$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: C619Jook4fW6Z4nJbCTqFyBsvcwxT/bBuhOinDvFVbc= Subject key identifier: 31:18:F4:BD:4E:07:03:03:9B:C8:9C:A1:C4:9A:3C:80:D9:3B:F5:D7 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 44 Signing time: Fri 17 May 2024 08:13:38 +0000 Manifest this update: Fri 17 May 2024 08:13:38 +0000 Manifest next update: Fri 24 May 2024 08:13:38 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: X0De5RrmpsduMtc2sryp98whKIAdvmXrAhJl66WaZ1I=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: zZYRuZju/6K1b+K/WY45YKEObvh7R4AMvppkXjmVq70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: May 17 08:13:38 2024 GMT Not After : May 24 08:13:38 2024 GMT Subject: CN=664711b2-12a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:c6:43:41:01:23:31:bd:5b:48:76:a5:7b: de:20:c4:3c:b9:39:95:b9:c4:71:9a:be:01:bd:fe: 9c:d8:71:aa:28:e9:83:15:f4:b3:f4:6c:7c:45:ad: ce:7e:90:39:56:ad:2e:91:d3:03:e7:48:2d:df:22: dc:7e:dc:3e:d7:f5:ae:bb:2e:8c:1f:e1:3e:cf:af: c9:58:35:96:b0:46:53:c1:68:d1:cf:bf:fb:1b:a6: 28:5a:c3:14:c2:2e:2d:3f:62:c4:2c:82:22:53:69: 58:59:69:90:f2:3a:b1:62:2b:64:b9:bb:f2:14:14: f7:8f:a0:3f:49:b8:6c:ab:0f:a9:1c:49:f2:4d:f6: 91:da:e3:c1:99:3e:e4:18:13:d3:62:17:b9:b9:26: 4e:1e:91:64:f9:af:e2:aa:08:29:df:40:0d:34:5c: d6:13:6e:4a:50:7b:08:ac:45:da:2b:9d:0d:38:2e: 04:59:08:a4:d9:24:47:51:a6:60:4a:3f:64:5c:79: b8:b4:78:78:15:17:32:62:8e:f6:4c:63:d0:9b:7f: ec:7e:1c:fe:40:ab:5b:a3:d8:52:34:2f:4c:e2:51: ac:f6:30:d2:57:5c:bd:75:01:d7:bd:3c:ec:b2:8c: 24:cb:fe:83:4d:03:5e:07:e8:f2:24:d2:18:ad:e9: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:F4:BD:4E:07:03:03:9B:C8:9C:A1:C4:9A:3C:80:D9:3B:F5:D7 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:bc:3b:5d:36:30:97:21:6e:42:d0:f8:08:ef:33:16:5e:21: 0e:cd:ee:43:3b:3c:25:31:6f:a6:20:1b:cc:33:e1:bc:d9:16: 25:0a:d4:69:7d:c4:4e:fe:16:4e:df:92:bd:bf:70:cd:3c:08: f7:2f:3d:98:fa:01:1b:ca:02:02:4c:54:65:6c:d5:57:f4:d2: 4c:48:87:7b:f3:d8:60:0c:36:3d:a2:1c:93:19:59:59:51:e3: 6b:38:39:4a:fb:f4:33:47:65:c0:40:46:1f:7d:0c:7f:24:71: 4b:ff:e6:96:2d:2d:aa:73:9d:dd:42:08:22:fd:64:7e:11:1f: d3:82:ca:9d:be:3f:b4:aa:ad:7f:cb:ac:fc:eb:0c:fc:06:46: 70:f6:66:75:2a:4a:31:0c:2b:58:29:d6:a8:93:07:9b:0c:6c: a9:89:a4:e2:ca:ec:d4:60:47:51:a1:eb:ca:8c:1f:ef:0c:c7: 4a:5c:4e:dc:6a:88:a1:86:9e:46:fa:80:0f:ee:bd:28:d0:88: fe:a0:7b:26:69:c0:6b:d8:3f:9d:68:4b:56:87:34:91:4c:6d: f7:49:1d:a7:b2:a2:7b:b2:97:a9:fb:a1:99:fa:1a:3d:70:5f: 22:b6:9c:93:b0:fc:a2:9c:73:04:95:ac:66:49:1b:19:71:fc: a1:cf:60:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OTAwODExMC8GA1UEBRMoNkNCQjY3NjdGNjNBMENCOUI3QTc0OTE0QjRBNjU3NDE3 RTRDNTc4QTAeFw0yNDA1MTcwODEzMzhaFw0yNDA1MjQwODEzMzhaMBgxFjAUBgNV BAMTDTY2NDcxMWIyLTEyYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDToMZDQQEjMb1bSHale94gxDy5OZW5xHGavgG9/pzYcaoo6YMV9LP0bHxFrc5+ kDlWrS6R0wPnSC3fItx+3D7X9a67Lowf4T7Pr8lYNZawRlPBaNHPv/sbpihawxTC Li0/YsQsgiJTaVhZaZDyOrFiK2S5u/IUFPePoD9JuGyrD6kcSfJN9pHa48GZPuQY E9NiF7m5Jk4ekWT5r+KqCCnfQA00XNYTbkpQewisRdornQ04LgRZCKTZJEdRpmBK P2Rcebi0eHgVFzJijvZMY9Cbf+x+HP5Aq1uj2FI0L0ziUaz2MNJXXL11Ade9POyy jCTL/oNNA14H6PIk0hit6dLpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMRj0vU4H AwObyJyhxJo8gNk79dcwHwYDVR0jBBgwFoAUbLtnZ/Y6DLm3p0kUtKZXQX5MV4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5MDA4LzBBOEZCQjFBQjQz MjExRUVBMjY0NDQwQ0M0RjlBRTAyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkx0blpfWTZETG0zcDBrVXRLWlhRWDVNVjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 MDA4LzBBOEZCQjFBQjQzMjExRUVBMjY0NDQwQ0M0RjlBRTAyL2JMdG5aX1k2RExt M3Awa1V0S1pYUVg1TVY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIC8O102MJchbkLQ+AjvMxZeIQ7N7kM7PCUxb6YgG8wz4bzZFiUK1Gl9 xE7+Fk7fkr2/cM08CPcvPZj6ARvKAgJMVGVs1Vf00kxIh3vz2GAMNj2iHJMZWVlR 42s4OUr79DNHZcBARh99DH8kcUv/5pYtLapznd1CCCL9ZH4RH9OCyp2+P7SqrX/L rPzrDPwGRnD2ZnUqSjEMK1gp1qiTB5sMbKmJpOLK7NRgR1Gh68qMH+8Mx0pcTtxq iKGGnkb6gA/uvSjQiP6geyZpwGvYP51oS1aHNJFMbfdJHaeyonuyl6n7oZn6Gj1w XyK2nJOw/KKccwSVrGZJGxlx/KHPYFo= -----END CERTIFICATE-----Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org