$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: r2l92AabLt6cqH4iR+7Mm27dt54L7a8/P7Mf1eawlY0= Subject key identifier: 6D:BD:64:F3:39:EE:FB:D3:F8:8B:1E:14:30:55:07:75:F3:4D:64:10 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 0677 Signing time: Sun 28 Apr 2024 23:26:09 +0000 Manifest this update: Sun 28 Apr 2024 23:26:08 +0000 Manifest next update: Sun 05 May 2024 23:26:08 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: Y8ljctrP3DkLk357dJoD2kfxhBL6aSBOYySAj01Km60=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: bjfvUlDIeMbIrQcLX1qjEEGUXzKExCUtzHqBwzi9Dhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 23:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Apr 28 23:26:08 2024 GMT Not After : May 5 23:26:08 2024 GMT Subject: CN=662edb11-8730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:50:67:de:b9:c7:43:f1:61:21:c7:40:cd: a4:f3:44:5c:3d:4c:2d:17:df:4e:81:db:50:6f:52: 6c:1d:4f:ca:fa:10:70:b2:41:5b:53:14:b6:48:76: 13:29:7c:e7:36:71:c4:11:77:04:04:8e:51:a4:cc: 9a:60:f2:5b:c2:00:a8:6e:97:ff:df:af:8e:b1:4f: e2:79:5d:60:b0:ca:a6:66:a9:98:ac:63:96:a4:1a: 14:f5:85:8c:40:2c:e6:06:28:5a:c3:20:f1:91:0d: 9d:30:f0:9c:56:2e:e6:ea:fa:86:4b:8a:93:12:0e: 11:5f:97:1e:92:0b:3c:8f:93:93:2d:a1:af:30:4b: 00:92:42:8b:50:76:fe:c8:45:d7:5a:fe:04:13:4d: 14:92:aa:28:6e:f4:bb:42:3b:b8:6b:5c:3c:2c:89: 50:13:62:e1:13:40:11:44:ae:b7:5a:c6:76:14:55: 7b:15:0c:65:24:12:cb:32:5a:03:62:6b:d7:ce:38: f0:b4:e5:a6:ab:64:5d:b1:46:d3:1e:53:4a:0a:80: bf:93:e0:ca:f7:3d:06:1e:03:df:4d:8f:18:7f:8e: 93:74:11:77:9f:46:21:a1:68:4d:76:32:bb:f6:9e: 19:ea:15:0c:31:3f:b2:ad:66:9c:5c:e4:34:85:3e: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:64:F3:39:EE:FB:D3:F8:8B:1E:14:30:55:07:75:F3:4D:64:10 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:93:f8:0f:78:71:fe:74:3a:56:8b:a6:83:40:94:fa:e4:f2: 68:d5:18:9a:32:71:f5:dc:16:49:f4:23:cb:e8:55:f9:a4:65: 46:b6:63:7f:08:7d:39:5c:9f:e8:ec:e3:b7:a7:45:4d:90:a2: 0f:a3:39:ab:26:8a:c2:4f:2a:c5:7f:8b:6e:4b:16:a8:9d:a8: 66:32:0a:b6:e3:a1:7c:2c:3f:bc:e5:84:6d:3d:bf:40:0c:3a: d7:0c:21:41:a3:b2:e2:07:a2:f8:7f:73:ad:10:a0:84:23:a8: ba:53:97:f6:60:ff:49:9e:06:f6:b7:de:be:cb:d6:a1:1d:9e: 0f:39:76:c2:16:27:85:1f:34:75:1a:0d:fd:0d:20:fc:42:41: 2d:c8:2a:4e:bf:51:56:2f:03:30:86:b7:35:89:24:00:d6:f8: 07:21:24:fc:ec:f1:bf:e4:83:69:32:39:bf:fe:a5:79:e3:4c: c4:4b:f3:1a:99:3e:9a:7a:5b:aa:95:7a:ad:ff:81:16:a3:03: 66:18:e6:d6:e1:f2:7f:3a:38:8a:91:61:62:c9:a2:11:24:3c: 51:47:3a:09:c4:fe:7c:42:be:41:b0:d0:ab:83:b8:a5:ba:98: ab:f7:29:c2:02:c5:45:38:5e:73:18:60:2c:99:91:31:2b:7a: 4e:f3:4b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjQwNDI4MjMyNjA4WhcNMjQwNTA1MjMyNjA4WjAYMRYwFAYD VQQDEw02NjJlZGIxMS04NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkVQZ965x0PxYSHHQM2k80RcPUwtF99OgdtQb1JsHU/K+hBwskFbUxS2SHYT KXznNnHEEXcEBI5RpMyaYPJbwgCobpf/36+OsU/ieV1gsMqmZqmYrGOWpBoU9YWM QCzmBihawyDxkQ2dMPCcVi7m6vqGS4qTEg4RX5cekgs8j5OTLaGvMEsAkkKLUHb+ yEXXWv4EE00UkqoobvS7Qju4a1w8LIlQE2LhE0ARRK63WsZ2FFV7FQxlJBLLMloD YmvXzjjwtOWmq2RdsUbTHlNKCoC/k+DK9z0GHgPfTY8Yf46TdBF3n0YhoWhNdjK7 9p4Z6hUMMT+yrWacXOQ0hT5LfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG29ZPM5 7vvT+IseFDBVB3XzTWQQMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJk/gPeHH+dDpWi6aDQJT65PJo1RiaMnH13BZJ9CPL6FX5pGVGtmN/ CH05XJ/o7OO3p0VNkKIPozmrJorCTyrFf4tuSxaonahmMgq246F8LD+85YRtPb9A DDrXDCFBo7LiB6L4f3OtEKCEI6i6U5f2YP9Jngb2t96+y9ahHZ4POXbCFieFHzR1 Gg39DSD8QkEtyCpOv1FWLwMwhrc1iSQA1vgHIST87PG/5INpMjm//qV540zES/Ma mT6aeluqlXqt/4EWowNmGObW4fJ/OjiKkWFiyaIRJDxRRzoJxP58Qr5BsNCrg7il upir9ynCAsVFOF5zGGAsmZExK3pO80ss -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:48 2024 by rpki-client on console-ams.rpki-client.org