$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft File: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json) Hash identifier: uO9oYAKF7FBLnSyN8MWZ3yuw6zNlmKFvACH03ny25LI= Subject key identifier: 79:53:80:34:FE:A3:A3:1E:0C:38:80:17:AA:5B:06:F2:94:BD:61:28 Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 Certificate issuer: /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft Manifest number: FA Signing time: Sun 05 May 2024 05:44:07 +0000 Manifest this update: Sun 05 May 2024 05:44:07 +0000 Manifest next update: Sun 12 May 2024 05:44:07 +0000 Files and hashes: 1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: aEc7b7Scc9MjBBHlByOpzaq6J7abivA7k5RsEYiChNM=) 2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 7DeO0VfCI4oTaSwmK9iUkVYLdmtRBaM+mO6JVXyn98k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Validity Not Before: May 5 05:44:07 2024 GMT Not After : May 12 05:44:07 2024 GMT Subject: CN=66371ca7-61b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:69:38:e4:6d:a8:aa:ef:46:80:68:30:e2: 79:54:5b:77:50:83:ae:fa:b5:57:e3:63:88:d0:e0: 3f:01:dc:c2:53:27:c5:d8:27:39:e8:b4:8e:d5:eb: b3:35:c3:01:a5:21:1c:b9:cc:1b:e4:ac:ac:92:47: a7:cb:a4:4b:31:02:17:df:6a:e5:fa:ea:22:55:40: e5:d2:1a:c4:f3:4a:60:72:de:95:dc:8e:92:b7:2a: 4e:db:a8:68:85:62:1d:0b:17:5b:c5:e2:7a:12:b2: 7a:6d:fe:eb:07:d4:b7:8f:49:ea:61:19:a7:6f:70: 7e:e9:3b:03:3e:e9:33:76:33:9f:85:88:de:8d:87: 7c:df:72:4b:7c:ae:6d:10:9d:bd:d3:25:90:71:87: a8:e2:f9:d6:ee:e6:60:75:4b:64:57:aa:cd:ed:c0: ec:53:52:18:d9:36:2a:4e:10:b2:68:ee:fd:6a:76: 0b:93:85:98:a2:7a:d3:ed:7c:f7:c4:e1:e6:9f:06: 0d:da:f4:05:7f:d8:ef:64:a4:47:7e:f5:d3:d8:63: 7c:5b:f7:9d:e5:e0:ba:b8:c9:42:3d:4b:17:52:7e: c4:ad:4f:b0:ac:80:55:0b:61:a7:a1:75:50:ee:82: 64:70:bd:42:49:28:fa:c1:96:b8:da:9c:04:7d:ab: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:80:34:FE:A3:A3:1E:0C:38:80:17:AA:5B:06:F2:94:BD:61:28 X509v3 Authority Key Identifier: keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:0d:20:a7:41:61:ef:40:4c:17:48:1a:d8:19:d4:ec:0e:2b: 29:01:a5:7c:b4:f4:75:2b:45:ab:17:73:33:79:b2:0e:a2:d3: 45:1a:46:09:13:10:7c:ba:5e:28:17:38:3f:ee:c9:46:23:37: a7:56:29:29:6c:6d:f0:07:aa:09:cf:ba:b8:e4:e6:b1:02:71: 5c:fd:60:62:ff:af:0c:39:26:08:5b:1d:e5:0d:a6:29:5d:40: 0f:66:43:98:f8:ff:16:12:f2:f7:74:f4:a0:e5:52:4e:89:48: c0:4d:4d:f0:61:73:ff:46:c5:78:c9:3d:17:fa:89:39:57:90: 59:ac:0b:5c:a3:fb:f0:4d:50:4b:89:0f:9a:1c:08:de:a0:d9: c2:84:1b:2a:57:86:98:45:c0:93:d0:ae:0a:cb:59:bc:3d:73: fc:3d:cd:e2:ce:6c:84:36:e5:b9:aa:bf:26:a1:cb:b5:8d:f1: b7:1d:bf:d0:66:cb:9e:35:49:14:e3:aa:74:d4:cf:87:b2:0a: 69:0b:3e:bb:30:e7:bd:de:15:f5:98:e6:e3:da:9f:ee:30:d3: 11:88:f1:5f:40:bb:c2:99:18:9e:51:e7:ac:6f:0b:b5:7a:40: c9:82:ff:8d:41:ee:4a:ad:95:d5:a0:bf:f0:8f:eb:05:75:41: 73:06:88:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0NjgxMTAvBgNVBAUTKEVEMzk3ODFFN0NBMjYzMkM1NEI3RkFFMjI1NEUyMUYw MUJBMDc2ODcwHhcNMjQwNTA1MDU0NDA3WhcNMjQwNTEyMDU0NDA3WjAYMRYwFAYD VQQDEw02NjM3MWNhNy02MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQppOORtqKrvRoBoMOJ5VFt3UIOu+rVX42OI0OA/AdzCUyfF2Cc56LSO1euz NcMBpSEcucwb5Kyskkeny6RLMQIX32rl+uoiVUDl0hrE80pgct6V3I6StypO26ho hWIdCxdbxeJ6ErJ6bf7rB9S3j0nqYRmnb3B+6TsDPukzdjOfhYjejYd833JLfK5t EJ290yWQcYeo4vnW7uZgdUtkV6rN7cDsU1IY2TYqThCyaO79anYLk4WYonrT7Xz3 xOHmnwYN2vQFf9jvZKRHfvXT2GN8W/ed5eC6uMlCPUsXUn7ErU+wrIBVC2GnoXVQ 7oJkcL1CSSj6wZa42pwEfavZNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlTgDT+ o6MeDDiAF6pbBvKUvWEoMB8GA1UdIwQYMBaAFO05eB58omMsVLf64iVOIfAboHaH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQ2OC81QjRBMzNDNjhD OEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5eFV0X3JpSlU0aDhCdWdk b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUbDRIbnlpWXl4VXRfcmlKVTRoOEJ1Z2RvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQ2OC81QjRBMzNDNjhDOEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5 eFV0X3JpSlU0aDhCdWdkb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLDSCnQWHvQEwXSBrYGdTsDispAaV8tPR1K0WrF3MzebIOotNFGkYJ ExB8ul4oFzg/7slGIzenVikpbG3wB6oJz7q45OaxAnFc/WBi/68MOSYIWx3lDaYp XUAPZkOY+P8WEvL3dPSg5VJOiUjATU3wYXP/RsV4yT0X+ok5V5BZrAtco/vwTVBL iQ+aHAjeoNnChBsqV4aYRcCT0K4Ky1m8PXP8Pc3izmyENuW5qr8mocu1jfG3Hb/Q ZsueNUkU46p01M+HsgppCz67MOe93hX1mObj2p/uMNMRiPFfQLvCmRieUeesbwu1 ekDJgv+NQe5KrZXVoL/wj+sFdUFzBojv -----END CERTIFICATE-----Generated at Sun May 5 06:13:37 2024 by rpki-client on console-ams.rpki-client.org