$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft File: bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json) Hash identifier: KdG7h9edckfxBd8gMF/XUJHGc1b7I7I689bLRY+LAd4= Subject key identifier: FD:FC:69:BB:22:2A:A9:E3:93:24:4B:98:D2:75:45:D8:29:E8:61:1C Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 Certificate issuer: /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft Manifest number: 0331 Signing time: Fri 03 May 2024 03:05:35 +0000 Manifest this update: Fri 03 May 2024 03:05:35 +0000 Manifest next update: Fri 10 May 2024 03:05:35 +0000 Files and hashes: 1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: og5tmU8Tg/NyBmouGNfW0anpCI/1XWSS6lxOzEkopsU=) 2: 5BCE86F6777F11ECB4730632C4F9AE02.roa (hash: SPFzGgDFpn4T/AHD6ewSny2S7exdvz/wRQmqo+wpWRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Validity Not Before: May 3 03:05:35 2024 GMT Not After : May 10 03:05:35 2024 GMT Subject: CN=6634547f-c30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:b6:08:68:50:b3:ee:d2:3a:b4:4d:92:3e: 85:a8:d7:0d:eb:1b:51:e5:e1:ca:05:15:90:57:d0: a9:e8:b5:7c:11:08:04:16:10:e1:d5:8d:59:57:ef: 3e:fd:de:68:66:27:83:61:11:a7:cb:56:df:df:31: 33:22:ed:f8:e4:57:a1:de:88:b6:33:e3:d8:d1:4f: 8b:b0:7d:10:7b:36:10:05:53:ef:ec:72:97:2b:07: 31:3d:ba:1f:ae:b0:f1:f2:55:3f:cc:dd:7f:86:37: 96:85:56:43:62:fe:01:1f:ba:1e:97:46:eb:92:87: d6:e9:d9:88:36:5c:92:2e:92:0a:94:eb:87:47:98: c2:5b:6b:c5:45:a7:51:aa:ac:b7:09:7b:ff:56:02: 4c:a2:03:1a:6c:a8:52:f6:af:ec:0f:c2:7b:5b:67: bd:b8:c2:f2:91:30:20:63:7e:e3:23:61:89:ee:39: b3:dd:ba:e5:db:c9:73:33:3d:e2:d2:93:49:26:5b: fa:ff:e5:5e:4e:b6:0d:49:4f:11:f8:f1:01:75:4d: 70:36:cc:37:29:c9:43:36:0d:0a:e5:74:02:16:f2: e1:09:a0:9e:78:82:7a:b6:95:0b:c5:14:f4:fa:ee: 05:9c:b1:08:80:5f:2d:14:89:d7:6b:34:8f:5d:90: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:69:BB:22:2A:A9:E3:93:24:4B:98:D2:75:45:D8:29:E8:61:1C X509v3 Authority Key Identifier: keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:72:9c:3c:31:3a:06:bc:cd:c3:c6:41:44:b4:66:30:89:cb: 7c:71:79:41:3a:8a:e7:19:08:3e:b5:92:06:89:84:6e:a8:85: 94:50:1e:8b:6e:7e:61:a2:8f:55:52:8f:12:69:8c:4a:7a:25: 51:83:52:35:be:dc:ce:56:ee:4f:21:e2:c7:f9:1e:8e:56:68: 17:c1:5c:96:ef:67:a9:76:cd:b5:8a:d2:2e:09:de:1b:a9:e9: 32:98:6d:c6:be:7d:dc:ff:dd:f9:66:c4:2c:64:d7:b0:14:c2: c0:6f:70:5c:d0:c8:a7:41:7f:0a:19:7a:14:90:b5:d7:6e:be: bd:62:52:5f:af:21:7d:07:d4:5b:5f:3a:e2:da:e8:25:b7:c9: b2:fd:3b:94:5b:24:96:e1:c4:a8:8d:96:c2:60:e7:4e:fd:1d: 3f:4c:a8:49:dd:df:5a:4a:62:69:50:04:f1:b9:02:37:ce:9d: 04:c1:f1:c4:19:eb:83:18:e9:07:cd:32:9d:af:4b:e1:d0:56: e6:8b:43:da:36:3c:ce:94:88:e8:4c:e7:86:c5:6d:d1:80:53: 8f:24:2b:9c:e8:77:ba:c3:ab:19:1c:4a:12:be:ab:67:c9:dc: 61:77:0d:7f:02:5d:12:6a:69:8a:5f:d1:22:3a:d7:d6:e7:93: 8e:b9:fe:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0 MTFDNzY4MzgwHhcNMjQwNTAzMDMwNTM1WhcNMjQwNTEwMDMwNTM1WjAYMRYwFAYD VQQDEw02NjM0NTQ3Zi1jMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8G2CGhQs+7SOrRNkj6FqNcN6xtR5eHKBRWQV9Cp6LV8EQgEFhDh1Y1ZV+8+ /d5oZieDYRGny1bf3zEzIu345Feh3oi2M+PY0U+LsH0QezYQBVPv7HKXKwcxPbof rrDx8lU/zN1/hjeWhVZDYv4BH7oel0brkofW6dmINlySLpIKlOuHR5jCW2vFRadR qqy3CXv/VgJMogMabKhS9q/sD8J7W2e9uMLykTAgY37jI2GJ7jmz3brl28lzMz3i 0pNJJlv6/+VeTrYNSU8R+PEBdU1wNsw3KclDNg0K5XQCFvLhCaCeeIJ6tpULxRT0 +u4FnLEIgF8tFInXazSPXZDi4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP38absi KqnjkyRLmNJ1Rdgp6GEcMB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3 N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE aHFnWDNOaldScFZCSEhhRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdcpw8MToGvM3DxkFEtGYwict8cXlBOornGQg+tZIGiYRuqIWUUB6L bn5hoo9VUo8SaYxKeiVRg1I1vtzOVu5PIeLH+R6OVmgXwVyW72epds21itIuCd4b qekymG3Gvn3c/935ZsQsZNewFMLAb3Bc0MinQX8KGXoUkLXXbr69YlJfryF9B9Rb Xzri2uglt8my/TuUWySW4cSojZbCYOdO/R0/TKhJ3d9aSmJpUATxuQI3zp0EwfHE GeuDGOkHzTKdr0vh0Fbmi0PaNjzOlIjoTOeGxW3RgFOPJCuc6He6w6sZHEoSvqtn ydxhdw1/Al0SammKX9EiOtfW55OOuf5Z -----END CERTIFICATE-----Generated at Fri May 3 04:45:11 2024 by rpki-client on console-fra.rpki-client.org