$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: 0DQteTOaI3rBACHFAjdjet6UGIqIwrumETuI5xqNlqE= Subject key identifier: 54:25:2C:87:99:D4:F7:1B:48:0D:F7:D5:81:60:65:76:49:00:59:81 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1A59 Signing time: Mon 06 May 2024 16:50:09 +0000 Manifest this update: Mon 06 May 2024 16:50:09 +0000 Manifest next update: Mon 13 May 2024 16:50:09 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: rKGaeealNpXB5r7yev/t6zYWwvfZlvbecp96OgOifoE=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: SWtO7q8oGVQaD7ju/Eh1rOFPuyOwEeNyQlQrFraUmqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6751 (0x1a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: May 6 16:50:09 2024 GMT Not After : May 13 16:50:09 2024 GMT Subject: CN=66390a41-4ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:1e:9c:4e:3b:52:89:22:1a:ce:92:76:d8: 13:6d:5e:4b:af:c6:67:a2:08:d6:de:d9:90:db:e6: 0d:2f:84:7c:7e:06:e3:4a:ec:df:ac:87:88:4b:b0: b8:f3:7f:24:79:2f:d3:90:b8:2b:c8:15:a8:a6:96: b3:98:f4:b5:45:05:86:29:e6:9a:a1:eb:24:06:51: 19:15:69:c9:79:40:36:ec:1e:3b:72:33:3a:1f:6f: 26:86:51:4f:0e:af:71:fb:bf:ee:9f:40:a8:38:ea: 91:29:c8:5a:d4:12:e2:a9:3e:3d:ce:84:72:ff:97: b9:98:4a:97:1e:3f:7b:a5:09:5b:69:48:c4:95:38: 93:ce:b3:04:4b:ac:3f:e2:4d:3c:d5:53:a8:a5:dc: 1c:66:cf:45:ca:38:68:a1:2b:41:b6:74:5a:66:ee: c2:bc:95:e3:05:df:ad:68:93:de:6b:a3:ae:b9:e0: 5c:e0:9a:61:48:55:d3:90:25:41:8f:f9:01:cc:00: fd:7f:89:6e:b3:4e:df:6c:a4:be:5b:70:5d:ff:73: a4:74:a3:ed:30:33:6c:2d:db:49:e1:ba:3b:b7:5f: a7:b4:14:2d:bd:4a:05:11:3f:51:72:89:ba:40:fb: 7f:20:1e:20:40:2c:f7:75:d8:46:d7:0c:22:70:ee: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:2C:87:99:D4:F7:1B:48:0D:F7:D5:81:60:65:76:49:00:59:81 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1a:6a:51:29:cb:0b:c1:22:a9:a5:0e:77:2d:c8:87:4b:65: ae:46:75:17:b6:c3:25:de:72:a0:57:1a:32:ae:84:02:ad:57: 15:a7:89:74:09:45:d1:cb:e8:89:fa:56:dd:68:a7:16:f1:6c: 49:c9:d8:62:d5:44:f4:8e:14:fb:89:43:e0:5d:c2:46:7c:c0: 60:b9:b8:ea:7d:cc:0b:12:79:10:4a:79:2d:bc:9d:37:61:78: 3a:29:3b:84:3f:f0:1a:ee:e1:47:86:f3:fb:39:b4:35:ca:6e: 4c:87:ea:00:b9:a8:dc:15:58:fa:8a:d2:74:00:19:1c:79:55: 57:3e:51:dc:7d:19:d5:ce:7f:f7:b9:67:4f:0e:28:f6:fd:55: ec:58:b4:87:ad:ef:db:f9:2b:d4:8a:f2:5f:84:00:84:cf:ed: d2:1b:83:be:df:c3:f3:29:63:d2:d8:24:a6:56:22:11:4a:4e: 10:b0:49:a6:87:ee:15:9f:e1:15:31:80:6f:6c:2b:ff:dc:66: 55:c5:68:4b:7b:df:14:93:3f:db:2c:f9:33:b9:54:65:eb:fd: 49:62:e9:25:cd:e7:98:c8:08:91:11:4b:d6:11:bb:b3:f5:2c: 1b:0b:1f:4b:fc:bf:5b:40:4d:97:7e:dd:b8:a2:e8:78:bc:7c: 75:be:2b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjQwNTA2MTY1MDA5WhcNMjQwNTEzMTY1MDA5WjAYMRYwFAYD VQQDEw02NjM5MGE0MS00ZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMIenE47UokiGs6SdtgTbV5Lr8ZnogjW3tmQ2+YNL4R8fgbjSuzfrIeIS7C4 838keS/TkLgryBWoppazmPS1RQWGKeaaoeskBlEZFWnJeUA27B47cjM6H28mhlFP Dq9x+7/un0CoOOqRKcha1BLiqT49zoRy/5e5mEqXHj97pQlbaUjElTiTzrMES6w/ 4k081VOopdwcZs9FyjhooStBtnRaZu7CvJXjBd+taJPea6OuueBc4JphSFXTkCVB j/kBzAD9f4lus07fbKS+W3Bd/3OkdKPtMDNsLdtJ4bo7t1+ntBQtvUoFET9Rcom6 QPt/IB4gQCz3ddhG1wwicO6hjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQlLIeZ 1PcbSA331YFgZXZJAFmBMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGmpRKcsLwSKppQ53LciHS2WuRnUXtsMl3nKgVxoyroQCrVcVp4l0 CUXRy+iJ+lbdaKcW8WxJydhi1UT0jhT7iUPgXcJGfMBgubjqfcwLEnkQSnktvJ03 YXg6KTuEP/Aa7uFHhvP7ObQ1ym5Mh+oAuajcFVj6itJ0ABkceVVXPlHcfRnVzn/3 uWdPDij2/VXsWLSHre/b+SvUivJfhACEz+3SG4O+38PzKWPS2CSmViIRSk4QsEmm h+4Vn+EVMYBvbCv/3GZVxWhLe98Ukz/bLPkzuVRl6/1JYuklzeeYyAiREUvWEbuz 9SwbCx9L/L9bQE2Xft24ouh4vHx1vitW -----END CERTIFICATE-----Generated at Mon May 6 17:35:40 2024 by rpki-client on console-fra.rpki-client.org