$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: uJvVUxnT4ARKe5tt9kUynQ/KE1/RMTOij391GcU3vjI= Subject key identifier: E1:87:C7:6F:69:B1:66:43:23:2B:86:6D:04:F0:B2:A5:72:5E:DB:60 Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 0301 Signing time: Sun 05 May 2024 03:20:38 +0000 Manifest this update: Sun 05 May 2024 03:20:37 +0000 Manifest next update: Sun 12 May 2024 03:20:37 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: jkZs/hzr2ZPTuQ5GevMRvzzgz+NzLgqCb5ZzDASGoB4=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: HTGld4sG9yqqadz8T3In5bd8t3M3Vpo8qiuFWWL293M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: May 5 03:20:37 2024 GMT Not After : May 12 03:20:37 2024 GMT Subject: CN=6636fb06-079a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:b9:2e:77:3d:bf:2b:b7:ec:24:57:b4:ec: c3:17:ce:f0:ef:01:f0:3c:32:9e:86:f4:79:4d:ef: 3b:8d:f6:59:c0:f8:6f:8c:8c:3d:ff:c4:82:79:b5: 4b:65:a9:da:ca:e8:87:a3:65:53:8b:7e:8f:c6:d2: cb:5b:6d:1e:17:dc:e2:f3:b1:4b:99:2b:c4:df:77: 6c:87:cc:5b:f7:6e:14:8e:32:18:35:be:c1:59:dc: 87:b0:69:14:87:ae:43:a1:40:33:77:18:24:0c:97: 41:f0:0a:bd:35:8d:e8:65:b8:19:d4:5e:f8:32:68: 42:2c:6b:fd:4c:27:49:e5:3f:f5:6d:88:cc:d9:94: f5:1d:f4:af:95:cc:b9:03:f4:79:a8:da:93:56:34: 28:d4:61:7e:24:1c:19:13:93:58:46:e6:69:1a:9d: cf:88:7e:13:1a:c5:32:31:0c:42:c6:40:f2:fb:f8: 92:d6:b6:b1:f4:81:e7:4a:00:9f:4b:5b:52:bf:46: 82:52:eb:5a:cf:20:e9:6c:c0:7f:63:a0:86:e8:73: 88:bf:5e:46:a5:7a:ea:18:a1:fb:57:b0:f2:17:02: a4:2e:42:25:7d:26:f9:a9:99:84:e9:f5:fa:90:c9: d6:9f:11:1f:3d:a4:52:6f:b2:df:51:af:bb:f4:cf: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:C7:6F:69:B1:66:43:23:2B:86:6D:04:F0:B2:A5:72:5E:DB:60 X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:57:cb:57:f6:04:2a:26:ba:db:d4:a2:5f:03:7b:9d:95: 7e:02:e0:7b:c9:17:72:5d:c4:1e:e9:1d:ec:60:b8:f3:96:45: 08:8e:a7:1a:fb:50:65:d4:0a:5e:c4:22:21:ed:02:e0:e1:4b: cf:c5:e4:9e:c8:7b:b4:02:c6:f5:cc:9f:f3:e7:92:96:c3:be: 17:c3:bd:1b:12:d3:8f:34:09:3b:94:4c:20:19:87:80:ca:c2: ed:81:1c:a6:3a:3d:00:b7:17:5b:9f:d3:fb:78:d2:d4:ba:ba: b4:4a:28:b9:ad:78:e1:e7:60:22:c7:0d:b2:49:4b:ba:1b:46: 43:62:62:1b:1d:1f:4d:e7:bf:24:d3:20:43:a4:60:4f:ce:c2: f2:02:8b:0e:f9:ff:2f:59:70:08:1c:8f:36:e3:9f:2f:e0:f7: 20:46:65:96:b4:94:dc:9e:7f:67:9b:5f:06:2b:62:1c:ee:92: c1:c1:6d:d3:f9:7c:53:7c:d0:3c:7b:00:b1:ce:e0:60:64:88: 7f:7c:5c:e4:a0:30:52:ee:bf:3b:f0:e7:fc:fd:b7:df:dd:30: 63:f9:e1:14:77:64:c0:03:d2:eb:5d:34:43:ad:ad:f2:5f:f1: 66:cc:dd:90:79:cd:a9:65:48:ed:b1:11:8f:d6:d8:d0:61:90: 6b:b2:45:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjQwNTA1MDMyMDM3WhcNMjQwNTEyMDMyMDM3WjAYMRYwFAYD VQQDEw02NjM2ZmIwNi0wNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR25Lnc9vyu37CRXtOzDF87w7wHwPDKehvR5Te87jfZZwPhvjIw9/8SCebVL ZanayuiHo2VTi36PxtLLW20eF9zi87FLmSvE33dsh8xb924UjjIYNb7BWdyHsGkU h65DoUAzdxgkDJdB8Aq9NY3oZbgZ1F74MmhCLGv9TCdJ5T/1bYjM2ZT1HfSvlcy5 A/R5qNqTVjQo1GF+JBwZE5NYRuZpGp3PiH4TGsUyMQxCxkDy+/iS1rax9IHnSgCf S1tSv0aCUutazyDpbMB/Y6CG6HOIv15GpXrqGKH7V7DyFwKkLkIlfSb5qZmE6fX6 kMnWnxEfPaRSb7LfUa+79M+yawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGHx29p sWZDIyuGbQTwsqVyXttgMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxoFfLV/YEKia629SiXwN7nZV+AuB7yRdyXcQe6R3sYLjzlkUIjqca +1Bl1ApexCIh7QLg4UvPxeSeyHu0Asb1zJ/z55KWw74Xw70bEtOPNAk7lEwgGYeA ysLtgRymOj0Atxdbn9P7eNLUurq0Sii5rXjh52Aixw2ySUu6G0ZDYmIbHR9N578k 0yBDpGBPzsLyAosO+f8vWXAIHI82458v4PcgRmWWtJTcnn9nm18GK2Ic7pLBwW3T +XxTfNA8ewCxzuBgZIh/fFzkoDBS7r878Of8/bff3TBj+eEUd2TAA9LrXTRDra3y X/FmzN2Qec2pZUjtsRGP1tjQYZBrskXJ -----END CERTIFICATE-----Generated at Sun May 5 03:52:19 2024 by rpki-client on console-ams.rpki-client.org