$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft File: bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json) Hash identifier: AVYizXgIyksQhf6f8u/R7iUctbZp1qcGfY8H9eaD72I= Subject key identifier: 72:F5:98:D9:32:AE:E9:13:9B:9B:E0:B5:76:22:26:80:7A:90:AB:54 Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB Certificate issuer: /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft Manifest number: 0246 Signing time: Sat 27 Apr 2024 03:51:39 +0000 Manifest this update: Sat 27 Apr 2024 03:51:39 +0000 Manifest next update: Sat 04 May 2024 03:51:39 +0000 Files and hashes: 1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: +aEVqLoKqUdcmQkbH3Hu0Te1uD2pFGp/Ebgj3D8nhKU=) 2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: V+ZB7OEBUnp2wKpTfjn4WZ0DkFpQVWQr6ywmEvQA6/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB Validity Not Before: Apr 27 03:51:39 2024 GMT Not After : May 4 03:51:39 2024 GMT Subject: CN=662c764b-155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:c8:bc:c9:e5:ef:16:62:b9:9a:4e:e4:95: 53:7e:2d:5b:ac:2d:35:24:d3:bc:dc:e5:25:2e:37: a5:e4:0d:1d:30:59:fb:3a:03:4b:3f:ed:15:25:b3: b8:54:1b:6e:84:50:e1:24:50:87:30:f9:9e:14:f8: 25:3d:8e:72:87:df:b3:96:65:4f:3c:fe:9e:83:6c: ae:38:5e:82:2b:0d:32:d3:08:3d:e9:47:a3:e5:11: cb:a9:66:df:eb:85:b8:2d:e2:7a:4e:21:85:90:da: 14:01:bd:40:42:63:59:21:60:c5:7d:b8:22:fb:4f: 09:fe:80:16:df:21:e6:8f:33:c6:93:23:f6:24:1b: 4a:b9:b5:2b:72:31:b3:1b:54:ec:a2:ee:4e:19:a5: 7d:bb:dc:62:a9:f1:24:5b:bc:bd:67:e7:11:f1:29: 76:65:1b:4b:cc:58:3f:2c:0d:e3:25:7a:25:36:52: 54:1b:df:37:0b:9a:9d:8f:aa:8a:ac:e7:c4:d2:f5: 2e:65:fd:f3:08:53:04:86:43:b0:72:c7:d5:b6:c9: 94:50:00:1d:bc:03:84:2e:09:24:36:d8:34:84:7e: 16:de:5b:63:39:73:09:1a:bd:8b:74:54:a3:5c:9b: 38:a8:32:f2:b8:7c:ee:9e:8e:4e:01:7b:e5:68:26: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F5:98:D9:32:AE:E9:13:9B:9B:E0:B5:76:22:26:80:7A:90:AB:54 X509v3 Authority Key Identifier: keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7b:2c:90:69:7c:a4:80:b8:6d:05:b9:67:49:0e:eb:d2:c8: 8f:35:bf:3a:46:55:05:9a:94:89:59:a4:e2:9e:37:71:50:59: 07:03:ba:01:40:52:49:22:18:df:d3:5e:26:2c:73:2d:aa:4c: 9b:02:20:8d:89:47:c0:48:59:b9:21:1f:ae:0c:41:18:4f:fc: 53:70:74:31:11:31:32:65:fa:f3:2f:0f:31:aa:7f:fe:8c:8e: d6:da:c6:fa:10:17:2e:55:64:84:e7:13:82:6e:42:4a:a1:ad: a8:b3:04:0b:21:bc:03:db:e0:19:07:df:fa:4f:a7:0e:37:91: 39:c6:c4:75:27:52:94:bf:fa:7c:f5:e7:fb:19:3b:08:cf:65: 22:96:46:b3:94:69:5f:70:e7:13:c5:0f:c3:0f:3a:6c:19:c2: 49:0e:37:86:13:00:77:b9:2d:11:44:91:73:aa:9b:21:16:ca: 39:b0:e3:ca:05:08:08:fc:9f:0f:0d:de:d9:f2:fb:80:bd:35: 7b:03:e2:48:7d:a8:fd:cd:4c:e7:11:01:83:86:a8:9f:96:a7: d6:ef:a5:dd:a0:e0:ec:19:a5:5d:e3:ac:21:ef:a9:53:88:b3: c5:4f:0b:1c:3f:a8:b9:3b:cb:d8:a7:25:a2:16:6d:2a:ae:00: 31:ec:a4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYyNEMxMTAvBgNVBAUTKDZEODBGRUI1MTc4MEY3RjEwNkU2MTkwREMzRTJFRTdD RTc0RUVGQkIwHhcNMjQwNDI3MDM1MTM5WhcNMjQwNTA0MDM1MTM5WjAYMRYwFAYD VQQDEw02NjJjNzY0Yi0xNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4HIvMnl7xZiuZpO5JVTfi1brC01JNO83OUlLjel5A0dMFn7OgNLP+0VJbO4 VBtuhFDhJFCHMPmeFPglPY5yh9+zlmVPPP6eg2yuOF6CKw0y0wg96Uej5RHLqWbf 64W4LeJ6TiGFkNoUAb1AQmNZIWDFfbgi+08J/oAW3yHmjzPGkyP2JBtKubUrcjGz G1Tsou5OGaV9u9xiqfEkW7y9Z+cR8Sl2ZRtLzFg/LA3jJXolNlJUG983C5qdj6qK rOfE0vUuZf3zCFMEhkOwcsfVtsmUUAAdvAOELgkkNtg0hH4W3ltjOXMJGr2LdFSj XJs4qDLyuHzuno5OAXvlaCYnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL1mNky rukTm5vgtXYiJoB6kKtUMB8GA1UdIwQYMBaAFG2A/rUXgPfxBuYZDcPi7nznTu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjI0Qy9CQjUwRDlEMEQw NkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlfRUc1aGtOdy1MdWZPZE83 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JZRC10UmVBOV9FRzVoa053LUx1Zk9kTzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjI0Qy9CQjUwRDlEMEQwNkMxMUVDQjJBQUFBMzdDNEY5QUUwMi9iWUQtdFJlQTlf RUc1aGtOdy1MdWZPZE83N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApeyyQaXykgLhtBblnSQ7r0siPNb86RlUFmpSJWaTinjdxUFkHA7oB QFJJIhjf014mLHMtqkybAiCNiUfASFm5IR+uDEEYT/xTcHQxETEyZfrzLw8xqn/+ jI7W2sb6EBcuVWSE5xOCbkJKoa2oswQLIbwD2+AZB9/6T6cON5E5xsR1J1KUv/p8 9ef7GTsIz2UilkazlGlfcOcTxQ/DDzpsGcJJDjeGEwB3uS0RRJFzqpshFso5sOPK BQgI/J8PDd7Z8vuAvTV7A+JIfaj9zUznEQGDhqiflqfW76XdoODsGaVd46wh76lT iLPFTwscP6i5O8vYpyWiFm0qrgAx7KRh -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:12 2024 by rpki-client on console-ams.rpki-client.org