$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: 9YhwMVbePv285ldGR6ewHPPHEEOMs5ohD+hQKMq79Y4= Subject key identifier: 1F:AC:3E:D6:D9:F1:E5:5E:98:59:BB:7A:EE:45:06:4F:29:6A:37:15 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 62 Signing time: Wed 15 May 2024 07:51:46 +0000 Manifest this update: Wed 15 May 2024 07:51:45 +0000 Manifest next update: Wed 22 May 2024 07:51:45 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: Ky4PBQ/In27ZKohnYEenb4cak1GZdnMwx0Yh473gbSA=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: a4sEac7qLD5/I5jVEm1sdYFVMXzM4yPBjSe55lJo/N4=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: rzE4M9XN0AVJtbARjlMubeH/EQs2pw4OBcnjimOncVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: May 15 07:51:45 2024 GMT Not After : May 22 07:51:45 2024 GMT Subject: CN=66446991-34f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:50:70:de:fe:8a:0d:d8:67:c2:83:24:2b: 6f:df:94:9b:fa:20:2a:38:43:30:00:dc:51:4b:73: 84:4f:cb:1e:a0:1d:e3:1b:3e:1b:f0:be:91:54:8b: ea:88:b3:e1:6c:bc:67:7d:84:db:4d:90:d7:dd:9b: 68:e6:a1:6e:e3:b8:c0:df:b6:a1:de:4b:86:50:1b: 3f:2d:e9:fd:e2:02:f4:89:db:2f:a5:72:e6:92:b0: 7d:c4:52:47:35:7f:10:ea:15:a0:e7:5e:39:35:60: a6:6b:ae:ef:93:a7:08:a1:e9:4e:67:aa:22:b9:5a: 66:7e:9a:e6:52:dd:bb:ff:62:99:e6:3d:ca:f5:5a: 57:a6:ae:56:44:13:d0:c7:ab:6b:50:21:a7:59:05: 58:1c:04:4a:50:b6:00:e0:5d:91:25:de:68:a3:da: 45:54:3c:62:3e:cc:54:8b:bd:80:5a:48:83:a0:4a: 96:e5:75:ab:d6:39:2f:5c:60:6b:d8:a2:d2:ad:94: 2b:8c:1e:57:b4:60:4a:60:55:9f:ca:08:59:c4:3f: a6:ca:d2:95:ad:ba:99:80:37:47:88:af:28:ef:e5: 30:d9:4a:f2:df:c3:67:95:5d:b5:9e:3f:48:c7:f5: ae:d3:a3:a5:d9:40:40:0d:40:17:b8:07:74:88:71: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:3E:D6:D9:F1:E5:5E:98:59:BB:7A:EE:45:06:4F:29:6A:37:15 X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:38:32:ec:55:94:d3:d2:e7:4d:c3:40:51:f5:72:47:26:25: 09:5b:ae:7a:4e:9c:2f:b3:08:5c:a4:6b:3a:c2:32:b4:1e:aa: 2c:fa:20:84:81:b4:9e:14:9c:82:e3:a8:08:b1:5a:a6:31:13: af:9b:13:a7:bf:4f:38:af:e4:20:2b:d1:3d:b9:f2:8e:dd:c5: ce:ef:ae:1e:93:e3:50:a0:04:1b:9a:ac:fb:cf:50:f1:0c:bb: 86:ec:9f:17:6b:c2:10:70:63:cc:00:66:0f:c3:e8:23:39:fc: a5:31:6b:45:65:15:13:39:c9:23:3e:de:09:07:90:12:52:35: 33:78:3c:b1:85:a8:07:5c:8d:41:44:0c:73:c0:6d:0a:86:6f: d3:dc:b9:e0:dd:30:2d:31:0f:75:8a:7a:c3:09:c8:67:aa:ba: b5:86:8f:fb:b6:4b:97:91:91:1e:a7:41:e3:d9:ac:9e:a7:78: b8:fa:26:76:dc:9f:3b:05:11:f2:dd:69:f3:6e:70:5d:98:03: 4e:29:3f:d8:6d:aa:e4:eb:1d:b4:99:65:5e:e8:32:be:e2:a4: eb:90:eb:1d:8a:c9:a1:d2:02:22:51:e8:d0:17:79:05:26:64: 2b:ea:3a:90:e7:67:46:af:e5:d3:34:86:f4:a9:ef:68:9f:60: 04:cb:04:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTM5RjExMC8GA1UEBRMoMDcxRTI1ODU1RTZBMzVCM0Q4MDhGRjdBNjBBMDhCODc4 MTM1NjM2MjAeFw0yNDA1MTUwNzUxNDVaFw0yNDA1MjIwNzUxNDVaMBgxFjAUBgNV BAMTDTY2NDQ2OTkxLTM0ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiCVBw3v6KDdhnwoMkK2/flJv6ICo4QzAA3FFLc4RPyx6gHeMbPhvwvpFUi+qI s+FsvGd9hNtNkNfdm2jmoW7juMDftqHeS4ZQGz8t6f3iAvSJ2y+lcuaSsH3EUkc1 fxDqFaDnXjk1YKZrru+Tpwih6U5nqiK5WmZ+muZS3bv/YpnmPcr1WlemrlZEE9DH q2tQIadZBVgcBEpQtgDgXZEl3mij2kVUPGI+zFSLvYBaSIOgSpbldavWOS9cYGvY otKtlCuMHle0YEpgVZ/KCFnEP6bK0pWtupmAN0eIryjv5TDZSvLfw2eVXbWeP0jH 9a7To6XZQEANQBe4B3SIcUqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH6w+1tnx 5V6YWbt67kUGTylqNxUwHwYDVR0jBBgwFoAUBx4lhV5qNbPYCP96YKCLh4E1Y2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MzlGLzIyRTVGNjU2OEFD MTExRUU4NTEzQkIxREM0RjlBRTAyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVky SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQng0bGhWNXFOYlBZQ1A5NllLQ0xoNEUxWTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 MzlGLzIyRTVGNjU2OEFDMTExRUU4NTEzQkIxREM0RjlBRTAyL0J4NGxoVjVxTmJQ WUNQOTZZS0NMaDRFMVkySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAg4MuxVlNPS503DQFH1ckcmJQlbrnpOnC+zCFykazrCMrQeqiz6IISB tJ4UnILjqAixWqYxE6+bE6e/Tziv5CAr0T258o7dxc7vrh6T41CgBBuarPvPUPEM u4bsnxdrwhBwY8wAZg/D6CM5/KUxa0VlFRM5ySM+3gkHkBJSNTN4PLGFqAdcjUFE DHPAbQqGb9PcueDdMC0xD3WKesMJyGequrWGj/u2S5eRkR6nQePZrJ6neLj6Jnbc nzsFEfLdafNucF2YA04pP9htquTrHbSZZV7oMr7ipOuQ6x2KyaHSAiJR6NAXeQUm ZCvqOpDnZ0av5dM0hvSp72ifYATLBCo= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org