$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: fqUI9LANjZyCtYNFayvky6+IPKetAukJCf2i6DKd0cQ= Subject key identifier: F0:77:15:36:B5:1D:B0:97:F7:27:5E:69:0B:0D:19:D6:8A:C9:64:55 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0552 Signing time: Sun 05 May 2024 01:00:46 +0000 Manifest this update: Sun 05 May 2024 01:00:45 +0000 Manifest next update: Sun 12 May 2024 01:00:45 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: jfdQY7PR2Wq6o6Q828lIwUJP3sUyXw0c5v9C8XsaVUg=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: s/fUirQhduJl9wnAhHh3ONw1QuvIAurXUVtBZUNnkC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: May 5 01:00:45 2024 GMT Not After : May 12 01:00:45 2024 GMT Subject: CN=6636da3d-7406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:d3:ea:80:fd:61:19:f8:08:ff:c8:7b:4b: 96:c1:bc:0a:f0:d2:77:69:bc:58:66:8c:2c:64:13: f4:14:85:59:f0:2b:55:59:54:25:81:0e:4c:e0:e8: 00:f7:3a:51:08:21:2e:9d:c7:99:31:38:46:27:7b: 4c:7c:3f:b3:fb:10:e7:d3:c2:9d:69:89:f4:e4:ed: 2e:12:ba:f7:04:85:3d:39:17:99:ae:45:ea:02:89: c7:78:10:49:42:fd:b7:6e:44:eb:b1:4f:47:88:09: 14:cc:ea:69:44:8d:82:fd:cb:fe:fd:d6:99:b6:3f: 4d:67:15:3e:c0:25:84:27:bf:0f:2b:95:8e:98:a9: 09:49:fc:70:94:37:a0:15:cc:24:e1:73:88:b5:5e: 11:7b:fa:5d:dc:a6:d7:d1:74:0e:fe:6f:74:3c:89: c9:af:7b:92:a9:19:ad:0e:14:0a:1b:ef:3c:2a:6b: f7:3f:97:26:f9:10:b4:84:35:2f:5f:6d:66:18:d5: 8d:8a:9b:e7:05:d1:9d:5f:1a:43:ba:c7:eb:a3:db: bb:0f:17:cc:96:63:77:b2:c8:40:73:02:58:c2:c8: 1c:ed:d3:c4:d2:21:ea:a4:a2:60:70:39:c6:86:e0: 82:22:72:ac:5e:32:e5:d2:60:18:95:37:5a:6f:d7: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:77:15:36:B5:1D:B0:97:F7:27:5E:69:0B:0D:19:D6:8A:C9:64:55 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7e:b1:1a:67:d7:3a:9e:fa:a6:74:84:df:ce:eb:5d:2e:26: c0:9e:f8:5a:54:39:99:62:b1:8c:54:9a:2f:98:64:46:a4:e7: 9e:ea:df:b8:e2:9e:1f:e1:2e:d9:40:2b:50:28:db:f9:e5:6b: 8b:46:3d:ae:d0:2d:a5:51:af:7b:50:88:c2:92:c3:d0:31:bf: 4b:be:61:8a:0d:57:4d:5e:39:8e:cb:1d:72:ef:bc:e8:cd:04: ba:ab:cf:97:35:2c:c6:23:b9:2f:ef:d3:03:8c:06:f3:26:ba: c2:e0:ce:1b:21:59:25:ae:0e:e3:d8:da:42:6a:9a:a9:b8:2d: f0:e2:76:aa:64:ee:8d:43:4f:58:cb:6c:f2:c6:06:d3:f5:e6: e3:7c:ed:3e:89:68:f8:44:7e:b7:9b:64:69:0d:5d:00:60:c9: 63:76:bd:3b:60:5b:ab:c4:a7:3d:62:95:1f:47:8f:5d:14:2f: 92:1e:77:77:a5:a1:48:0b:ed:04:04:6f:f9:bb:8e:06:95:d9: 22:60:cf:2d:cd:dd:b2:4f:79:89:39:ac:14:81:f9:97:43:10: 8a:d0:b7:b6:96:6f:bb:eb:91:02:31:66:4b:29:85:64:39:d9: 11:27:c9:6b:78:8b:bf:84:5d:70:42:9e:33:18:a5:17:54:ff: 7f:1a:a8:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjQwNTA1MDEwMDQ1WhcNMjQwNTEyMDEwMDQ1WjAYMRYwFAYD VQQDEw02NjM2ZGEzZC03NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1/T6oD9YRn4CP/Ie0uWwbwK8NJ3abxYZowsZBP0FIVZ8CtVWVQlgQ5M4OgA 9zpRCCEunceZMThGJ3tMfD+z+xDn08KdaYn05O0uErr3BIU9OReZrkXqAonHeBBJ Qv23bkTrsU9HiAkUzOppRI2C/cv+/daZtj9NZxU+wCWEJ78PK5WOmKkJSfxwlDeg Fcwk4XOItV4Re/pd3KbX0XQO/m90PInJr3uSqRmtDhQKG+88Kmv3P5cm+RC0hDUv X21mGNWNipvnBdGdXxpDusfro9u7DxfMlmN3sshAcwJYwsgc7dPE0iHqpKJgcDnG huCCInKsXjLl0mAYlTdab9eGFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB3FTa1 HbCX9ydeaQsNGdaKyWRVMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRfrEaZ9c6nvqmdITfzutdLibAnvhaVDmZYrGMVJovmGRGpOee6t+4 4p4f4S7ZQCtQKNv55WuLRj2u0C2lUa97UIjCksPQMb9LvmGKDVdNXjmOyx1y77zo zQS6q8+XNSzGI7kv79MDjAbzJrrC4M4bIVklrg7j2NpCapqpuC3w4naqZO6NQ09Y y2zyxgbT9ebjfO0+iWj4RH63m2RpDV0AYMljdr07YFurxKc9YpUfR49dFC+SHnd3 paFIC+0EBG/5u44GldkiYM8tzd2yT3mJOawUgfmXQxCK0Le2lm+765ECMWZLKYVk OdkRJ8lreIu/hF1wQp4zGKUXVP9/Gqhv -----END CERTIFICATE-----Generated at Sun May 5 02:13:02 2024 by rpki-client on console-ams.rpki-client.org