$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: jjZ1wyaujfT2v8XvEUkAn9hmqlShGpEHeXGfiSX2qFw= Subject key identifier: F5:BC:AD:14:5D:44:CB:60:2E:48:0C:E1:33:49:A1:81:B0:16:68:21 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0BAA Signing time: Thu 02 May 2024 19:31:14 +0000 Manifest this update: Thu 02 May 2024 19:31:13 +0000 Manifest next update: Thu 09 May 2024 19:31:13 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: sNG/Pd/cRm8v/2VSH07KMUJnmv53A4bcupQER3/Lf44=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: Nx2ZZrOhuXrceSESZ3KAwjQJ2eMbecowYHd7lvaLyYg=) 3: 10F4726C368711EE86778E65C4F9AE02.roa (hash: t6J0elhur8/AvNXFy0TXEWKikN5WaCM4+xUGdeqj3cY=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: tk/gZcJkvj7qpT2nqwDEKjPRpbUWhJkiGIJ0pw9GDNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: May 2 19:31:13 2024 GMT Not After : May 9 19:31:13 2024 GMT Subject: CN=6633ea01-df6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:37:90:0d:24:71:de:55:9f:7d:7e:3e:72:93: ab:8e:80:88:b4:9c:57:d7:9e:90:33:a9:7d:a5:44: 09:54:85:ec:4b:b5:7c:2a:57:64:bd:7e:a2:df:b8: 2f:39:32:b5:89:68:a8:ca:9d:65:b5:7c:a5:bf:89: 9e:33:20:cd:19:39:cd:20:5c:27:4d:15:97:cc:bd: 9e:de:dc:cd:ae:0c:9b:6e:7b:37:37:34:53:ec:c1: 39:c7:30:40:59:9e:50:18:86:94:74:80:82:98:42: 36:dc:49:38:c3:d7:67:55:f6:6d:16:05:3f:27:88: a4:f8:92:ff:2c:fa:b1:d8:7a:fe:5c:64:0a:33:a8: 2f:7b:03:90:75:c0:40:93:2d:f8:a8:ad:61:b0:67: 7d:e4:28:15:a8:00:cb:19:04:41:45:e6:3a:4b:4c: 6c:c9:9f:00:48:c6:63:e4:55:78:96:64:19:ab:13: 4f:1e:f8:fe:5d:6b:d2:44:54:5b:ed:6a:2d:cc:76: 74:5c:0e:2f:82:06:48:6c:8b:d9:15:ab:96:b5:49: 67:7e:a9:62:64:bc:91:3e:f8:d3:fa:9f:e0:a4:d2: 01:81:0e:cc:9e:78:f1:00:1a:2c:be:40:ab:ad:50: 6d:a9:61:2a:53:6b:5c:75:de:a0:7f:d8:db:7d:2b: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:AD:14:5D:44:CB:60:2E:48:0C:E1:33:49:A1:81:B0:16:68:21 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e5:0d:44:73:bc:bf:2f:4e:10:92:fd:2d:22:a7:7b:04:27: f4:b6:d8:29:42:b4:a9:15:03:15:53:cb:82:1e:0f:d3:57:e7: c0:88:bd:12:f0:bf:68:99:51:24:70:59:91:b4:b6:82:3e:89: 5c:84:15:34:90:5a:6b:1b:2f:2a:01:37:fa:cd:7a:c5:6c:0a: c4:9d:47:f0:2f:f3:b8:08:08:21:7e:ac:e5:9f:72:4f:ac:95: 04:9f:d9:ad:7b:04:34:ff:21:06:07:2f:2d:6a:c8:88:0f:1c: 3d:29:44:47:46:63:a9:87:4d:50:11:cf:e1:bd:48:ba:32:5a: c7:ae:b8:34:ef:1e:61:40:70:01:99:2c:6c:45:49:fb:81:51: bf:6e:3f:42:8c:c4:5a:2e:f4:0b:e7:03:1b:eb:03:97:1f:1e: dd:5a:89:af:e1:98:2f:12:56:85:bf:b8:b9:35:47:e9:c7:aa: c9:fe:72:c1:c4:62:b6:9f:ed:0b:c3:8c:f5:56:80:07:f6:fe: 4d:ff:07:91:8c:7e:4b:ce:4a:ae:24:7a:de:d8:fe:d1:40:dd: 36:eb:08:de:da:bc:08:b0:c9:cd:01:1f:86:7d:0c:01:c4:a8: e8:87:eb:8b:f8:0a:09:e8:81:78:4e:55:73:86:93:d9:49:40: 10:93:73:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjQwNTAyMTkzMTEzWhcNMjQwNTA5MTkzMTEzWjAYMRYwFAYD VQQDEw02NjMzZWEwMS1kZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zeQDSRx3lWffX4+cpOrjoCItJxX156QM6l9pUQJVIXsS7V8KldkvX6i37gv OTK1iWioyp1ltXylv4meMyDNGTnNIFwnTRWXzL2e3tzNrgybbns3NzRT7ME5xzBA WZ5QGIaUdICCmEI23Ek4w9dnVfZtFgU/J4ik+JL/LPqx2Hr+XGQKM6gvewOQdcBA ky34qK1hsGd95CgVqADLGQRBReY6S0xsyZ8ASMZj5FV4lmQZqxNPHvj+XWvSRFRb 7WotzHZ0XA4vggZIbIvZFauWtUlnfqliZLyRPvjT+p/gpNIBgQ7MnnjxABosvkCr rVBtqWEqU2tcdd6gf9jbfSsXkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW8rRRd RMtgLkgM4TNJoYGwFmghMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS5Q1Ec7y/L04Qkv0tIqd7BCf0ttgpQrSpFQMVU8uCHg/TV+fAiL0S 8L9omVEkcFmRtLaCPolchBU0kFprGy8qATf6zXrFbArEnUfwL/O4CAghfqzln3JP rJUEn9mtewQ0/yEGBy8tasiIDxw9KURHRmOph01QEc/hvUi6MlrHrrg07x5hQHAB mSxsRUn7gVG/bj9CjMRaLvQL5wMb6wOXHx7dWomv4ZgvElaFv7i5NUfpx6rJ/nLB xGK2n+0Lw4z1VoAH9v5N/weRjH5LzkquJHre2P7RQN026wje2rwIsMnNAR+GfQwB xKjoh+uL+AoJ6IF4TlVzhpPZSUAQk3PJ -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org