$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: zVTeD73D9JTXRFIvbNiCW9HhhZpeIiHetMnaSoHaRJg= Subject key identifier: 99:72:6A:D6:BD:A8:FE:5A:FD:13:B0:CB:9F:87:24:A6:52:A9:67:00 Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 23F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 23E6 Signing time: Sat 04 May 2024 16:09:10 +0000 Manifest this update: Sat 04 May 2024 16:09:10 +0000 Manifest next update: Sat 11 May 2024 16:09:10 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: Gtw6zckHvgmU1RbqDjxfXmIzgEVy+KokRpUiJ87xJts=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: U2yrRKU3HbDoIBWBQu4qm/wky6pQMgcQfh+AO7HPjc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9203 (0x23f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: May 4 16:09:10 2024 GMT Not After : May 11 16:09:10 2024 GMT Subject: CN=66365da6-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:f8:a4:41:e4:b2:01:71:79:cb:2c:71:73: d7:ff:8a:3d:98:d3:17:8d:3a:d2:aa:38:0e:97:a3: c5:a6:7b:b0:c8:b4:81:d2:cb:70:27:13:93:97:32: 85:9b:29:84:f5:ca:91:2a:23:c8:cf:ed:60:48:58: 2f:7e:b6:fa:a8:bb:10:50:5b:9b:c3:3f:ad:54:04: c9:d1:cc:14:50:1f:83:45:f1:a4:0e:ad:2c:68:3e: 42:e8:14:2e:67:30:2a:c6:89:23:27:b5:0b:b2:86: e9:49:66:52:9a:02:50:ad:4d:0b:5f:4f:6e:a3:4e: 25:56:f2:36:f6:a4:ef:ce:3b:37:c5:e1:69:cd:90: ec:6f:6d:38:c5:44:09:d7:e3:e1:b2:a0:41:20:01: ec:a9:6d:80:a7:02:03:54:9e:6e:eb:7d:91:2f:1a: 3f:98:68:e5:f7:3c:30:c6:10:72:e8:26:61:32:be: 36:f3:66:43:6c:d8:20:eb:7f:b8:7c:f5:28:dc:55: f9:fd:48:c7:82:69:f2:00:ce:a6:d5:b8:7f:b7:92: 79:3c:34:13:74:d2:9a:50:75:66:63:b2:33:1d:e8: 91:d0:94:07:11:93:db:bd:04:ef:e4:f9:ae:55:a8: ca:cb:d9:9a:88:7a:20:6a:67:1f:27:69:72:f6:19: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:6A:D6:BD:A8:FE:5A:FD:13:B0:CB:9F:87:24:A6:52:A9:67:00 X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:86:5e:13:e5:31:5d:4c:4e:33:04:04:d4:3c:8f:f5:4d: 71:ea:ce:c2:36:60:e7:e4:96:2c:a6:71:6a:6b:9c:fe:78:9f: 0e:c9:b4:52:04:b8:54:45:fb:a3:52:3e:ab:06:44:75:ef:3d: ed:2f:61:54:7a:48:26:ca:af:ae:40:9f:d0:c6:61:fd:51:f1: 5f:58:67:df:6f:98:ce:f5:c0:62:15:b9:1e:85:52:d6:bd:ac: e3:82:7b:fe:71:5a:4f:a6:6a:e1:9f:62:40:d1:53:55:6f:0c: 8e:87:b0:74:d7:6e:fc:8d:07:9a:c0:87:02:c6:33:a1:ba:c6: de:a5:92:09:51:06:1d:40:83:62:38:24:3b:d5:1b:3c:92:89: ba:a3:cf:0c:6a:5b:6e:a0:0f:2f:9a:45:b0:c0:ab:27:02:5f: cd:5a:9e:74:b4:69:f3:91:ab:d4:55:c2:78:7a:32:e9:72:56: 96:b5:fb:fb:59:a0:a4:c8:13:3f:53:17:1e:b2:20:ea:eb:07: 27:3b:bb:70:35:4d:d9:10:94:ba:27:48:60:d2:7b:7e:83:62: 90:5c:44:ee:b2:7d:9b:da:04:1a:b0:11:e4:fb:f0:15:51:ee: 8b:96:bf:de:b2:a8:3e:a4:b7:e1:1f:2f:99:7e:be:c0:ac:34: e3:7b:6d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjQwNTA0MTYwOTEwWhcNMjQwNTExMTYwOTEwWjAYMRYwFAYD VQQDEw02NjM2NWRhNi01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kD4pEHksgFxecsscXPX/4o9mNMXjTrSqjgOl6PFpnuwyLSB0stwJxOTlzKF mymE9cqRKiPIz+1gSFgvfrb6qLsQUFubwz+tVATJ0cwUUB+DRfGkDq0saD5C6BQu ZzAqxokjJ7ULsobpSWZSmgJQrU0LX09uo04lVvI29qTvzjs3xeFpzZDsb204xUQJ 1+PhsqBBIAHsqW2ApwIDVJ5u632RLxo/mGjl9zwwxhBy6CZhMr4282ZDbNgg63+4 fPUo3FX5/UjHgmnyAM6m1bh/t5J5PDQTdNKaUHVmY7IzHeiR0JQHEZPbvQTv5Pmu VajKy9maiHogamcfJ2ly9hm3qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlyata9 qP5a/ROwy5+HJKZSqWcAMB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+YZeE+UxXUxOMwQE1DyP9U1x6s7CNmDn5JYspnFqa5z+eJ8OybRS BLhURfujUj6rBkR17z3tL2FUekgmyq+uQJ/QxmH9UfFfWGffb5jO9cBiFbkehVLW vazjgnv+cVpPpmrhn2JA0VNVbwyOh7B01278jQeawIcCxjOhusbepZIJUQYdQINi OCQ71Rs8kom6o88MaltuoA8vmkWwwKsnAl/NWp50tGnzkavUVcJ4ejLpclaWtfv7 WaCkyBM/UxcesiDq6wcnO7twNU3ZEJS6J0hg0nt+g2KQXETusn2b2gQasBHk+/AV Ue6Llr/esqg+pLfhHy+Zfr7ArDTje21+ -----END CERTIFICATE-----Generated at Sat May 4 17:19:48 2024 by rpki-client on console-fra.rpki-client.org