$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft File: Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft (raw, json) Hash identifier: fKjrfo12XB1kHmSILIzpUDmtYaFSKNCM6dyKR7sRHlQ= Subject key identifier: 0A:50:EA:2B:46:A8:44:BB:55:46:9A:15:43:FB:3B:EE:AE:FE:67:C2 Authority key identifier: 06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4 Certificate issuer: /CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4 Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft Manifest number: 08FF Signing time: Thu 02 May 2024 21:30:59 +0000 Manifest this update: Thu 02 May 2024 21:30:59 +0000 Manifest next update: Thu 09 May 2024 21:30:59 +0000 Files and hashes: 1: Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl (hash: 2QZCO7HZ3s0lB3VAbGrUQtIGsY+1XWMslYrkvM94zzQ=) 2: 87B603AAB1A611EC997A0F5AC4F9AE02.roa (hash: 9ZE4MOR0pXvq/tAlT4GScmJ9DbA1buxD5D0uLO85Tn8=) 3: 86BEB596B1A611EC997A0F5AC4F9AE02.roa (hash: P9LwtOCwk+yCrCX3ShrsgLyfDWcoUrBXj3rbldClMA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4 Validity Not Before: May 2 21:30:59 2024 GMT Not After : May 9 21:30:59 2024 GMT Subject: CN=66340613-f0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:09:6d:bb:ad:84:87:89:f7:f2:df:c8:ca: d0:a7:12:2d:95:72:41:eb:2e:e4:f3:c7:22:53:38: 51:2f:aa:27:9b:5c:af:85:62:0d:b6:95:3c:41:03: 1f:92:9b:3a:6f:b0:b5:e3:6e:c6:fe:f8:39:e4:db: e4:f3:ce:a5:43:33:1d:8e:b8:ee:b6:4b:4d:b6:a4: 99:fd:10:63:74:ef:1e:b6:b7:06:fd:06:44:b3:b0: 3d:0d:ba:0a:07:1e:89:9f:0f:09:f2:7b:33:53:18: d9:87:aa:6f:e7:20:60:31:66:b4:bd:63:28:0c:08: 9d:4e:9d:8f:a4:19:31:2b:92:64:d9:eb:c1:5f:7a: 90:b7:b3:ad:0e:66:90:aa:73:c0:48:66:91:10:f0: d1:5e:d8:4a:4e:2a:11:b7:2e:20:97:78:ae:b2:47: 23:90:cd:0b:9a:e6:0b:f7:45:28:4a:fb:3f:a3:f4: e0:6a:e5:96:16:a6:8f:39:c8:f7:9f:d0:4b:2d:7d: 89:53:f1:71:3d:57:6e:98:92:b7:8d:76:fb:f4:39: 14:7b:ec:4d:14:c8:e4:60:d8:38:35:cf:eb:ed:ca: 79:66:7c:c0:19:a2:93:8b:82:b3:14:e6:8e:58:e8: 23:c4:08:5e:7d:91:03:32:28:06:3e:ae:2d:2f:26: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:EA:2B:46:A8:44:BB:55:46:9A:15:43:FB:3B:EE:AE:FE:67:C2 X509v3 Authority Key Identifier: keyid:06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ef:80:34:ef:a6:6e:23:bf:65:32:62:ce:ea:36:f7:03:4c: e5:0b:7f:ed:b3:96:82:7d:53:e8:6b:17:37:24:fc:5e:76:10: db:4a:0e:69:22:b0:36:21:ee:89:43:3a:4f:9b:21:06:5b:70: fc:78:5a:9a:94:d5:3e:9e:a0:75:b8:f6:a8:66:e0:06:d9:89: 12:cb:1c:1b:ce:a7:b9:ee:29:8b:a0:18:1a:6d:5d:08:64:3d: 9b:a3:f0:2e:17:5b:74:0c:62:29:ca:6e:8e:bb:f2:a4:e9:95: 50:2f:f8:83:72:a9:ab:84:46:35:56:1d:e7:cd:ad:46:fc:75: 81:57:4c:55:3b:67:09:e0:6c:09:66:04:39:59:f4:48:3b:07: e1:ff:6a:e7:91:60:82:98:9c:f3:6d:57:ab:b9:c3:a7:91:26: 2a:16:5d:4a:aa:cc:b8:d7:c3:7d:b5:94:af:4e:a5:d0:d6:e7: 37:c2:9a:30:41:38:97:7c:d9:63:b7:ce:ff:0c:76:fe:77:be: 55:a8:e8:c6:62:5f:b6:52:7d:34:0a:fa:f5:80:95:c0:7d:d5: ef:e0:e0:11:b2:27:51:da:02:46:54:86:8b:cb:1c:8d:e8:29: 6e:ad:39:62:cc:03:7d:8e:be:b6:45:5d:3d:25:46:bc:04:d6: ef:f3:b1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQzIxMTAvBgNVBAUTKDA2MkUzNzE2RENDNjI2QzQ5MjRGRjUzNDdFRjczOTI4 QjgwRDczQzQwHhcNMjQwNTAyMjEzMDU5WhcNMjQwNTA5MjEzMDU5WjAYMRYwFAYD VQQDEw02NjM0MDYxMy1mMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WcJbbuthIeJ9/LfyMrQpxItlXJB6y7k88ciUzhRL6onm1yvhWINtpU8QQMf kps6b7C1427G/vg55Nvk886lQzMdjrjutktNtqSZ/RBjdO8etrcG/QZEs7A9DboK Bx6Jnw8J8nszUxjZh6pv5yBgMWa0vWMoDAidTp2PpBkxK5Jk2evBX3qQt7OtDmaQ qnPASGaREPDRXthKTioRty4gl3iuskcjkM0LmuYL90UoSvs/o/TgauWWFqaPOcj3 n9BLLX2JU/FxPVdumJK3jXb79DkUe+xNFMjkYNg4Nc/r7cp5ZnzAGaKTi4KzFOaO WOgjxAhefZEDMigGPq4tLyZCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApQ6itG qES7VUaaFUP7O+6u/mfCMB8GA1UdIwQYMBaAFAYuNxbcxibEkk/1NH73OSi4DXPE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZDMi9DRDEzQ0ZFNDg3 MDExMUVBQjI0RTA5NURDNEY5QUUwMi9CaTQzRnR6R0pzU1NUX1UwZnZjNUtMZ05j OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JpNDNGdHpHSnNTU1RfVTBmdmM1S0xnTmM4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZDMi9DRDEzQ0ZFNDg3MDExMUVBQjI0RTA5NURDNEY5QUUwMi9CaTQzRnR6R0pz U1NUX1UwZnZjNUtMZ05jOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB774A076ZuI79lMmLO6jb3A0zlC3/ts5aCfVPoaxc3JPxedhDbSg5p IrA2Ie6JQzpPmyEGW3D8eFqalNU+nqB1uPaoZuAG2YkSyxwbzqe57imLoBgabV0I ZD2bo/AuF1t0DGIpym6Ou/Kk6ZVQL/iDcqmrhEY1Vh3nza1G/HWBV0xVO2cJ4GwJ ZgQ5WfRIOwfh/2rnkWCCmJzzbVerucOnkSYqFl1Kqsy418N9tZSvTqXQ1uc3wpow QTiXfNljt87/DHb+d75VqOjGYl+2Un00Cvr1gJXAfdXv4OARsidR2gJGVIaLyxyN 6ClurTlizAN9jr62RV09JUa8BNbv87HB -----END CERTIFICATE-----Generated at Thu May 2 22:28:52 2024 by rpki-client on console-ams.rpki-client.org