$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json) Hash identifier: kIzAamCGIOBGW3qSvPAYd/LLuRJ0lk0FxlZFP0I/ZIw= Subject key identifier: F9:78:63:EE:C6:DF:DA:DE:DF:9E:66:19:43:66:AF:E9:0D:E6:FD:C8 Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Certificate serial: 2324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft Manifest number: 22EE Signing time: Mon 06 May 2024 16:14:16 +0000 Manifest this update: Mon 06 May 2024 16:14:15 +0000 Manifest next update: Mon 13 May 2024 16:14:15 +0000 Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: X3estCn0MZhaVMpjReAFwOouD+9TAM/YatsDH8AjzZk=) 2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 6FzTErua6zVRjA4m/wfjFvNdrgSAolo9Xv/d3ECiAA0=) 3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: LGNomlgqDqpLqSn9ZYHAT8zD9HJTl5VhkadKzXIInYI=) 4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: pXmOPxjTSGHK20MT3o7jimG6ebJpxUymDnYJcXye3KA=) 5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: b9YjiVHAZb2iIvJndKP7AxgXIfitI4Fx393W+23xl9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8996 (0x2324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD Validity Not Before: May 6 16:14:15 2024 GMT Not After : May 13 16:14:15 2024 GMT Subject: CN=663901d8-a526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:e7:c3:97:46:9f:9b:10:e3:ca:cf:4b:95: 71:cc:52:b8:8b:63:73:76:8b:be:ad:68:2b:0b:d1: f3:93:8c:ae:eb:2f:68:91:e6:77:72:8a:8a:79:95: 05:64:94:c6:7d:a1:58:29:cb:78:4f:ab:6c:89:3e: 95:70:06:ca:7c:e5:2e:4d:ad:36:22:11:a2:94:67: d7:f4:3f:78:1d:b9:d1:63:87:99:e2:8e:b8:70:a1: 0c:fe:e1:30:63:1b:e9:54:a4:09:c8:c8:65:35:e9: 31:98:f8:9f:7b:2c:05:89:03:53:48:66:9f:8b:89: 33:40:e0:bc:40:33:10:8e:98:b1:89:2c:44:40:60: 1d:e3:34:d8:f2:d5:91:eb:bd:6f:d2:f3:de:e3:89: 4a:6f:e8:bb:d9:b1:d3:47:b6:9a:6c:bb:b0:09:e8: 0b:53:62:92:7e:a6:e5:a2:0e:dd:d2:7b:eb:34:bc: b3:16:46:b9:0c:d5:66:e6:e6:ab:a7:2e:f3:dc:d5: 87:6d:40:fe:71:4a:c5:73:8f:28:55:cb:1b:df:68: b3:c6:dd:6b:b3:69:2c:a8:25:a6:82:b9:78:40:68: 86:9f:be:e3:21:fd:69:26:cb:73:b4:b0:65:ac:54: e1:2f:57:5c:0a:09:ac:6d:30:a2:a7:7d:9a:18:c3: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:78:63:EE:C6:DF:DA:DE:DF:9E:66:19:43:66:AF:E9:0D:E6:FD:C8 X509v3 Authority Key Identifier: keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:78:1a:2a:df:bf:ac:cc:f2:7a:1d:0a:31:5a:50:b6:60:77: 29:f6:66:0e:17:ae:fb:3d:3b:2a:27:95:73:5c:61:e0:e7:1c: 1e:b6:6d:03:a9:cd:4e:cc:2b:1a:0e:fc:80:92:6d:4b:b9:33: d3:ad:19:6e:01:8b:01:dd:18:a8:4f:0d:b5:66:aa:aa:cf:2e: c5:33:ea:06:16:bf:64:a4:97:12:01:37:ec:7a:7a:30:db:e6: ff:1d:10:00:e2:ca:f2:a8:2b:65:c0:20:b0:4b:f2:74:12:b8: 2a:67:34:92:85:60:61:18:5f:34:9e:12:27:3a:e5:d6:86:84: cf:15:41:8b:c8:6b:16:ff:0d:6b:c7:d3:e7:63:a5:93:cb:51: e6:6e:65:4a:a4:bb:3e:b4:f7:1e:f5:7e:63:84:81:ae:65:9e: cd:d0:d1:d6:29:a7:70:a1:c5:c1:9d:57:f5:ac:8b:6e:89:32: 3e:fc:50:47:c8:0b:61:28:dc:0b:11:66:d2:a2:c8:e5:eb:63: be:fb:55:4d:41:e9:7d:74:17:cd:b9:dd:af:95:13:25:48:82: c8:fa:3c:3d:6d:d4:86:12:db:98:b5:a4:24:83:33:69:1d:f3: 50:d4:07:e4:d3:3f:cd:f6:63:1d:02:d4:ba:ff:f1:10:41:24: 13:7e:db:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMkYxMTAvBgNVBAUTKDA0NUI1QzA4NjdERTU4MUQyQjc0ODQyRkVGODA0NUMx QTc3QkU4QkQwHhcNMjQwNTA2MTYxNDE1WhcNMjQwNTEzMTYxNDE1WjAYMRYwFAYD VQQDEw02NjM5MDFkOC1hNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GHnw5dGn5sQ48rPS5VxzFK4i2Nzdou+rWgrC9Hzk4yu6y9okeZ3coqKeZUF ZJTGfaFYKct4T6tsiT6VcAbKfOUuTa02IhGilGfX9D94HbnRY4eZ4o64cKEM/uEw YxvpVKQJyMhlNekxmPifeywFiQNTSGafi4kzQOC8QDMQjpixiSxEQGAd4zTY8tWR 671v0vPe44lKb+i72bHTR7aabLuwCegLU2KSfqblog7d0nvrNLyzFka5DNVm5uar py7z3NWHbUD+cUrFc48oVcsb32izxt1rs2ksqCWmgrl4QGiGn77jIf1pJstztLBl rFThL1dcCgmsbTCip32aGMPnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl4Y+7G 39re355mGUNmr+kN5v3IMB8GA1UdIwQYMBaAFARbXAhn3lgdK3SEL++ARcGne+i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyRi9ENDExNDE0QzZE NTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdCMHJkSVF2NzRCRndhZDc2 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JGdGNDR2ZlV0IwcmRJUXY3NEJGd2FkNzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyRi9ENDExNDE0QzZENTYxMUU1OTBEODc0NzJDNEY5QUUwMi9CRnRjQ0dmZVdC MHJkSVF2NzRCRndhZDc2TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbeBoq37+szPJ6HQoxWlC2YHcp9mYOF677PTsqJ5VzXGHg5xwetm0D qc1OzCsaDvyAkm1LuTPTrRluAYsB3RioTw21Zqqqzy7FM+oGFr9kpJcSATfsenow 2+b/HRAA4sryqCtlwCCwS/J0ErgqZzSShWBhGF80nhInOuXWhoTPFUGLyGsW/w1r x9PnY6WTy1HmbmVKpLs+tPce9X5jhIGuZZ7N0NHWKadwocXBnVf1rItuiTI+/FBH yAthKNwLEWbSosjl62O++1VNQel9dBfNud2vlRMlSILI+jw9bdSGEtuYtaQkgzNp HfNQ1Afk0z/N9mMdAtS6//EQQSQTftuL -----END CERTIFICATE-----Generated at Mon May 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org