$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: llxIEjsI0ILFeNjmyw36/oe/xdhr4C4n2dNqfJHWIKQ= Subject key identifier: 56:02:99:74:91:A9:A2:BF:BE:68:BC:C6:87:7D:07:BE:7A:3D:3E:CD Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 0581 Signing time: Tue 30 Apr 2024 22:01:35 +0000 Manifest this update: Tue 30 Apr 2024 22:01:35 +0000 Manifest next update: Tue 07 May 2024 22:01:35 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: Lnkfo2DgZP/RDDMwfECE6n/EIBVHQLiZYnFgr68IBb0=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: I+yy1tPGMA7mtXZ55UApqq0lWMqIkOxtH72LUG+NGYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: Apr 30 22:01:35 2024 GMT Not After : May 7 22:01:35 2024 GMT Subject: CN=66316a3f-be4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:af:94:83:de:78:d5:d3:f4:ba:bf:a7:0b: 9a:49:34:cd:bb:3e:d7:d3:61:58:e1:4c:10:96:31: 88:f6:96:62:b2:34:42:9f:dc:f3:a8:12:66:5d:f5: d1:7e:d5:a1:a9:86:07:f2:70:be:bb:2d:54:1c:39: 32:21:ce:ba:55:24:ea:cb:45:eb:3e:b3:ce:d0:76: 07:a7:9c:64:13:8f:31:ed:9e:e5:7e:e7:19:2f:b5: 8e:df:53:30:ce:18:9c:b6:06:91:be:44:a2:ca:f0: b6:2d:05:bc:73:d6:79:c9:50:3a:d7:d4:b7:75:ee: 67:b4:b5:b5:07:40:89:83:c6:81:90:aa:cc:46:e0: 94:3d:be:6c:d9:f8:77:f4:01:e3:c5:39:c5:5b:05: dc:ab:b8:21:17:ec:6c:4c:9d:95:03:f3:bf:ce:23: ee:1a:a0:a6:42:ea:dd:18:9d:3e:70:58:72:9f:a0: 9e:0f:5d:92:b9:14:8e:ff:50:3e:fe:0a:5e:68:64: 28:ad:e3:90:54:27:0f:33:5c:da:ff:0c:71:db:e2: 64:66:ae:66:76:6c:39:10:ed:62:17:fc:4c:c1:4e: 85:7c:a5:f2:2e:02:e9:eb:db:d2:ea:db:35:c0:da: f0:d9:58:86:40:ac:65:6b:6a:20:f5:24:09:06:a9: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:99:74:91:A9:A2:BF:BE:68:BC:C6:87:7D:07:BE:7A:3D:3E:CD X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e6:44:09:83:8d:d6:bd:dd:2d:0a:0d:0e:32:8a:3b:56:b0: e3:eb:68:86:bf:f9:74:91:f7:4e:22:49:f6:b0:ca:f7:c9:d7: df:62:2b:65:34:1f:96:74:35:e3:97:05:c2:55:3a:68:a3:06: 7e:f4:4e:c7:27:c9:8a:cc:d9:21:d9:5c:0f:cd:e4:95:37:05: 2e:eb:58:56:7f:a9:fa:6f:c8:3d:23:38:b4:c3:74:83:77:b5: 89:dc:c3:e6:6f:94:e6:be:6f:bd:bf:57:40:9c:8a:64:15:97: 79:d6:64:01:be:04:6f:a6:5d:c9:5e:f8:92:c4:a4:11:57:4a: 7f:b9:90:20:d7:3a:59:88:69:18:25:c0:0e:5e:81:ed:4d:2f: ce:29:a4:e6:b8:75:a8:fc:df:3d:12:ab:9d:71:11:0b:8b:c0: 42:88:38:6d:e5:e9:e8:4a:e1:93:a8:ad:c8:de:bc:5f:a5:b7: 5f:ef:aa:0e:94:bc:32:5d:68:5a:9b:a8:2a:38:17:64:b2:70: a6:12:56:62:77:26:03:92:f0:9e:a8:65:9a:fc:4f:65:5b:94: ce:a0:2b:d1:c9:cb:02:52:5d:04:ef:6a:60:e9:ab:58:58:12: 4b:71:fd:90:36:69:3d:98:9c:44:d2:a6:f3:af:d0:69:3c:79: 79:50:cf:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjQwNDMwMjIwMTM1WhcNMjQwNTA3MjIwMTM1WjAYMRYwFAYD VQQDEw02NjMxNmEzZi1iZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5ivlIPeeNXT9Lq/pwuaSTTNuz7X02FY4UwQljGI9pZisjRCn9zzqBJmXfXR ftWhqYYH8nC+uy1UHDkyIc66VSTqy0XrPrPO0HYHp5xkE48x7Z7lfucZL7WO31Mw zhictgaRvkSiyvC2LQW8c9Z5yVA619S3de5ntLW1B0CJg8aBkKrMRuCUPb5s2fh3 9AHjxTnFWwXcq7ghF+xsTJ2VA/O/ziPuGqCmQurdGJ0+cFhyn6CeD12SuRSO/1A+ /gpeaGQoreOQVCcPM1za/wxx2+JkZq5mdmw5EO1iF/xMwU6FfKXyLgLp69vS6ts1 wNrw2ViGQKxla2og9SQJBqkvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYCmXSR qaK/vmi8xod9B756PT7NMB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW5kQJg43Wvd0tCg0OMoo7VrDj62iGv/l0kfdOIkn2sMr3ydffYitl NB+WdDXjlwXCVTpoowZ+9E7HJ8mKzNkh2VwPzeSVNwUu61hWf6n6b8g9Izi0w3SD d7WJ3MPmb5Tmvm+9v1dAnIpkFZd51mQBvgRvpl3JXviSxKQRV0p/uZAg1zpZiGkY JcAOXoHtTS/OKaTmuHWo/N89EqudcRELi8BCiDht5enoSuGTqK3I3rxfpbdf76oO lLwyXWham6gqOBdksnCmElZidyYDkvCeqGWa/E9lW5TOoCvRycsCUl0E72pg6atY WBJLcf2QNmk9mJxE0qbzr9BpPHl5UM9+ -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:10 2024 by rpki-client on console-ams.rpki-client.org