$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: B6yA6jRHVdDgZNbfQ8k2rav3xl7K4dDsWWPLdj0FcXU= Subject key identifier: 95:B5:E8:28:64:34:5B:52:EE:FE:CB:36:95:28:3E:47:55:0C:E4:A2 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0B67 Signing time: Sat 18 May 2024 19:37:58 +0000 Manifest this update: Sat 18 May 2024 19:37:58 +0000 Manifest next update: Sat 25 May 2024 19:37:58 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: WaKEw7K66dpJuYZNSSwFMZmc47bDhMJMFGo91hcnyCM=) 2: F597C6BA0C3A11EA8BA9C679C4F9AE02.roa (hash: rfol5thVSN8O2J/3tTWlKpV9hoaEaKM2MfBNtBGO29w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: May 18 19:37:58 2024 GMT Not After : May 25 19:37:58 2024 GMT Subject: CN=66490396-ee7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:55:7e:37:b7:5b:06:8b:fc:47:9e:e9:2e: 06:57:ac:6b:4e:59:89:18:1e:e2:a1:6f:0e:11:bd: 02:00:a2:6a:56:6d:42:15:33:df:07:76:52:4a:5e: d0:48:f0:78:6e:0e:80:f3:b9:21:62:ec:2d:6e:2c: aa:3a:0f:cf:6d:6d:e9:ab:9a:58:f2:21:5a:64:08: f4:91:9d:51:7e:4c:85:b8:7d:31:b0:33:ae:7b:19: d8:07:da:d8:37:31:f8:99:e3:f2:18:e7:24:b8:0a: e8:db:89:08:1b:d3:29:a9:06:39:1f:40:f7:a1:9c: 76:85:79:e4:6a:7e:c3:7d:6a:3a:7f:8e:9c:56:16: 83:ce:85:65:9d:ec:4f:54:3d:68:a5:44:02:27:99: 68:6b:55:b5:99:36:1f:17:4f:5e:6a:2c:56:3e:9e: 52:08:be:ae:f9:c3:56:be:a1:a0:43:d7:a5:ee:e7: 01:16:71:82:6c:f8:92:21:db:7e:22:04:bc:a7:6b: be:53:42:fd:a1:5b:a8:3f:15:62:56:4b:a4:ac:b8: d5:6c:82:b9:39:f8:00:44:5e:08:e3:dd:08:b1:68: c3:34:27:50:17:51:96:cc:63:9c:63:d4:a7:db:8d: 45:c4:6b:ce:5d:c1:43:7c:4a:d0:f4:09:12:b5:6b: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B5:E8:28:64:34:5B:52:EE:FE:CB:36:95:28:3E:47:55:0C:E4:A2 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:9f:a5:3e:f3:e6:c9:c0:60:12:5b:48:c0:1a:01:97:41:9b: 0c:78:32:16:37:27:b1:90:14:e7:d7:3e:e2:07:a4:74:58:7a: aa:01:aa:54:94:f0:f4:40:3d:12:68:f1:7d:86:ec:8f:e9:46: 0f:cf:3e:ae:50:d9:c6:cb:4d:14:a4:00:ca:81:0b:a9:46:87: ce:5e:dd:bd:3f:7f:f7:27:14:14:d2:af:22:4f:7c:d6:77:11: 53:d8:51:74:fc:6e:51:48:57:2f:ca:82:b5:e7:68:9a:f7:67: b7:78:cc:b6:e2:e1:ff:d2:b7:10:51:10:ac:be:20:c0:cb:b2: 64:ad:0d:ee:6b:b3:d8:2f:03:ab:26:40:a8:6e:4f:af:57:69: 4d:bb:6f:46:4c:87:c1:a1:58:c1:82:49:84:4a:11:83:e5:c3: 4e:e0:f3:28:53:91:f7:15:d8:cf:3b:db:3a:1c:b5:3f:a6:cc: 1a:8e:fa:b7:47:aa:2e:8b:03:f4:46:28:10:67:f9:9f:5e:6f: 36:9d:bb:72:4b:34:96:96:9c:34:2d:2a:98:12:2e:db:f3:66: 84:98:ba:9d:bf:0e:ae:51:72:25:1f:e8:94:f4:1d:3a:ee:8f: 33:5a:c7:87:43:1f:46:1c:20:47:80:3b:51:97:22:6e:4d:4a: 17:c2:f7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjQwNTE4MTkzNzU4WhcNMjQwNTI1MTkzNzU4WjAYMRYwFAYD VQQDEw02NjQ5MDM5Ni1lZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nNVfje3WwaL/Eee6S4GV6xrTlmJGB7ioW8OEb0CAKJqVm1CFTPfB3ZSSl7Q SPB4bg6A87khYuwtbiyqOg/PbW3pq5pY8iFaZAj0kZ1RfkyFuH0xsDOuexnYB9rY NzH4mePyGOckuAro24kIG9MpqQY5H0D3oZx2hXnkan7DfWo6f46cVhaDzoVlnexP VD1opUQCJ5loa1W1mTYfF09eaixWPp5SCL6u+cNWvqGgQ9el7ucBFnGCbPiSIdt+ IgS8p2u+U0L9oVuoPxViVkukrLjVbIK5OfgARF4I490IsWjDNCdQF1GWzGOcY9Sn 241FxGvOXcFDfErQ9AkStWsrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW16Chk NFtS7v7LNpUoPkdVDOSiMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3n6U+8+bJwGASW0jAGgGXQZsMeDIWNyexkBTn1z7iB6R0WHqqAapU lPD0QD0SaPF9huyP6UYPzz6uUNnGy00UpADKgQupRofOXt29P3/3JxQU0q8iT3zW dxFT2FF0/G5RSFcvyoK152ia92e3eMy24uH/0rcQURCsviDAy7JkrQ3ua7PYLwOr JkCobk+vV2lNu29GTIfBoVjBgkmEShGD5cNO4PMoU5H3FdjPO9s6HLU/pswajvq3 R6ouiwP0RigQZ/mfXm82nbtySzSWlpw0LSqYEi7b82aEmLqdvw6uUXIlH+iU9B06 7o8zWseHQx9GHCBHgDtRlyJuTUoXwvdZ -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org