$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: aOuCdfNGpU0mR7/5zy7RN6X0duRCzMTuK506MWi6J5k= Subject key identifier: 60:D2:97:4D:05:60:55:BD:B3:A6:87:CD:D8:98:EC:19:97:2D:9F:02 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 67 Signing time: Wed 15 May 2024 07:41:24 +0000 Manifest this update: Wed 15 May 2024 07:41:23 +0000 Manifest next update: Wed 22 May 2024 07:41:23 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: 95ejx9xmHGZihQzsghxaFOBrSml95w5KTdjFXCTbtGg=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: 0DcvxeyxeEvQN1X0ZwP9nl6328Dax3gab5pso/T3blw=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLiPmscsIFEzMDanx/2uks9ZaF4WqbF/SVD9lFpwzi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: May 15 07:41:23 2024 GMT Not After : May 22 07:41:23 2024 GMT Subject: CN=66446723-8d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:f7:0b:63:32:ae:d2:12:89:16:31:59:c8: af:52:31:f4:9a:12:c7:62:e6:4a:3c:e0:f7:cb:c0: 52:09:69:b0:c2:8c:4a:3b:14:1e:a0:f9:01:20:51: 49:34:ea:ec:c3:7a:d0:33:91:58:fe:d7:94:93:b4: 0f:2b:68:01:4b:bb:ec:04:50:4f:73:6a:6d:c6:b9: 70:dc:b7:c8:4a:e3:51:a6:a2:51:70:22:d6:f7:ef: 28:8c:6e:42:18:b3:c9:10:19:96:d9:89:0c:d4:7d: 47:d1:da:9a:a1:1f:8d:54:6d:68:4c:01:f2:ad:e0: d6:5a:c3:49:22:32:47:cf:d5:84:f3:8d:b3:ee:f4: 75:b1:ba:5d:7d:6d:30:47:42:e7:da:92:8e:74:27: 81:b9:95:94:b0:1a:2f:57:43:4d:48:27:fa:92:92: 1a:dd:84:04:98:9a:dc:88:47:bc:78:f7:4c:7d:c5: 48:6e:f1:2c:e8:dc:98:80:f0:00:8e:59:22:c6:16: 06:5c:b1:a8:a7:cf:a5:6b:1e:ad:85:e8:f9:e0:b0: f1:ee:77:f8:cb:06:50:32:bb:14:49:8e:71:cd:75: 0d:32:6d:b2:95:91:b2:5e:af:dc:e3:75:2a:1f:7f: f8:f2:e4:01:72:42:20:0f:7a:f8:8a:f1:c6:56:41: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:97:4D:05:60:55:BD:B3:A6:87:CD:D8:98:EC:19:97:2D:9F:02 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:2e:d6:c6:43:2c:62:b6:0e:cd:63:c8:2d:72:63:3a:a7: 41:29:a3:63:ef:47:f9:a6:50:f6:2b:01:a5:02:55:b0:7e:26: b2:8f:a9:fd:89:e1:24:88:0e:64:58:50:51:e2:53:df:f3:dc: 93:29:fb:43:2f:ab:d7:47:7e:3a:a8:1a:1f:15:0d:e7:0c:a9: be:cb:06:4e:24:d6:cc:b7:bc:7c:50:89:01:4f:32:11:a7:3a: d9:93:00:af:e5:21:28:80:12:af:ff:95:cf:0c:cb:e0:28:be: 39:61:8f:bd:b7:9a:97:50:e6:e5:6e:a2:30:61:01:5d:05:c4: 63:87:89:b4:c3:99:b1:fa:4d:9c:7c:4e:05:9e:9f:e4:f3:3d: 73:96:6c:51:fa:01:49:5b:f3:8a:c8:f5:b4:59:d2:62:72:69: f4:82:8a:19:0a:48:1b:10:2d:3e:4b:84:6a:c1:f6:a0:34:60: 36:75:bb:1f:d3:b0:6c:8a:42:03:a9:89:db:95:48:8c:26:0b: 07:ea:e1:49:16:94:f7:a4:ce:67:85:7d:6f:e5:07:a8:26:e8: 06:c2:2b:60:bf:95:ce:47:67:d0:c6:fb:d6:72:83:b0:6b:3a: 8a:c2:61:21:76:b5:a3:1e:46:f5:5c:1e:cb:77:3c:8a:3e:1d: 1e:05:0d:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTYyQjExMC8GA1UEBRMoRjAxNDg2MDE3MkQ0RkI4Qjc5MDIyRkJENTlGMkVDQTBC RTc2NDhGMTAeFw0yNDA1MTUwNzQxMjNaFw0yNDA1MjIwNzQxMjNaMBgxFjAUBgNV BAMTDTY2NDQ2NzIzLThkNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz2vcLYzKu0hKJFjFZyK9SMfSaEsdi5ko84PfLwFIJabDCjEo7FB6g+QEgUUk0 6uzDetAzkVj+15STtA8raAFLu+wEUE9zam3GuXDct8hK41GmolFwItb37yiMbkIY s8kQGZbZiQzUfUfR2pqhH41UbWhMAfKt4NZaw0kiMkfP1YTzjbPu9HWxul19bTBH Qufako50J4G5lZSwGi9XQ01IJ/qSkhrdhASYmtyIR7x490x9xUhu8Szo3JiA8ACO WSLGFgZcsainz6VrHq2F6PngsPHud/jLBlAyuxRJjnHNdQ0ybbKVkbJer9zjdSof f/jy5AFyQiAPeviK8cZWQUuNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYNKXTQVg Vb2zpofN2JjsGZctnwIwHwYDVR0jBBgwFoAU8BSGAXLU+4t5Ai+9WfLsoL52SPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NjJCLzNGMEY1Q0VDNzc5 QzExRUU4MjIxMzk2N0M0RjlBRTAyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEJTR0FYTFUtNHQ1QWktOVdmTHNvTDUyU1BFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NjJCLzNGMEY1Q0VDNzc5QzExRUU4MjIxMzk2N0M0RjlBRTAyLzhCU0dBWExVLTR0 NUFpLTlXZkxzb0w1MlNQRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHL9LtbGQyxitg7NY8gtcmM6p0Epo2PvR/mmUPYrAaUCVbB+JrKPqf2J 4SSIDmRYUFHiU9/z3JMp+0Mvq9dHfjqoGh8VDecMqb7LBk4k1sy3vHxQiQFPMhGn OtmTAK/lISiAEq//lc8My+Aovjlhj723mpdQ5uVuojBhAV0FxGOHibTDmbH6TZx8 TgWen+TzPXOWbFH6AUlb84rI9bRZ0mJyafSCihkKSBsQLT5LhGrB9qA0YDZ1ux/T sGyKQgOpiduVSIwmCwfq4UkWlPekzmeFfW/lB6gm6AbCK2C/lc5HZ9DG+9Zyg7Br OorCYSF2taMeRvVcHst3PIo+HR4FDXI= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org