$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json) Hash identifier: K6CUNxe6I2+ysERwdPPtxPhkidjZuysB5kDkPb8yeSY= Subject key identifier: 79:19:4C:08:1C:DB:D7:96:20:83:16:99:89:19:EE:BD:70:C9:31:63 Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft Manifest number: 08A0 Signing time: Thu 02 May 2024 22:21:02 +0000 Manifest this update: Thu 02 May 2024 22:21:01 +0000 Manifest next update: Thu 09 May 2024 22:21:01 +0000 Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: pe23+NGtJbnxSPAimMhWXXB0nt+oDbtr3q49h9m53QM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Validity Not Before: May 2 22:21:01 2024 GMT Not After : May 9 22:21:01 2024 GMT Subject: CN=663411ce-8887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:a6:a3:9a:03:22:ec:9d:88:7f:75:b9:0d: 22:0c:99:f4:ca:30:1e:49:22:fd:72:0f:1f:dd:3d: d8:1c:43:2e:3a:f7:2c:98:f9:b2:bb:98:4e:34:71: cc:be:b4:2e:66:11:56:5a:06:e2:83:92:6a:1f:d2: 62:d8:cd:a1:3a:05:f3:c6:43:72:72:b1:f9:4f:89: 2a:74:8f:90:51:24:8f:53:e3:ab:36:75:47:fe:94: d5:3b:07:6e:f8:27:36:04:ce:e8:3a:cc:ab:4a:6c: 0f:8b:ac:ef:d6:3c:97:46:ee:5b:53:46:1b:2c:eb: f2:56:76:e8:3e:8c:2d:4e:08:57:7f:b1:6c:41:4a: 55:a7:61:19:10:f8:ab:a5:7f:57:57:44:65:cd:82: 12:51:9e:c4:35:9c:0c:ca:63:e1:1a:99:2e:2a:77: cd:46:5d:01:e9:e6:f9:cf:9a:57:d7:b2:be:1e:6b: df:0c:77:4d:00:56:df:86:8e:0c:90:c4:05:f6:36: d1:0c:c9:4f:2d:06:26:88:d4:53:6a:ca:01:cb:bb: ac:40:b8:1c:34:f4:50:ed:82:e0:a7:95:58:49:f3: dc:b5:ba:be:57:21:ae:aa:f0:b6:cc:0c:83:b4:01: 62:62:df:f4:43:28:73:d9:c7:e2:f4:b6:29:89:90: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:19:4C:08:1C:DB:D7:96:20:83:16:99:89:19:EE:BD:70:C9:31:63 X509v3 Authority Key Identifier: keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:34:b5:a2:5e:b5:d5:5b:64:a6:56:1a:c3:5f:7e:2d:a0:ff: 42:00:ee:a0:2d:07:e2:ca:c3:91:71:2c:b9:2a:e4:02:d4:c1: d4:ac:6a:a2:bf:81:23:31:22:ac:f0:90:d4:a0:90:c1:df:96: 0c:3c:75:3a:7a:0e:9e:d3:c0:e7:b4:45:b2:6d:74:76:ef:4c: 36:20:1b:7c:49:96:4b:59:d6:ae:9e:c6:9e:c6:db:af:b6:5d: f4:ec:9e:b0:7b:71:ae:66:7c:1d:0b:0c:75:07:ac:02:57:1b: fe:4f:b3:d1:2b:9d:55:d8:42:20:d8:2f:e6:79:4b:92:bc:4a: eb:d6:eb:43:ea:42:43:8c:e7:b4:33:7b:3f:5a:cc:12:f5:3a: ce:5c:12:c1:66:f7:c4:99:ee:04:32:2f:1d:a8:91:c5:77:c9: 4d:2a:99:ad:06:f4:e1:11:a3:f9:15:cc:4b:92:3e:29:4e:2e: 1c:13:39:af:28:06:b7:7e:54:f8:0d:2e:6a:d8:e0:bd:12:81: d2:2c:ca:82:94:b1:2a:76:e1:61:72:d8:f0:a4:6a:cb:1a:08: 28:62:d4:1a:1c:35:00:52:90:c5:9d:3c:b5:6d:f5:5f:92:5c: b9:c0:3c:4f:31:4f:82:24:cb:3a:da:ef:3e:1e:7e:e5:c1:92: c0:23:c0:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD ODcyODk0OUMwHhcNMjQwNTAyMjIyMTAxWhcNMjQwNTA5MjIyMTAxWjAYMRYwFAYD VQQDEw02NjM0MTFjZS04ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IWmo5oDIuydiH91uQ0iDJn0yjAeSSL9cg8f3T3YHEMuOvcsmPmyu5hONHHM vrQuZhFWWgbig5JqH9Ji2M2hOgXzxkNycrH5T4kqdI+QUSSPU+OrNnVH/pTVOwdu +Cc2BM7oOsyrSmwPi6zv1jyXRu5bU0YbLOvyVnboPowtTghXf7FsQUpVp2EZEPir pX9XV0RlzYISUZ7ENZwMymPhGpkuKnfNRl0B6eb5z5pX17K+HmvfDHdNAFbfho4M kMQF9jbRDMlPLQYmiNRTasoBy7usQLgcNPRQ7YLgp5VYSfPctbq+VyGuqvC2zAyD tAFiYt/0Qyhz2cfi9LYpiZC3QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkZTAgc 29eWIIMWmYkZ7r1wyTFjMB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0 eFB6Wk1ZNmxLbG5JY29sSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLNLWiXrXVW2SmVhrDX34toP9CAO6gLQfiysORcSy5KuQC1MHUrGqi v4EjMSKs8JDUoJDB35YMPHU6eg6e08DntEWybXR270w2IBt8SZZLWdaunsaextuv tl307J6we3GuZnwdCwx1B6wCVxv+T7PRK51V2EIg2C/meUuSvErr1utD6kJDjOe0 M3s/WswS9TrOXBLBZvfEme4EMi8dqJHFd8lNKpmtBvThEaP5FcxLkj4pTi4cEzmv KAa3flT4DS5q2OC9EoHSLMqClLEqduFhctjwpGrLGggoYtQaHDUAUpDFnTy1bfVf kly5wDxPMU+CJMs62u8+Hn7lwZLAI8AK -----END CERTIFICATE-----Generated at Thu May 2 23:19:02 2024 by rpki-client on console-ams.rpki-client.org