$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: UQ2wdN5OY3dlM2OuxrqhDvI7liJHdxyubOSOWR+b/W8= Subject key identifier: 47:6A:51:88:8C:3B:28:C8:A2:3C:C0:55:6A:19:14:9A:44:52:5B:B6 Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 2457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 243F Signing time: Tue 30 Apr 2024 16:09:07 +0000 Manifest this update: Tue 30 Apr 2024 16:09:06 +0000 Manifest next update: Tue 07 May 2024 16:09:06 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: gMyqjsAKk2UStl69geRCIW82dpsB9V6JWDsjwX/40is=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: FOz+uDL2D22lJCuQ1AmteerbbeonZiSVvd9VihdE6tg=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: EBO15MW174X/0lG9Tyg/d0MIdJqeD9aANY0+I0S/im0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9303 (0x2457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: Apr 30 16:09:06 2024 GMT Not After : May 7 16:09:06 2024 GMT Subject: CN=663117a2-eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:d1:65:c5:01:30:f7:20:6d:05:2b:04:17: 29:74:dc:74:18:0d:24:f5:23:3f:5c:8f:16:2d:6c: f6:4a:69:30:d0:c3:95:b9:58:22:55:31:b6:d8:d6: f8:14:4d:e2:c8:62:be:36:de:66:31:26:e6:05:52: 0c:d2:ea:c5:4b:09:cc:25:33:d9:e7:bf:e5:ad:bc: 90:c7:de:28:ef:00:40:a1:34:8b:a6:80:eb:32:11: 2a:13:6c:3a:36:1a:aa:97:c0:ee:36:9a:b0:58:04: fb:a6:74:c5:47:e6:9b:c8:b0:49:79:32:b3:ef:4f: 75:5f:3c:c2:c6:2a:ac:d3:33:52:fd:ee:0e:ed:75: 2f:d9:3d:83:fa:0f:1b:6e:01:52:0f:18:65:ca:bf: 4f:17:71:fc:fe:98:b7:a9:ce:34:cd:41:ac:96:98: 40:59:39:ab:f4:3c:4d:51:e4:76:57:a7:b2:81:7e: 3e:74:e6:46:2f:85:96:35:cf:48:c0:cb:be:ee:67: 4c:3b:30:97:bf:27:98:f4:8b:39:a0:d0:25:e3:bb: ed:fd:d0:34:37:3a:42:af:78:99:fd:36:da:26:d8: 0c:43:34:b6:ec:88:5c:ba:1f:8d:db:c9:f1:c0:ca: 25:d2:49:24:7f:d1:9b:c0:1b:07:1e:06:7b:c5:24: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6A:51:88:8C:3B:28:C8:A2:3C:C0:55:6A:19:14:9A:44:52:5B:B6 X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fd:72:d4:00:95:16:e2:0a:f4:86:c0:09:60:ee:17:88:2c: a8:4b:e9:14:59:57:45:df:41:f7:bc:0e:05:51:fa:1b:ab:77: a8:6a:bd:24:be:74:25:2d:38:1b:70:e3:18:67:07:75:7e:fb: 76:d9:45:15:22:47:35:3c:8e:7f:20:f4:96:1a:33:05:fa:8c: a0:71:36:ba:09:9d:a2:78:8a:bc:f0:b1:dc:ee:91:aa:1c:c2: e9:c3:dd:4c:7c:04:0d:93:54:56:a1:13:d6:fa:80:4f:04:e2: fd:e7:08:23:6b:9e:35:2e:28:73:29:b5:d0:8a:13:62:e0:aa: 89:3a:e9:28:83:94:d8:6c:e5:4e:62:da:4f:06:66:b0:63:96: d7:5b:e9:7d:dd:dc:3f:02:3d:c7:33:d4:d7:3f:bc:ea:34:09: bc:92:a9:bd:1f:42:10:3c:d5:95:82:bb:f9:10:ff:11:0d:62: 1f:bf:85:70:fd:a5:1d:7f:3d:2f:6a:8b:01:f1:ae:7e:0d:d3: 07:6c:8c:e8:b6:d1:8c:cc:0f:e6:a2:4c:45:82:18:cf:8c:31: d3:92:0d:96:f0:62:4d:40:0b:f4:66:02:31:17:72:cc:86:7d: e4:65:be:71:fe:bd:94:a8:f1:e2:56:8a:0e:6f:1f:d7:53:4a: 9f:db:00:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjQwNDMwMTYwOTA2WhcNMjQwNTA3MTYwOTA2WjAYMRYwFAYD VQQDEw02NjMxMTdhMi1lYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYzRZcUBMPcgbQUrBBcpdNx0GA0k9SM/XI8WLWz2Smkw0MOVuVgiVTG22Nb4 FE3iyGK+Nt5mMSbmBVIM0urFSwnMJTPZ57/lrbyQx94o7wBAoTSLpoDrMhEqE2w6 Nhqql8DuNpqwWAT7pnTFR+abyLBJeTKz7091XzzCxiqs0zNS/e4O7XUv2T2D+g8b bgFSDxhlyr9PF3H8/pi3qc40zUGslphAWTmr9DxNUeR2V6eygX4+dOZGL4WWNc9I wMu+7mdMOzCXvyeY9Is5oNAl47vt/dA0NzpCr3iZ/TbaJtgMQzS27Ihcuh+N28nx wMol0kkkf9GbwBsHHgZ7xSRMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdqUYiM OyjIojzAVWoZFJpEUlu2MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4/XLUAJUW4gr0hsAJYO4XiCyoS+kUWVdF30H3vA4FUfobq3eoar0k vnQlLTgbcOMYZwd1fvt22UUVIkc1PI5/IPSWGjMF+oygcTa6CZ2ieIq88LHc7pGq HMLpw91MfAQNk1RWoRPW+oBPBOL95wgja541LihzKbXQihNi4KqJOukog5TYbOVO YtpPBmawY5bXW+l93dw/Aj3HM9TXP7zqNAm8kqm9H0IQPNWVgrv5EP8RDWIfv4Vw /aUdfz0vaosB8a5+DdMHbIzottGMzA/mokxFghjPjDHTkg2W8GJNQAv0ZgIxF3LM hn3kZb5x/r2UqPHiVooObx/XU0qf2wAk -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:38 2024 by rpki-client on console-fra.rpki-client.org