$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: yjzNM78JqTDjZffUm+m/EzhNLw8B4ka5WIBo/A1gbYU= Subject key identifier: D7:06:AA:C0:12:A7:0E:8C:0B:5D:92:6C:95:44:02:EE:2A:26:A1:9E Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0152 Signing time: Tue 07 May 2024 04:53:08 +0000 Manifest this update: Tue 07 May 2024 04:53:07 +0000 Manifest next update: Tue 14 May 2024 04:53:07 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: Fq3rVoR9MEI2a087Ds4DgyCZAwksUAQDAcL6o4gt9sA=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: kwPYM3eNEmTBafyjP2u3E0wkgKddG8VQLJvyVo+ylYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: May 7 04:53:07 2024 GMT Not After : May 14 04:53:07 2024 GMT Subject: CN=6639b3b4-24b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:62:17:d8:ff:40:f4:62:45:05:ad:cd:3f: 54:2e:73:df:e0:67:52:ea:9b:9f:78:c4:6e:27:b5: 92:4c:2b:13:95:c0:90:40:dc:e9:29:85:00:28:af: db:c1:c5:cb:24:4a:eb:ab:92:ca:d6:c3:e8:4e:07: 5c:2d:3f:96:08:c8:4f:ee:4b:80:92:1e:90:33:be: 52:b0:77:95:b9:9c:64:39:1a:1a:2a:34:70:ec:30: 99:7d:42:d7:e2:58:fa:03:1d:fb:ed:f8:9f:ae:e2: 68:12:b9:27:ab:0e:77:72:72:60:b8:ee:8c:27:77: ec:4d:49:bd:7d:28:b9:3b:24:b7:f0:cd:0e:20:40: 53:64:db:85:79:03:6f:19:b9:84:e2:48:27:7f:fa: 38:32:1e:f1:d8:7e:35:44:1f:9f:c2:80:a3:17:77: de:d7:28:f1:df:9e:a1:a1:33:86:c9:71:c9:3c:1d: 5a:d9:3e:d5:d9:5c:69:32:5b:b0:0a:4e:78:f0:0f: cc:1b:c3:81:6d:fa:ef:65:45:ec:52:8e:99:20:d4: 5f:03:7a:2d:2f:eb:a5:15:df:5e:11:33:74:7e:7b: 15:57:d6:94:e0:95:04:24:d3:7d:f0:52:4b:e2:dc: 07:59:3a:9b:6b:22:bc:9b:73:0a:03:84:35:fa:a3: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:06:AA:C0:12:A7:0E:8C:0B:5D:92:6C:95:44:02:EE:2A:26:A1:9E X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:1d:54:09:ba:76:90:bd:2f:05:5b:e1:b2:15:ac:bd:29: a4:f8:b3:c1:50:e5:b6:79:a3:71:f6:d4:ce:17:6f:58:d3:35: e8:ae:2e:b4:20:d8:b2:33:4b:75:66:fa:93:2a:7f:95:b5:7b: 0c:fa:33:d5:ee:66:c3:f4:46:a5:dd:da:2a:ad:e0:61:04:05: 6b:fc:cd:4c:3e:b3:5b:a5:1b:77:c5:f7:31:08:1c:84:9a:00: 28:2a:0a:57:fc:56:14:38:6f:98:df:01:db:bb:6c:f4:b6:a0: a0:f7:28:3d:16:b0:0b:90:9a:07:2e:b3:be:cd:0c:0e:dc:dd: 19:f8:a3:28:fe:cc:41:0b:9c:15:9f:65:ea:db:52:76:f3:d3: 52:37:86:41:95:67:93:9b:24:6f:9f:01:b3:98:95:54:bd:be: 4e:ec:5e:5e:e3:16:bb:60:9e:48:bc:51:27:d0:b6:a3:50:5b: a2:0e:cc:0f:9e:5a:be:88:05:43:75:3f:ea:84:72:be:d4:7b: f9:ce:2c:dc:aa:60:0d:e8:15:74:61:39:a6:d6:25:d7:54:4a: 75:b9:0f:2f:08:f5:b5:dc:26:94:6f:e3:aa:43:72:52:21:9e: 1e:4c:8c:83:44:43:e3:31:0f:22:1e:5e:41:1f:9e:88:3b:2c: ff:da:e4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjQwNTA3MDQ1MzA3WhcNMjQwNTE0MDQ1MzA3WjAYMRYwFAYD VQQDEw02NjM5YjNiNC0yNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt79iF9j/QPRiRQWtzT9ULnPf4GdS6pufeMRuJ7WSTCsTlcCQQNzpKYUAKK/b wcXLJErrq5LK1sPoTgdcLT+WCMhP7kuAkh6QM75SsHeVuZxkORoaKjRw7DCZfULX 4lj6Ax377fifruJoErknqw53cnJguO6MJ3fsTUm9fSi5OyS38M0OIEBTZNuFeQNv GbmE4kgnf/o4Mh7x2H41RB+fwoCjF3fe1yjx356hoTOGyXHJPB1a2T7V2VxpMluw Ck548A/MG8OBbfrvZUXsUo6ZINRfA3otL+ulFd9eETN0fnsVV9aU4JUEJNN98FJL 4twHWTqbayK8m3MKA4Q1+qNBxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcGqsAS pw6MC12SbJVEAu4qJqGeMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbJB1UCbp2kL0vBVvhshWsvSmk+LPBUOW2eaNx9tTOF29Y0zXori60 INiyM0t1ZvqTKn+VtXsM+jPV7mbD9Eal3doqreBhBAVr/M1MPrNbpRt3xfcxCByE mgAoKgpX/FYUOG+Y3wHbu2z0tqCg9yg9FrALkJoHLrO+zQwO3N0Z+KMo/sxBC5wV n2Xq21J289NSN4ZBlWeTmyRvnwGzmJVUvb5O7F5e4xa7YJ5IvFEn0LajUFuiDswP nlq+iAVDdT/qhHK+1Hv5zizcqmAN6BV0YTmm1iXXVEp1uQ8vCPW13CaUb+OqQ3JS IZ4eTIyDREPjMQ8iHl5BH56IOyz/2uR4 -----END CERTIFICATE-----Generated at Tue May 7 05:34:24 2024 by rpki-client on console-ams.rpki-client.org