:f3:4d:a9:0d:29:b8:de:b5:46: 69:c6:ac:b4:65:55:11:52:1d:5b:d0:01:ca:d6:ed: 4c:fa:17:35:5c:59:d6:86:a8:3d:e0:1d:7e:65:a5: d2:18:78:f6:cf:df:3e:7d:00:0d:50:ea:97:cc:04: 4f:d2:45:74:84:de:63:e4:1d:4b:a7:b5:40:27:38: 19:17:32:82:0c:7a:33:71:e9:cb:b1:0c:7f:a7:d4: 32:df:f9:48:b5:b8:f4:88:b7:18:c0:26:52:16:0a: bf:af:3c:e0:6c:c1:53:20:5e:56:03:71:0f:fd:3b: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:C9:67:9C:4A:1E:61:8F:64:D4:1C:27:7E:20:D8:55:1A:EF:E0 X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:5b:1c:e2:a6:c0:d9:f4:f2:87:bc:f0:ee:a5:4c:5a:16: 33:24:85:51:32:ac:14:6f:56:15:d5:6c:f2:7b:4d:76:01:0e: d1:00:46:4a:ed:d2:9d:01:bb:70:17:b4:46:ca:29:85:8f:4b: 7d:55:6d:9a:71:e5:3f:82:1c:ca:59:fb:46:1f:f2:7d:c4:08: d2:6b:fe:30:29:74:1c:88:c7:c2:de:6a:84:a6:e5:c8:75:46: 74:ee:d5:17:86:94:9e:63:a4:e7:88:fb:f9:e2:1f:4c:49:95: cb:a7:5a:1f:93:46:0e:6d:c0:55:1c:6e:ab:8d:4f:36:17:4c: 2f:bf:ac:53:64:c8:86:6b:9d:72:86:a5:a2:ef:d2:85:f9:db: 6c:fe:50:c5:06:5f:1c:be:7e:c4:8f:07:cd:6c:35:32:1a:0d: 30:60:b8:78:06:22:e1:67:14:9f:34:53:13:dc:3e:78:e4:73: 4b:0d:62:47:8d:4a:f6:4e:1c:31:0f:09:ca:9a:76:9a:88:c2: b6:30:0f:a7:a2:c8:6d:6c:82:ad:be:cb:74:8d:55:ff:d1:8b: 35:42:ef:90:5c:67:53:f7:01:64:34:93:08:35:6b:8d:cd:79: 48:97:c4:ee:0a:4c:95:d6:45:87:54:c9:49:3c:ea:73:6a:8b: 6a:88:33:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjQwNTE4MjMzMTE1WhcNMjQwNTI1MjMzMTE1WjAYMRYwFAYD VQQDEw02NjQ5M2E0My1iZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgqwdGIbGFJWgI/bkx7RzOqeTWvtN356ZrVzwBbnX7pjw05cnjqakB7v1PoF ykfHy+Zo6MbezU33p8Rc5ha1BBS5NypKKOSfDarP0xBbPDEpGBNDkYwIi39uUiLy ca2oB0KbeF+3TrxLbetfaG8PaqSpEBBPg00FiUz32FHWtPG3/i7nbftkC7TzVHHz TakNKbjetUZpxqy0ZVURUh1b0AHK1u1M+hc1XFnWhqg94B1+ZaXSGHj2z98+fQAN UOqXzARP0kV0hN5j5B1Lp7VAJzgZFzKCDHozcenLsQx/p9Qy3/lItbj0iLcYwCZS Fgq/rzzgbMFTIF5WA3EP/TtU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4TyWec Sh5hj2TUHCd+INhVGu/gMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSclsc4qbA2fTyh7zw7qVMWhYzJIVRMqwUb1YV1Wzye012AQ7RAEZK 7dKdAbtwF7RGyimFj0t9VW2aceU/ghzKWftGH/J9xAjSa/4wKXQciMfC3mqEpuXI dUZ07tUXhpSeY6TniPv54h9MSZXLp1ofk0YObcBVHG6rjU82F0wvv6xTZMiGa51y hqWi79KF+dts/lDFBl8cvn7EjwfNbDUyGg0wYLh4BiLhZxSfNFMT3D545HNLDWJH jUr2ThwxDwnKmnaaiMK2MA+noshtbIKtvst0jVX/0Ys1Qu+QXGdT9wFkNJMINWuN zXlIl8TuCkyV1kWHVMlJPOpzaotqiDOd -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org