$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json) Hash identifier: ZQWpM2xDLxI4Rw+zjE9xEgmHaQ1jH8EsIJpXWke2sco= Subject key identifier: 6C:45:B2:5F:5C:8C:75:CF:D5:12:40:39:EF:ED:83:DF:1A:F6:E0:F0 Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft Manifest number: 08C2 Signing time: Thu 02 May 2024 21:36:50 +0000 Manifest this update: Thu 02 May 2024 21:36:50 +0000 Manifest next update: Thu 09 May 2024 21:36:50 +0000 Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: eUQHyoD3YvLsNb9DpC4vHF4tm+BsGES8PdKOV3ojKbA=) 2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: Kz6knT09BN75Hy4drCxOmviKRWibuyMhNXF9yl8uRZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C Validity Not Before: May 2 21:36:50 2024 GMT Not After : May 9 21:36:50 2024 GMT Subject: CN=66340772-5394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:24:52:c2:06:a3:94:84:56:de:ca:1d:19: 94:26:a4:90:5e:02:90:0d:9e:f7:f0:c3:cf:70:04: 25:3c:1a:98:2e:da:b5:65:5b:a3:43:b5:3f:e4:d4: f4:7d:a9:6e:9e:09:5e:dd:ee:3a:12:9f:60:a0:df: e8:f7:0f:df:44:d8:53:e2:9d:fd:54:98:2e:c8:79: 38:05:d4:bb:65:a5:15:e6:fd:d5:91:8b:bc:e8:ff: f9:56:73:6c:54:1a:f7:e9:53:73:50:81:19:fc:da: df:6b:bb:af:aa:66:a0:f3:bf:07:69:f7:03:1f:30: 02:42:c8:08:e0:91:58:23:18:4d:36:3e:9e:7e:bd: 11:07:64:a5:4f:ee:e9:18:9a:7a:12:a4:1a:8c:fc: bb:01:45:57:58:22:35:0c:84:45:a1:b4:3c:32:54: d0:0c:1a:0a:ae:10:d0:2f:8f:8a:b0:49:78:82:13: 24:70:86:b4:cf:5d:8b:4f:b1:7b:ba:96:84:f6:db: 5c:f0:c8:9c:0a:94:1b:21:b5:70:25:d0:a8:fb:83: b1:ab:20:97:d2:00:0c:ec:6d:e3:15:d3:29:51:47: 3b:66:69:3f:a1:67:50:ed:81:7b:2c:ac:23:6f:b1: 95:75:66:09:28:f3:d9:55:3e:05:c7:87:05:64:1e: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:45:B2:5F:5C:8C:75:CF:D5:12:40:39:EF:ED:83:DF:1A:F6:E0:F0 X509v3 Authority Key Identifier: keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:54:da:57:1b:bb:2c:03:bb:42:02:71:ba:20:c0:38:4f:8b: 4a:5e:08:52:d8:eb:32:c1:18:08:05:a7:24:6d:f0:c3:31:3b: 3b:a2:19:84:4a:e9:db:90:b1:b2:5a:71:16:42:61:df:db:42: 7f:6d:66:c2:f8:fd:9e:8c:c2:ec:f3:72:f3:cc:3b:c6:b9:ff: 08:f8:a0:cb:a6:47:4f:ca:b5:1e:a2:73:93:91:f6:08:4e:92: ce:6b:54:02:1d:20:cc:af:a0:fb:d1:47:f2:fd:66:fb:47:bc: 1f:21:67:85:fc:89:34:48:10:e6:93:3a:89:03:a9:49:f1:dc: e4:80:8d:81:d1:df:81:66:dd:69:66:2c:da:59:b6:7c:ae:55: aa:3a:2b:55:75:e5:33:bc:d0:28:75:db:56:a2:a8:10:d9:c4: a8:09:6b:83:72:74:53:2b:c9:f4:6b:fa:30:50:a4:b7:0d:3c: 4f:61:db:a5:2b:67:7f:13:77:50:1d:6e:51:58:dc:ad:34:43: 72:26:0c:c7:11:7d:d0:d9:80:fb:f8:44:c6:ed:a4:35:b4:4b: 3a:64:e7:b4:16:f8:24:08:22:40:7a:bc:60:f0:ee:f0:ac:a3: 7a:3f:cc:5e:e7:f8:04:85:f6:3c:4b:99:0d:2d:fd:ea:2c:bc: 31:34:46:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyNEYxMTAvBgNVBAUTKDZEQzUyNDgxNjRCQjk1MkU4QjlFRDkyMzlCRTcxMDZB NjNDRUYwNkMwHhcNMjQwNTAyMjEzNjUwWhcNMjQwNTA5MjEzNjUwWjAYMRYwFAYD VQQDEw02NjM0MDc3Mi01Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+YkUsIGo5SEVt7KHRmUJqSQXgKQDZ738MPPcAQlPBqYLtq1ZVujQ7U/5NT0 falungle3e46Ep9goN/o9w/fRNhT4p39VJguyHk4BdS7ZaUV5v3VkYu86P/5VnNs VBr36VNzUIEZ/Nrfa7uvqmag878HafcDHzACQsgI4JFYIxhNNj6efr0RB2SlT+7p GJp6EqQajPy7AUVXWCI1DIRFobQ8MlTQDBoKrhDQL4+KsEl4ghMkcIa0z12LT7F7 upaE9ttc8MicCpQbIbVwJdCo+4OxqyCX0gAM7G3jFdMpUUc7Zmk/oWdQ7YF7LKwj b7GVdWYJKPPZVT4Fx4cFZB5O0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxFsl9c jHXP1RJAOe/tg98a9uDwMB8GA1UdIwQYMBaAFG3FJIFku5Uui57ZI5vnEGpjzvBs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI0Ri8zN0MxMTBCODhG NTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xTNkxudGtqbS1jUWFtUE84 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjVWtnV1M3bFM2TG50a2ptLWNRYW1QTzhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI0Ri8zN0MxMTBCODhGNTkxMUVBQUI3MEUyMzRDNEY5QUUwMi9iY1VrZ1dTN2xT NkxudGtqbS1jUWFtUE84R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFVNpXG7ssA7tCAnG6IMA4T4tKXghS2OsywRgIBackbfDDMTs7ohmE SunbkLGyWnEWQmHf20J/bWbC+P2ejMLs83LzzDvGuf8I+KDLpkdPyrUeonOTkfYI TpLOa1QCHSDMr6D70Ufy/Wb7R7wfIWeF/Ik0SBDmkzqJA6lJ8dzkgI2B0d+BZt1p ZizaWbZ8rlWqOitVdeUzvNAoddtWoqgQ2cSoCWuDcnRTK8n0a/owUKS3DTxPYdul K2d/E3dQHW5RWNytNENyJgzHEX3Q2YD7+ETG7aQ1tEs6ZOe0FvgkCCJAerxg8O7w rKN6P8xe5/gEhfY8S5kNLf3qLLwxNEb0 -----END CERTIFICATE-----Generated at Thu May 2 22:13:23 2024 by rpki-client on console-fra.rpki-client.org