$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: 9v9vHmBGfskVRUpnTZZ3/W2/4zhQ2yh2XCedncdNVZ0= Subject key identifier: 0E:1E:F6:88:67:C1:9D:02:78:09:46:92:E8:39:C6:3A:7D:3C:AD:DD Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 0211 Signing time: Fri 03 May 2024 04:12:47 +0000 Manifest this update: Fri 03 May 2024 04:12:46 +0000 Manifest next update: Fri 10 May 2024 04:12:46 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: grugFsEowzXPJZe7OyBhQHZrBTTb5nIVFQF4AB/kup0=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: fzhJPZHzcnx/s5sxhb3Mx3SjKfYSDKScQz425QaqsvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: May 3 04:12:46 2024 GMT Not After : May 10 04:12:46 2024 GMT Subject: CN=6634643f-fcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:5d:ba:e1:4f:ae:11:4d:ec:b9:87:31:99: fb:d1:a4:3b:55:e8:04:dc:31:ba:5a:64:56:d2:06: 77:be:bb:ce:e1:1d:fa:bc:76:d9:b6:79:26:8a:49: 99:13:34:3e:a8:53:d6:7a:74:aa:00:93:35:38:3b: de:61:ba:f9:08:f8:db:84:0f:d5:28:01:e9:fc:d7: 83:5d:20:43:d9:8e:57:89:97:6a:54:98:db:06:e4: 99:44:1a:3c:38:2a:22:86:29:8c:9a:02:f0:e5:a7: 99:a7:06:7b:77:30:3e:d6:cb:a7:53:2f:c9:b2:35: 71:d1:6e:9f:f1:d0:a0:57:c9:d8:34:8c:45:fd:92: 26:df:e1:a2:b4:0d:a7:dc:1f:a7:cd:1c:49:38:d8: ff:4d:41:a4:b7:df:e5:19:67:03:b6:04:80:a5:18: eb:c6:43:f5:18:78:cf:ce:b9:1b:47:f6:6b:31:55: 4a:52:45:b6:e0:af:c7:6e:fb:a7:d2:bc:83:b4:19: 6e:6f:53:e8:6e:fe:81:13:04:b0:02:b2:7e:70:ef: 25:9b:9e:d7:b6:8c:55:19:cb:5a:08:31:14:bb:16: 9b:b6:6c:8d:13:de:24:e1:a7:f9:2e:b4:2c:f9:fd: 9e:27:a9:71:0e:f7:0c:ae:53:99:c8:ce:f7:03:3f: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:F6:88:67:C1:9D:02:78:09:46:92:E8:39:C6:3A:7D:3C:AD:DD X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:8c:70:77:95:ad:aa:6d:31:fd:59:27:54:68:c7:61:05: 0c:99:d9:8a:4d:7f:f9:84:94:ff:db:12:1b:52:3c:77:8a:74: 36:39:a1:8d:75:c3:13:81:96:38:02:b1:2b:32:01:90:df:1d: 30:22:c5:32:81:bb:28:fe:5e:69:70:6c:94:87:7c:5b:77:44: 87:12:b8:85:ff:77:31:14:14:f5:96:80:ec:aa:63:5c:cc:77: 58:a1:79:dc:e3:49:5b:3e:c8:a7:ad:7e:b0:94:6a:fa:cc:c1: 81:1e:2b:7e:78:47:8e:9f:ec:66:15:20:0f:b9:c6:6e:18:7f: 9d:26:32:6a:cf:9d:25:d2:bf:3b:9f:33:26:a2:3d:ea:31:9e: 17:cc:36:bb:5d:ab:57:4d:88:0b:0d:db:7a:8b:95:e1:a2:19: 2c:29:e2:f9:b6:4f:25:2d:d3:44:df:e6:8e:f3:19:8d:c2:3e: fc:6c:e5:a2:6b:9c:b5:de:58:f5:81:b5:7e:c9:41:aa:05:7f: bf:56:7c:19:0b:26:a8:65:6f:e4:53:b6:90:bb:b9:80:2d:ec: 15:31:aa:b7:ec:09:b1:a8:00:fb:dc:7e:56:de:00:24:97:42: 11:12:35:9d:17:28:96:ce:9c:4d:85:55:7f:12:87:61:84:3c: bf:f3:4e:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjQwNTAzMDQxMjQ2WhcNMjQwNTEwMDQxMjQ2WjAYMRYwFAYD VQQDEw02NjM0NjQzZi1mY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7dduuFPrhFN7LmHMZn70aQ7VegE3DG6WmRW0gZ3vrvO4R36vHbZtnkmikmZ EzQ+qFPWenSqAJM1ODveYbr5CPjbhA/VKAHp/NeDXSBD2Y5XiZdqVJjbBuSZRBo8 OCoihimMmgLw5aeZpwZ7dzA+1sunUy/JsjVx0W6f8dCgV8nYNIxF/ZIm3+GitA2n 3B+nzRxJONj/TUGkt9/lGWcDtgSApRjrxkP1GHjPzrkbR/ZrMVVKUkW24K/Hbvun 0ryDtBlub1Pobv6BEwSwArJ+cO8lm57XtoxVGctaCDEUuxabtmyNE94k4af5LrQs +f2eJ6lxDvcMrlOZyM73Az8UkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4e9ohn wZ0CeAlGkug5xjp9PK3dMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB66oxwd5Wtqm0x/VknVGjHYQUMmdmKTX/5hJT/2xIbUjx3inQ2OaGN dcMTgZY4ArErMgGQ3x0wIsUygbso/l5pcGyUh3xbd0SHEriF/3cxFBT1loDsqmNc zHdYoXnc40lbPsinrX6wlGr6zMGBHit+eEeOn+xmFSAPucZuGH+dJjJqz50l0r87 nzMmoj3qMZ4XzDa7XatXTYgLDdt6i5XhohksKeL5tk8lLdNE3+aO8xmNwj78bOWi a5y13lj1gbV+yUGqBX+/VnwZCyaoZW/kU7aQu7mALewVMaq37AmxqAD73H5W3gAk l0IREjWdFyiWzpxNhVV/EodhhDy/807O -----END CERTIFICATE-----Generated at Fri May 3 06:28:36 2024 by rpki-client on console-fra.rpki-client.org