$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: ir99jG+9OZfe0B3zXnnN9/dE3ec6I1KgXPZxrl9vCrM= Subject key identifier: 90:39:EB:99:82:50:96:C0:2C:2E:F1:22:43:12:4E:D7:DF:C3:25:42 Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 52 Signing time: Wed 15 May 2024 08:01:11 +0000 Manifest this update: Wed 15 May 2024 08:01:10 +0000 Manifest next update: Wed 22 May 2024 08:01:10 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: AK1fihqudoMyCGOHT8CvFocp8c0IaB8S6NT3Cf9T6U8=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: UGSyRpjL7ttyExQlI14icFC6/cdqhGLMajsfumm8438=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: EFe4wHrIVMtj8gmMScubMWxMxLMQyMD4rQ56V7MM9gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: May 15 08:01:10 2024 GMT Not After : May 22 08:01:10 2024 GMT Subject: CN=66446bc6-7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:1b:42:2d:7b:de:fe:de:6b:b1:a5:1a:5e: c4:5c:0e:e1:1a:8c:fe:62:75:99:65:4b:c4:22:d6: 95:13:be:89:89:af:b4:10:f2:97:8c:6f:76:5a:c5: 9c:be:c5:8e:e9:45:e7:ea:14:86:0a:52:4d:5f:8d: 89:46:63:5b:c2:a8:40:08:64:a4:a0:00:a5:16:d5: f8:0f:43:a2:1f:68:aa:3e:e8:91:fe:de:4e:28:5d: d8:04:48:a3:66:a6:fe:38:82:c7:df:da:bf:9e:b0: b1:8d:e4:22:4d:c8:09:db:1b:a7:be:68:d5:37:88: 23:f3:2c:a3:4a:ab:18:80:a2:36:6a:d8:c9:33:ff: a8:6e:7c:1d:c1:de:0d:aa:6b:45:0c:44:7e:a8:eb: d1:18:d6:2a:12:61:02:ef:84:bd:47:c5:9f:04:6b: 21:a0:06:d1:cb:38:48:10:b3:2e:38:a4:58:09:07: e3:99:d8:1e:0b:84:c6:63:ba:fa:3d:cc:8b:21:82: 8a:53:fa:5f:57:54:f7:1c:0a:67:b9:c8:d6:a1:ef: e7:d4:59:f9:f1:d4:2d:5d:df:b0:dc:90:1d:0a:73: 05:c2:b9:aa:dc:2b:e4:2d:b1:a6:31:7c:58:aa:d0: cf:f1:fd:37:4f:d3:8a:a7:8c:e6:1c:1c:1d:d0:f0: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:EB:99:82:50:96:C0:2C:2E:F1:22:43:12:4E:D7:DF:C3:25:42 X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:c8:71:b4:33:b0:85:a0:78:59:10:3e:02:42:4d:50:10: 74:52:74:51:2d:83:d1:0a:3c:fd:8d:bf:d6:e3:55:84:45:2f: ab:b9:de:12:63:3c:59:ee:43:e4:16:38:c8:72:23:0d:79:17: a4:53:b4:55:cb:1c:2f:89:0d:00:07:0d:fa:5a:27:e9:5e:06: 97:18:0b:a3:51:6d:e9:2f:94:c6:93:8d:10:a5:a6:c4:c0:b0: 2e:01:84:62:12:f1:b9:dd:0e:16:86:e0:1b:2f:1e:e5:f8:e9: df:f8:a1:c0:57:6f:4d:74:30:5e:af:8e:f0:25:e9:1d:d8:68: df:f3:e7:98:4d:b5:52:8b:3c:9a:ed:0f:b8:2f:78:94:63:28: de:8a:28:8c:82:1b:51:dc:b6:a2:2a:7e:4d:c0:c1:84:1f:9b: 4f:83:24:89:a1:37:7b:09:80:27:25:4c:1f:0a:1f:c0:32:e1: 6e:bc:0c:09:5b:97:00:0d:74:fd:b2:1c:6f:1a:ef:df:d4:c4: 3a:ea:3a:12:71:de:5c:81:10:36:45:49:ad:44:a7:66:7c:f2: 47:74:9f:d7:99:da:28:ec:f9:01:cb:82:8f:d1:51:4c:32:04: 92:bf:b6:e9:33:d8:b1:b8:49:bb:2e:1a:f3:c1:59:dd:78:4f: 41:40:fa:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzUyNjExMC8GA1UEBRMoMDVGRDJENTE5RDQwQ0IyMDg5MzdCRjhBOEU0NjNFNkQ4 NDJDQzA3RDAeFw0yNDA1MTUwODAxMTBaFw0yNDA1MjIwODAxMTBaMBgxFjAUBgNV BAMTDTY2NDQ2YmM2LTc0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaShtCLXve/t5rsaUaXsRcDuEajP5idZllS8Qi1pUTvomJr7QQ8peMb3ZaxZy+ xY7pRefqFIYKUk1fjYlGY1vCqEAIZKSgAKUW1fgPQ6IfaKo+6JH+3k4oXdgESKNm pv44gsff2r+esLGN5CJNyAnbG6e+aNU3iCPzLKNKqxiAojZq2Mkz/6hufB3B3g2q a0UMRH6o69EY1ioSYQLvhL1HxZ8EayGgBtHLOEgQsy44pFgJB+OZ2B4LhMZjuvo9 zIshgopT+l9XVPccCme5yNah7+fUWfnx1C1d37DckB0KcwXCuarcK+QtsaYxfFiq 0M/x/TdP04qnjOYcHB3Q8KLxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkDnrmYJQ lsAsLvEiQxJO19/DJUIwHwYDVR0jBBgwFoAUBf0tUZ1AyyCJN7+KjkY+bYQswH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNTI2L0ExM0M1NUNFOThC NjExRUU4QjQ5MDQ4N0M0RjlBRTAyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmYwdFVaMUF5eUNKTjctS2prWS1iWVFzd0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz NTI2L0ExM0M1NUNFOThCNjExRUU4QjQ5MDQ4N0M0RjlBRTAyL0JmMHRVWjFBeXlD Sk43LUtqa1ktYllRc3dIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIIyyHG0M7CFoHhZED4CQk1QEHRSdFEtg9EKPP2Nv9bjVYRFL6u53hJj PFnuQ+QWOMhyIw15F6RTtFXLHC+JDQAHDfpaJ+leBpcYC6NRbekvlMaTjRClpsTA sC4BhGIS8bndDhaG4BsvHuX46d/4ocBXb010MF6vjvAl6R3YaN/z55hNtVKLPJrt D7gveJRjKN6KKIyCG1HctqIqfk3AwYQfm0+DJImhN3sJgCclTB8KH8Ay4W68DAlb lwANdP2yHG8a79/UxDrqOhJx3lyBEDZFSa1Ep2Z88kd0n9eZ2ijs+QHLgo/RUUwy BJK/tukz2LG4SbsuGvPBWd14T0FA+mg= -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org