$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: gK5PSR98JDbPkSOwlaHbzF7wx8yjVa696rWD6faSVEE= Subject key identifier: 43:03:F7:6F:8A:5D:3F:DE:08:26:B9:F6:84:F2:7C:9B:7E:80:0A:AF Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1BAF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1B95 Signing time: Tue 28 May 2024 16:43:31 +0000 Manifest this update: Tue 28 May 2024 16:43:31 +0000 Manifest next update: Tue 04 Jun 2024 16:43:31 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: PdVSYBfAFyF6WTGDgbzeZbaaO+vA6iqo1t7+aq1rMIY=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: QPa3xeVaCwoPo7TKjfKmtybRDsW4cHxsvq14yH39kTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 16:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7087 (0x1baf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: May 28 16:43:31 2024 GMT Not After : Jun 4 16:43:31 2024 GMT Subject: CN=665609b3-6657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:8b:5b:61:c6:e4:ab:a7:29:5c:27:fd:4a: ec:ee:ef:24:98:c5:cb:f2:5a:d5:a3:74:32:54:6b: 0e:7e:c9:7e:92:e8:58:86:24:ce:8d:ef:97:96:5f: 6e:39:b9:dc:28:4f:b0:84:dd:12:81:a9:77:b6:54: 3b:b6:09:97:58:a9:8a:38:dc:23:76:c2:27:5e:6b: 71:36:42:82:78:bd:70:6e:01:f1:fb:71:cf:9d:40: 4e:94:00:57:58:62:2b:be:38:c6:c2:b5:b0:7c:17: c1:73:93:2f:f1:6b:51:be:43:e6:a1:49:28:29:65: 32:95:c1:78:65:0f:49:ca:9d:02:1c:73:00:b8:80: 24:6e:b1:01:a0:67:f6:f2:ba:81:6d:45:a2:f2:ae: 5d:e2:12:da:61:76:d9:c1:79:c4:0a:b1:a0:69:97: 1b:82:02:45:66:e1:2a:c6:cb:c9:ac:e8:77:39:7e: 5f:18:65:90:85:25:e6:fd:04:b0:9f:d8:04:de:ae: 2d:3e:9d:71:e7:aa:16:83:27:07:05:d9:19:a3:1c: 1e:8f:2d:f0:a6:2c:24:fe:b6:62:33:c1:3d:c7:6d: c1:8e:a9:e5:84:a6:1a:08:46:d7:8a:08:40:ec:32: 17:9c:3e:20:fe:59:37:86:f0:5d:11:79:04:e7:8e: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:F7:6F:8A:5D:3F:DE:08:26:B9:F6:84:F2:7C:9B:7E:80:0A:AF X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:29:41:52:82:35:b7:ad:1b:e0:78:be:d1:75:bd:6d:de:af: 53:48:83:14:5a:17:5a:2c:b0:b4:6d:8f:f0:34:22:56:09:aa: 75:b3:39:1c:9b:69:bc:c9:8e:f6:3c:16:d0:99:86:34:c0:94: a7:23:79:68:49:26:76:60:48:8c:2a:51:90:02:4b:fd:e9:ca: d1:0b:f4:f2:6e:f5:30:54:07:9d:1d:58:32:af:7d:d1:22:db: 42:ba:f0:2d:ab:ab:ab:bf:16:65:65:ec:31:8b:8b:55:d3:6f: 00:b7:c3:a9:b6:f8:38:fc:5e:46:cf:eb:a1:32:0e:32:3a:36: 35:43:e0:cc:26:2e:08:26:e8:a5:54:71:cc:c1:44:7d:a1:9b: 4b:75:a7:6a:35:dd:42:aa:ad:eb:05:b1:26:26:5b:4a:eb:1f: eb:4d:84:86:2d:8b:d0:b1:a5:01:cb:89:4f:3e:6f:15:42:e8: b8:fb:27:1a:42:55:a1:36:58:57:d7:7a:3f:01:6b:cf:af:3e: 96:5c:92:a8:44:bf:06:1e:5b:df:a5:2c:ee:b6:09:ef:d9:e5: 95:f8:43:d1:c1:33:22:9c:18:ab:4d:9a:25:96:96:15:7b:2e: 97:18:c2:3e:dd:31:0d:0c:26:67:c2:8a:15:ac:8e:11:50:1a: d6:ce:ec:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjQwNTI4MTY0MzMxWhcNMjQwNjA0MTY0MzMxWjAYMRYwFAYD VQQDEw02NjU2MDliMy02NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoCLW2HG5KunKVwn/Urs7u8kmMXL8lrVo3QyVGsOfsl+kuhYhiTOje+Xll9u ObncKE+whN0Sgal3tlQ7tgmXWKmKONwjdsInXmtxNkKCeL1wbgHx+3HPnUBOlABX WGIrvjjGwrWwfBfBc5Mv8WtRvkPmoUkoKWUylcF4ZQ9Jyp0CHHMAuIAkbrEBoGf2 8rqBbUWi8q5d4hLaYXbZwXnECrGgaZcbggJFZuEqxsvJrOh3OX5fGGWQhSXm/QSw n9gE3q4tPp1x56oWgycHBdkZoxwejy3wpiwk/rZiM8E9x23BjqnlhKYaCEbXighA 7DIXnD4g/lk3hvBdEXkE547lIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMD92+K XT/eCCa59oTyfJt+gAqvMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAKUFSgjW3rRvgeL7Rdb1t3q9TSIMUWhdaLLC0bY/wNCJWCap1szkc m2m8yY72PBbQmYY0wJSnI3loSSZ2YEiMKlGQAkv96crRC/TybvUwVAedHVgyr33R IttCuvAtq6urvxZlZewxi4tV028At8Optvg4/F5Gz+uhMg4yOjY1Q+DMJi4IJuil VHHMwUR9oZtLdadqNd1Cqq3rBbEmJltK6x/rTYSGLYvQsaUBy4lPPm8VQui4+yca QlWhNlhX13o/AWvPrz6WXJKoRL8GHlvfpSzutgnv2eWV+EPRwTMinBirTZollpYV ey6XGMI+3TENDCZnwooVrI4RUBrWzuzO -----END CERTIFICATE-----Generated at Tue May 28 19:32:21 2024 by rpki-client on console-ams.rpki-client.org