$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft File: blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json) Hash identifier: vcRJ9IEdonwwBtxes0jq5BJEnBoM3uP8ckl6sK5FT9U= Subject key identifier: 70:11:47:D0:FB:E9:FE:1E:70:06:3D:85:95:D1:47:0B:16:02:E2:33 Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4 Certificate issuer: /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4 Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft Manifest number: 060F Signing time: Fri 26 Apr 2024 23:47:51 +0000 Manifest this update: Fri 26 Apr 2024 23:47:51 +0000 Manifest next update: Fri 03 May 2024 23:47:51 +0000 Files and hashes: 1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: jhIhjXqVR1X2QYRzCzYWWvL8endiDIz3skCT1tnN41s=) 2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: OKeYJ2DZmtU3gbV57powHLVplqjvdJHP0g4S+AjP7LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4 Validity Not Before: Apr 26 23:47:51 2024 GMT Not After : May 3 23:47:51 2024 GMT Subject: CN=662c3d27-85b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:88:22:63:59:e6:12:f3:6e:fb:09:89:aa: 4d:ae:01:f9:6e:d7:ed:ab:e6:cd:cd:36:ce:03:95: b3:53:97:89:31:0b:dc:de:b0:f5:f5:18:4e:c7:6c: b8:ec:1b:5e:f8:88:5b:90:4d:86:0c:75:77:58:20: d0:10:81:76:91:2d:0a:fd:91:e0:74:d7:8a:1c:3e: 62:8a:c3:8a:9e:02:95:6f:72:a6:d0:ae:c7:a8:60: b1:f3:5d:f0:ee:e4:fc:22:e5:1b:3d:85:f7:4e:20: 08:c5:df:9f:98:30:26:46:99:90:85:ec:2c:a0:17: 13:47:29:9d:b2:53:25:22:22:c3:30:47:f3:e2:bc: 1b:59:69:77:bd:86:8b:0c:a0:02:b9:c5:41:04:fe: 89:87:a1:67:f2:a3:6f:ec:84:a1:f3:01:77:0b:3d: b6:ff:d0:63:5e:01:72:2a:52:28:88:3a:fb:5d:de: 67:d2:87:d9:10:c1:a0:c7:76:01:3c:fd:52:14:e6: 88:97:40:2d:41:36:b2:99:09:94:4a:0e:41:ba:83: 73:1d:a6:1e:57:9d:a1:d6:97:e5:b7:62:09:b1:bd: 5f:14:46:4f:78:ee:aa:17:b4:4a:0e:0e:cb:5f:85: e9:d8:c4:1e:80:eb:80:93:7e:24:3b:3a:29:7d:2c: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:11:47:D0:FB:E9:FE:1E:70:06:3D:85:95:D1:47:0B:16:02:E2:33 X509v3 Authority Key Identifier: keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0c:50:0e:96:a2:93:13:d5:64:6e:db:8d:b7:7f:eb:0c:46: 5b:e8:38:6a:69:54:47:7c:d1:ef:fc:09:9b:01:ff:63:b1:6b: f1:75:29:e9:81:09:a2:15:35:c7:52:3f:fd:ad:af:11:72:3a: b3:03:5d:53:63:12:75:bf:df:de:6a:a2:75:22:bb:49:54:dd: 2d:a9:15:30:ed:3b:5e:58:e1:00:f6:52:5c:fd:bc:b1:b3:34: db:1d:0a:27:e3:9a:03:de:0c:99:3a:80:0c:27:84:66:6f:47: af:ef:f4:22:dc:c5:cd:29:13:62:6c:49:98:c9:8f:a0:81:44: 32:9e:48:2d:ff:36:80:26:26:d3:67:08:a7:4a:41:e3:f7:76: 41:9e:2c:03:1c:3d:ec:0c:c7:33:f1:1a:46:e9:71:4b:85:50: f8:ca:52:7a:3d:1b:a1:8d:70:be:f6:28:4b:a3:6d:4a:81:fb: 48:06:29:87:b6:c0:09:a7:4e:75:90:10:e7:93:fa:05:31:30: 90:0c:c5:5d:f6:79:04:39:bf:1e:43:71:70:d1:40:ee:8e:dc: cd:03:22:ee:f3:2a:76:99:34:d9:40:43:63:c1:1a:1e:bf:8a: 59:0b:dc:57:f5:08:1f:a1:13:58:56:dc:45:d7:ce:bf:fa:2f: 80:6f:4d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyNTExMTAvBgNVBAUTKDZFNUIyNDgxMTM4NkFBNEE4MkQ4MUY3MkM1REQyNDk5 Mjg2RkJGRDQwHhcNMjQwNDI2MjM0NzUxWhcNMjQwNTAzMjM0NzUxWjAYMRYwFAYD VQQDEw02NjJjM2QyNy04NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEGIImNZ5hLzbvsJiapNrgH5btftq+bNzTbOA5WzU5eJMQvc3rD19RhOx2y4 7Bte+IhbkE2GDHV3WCDQEIF2kS0K/ZHgdNeKHD5iisOKngKVb3Km0K7HqGCx813w 7uT8IuUbPYX3TiAIxd+fmDAmRpmQhewsoBcTRymdslMlIiLDMEfz4rwbWWl3vYaL DKACucVBBP6Jh6Fn8qNv7ISh8wF3Cz22/9BjXgFyKlIoiDr7Xd5n0ofZEMGgx3YB PP1SFOaIl0AtQTaymQmUSg5BuoNzHaYeV52h1pflt2IJsb1fFEZPeO6qF7RKDg7L X4Xp2MQegOuAk34kOzopfSzPYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHARR9D7 6f4ecAY9hZXRRwsWAuIzMB8GA1UdIwQYMBaAFG5bJIEThqpKgtgfcsXdJJkob7/U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI1MS84MUJGQTMyMjUz RUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3FrcUMyQjl5eGQwa21TaHZ2 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jsc2tnUk9HcWtxQzJCOXl4ZDBrbVNodnY5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI1MS84MUJGQTMyMjUzRUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3Fr cUMyQjl5eGQwa21TaHZ2OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuDFAOlqKTE9VkbtuNt3/rDEZb6DhqaVRHfNHv/AmbAf9jsWvxdSnp gQmiFTXHUj/9ra8RcjqzA11TYxJ1v9/eaqJ1IrtJVN0tqRUw7TteWOEA9lJc/byx szTbHQon45oD3gyZOoAMJ4Rmb0ev7/Qi3MXNKRNibEmYyY+ggUQynkgt/zaAJibT ZwinSkHj93ZBniwDHD3sDMcz8RpG6XFLhVD4ylJ6PRuhjXC+9ihLo21KgftIBimH tsAJp051kBDnk/oFMTCQDMVd9nkEOb8eQ3Fw0UDujtzNAyLu8yp2mTTZQENjwRoe v4pZC9xX9QgfoRNYVtxF186/+i+Ab01G -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:11 2024 by rpki-client on console-ams.rpki-client.org