$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: ek+j5Ms4vSZqWz2TUPm43/ItqlgvEI3B8J3ymrfkJv0= Subject key identifier: CD:FF:A1:FB:6F:15:ED:74:E0:E0:99:1F:A6:C8:3D:89:F2:49:B6:3C Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: B0 Signing time: Sat 27 Apr 2024 06:24:55 +0000 Manifest this update: Sat 27 Apr 2024 06:24:55 +0000 Manifest next update: Sat 04 May 2024 06:24:55 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: +54CRikJvVGKLe9ZpKlApymik9HxKlqXMNqGrQ0DYOg=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: rB8WM7D/HN2jEOM2vQX+CZXSAKB4NN5wm7iOUNftTpI=) 3: D9FACFBEF1F111EEA7B10347C4F9AE02.roa (hash: lZXF5FpDxyzGrnozEXKUwTsVKpVVI5ys+qkQTyN8Gls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Apr 27 06:24:55 2024 GMT Not After : May 4 06:24:55 2024 GMT Subject: CN=662c9a37-7631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:57:05:64:b5:ec:5f:e8:74:b0:8b:b3:57: c7:48:73:58:7c:a3:b7:10:4e:0d:cd:a9:64:a4:64: 7e:04:3b:38:58:99:78:53:41:ec:39:43:85:f0:33: 27:15:d8:6e:9d:94:af:35:b7:51:91:d4:e2:0b:c8: 67:12:08:a9:25:87:e3:f0:06:4c:7d:37:cb:d4:fc: c3:b2:cb:e4:c2:18:eb:95:9d:9b:27:a9:9c:bf:b9: 9e:fc:7c:b5:cc:d2:ff:8e:06:c6:2f:77:ff:4f:1f: 7d:9b:fc:1c:e4:9a:5d:da:49:3d:00:93:a9:24:4b: a7:56:3f:3f:2f:31:ad:29:c8:c9:ee:da:4b:3e:8b: 86:ec:23:11:9d:e6:86:7c:d0:fc:f9:12:35:df:20: 66:c9:cf:97:5a:6d:d3:cf:6d:95:cf:5f:f8:d8:b4: 4b:ba:ee:1c:41:21:26:e4:58:15:b8:96:f6:4b:1f: 13:ca:71:66:23:44:8e:f4:3e:e8:ff:d4:59:71:c1: 76:70:21:be:73:40:61:e2:5e:7f:17:9e:5f:a9:4b: d3:18:6b:bb:11:91:18:42:46:1c:49:db:9b:9c:ea: 1b:0e:41:74:b3:2c:d1:23:9f:51:7a:fb:33:d0:9b: 36:28:aa:99:32:ff:6b:67:4f:4d:5f:d9:99:b0:19: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:A1:FB:6F:15:ED:74:E0:E0:99:1F:A6:C8:3D:89:F2:49:B6:3C X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f5:73:10:4d:55:7d:de:fb:9c:ba:19:2d:5c:1f:02:1a:17: 39:c6:5c:4e:26:fd:41:14:c5:a7:1c:57:d5:c4:5f:47:b6:3b: e4:e0:22:33:d9:6e:02:24:6e:a2:f1:43:28:80:be:d3:88:6c: 64:b2:50:1f:2d:30:a5:ca:0e:da:c1:9a:2d:58:f0:c4:f1:7f: 46:36:d1:39:47:79:14:03:dd:78:86:03:ed:3c:42:b6:c8:d1: e1:f9:47:d7:1a:f3:cc:27:79:f0:0e:61:bc:b1:17:e6:16:1f: cc:07:31:00:cc:3d:5d:1f:97:1c:bb:00:e4:f5:2d:e1:a8:a2: 3b:85:1b:d5:1b:8c:e5:92:58:68:df:90:02:d5:3a:a9:4b:eb: 46:f5:6d:14:03:18:d4:9c:04:c0:5f:39:8b:b9:e7:f4:61:05: 16:9a:2c:5b:04:25:37:1a:82:b5:b3:0d:7c:d0:b5:02:b1:d1: 09:bc:0a:ae:c1:7a:91:58:77:cb:2a:32:28:0c:f1:01:4f:17: 91:40:bf:b3:7e:e0:9c:23:bf:0f:b8:5a:36:70:bd:ca:ae:0d: a1:05:78:c6:58:f2:9f:1d:5f:8c:df:dc:f6:13:b4:da:6e:a1: a3:d7:e5:ee:9b:e1:1b:97:a3:5d:d8:95:57:ca:4d:b8:88:e9: 48:ea:71:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjQwNDI3MDYyNDU1WhcNMjQwNTA0MDYyNDU1WjAYMRYwFAYD VQQDEw02NjJjOWEzNy03NjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaFXBWS17F/odLCLs1fHSHNYfKO3EE4NzalkpGR+BDs4WJl4U0HsOUOF8DMn FdhunZSvNbdRkdTiC8hnEgipJYfj8AZMfTfL1PzDssvkwhjrlZ2bJ6mcv7me/Hy1 zNL/jgbGL3f/Tx99m/wc5Jpd2kk9AJOpJEunVj8/LzGtKcjJ7tpLPouG7CMRneaG fND8+RI13yBmyc+XWm3Tz22Vz1/42LRLuu4cQSEm5FgVuJb2Sx8TynFmI0SO9D7o /9RZccF2cCG+c0Bh4l5/F55fqUvTGGu7EZEYQkYcSdubnOobDkF0syzRI59Revsz 0Js2KKqZMv9rZ09NX9mZsBmI5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3/oftv Fe104OCZH6bIPYnySbY8MB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw9XMQTVV93vucuhktXB8CGhc5xlxOJv1BFMWnHFfVxF9Htjvk4CIz 2W4CJG6i8UMogL7TiGxkslAfLTClyg7awZotWPDE8X9GNtE5R3kUA914hgPtPEK2 yNHh+UfXGvPMJ3nwDmG8sRfmFh/MBzEAzD1dH5ccuwDk9S3hqKI7hRvVG4zlklho 35AC1TqpS+tG9W0UAxjUnATAXzmLuef0YQUWmixbBCU3GoK1sw180LUCsdEJvAqu wXqRWHfLKjIoDPEBTxeRQL+zfuCcI78PuFo2cL3Krg2hBXjGWPKfHV+M39z2E7Ta bqGj1+Xum+Ebl6Nd2JVXyk24iOlI6nGD -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:54 2024 by rpki-client on console-ams.rpki-client.org