$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.mft File: bGmJrxjur94Mry7rtRSIPHXtRFY.mft (raw, json) Hash identifier: YfNkR48/iaHZg2DQbDGTQkrZXNsKYYMy6r0BOWwtbcU= Subject key identifier: 0B:27:0A:28:03:63:94:A1:E8:76:EF:69:65:E1:B8:3A:B8:82:14:9E Authority key identifier: 6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56 Certificate issuer: /CN=A9129FD1/serialNumber=6C6989AF18EEAFDE0CAF2EEBB514883C75ED4456 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.mft Manifest number: 0999 Signing time: Thu 02 May 2024 21:01:40 +0000 Manifest this update: Thu 02 May 2024 21:01:40 +0000 Manifest next update: Thu 09 May 2024 21:01:40 +0000 Files and hashes: 1: bGmJrxjur94Mry7rtRSIPHXtRFY.crl (hash: zl7BeO+aUCVbxvin83m5HBIz5QFJnuUVE1+SDg4EcSI=) 2: 192351DC2D3711EEB5737B0CC4F9AE02.roa (hash: Yx/tB/dsw0XeQztF/7HuNLzuF7Ti1rESlqeHBgPvsEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.crl rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129FD1/serialNumber=6C6989AF18EEAFDE0CAF2EEBB514883C75ED4456 Validity Not Before: May 2 21:01:40 2024 GMT Not After : May 9 21:01:40 2024 GMT Subject: CN=6633ff34-17fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:f6:52:d7:97:2d:21:25:17:bd:6b:47:bc: 52:91:08:8f:d3:ae:59:4e:80:9e:ee:17:68:95:fb: 36:cf:19:a8:78:5e:9e:e5:07:ce:72:db:0b:26:ee: b7:f3:bc:29:81:86:c5:b4:0d:ad:0e:e1:8f:b2:7f: 49:97:bb:a4:cc:db:42:dd:87:43:a6:98:3b:67:11: 4e:07:e9:c9:99:54:c2:f8:c2:50:3b:aa:0f:65:3c: be:a4:46:1e:27:d6:b7:8d:20:c7:88:f0:0d:00:27: 24:0b:0d:7f:eb:fa:15:19:63:46:fa:b2:2e:89:8c: fc:cb:4a:10:0e:8f:bb:39:f9:0f:c5:f7:f1:7e:c3: 1e:ed:69:3e:17:e9:8a:68:f0:c7:9f:e3:37:50:11: e5:00:f0:10:ee:82:79:f2:03:25:2f:59:66:86:99: 1a:8d:22:ed:21:d8:91:4e:2e:8a:62:76:25:a6:ab: b4:70:ac:ef:1e:32:08:68:72:1b:c0:b4:96:de:86: 49:41:4c:33:88:2e:2c:95:c9:f9:e6:0e:2e:47:8e: 90:9b:b9:01:ae:45:b3:d0:6d:4c:7f:e1:1f:96:41: 63:21:5d:00:28:5c:4c:5b:d5:9c:1f:0b:1b:a1:4d: 01:52:a9:88:8e:6a:c3:84:05:5f:fe:20:0b:e2:51: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:27:0A:28:03:63:94:A1:E8:76:EF:69:65:E1:B8:3A:B8:82:14:9E X509v3 Authority Key Identifier: keyid:6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:99:da:d6:59:6f:ed:3c:7b:4f:94:17:ad:94:ca:5e:b2:c6: fb:dc:0f:4e:86:d8:4c:53:32:ac:ea:28:68:b0:15:74:67:01: 4f:91:8a:94:47:94:f6:d3:d1:a4:af:84:7c:3f:d1:01:42:3a: 8d:72:bd:4b:82:f7:09:05:95:19:2c:05:f7:cb:d4:65:e3:e5: 1c:49:2d:86:01:a8:fc:95:7f:c2:b2:5e:8d:0e:55:ec:12:bf: 44:01:88:f9:92:85:24:e6:36:2f:b6:c8:df:f2:3c:e0:55:e4: d3:c3:a8:89:a9:bc:08:33:20:91:91:ab:48:40:7f:05:10:b9: c0:af:c6:3b:e3:f3:d0:9d:65:d4:91:10:e6:93:b7:78:18:e4: 41:5d:c7:f7:8f:88:22:44:1e:19:32:e8:16:68:42:1c:00:cc: 75:be:aa:04:68:47:1c:58:22:d8:50:23:b5:1e:bb:57:46:72: 17:49:65:6b:19:1a:3d:47:43:d0:19:2f:bb:c9:df:e1:e4:d1: 60:07:b1:78:0a:1b:99:86:45:ce:df:ce:bc:2e:11:35:f3:c6: f3:16:43:9a:cd:5c:68:4d:86:81:5c:5e:4f:52:2f:1f:2d:62: ee:e3:7b:b0:88:ed:6e:16:6a:a3:6f:c0:19:03:a0:e6:3c:7e: 7f:fe:69:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGRDExMTAvBgNVBAUTKDZDNjk4OUFGMThFRUFGREUwQ0FGMkVFQkI1MTQ4ODND NzVFRDQ0NTYwHhcNMjQwNTAyMjEwMTQwWhcNMjQwNTA5MjEwMTQwWjAYMRYwFAYD VQQDEw02NjMzZmYzNC0xN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vD2UteXLSElF71rR7xSkQiP065ZToCe7hdolfs2zxmoeF6e5QfOctsLJu63 87wpgYbFtA2tDuGPsn9Jl7ukzNtC3YdDppg7ZxFOB+nJmVTC+MJQO6oPZTy+pEYe J9a3jSDHiPANACckCw1/6/oVGWNG+rIuiYz8y0oQDo+7OfkPxffxfsMe7Wk+F+mK aPDHn+M3UBHlAPAQ7oJ58gMlL1lmhpkajSLtIdiRTi6KYnYlpqu0cKzvHjIIaHIb wLSW3oZJQUwziC4slcn55g4uR46Qm7kBrkWz0G1Mf+EflkFjIV0AKFxMW9WcHwsb oU0BUqmIjmrDhAVf/iAL4lE5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsnCigD Y5Sh6HbvaWXhuDq4ghSeMB8GA1UdIwQYMBaAFGxpia8Y7q/eDK8u67UUiDx17URW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUZEMS9GODVDMjVFMjY1 MUYxMUVBQkI2MzJDNkRDNEY5QUUwMi9iR21KcnhqdXI5NE1yeTdydFJTSVBIWHRS RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHbUpyeGp1cjk0TXJ5N3J0UlNJUEhYdFJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUZEMS9GODVDMjVFMjY1MUYxMUVBQkI2MzJDNkRDNEY5QUUwMi9iR21KcnhqdXI5 NE1yeTdydFJTSVBIWHRSRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBamdrWWW/tPHtPlBetlMpessb73A9OhthMUzKs6ihosBV0ZwFPkYqU R5T209Gkr4R8P9EBQjqNcr1LgvcJBZUZLAX3y9Rl4+UcSS2GAaj8lX/Csl6NDlXs Er9EAYj5koUk5jYvtsjf8jzgVeTTw6iJqbwIMyCRkatIQH8FELnAr8Y74/PQnWXU kRDmk7d4GORBXcf3j4giRB4ZMugWaEIcAMx1vqoEaEccWCLYUCO1HrtXRnIXSWVr GRo9R0PQGS+7yd/h5NFgB7F4ChuZhkXO3868LhE188bzFkOazVxoTYaBXF5PUi8f LWLu43uwiO1uFmqjb8AZA6DmPH5//mnM -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org