$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json) Hash identifier: P2CYNILG4nL6gEToKD1+5EfYfwdc9IjKJvlMXR/zz4Q= Subject key identifier: 88:3D:FE:B8:5F:32:84:2E:4D:EF:0D:0B:EB:20:3B:BF:DF:A6:5B:52 Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft Manifest number: 56 Signing time: Wed 15 May 2024 07:59:07 +0000 Manifest this update: Wed 15 May 2024 07:59:06 +0000 Manifest next update: Wed 22 May 2024 07:59:06 +0000 Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: SBfkyjsRVXjLxoN/X0XHoWIsX77taTl+K+g74kaN9mU=) 2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 65PqIv1m4E+UMfsdWXw9cpy72PEL3+ztivu5BevV0do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Validity Not Before: May 15 07:59:06 2024 GMT Not After : May 22 07:59:06 2024 GMT Subject: CN=66446b4b-3105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:81:a1:3f:5f:d4:4e:e1:a4:b6:b4:21:7c: 26:72:78:d3:13:10:10:e9:2c:79:d3:30:2b:75:12: 51:0d:c2:47:81:d0:ea:5f:aa:64:2b:a7:8a:95:03: fe:a8:f1:df:21:3e:53:ba:8b:96:1d:ee:8e:32:8e: d9:06:b0:3b:20:1f:a2:ec:63:06:5b:6e:55:4e:2c: 02:fe:45:6f:6f:ff:33:bb:27:08:e2:de:24:88:0f: 9e:f5:d3:ac:42:0d:37:af:21:c4:5b:d1:d9:9e:f0: ed:7e:bf:ef:18:bc:11:ba:6e:e5:34:44:da:8a:3f: 42:c6:d1:0d:18:14:50:ba:fd:e9:67:6a:fb:ef:5a: 54:e2:3f:bc:34:4b:c1:9c:ff:da:42:6a:d4:a2:27: eb:61:2e:5b:04:e1:c7:da:c4:af:24:48:b9:dd:9d: 7b:ec:cf:72:f7:65:d2:45:b5:50:ab:f4:6f:6b:60: b1:c1:2a:4a:39:1c:71:7c:45:b7:74:97:b1:3a:a6: b6:1e:b1:d1:45:8b:b0:a6:ca:89:fb:1a:91:34:d9: 18:c5:2d:5c:73:54:a0:ef:cc:ed:01:b6:4c:ba:25: 01:02:de:b7:c7:f5:9d:6e:05:87:bf:93:8e:0c:fd: cd:ae:08:4c:74:ca:57:56:1a:91:00:1c:1e:37:24: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3D:FE:B8:5F:32:84:2E:4D:EF:0D:0B:EB:20:3B:BF:DF:A6:5B:52 X509v3 Authority Key Identifier: keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:9b:89:37:b2:78:5a:1c:dc:04:90:28:44:9a:bc:59:8d:d9: 4b:be:94:1c:a8:bf:c0:48:45:29:ea:43:41:9c:86:d6:e1:c2: 22:e2:b2:43:99:1e:16:63:f8:f7:fc:75:46:9b:24:94:34:68: a9:93:03:d1:3d:84:ce:2f:06:98:ba:1c:51:b3:e2:41:e4:26: 1a:e7:37:48:d1:92:a3:00:22:8b:56:fe:54:90:48:84:22:9f: 4d:f7:43:63:14:c6:9f:db:4b:d4:ff:3d:a1:9a:ea:eb:cf:6c: 2e:ea:7a:5f:d2:13:f2:30:0c:3f:c7:99:88:e4:29:96:71:eb: d6:7d:bd:c5:36:27:4c:a9:bc:21:f0:78:10:5a:fa:b2:ec:00: 7a:37:f3:c8:a6:7e:57:c7:66:4c:36:b9:e0:32:e4:14:f5:e2: ff:53:3c:36:59:d8:c4:c6:2d:dc:0e:8b:da:24:1b:c7:bd:58: 79:5b:d0:5e:33:98:be:e9:3c:05:ad:d9:bc:ba:04:d1:c0:50: 78:dd:93:f9:fe:75:5d:f3:9d:5e:51:69:30:42:d1:22:c5:21: 14:6d:df:50:a2:21:68:f8:da:8c:c8:88:c8:d4:b5:f0:61:8c: 8b:d2:0c:df:4d:a8:17:0c:a0:0b:42:75:2f:e7:09:16:b5:a6: d9:eb:62:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzcyNDExMC8GA1UEBRMoMDVEMjRCM0I4QTIyMjdCNkZFRTkyRENEMjVENTRCRjA1 RUU4NjhDQTAeFw0yNDA1MTUwNzU5MDZaFw0yNDA1MjIwNzU5MDZaMBgxFjAUBgNV BAMTDTY2NDQ2YjRiLTMxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDv4GhP1/UTuGktrQhfCZyeNMTEBDpLHnTMCt1ElENwkeB0OpfqmQrp4qVA/6o 8d8hPlO6i5Yd7o4yjtkGsDsgH6LsYwZbblVOLAL+RW9v/zO7Jwji3iSID57106xC DTevIcRb0dme8O1+v+8YvBG6buU0RNqKP0LG0Q0YFFC6/elnavvvWlTiP7w0S8Gc /9pCatSiJ+thLlsE4cfaxK8kSLndnXvsz3L3ZdJFtVCr9G9rYLHBKko5HHF8Rbd0 l7E6prYesdFFi7Cmyon7GpE02RjFLVxzVKDvzO0Btky6JQEC3rfH9Z1uBYe/k44M /c2uCEx0yldWGpEAHB43JDb7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiD3+uF8y hC5N7w0L6yA7v9+mW1IwHwYDVR0jBBgwFoAUBdJLO4oiJ7b+6S3NJdVL8F7oaMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NzI0L0Q3Mzk4NzI4OTU4 NzExRUVBRDNCQjI2MkM0RjlBRTAyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmRKTE80b2lKN2ItNlMzTkpkVkw4RjdvYU1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NzI0L0Q3Mzk4NzI4OTU4NzExRUVBRDNCQjI2MkM0RjlBRTAyL0JkSkxPNG9pSjdi LTZTM05KZFZMOEY3b2FNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHObiTeyeFoc3ASQKESavFmN2Uu+lByov8BIRSnqQ0GchtbhwiLiskOZ HhZj+Pf8dUabJJQ0aKmTA9E9hM4vBpi6HFGz4kHkJhrnN0jRkqMAIotW/lSQSIQi n033Q2MUxp/bS9T/PaGa6uvPbC7qel/SE/IwDD/HmYjkKZZx69Z9vcU2J0ypvCHw eBBa+rLsAHo388imflfHZkw2ueAy5BT14v9TPDZZ2MTGLdwOi9okG8e9WHlb0F4z mL7pPAWt2by6BNHAUHjdk/n+dV3znV5RaTBC0SLFIRRt31CiIWj42ozIiMjUtfBh jIvSDN9NqBcMoAtCdS/nCRa1ptnrYqI= -----END CERTIFICATE-----Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org