$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json) Hash identifier: 5HKTfKdtGZ0CmZNvj0ZBo4f99Lo50haNSLlMkEjDQqg= Subject key identifier: 72:8B:97:A8:03:F3:EE:EC:76:27:67:80:CA:FF:10:99:FA:CA:22:4C Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft Manifest number: D0 Signing time: Tue 07 May 2024 06:14:48 +0000 Manifest this update: Tue 07 May 2024 06:14:48 +0000 Manifest next update: Tue 14 May 2024 06:14:48 +0000 Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: GZQXAcRIcN9G2f8TBYmYH9SJhKR+teEB2hi2h77reTU=) 2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: yeL7eGMEJM19msdRI3sJCkkpbPwYnrnjdX3IFK28TkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Validity Not Before: May 7 06:14:48 2024 GMT Not After : May 14 06:14:48 2024 GMT Subject: CN=6639c6d8-b44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:93:67:4e:23:e5:da:75:95:42:ec:34:37: 23:33:3e:e1:30:c9:72:60:ec:43:b6:90:11:2f:6c: f0:ff:de:19:59:4d:63:a8:19:ac:0b:54:8a:c6:ad: 96:54:7e:71:68:07:ca:73:73:75:65:43:48:e9:4e: 66:50:c6:f4:08:85:87:b0:3e:21:a1:1c:87:74:da: 45:e0:54:9f:c4:39:b7:2b:7b:99:7c:48:9e:6b:2d: 99:4e:63:15:f6:94:9f:d4:09:f5:56:9b:70:d7:67: 46:1c:56:6c:f4:4b:d3:c6:4e:4b:5d:5a:76:f0:14: e7:61:c5:fa:f4:49:b2:03:09:d9:40:c8:48:93:1c: b9:53:2d:53:a8:0d:67:4d:7a:00:b7:37:02:64:3a: 96:d6:42:ff:5f:7e:78:3a:22:29:da:f5:4f:7e:cd: 40:9c:a9:09:b1:7d:8e:c8:9d:2b:51:c3:b0:41:c9: ee:66:ce:82:0d:10:4b:09:97:27:b8:c4:8f:93:fa: 5b:63:78:d8:9c:4a:1c:d3:0b:ba:d6:60:2e:15:69: e3:82:96:4b:73:44:cc:9b:b6:f0:de:7f:92:f7:45: 17:da:88:1d:d7:95:10:9b:a6:d3:fc:82:00:fb:6e: 8d:61:35:50:3b:20:11:d4:15:5e:54:36:23:18:8f: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8B:97:A8:03:F3:EE:EC:76:27:67:80:CA:FF:10:99:FA:CA:22:4C X509v3 Authority Key Identifier: keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:97:cf:f0:d3:f7:17:70:58:bb:c5:68:39:8c:46:ec:7d:c8: d9:01:0b:de:48:e5:ad:0d:a9:fe:67:66:c6:0a:48:d3:49:d2: a2:12:24:d4:23:fe:f7:75:ef:0e:a7:1e:4b:b0:aa:5b:80:84: d2:c1:50:8c:ed:4f:7c:55:9e:a1:1b:11:33:df:ea:0f:06:f2: 38:28:a6:a1:aa:97:44:73:a3:ac:58:e4:5e:a0:76:79:0e:06: 1a:50:b7:9e:1b:ca:ff:e3:ac:02:2b:62:d7:dc:92:1e:de:35: 86:ce:12:ae:4a:f3:6e:1d:e8:c6:8c:4f:65:8d:cc:0d:06:c7: de:92:d0:5b:6f:d7:62:67:8c:e8:50:af:a8:03:16:5a:e5:cb: 47:5c:59:e8:a5:04:da:d3:79:9d:9b:a4:e6:b6:99:33:aa:22: 45:88:68:c5:9d:9b:1a:d1:a8:22:80:4a:4f:ad:3d:63:af:be: d3:3a:ae:13:41:c1:31:24:7d:a5:1d:76:41:71:0b:4b:b5:eb: aa:ba:f0:03:91:19:df:e8:19:c5:9a:68:bb:3d:be:0d:a8:4b: a7:2e:6e:96:be:cc:25:bd:6c:5b:59:4f:30:36:18:c6:eb:51: 88:5e:07:21:08:c1:18:fe:2a:9e:5c:d8:b0:34:14:fb:5e:ec: 33:fe:b7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE RUREREEwMDIwHhcNMjQwNTA3MDYxNDQ4WhcNMjQwNTE0MDYxNDQ4WjAYMRYwFAYD VQQDEw02NjM5YzZkOC1iNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybOTZ04j5dp1lULsNDcjMz7hMMlyYOxDtpARL2zw/94ZWU1jqBmsC1SKxq2W VH5xaAfKc3N1ZUNI6U5mUMb0CIWHsD4hoRyHdNpF4FSfxDm3K3uZfEieay2ZTmMV 9pSf1An1Vptw12dGHFZs9EvTxk5LXVp28BTnYcX69EmyAwnZQMhIkxy5Uy1TqA1n TXoAtzcCZDqW1kL/X354OiIp2vVPfs1AnKkJsX2OyJ0rUcOwQcnuZs6CDRBLCZcn uMSPk/pbY3jYnEoc0wu61mAuFWnjgpZLc0TMm7bw3n+S90UX2ogd15UQm6bT/IIA +26NYTVQOyAR1BVeVDYjGI+ORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKLl6gD 8+7sdidngMr/EJn6yiJMMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5 MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx NThMUXgwWTNkSUhlM2RvQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtl8/w0/cXcFi7xWg5jEbsfcjZAQveSOWtDan+Z2bGCkjTSdKiEiTU I/73de8Opx5LsKpbgITSwVCM7U98VZ6hGxEz3+oPBvI4KKahqpdEc6OsWOReoHZ5 DgYaULeeG8r/46wCK2LX3JIe3jWGzhKuSvNuHejGjE9ljcwNBsfektBbb9diZ4zo UK+oAxZa5ctHXFnopQTa03mdm6TmtpkzqiJFiGjFnZsa0agigEpPrT1jr77TOq4T QcExJH2lHXZBcQtLteuquvADkRnf6BnFmmi7Pb4NqEunLm6WvswlvWxbWU8wNhjG 61GIXgchCMEY/iqeXNiwNBT7Xuwz/rfC -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org