$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft File: B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json) Hash identifier: ZMX8MGzCDvRNhlYC+CUC+TMEzv4l0VYAXb1OERCXr54= Subject key identifier: 98:F8:14:A2:AF:35:54:DA:39:7A:CC:3D:A0:6B:28:2F:41:17:2F:05 Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 Certificate issuer: /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft Manifest number: 81 Signing time: Wed 15 May 2024 07:19:08 +0000 Manifest this update: Wed 15 May 2024 07:19:07 +0000 Manifest next update: Wed 22 May 2024 07:19:07 +0000 Files and hashes: 1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: UNdA5/o0moZdPXvLcY6r8KwPlUb999QsGdklDRUP5GU=) 2: 76817340537011EEB43BD523C4F9AE02.roa (hash: fjAiqnZlzJ6N7JpVTeNJ3lQrGwwMm27mRWaT0nsMz+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Validity Not Before: May 15 07:19:07 2024 GMT Not After : May 22 07:19:07 2024 GMT Subject: CN=664461ec-10c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:64:1b:82:ab:c1:76:df:05:8e:ed:dc:3c: 25:16:5f:86:3d:ab:28:05:d9:6f:35:e1:b1:b6:26: c9:07:b5:c0:85:24:08:fa:e4:19:b1:4c:3c:f5:35: 60:ed:a3:a6:a7:3a:c3:72:93:25:53:3c:8f:5f:5e: 82:b0:53:d2:4a:92:bd:24:02:84:4e:44:9b:d8:db: 51:e5:36:b5:71:e4:79:2c:a9:5e:09:f7:20:b8:78: 97:f5:77:c6:71:2d:79:09:da:7b:76:d7:7d:af:6e: cf:09:d2:3f:d4:20:64:70:de:b5:05:5d:d4:4a:c1: 5d:a6:85:c5:96:f2:d9:90:90:81:df:2d:05:6e:38: 45:ed:e9:1a:f1:73:48:65:fe:dd:3b:ab:45:e7:12: b3:0a:79:e2:29:d3:7f:d7:35:ab:8a:d7:82:13:d7: 17:c4:55:eb:4a:8b:fc:7d:4b:c2:fc:07:24:74:3b: 20:7d:9f:bb:1c:8f:9a:09:eb:cc:47:a9:e5:1b:90: ed:87:06:e3:0d:ca:2f:f6:7c:e8:15:0c:fc:0f:df: 64:10:f5:2c:3a:69:71:63:68:0b:83:de:c9:d3:e0: 38:b2:be:cf:50:fd:0d:c1:6e:b7:6b:64:3d:32:56: f6:9a:dd:87:a3:6a:96:21:de:19:f8:df:f8:40:f2: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F8:14:A2:AF:35:54:DA:39:7A:CC:3D:A0:6B:28:2F:41:17:2F:05 X509v3 Authority Key Identifier: keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:75:8c:24:93:d3:78:de:40:3d:b1:29:49:28:c3:37:2f:4a: 1e:e5:7d:ea:4e:8c:a3:bf:fc:44:72:eb:12:7c:70:18:12:43: 43:be:3e:21:05:ee:71:02:4e:83:8a:dc:f0:d8:fd:51:e1:17: fc:95:90:f9:11:9a:b5:ad:a5:4d:38:9c:b9:c5:f6:b8:33:ca: 65:37:44:d9:49:47:5e:9a:f3:6a:59:51:eb:81:0a:77:a4:5b: 2b:e4:43:b8:8c:92:de:b6:a2:8b:3a:37:eb:c9:0c:e6:ec:fe: ba:57:74:e5:0f:eb:1b:87:29:5e:8b:a9:59:14:1a:19:49:af: 79:e6:87:9e:7e:a8:28:ad:7e:1d:02:7c:15:c2:13:01:bc:1c: 06:8b:45:30:95:de:3d:56:2d:7b:a6:3e:97:b6:b9:35:af:0d: f1:1a:16:b9:b8:fd:3e:d7:50:fc:d8:dc:8a:29:fe:2d:e6:50: 7b:fc:f2:8a:b8:f7:9a:d3:5c:13:66:8b:b7:86:61:ae:43:4b: 23:14:a9:51:94:52:80:82:50:46:29:2a:9e:66:43:d2:27:85: a4:9b:fe:71:60:84:c6:42:73:c1:c1:15:55:25:bb:bd:0c:c1: b7:75:96:aa:c1:bb:27:5e:b0:1d:a3:f5:14:a6:35:1e:00:4c: 21:25:50:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RkQxMTAvBgNVBAUTKDA3NjBDQUVGNUI3MkRGRTVCMDRCNzZEQURGRkFCODY3 QzMwQTk4QzcwHhcNMjQwNTE1MDcxOTA3WhcNMjQwNTIyMDcxOTA3WjAYMRYwFAYD VQQDEw02NjQ0NjFlYy0xMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDxkG4KrwXbfBY7t3DwlFl+GPasoBdlvNeGxtibJB7XAhSQI+uQZsUw89TVg 7aOmpzrDcpMlUzyPX16CsFPSSpK9JAKETkSb2NtR5Ta1ceR5LKleCfcguHiX9XfG cS15Cdp7dtd9r27PCdI/1CBkcN61BV3USsFdpoXFlvLZkJCB3y0FbjhF7eka8XNI Zf7dO6tF5xKzCnniKdN/1zWriteCE9cXxFXrSov8fUvC/AckdDsgfZ+7HI+aCevM R6nlG5DthwbjDcov9nzoFQz8D99kEPUsOmlxY2gLg97J0+A4sr7PUP0NwW63a2Q9 Mlb2mt2Ho2qWId4Z+N/4QPLzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJj4FKKv NVTaOXrMPaBrKC9BFy8FMB8GA1UdIwQYMBaAFAdgyu9bct/lsEt22t/6uGfDCpjH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGRC84QkRBRkVGNDUy ODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMtV3dTM2JhM19xNFo4TUtt TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IyREs3MXR5My1Xd1MzYmEzX3E0WjhNS21NYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGRC84QkRBRkVGNDUyODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMt V3dTM2JhM19xNFo4TUttTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0dYwkk9N43kA9sSlJKMM3L0oe5X3qToyjv/xEcusSfHAYEkNDvj4h Be5xAk6Ditzw2P1R4Rf8lZD5EZq1raVNOJy5xfa4M8plN0TZSUdemvNqWVHrgQp3 pFsr5EO4jJLetqKLOjfryQzm7P66V3TlD+sbhylei6lZFBoZSa955oeefqgorX4d AnwVwhMBvBwGi0Uwld49Vi17pj6Xtrk1rw3xGha5uP0+11D82NyKKf4t5lB7/PKK uPea01wTZou3hmGuQ0sjFKlRlFKAglBGKSqeZkPSJ4Wkm/5xYITGQnPBwRVVJbu9 DMG3dZaqwbsnXrAdo/UUpjUeAEwhJVCl -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org