$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json) Hash identifier: tsZaUcbnsPod/MHYvYk6Bgnb8xGvJwEioLVSQyHp2/0= Subject key identifier: DF:12:DD:B2:3B:A8:9B:94:CC:7B:C7:94:D9:D8:77:60:18:23:FA:EE Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft Manifest number: 1C Signing time: Wed 15 May 2024 08:49:19 +0000 Manifest this update: Wed 15 May 2024 08:49:19 +0000 Manifest next update: Wed 22 May 2024 08:49:19 +0000 Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: 6CiY9gEPF9EkeK/0DGv2PENhybgVg4MjjC4WlcFyi+A=) 2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: /ilft+qpBhnR4btCBCpxqp2GFPVCqW7ca/7qUfLIXBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Validity Not Before: May 15 08:49:19 2024 GMT Not After : May 22 08:49:19 2024 GMT Subject: CN=6644770f-573d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:3d:0a:2e:a1:76:d2:3b:06:5c:30:0c:8d: 59:83:84:6e:dc:ea:52:d9:fb:de:35:d9:ce:26:95: 08:3d:aa:b9:f2:b9:bd:0c:f0:1f:46:4a:00:b3:6a: 1b:67:11:d9:a9:ba:12:ad:27:6a:65:f0:4a:ce:ca: ab:56:32:6c:a4:6b:8f:1a:47:31:c0:9d:f0:13:9c: 1d:ef:b5:78:a4:d3:85:16:ce:1b:c3:ed:da:84:07: dc:21:7b:4c:70:61:d9:89:62:e2:ef:c9:e9:00:19: 25:cf:af:b6:96:36:85:0a:ff:05:cf:2f:ab:84:39: 44:38:d0:b2:fa:81:b0:67:ad:93:c1:98:18:3a:5a: e3:95:8f:30:70:bb:32:3b:05:e9:bc:dc:0a:e5:f5: a1:50:16:0f:90:03:71:7b:89:3e:74:a9:05:e2:18: 78:2b:3c:88:bf:ce:02:1e:f2:ea:27:80:9f:de:60: e5:67:ce:b4:f8:2b:33:87:b3:d6:e6:68:32:c3:e5: 0d:09:b2:ac:1a:9b:79:a0:b5:24:a3:46:17:50:e0: ac:01:36:1a:3e:9e:7b:54:17:c5:2e:70:83:f2:34: 28:34:10:6c:d4:5d:98:3d:1b:10:84:84:94:33:6d: a4:ae:8f:32:e1:3e:fb:ed:14:06:71:db:a1:82:4e: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:DD:B2:3B:A8:9B:94:CC:7B:C7:94:D9:D8:77:60:18:23:FA:EE X509v3 Authority Key Identifier: keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f7:70:97:7a:e6:51:ff:71:10:8f:8e:14:dd:c9:ee:e2:20: ca:10:ce:d1:d1:57:d3:9f:e1:ef:04:cf:ff:29:99:cc:e9:64: 5f:9d:4b:0d:88:a1:c4:4b:16:f7:dc:72:d3:5a:57:0e:cc:00: d4:ca:c0:d3:32:09:87:fe:50:3b:a0:d7:3b:ea:4a:e5:91:5c: 7b:d5:eb:0a:87:82:fb:4c:58:d7:b4:b0:55:d2:95:52:3b:95: 8e:fa:82:5b:e1:93:3b:c1:2a:99:e8:54:2a:e4:5f:f0:27:a8: e0:13:b8:6a:9a:c0:1b:c0:fd:a3:a4:cb:7f:eb:e4:99:d2:0d: 03:04:a7:dd:0d:22:73:f0:c6:44:2e:12:c3:0c:09:02:9f:18: dd:64:a3:87:2f:28:3d:a6:32:20:b6:71:b2:02:c9:80:20:05: 20:1c:a2:0f:82:4d:6e:e1:ca:79:43:e7:59:ba:23:7d:72:14: 53:6c:cd:e7:d5:1d:38:52:35:4b:e7:21:93:58:71:f6:4d:95: df:1b:2f:60:67:c9:10:61:86:d2:df:a9:dd:ed:3c:b7:cc:34: 9a:ce:05:ec:19:eb:9a:bc:68:51:e6:16:b1:fd:93:1b:43:8c: a1:f7:d6:d7:e3:e2:5b:82:0e:07:e9:92:e5:92:3c:88:ca:9e: bc:71:85:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlBQTExMC8GA1UEBRMoMDUwMTQ3Qjk0REM5RDZDQkU4QzBCMEYxQUQwQzAxODNB NjA3N0MzNDAeFw0yNDA1MTUwODQ5MTlaFw0yNDA1MjIwODQ5MTlaMBgxFjAUBgNV BAMTDTY2NDQ3NzBmLTU3M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/uz0KLqF20jsGXDAMjVmDhG7c6lLZ+9412c4mlQg9qrnyub0M8B9GSgCzahtn EdmpuhKtJ2pl8ErOyqtWMmyka48aRzHAnfATnB3vtXik04UWzhvD7dqEB9whe0xw YdmJYuLvyekAGSXPr7aWNoUK/wXPL6uEOUQ40LL6gbBnrZPBmBg6WuOVjzBwuzI7 Bem83Arl9aFQFg+QA3F7iT50qQXiGHgrPIi/zgIe8uongJ/eYOVnzrT4KzOHs9bm aDLD5Q0Jsqwam3mgtSSjRhdQ4KwBNho+nntUF8UucIPyNCg0EGzUXZg9GxCEhJQz baSujzLhPvvtFAZx26GCTt8hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3xLdsjuo m5TMe8eU2dh3YBgj+u4wHwYDVR0jBBgwFoAUBQFHuU3J1svowLDxrQwBg6YHfDQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUFBLzVGMDY5M0Y0RTc0 OTExRUVCQzUyNkYyOUM0RjlBRTAyL0JRRkh1VTNKMXN2b3dMRHhyUXdCZzZZSGZE US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlFGSHVVM0oxc3Zvd0xEeHJRd0JnNllIZkRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUFBLzVGMDY5M0Y0RTc0OTExRUVCQzUyNkYyOUM0RjlBRTAyL0JRRkh1VTNKMXN2 b3dMRHhyUXdCZzZZSGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALP3cJd65lH/cRCPjhTdye7iIMoQztHRV9Of4e8Ez/8pmczpZF+dSw2I ocRLFvfcctNaVw7MANTKwNMyCYf+UDug1zvqSuWRXHvV6wqHgvtMWNe0sFXSlVI7 lY76glvhkzvBKpnoVCrkX/AnqOATuGqawBvA/aOky3/r5JnSDQMEp90NInPwxkQu EsMMCQKfGN1ko4cvKD2mMiC2cbICyYAgBSAcog+CTW7hynlD51m6I31yFFNszefV HThSNUvnIZNYcfZNld8bL2BnyRBhhtLfqd3tPLfMNJrOBewZ65q8aFHmFrH9kxtD jKH31tfj4luCDgfpkuWSPIjKnrxxhYo= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org