$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: ssYXwRVumRYFZ4/oYp20yFsxUQLjREUqpga2kL8cVaQ= Subject key identifier: 9E:39:BA:16:0A:48:73:55:FB:48:98:B0:CD:24:85:AB:0E:59:A8:1B Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 059F Signing time: Mon 29 Apr 2024 00:16:53 +0000 Manifest this update: Mon 29 Apr 2024 00:16:52 +0000 Manifest next update: Mon 06 May 2024 00:16:52 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: JIATCg+7i6QIbxDq40/BZPiidxYIpY5SzCp2L0LN1zc=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: fB9P3KH/a3CnkgreCt0I7vz1IwmZUbQHhZFouAVH5UY=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: E1mbrjatcBQGvzNE43uIvU6SHzDKCeDrxFEzCGlzOo4=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: PINEqptHm0CJeX7CW8cAbNAbERK5tklVb8QL+cmfYFg=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: 1bWzJRcM1ZYHgmkOH7WcubfHf6+XQ+/NzwqHg0XnnvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Apr 29 00:16:52 2024 GMT Not After : May 6 00:16:52 2024 GMT Subject: CN=662ee6f5-6886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:11:6a:1f:e0:46:ef:94:86:f2:92:01:d2: 0c:6d:e9:cd:af:ca:c6:6a:12:12:59:28:f5:37:a0: d9:04:d3:a4:0b:45:93:ce:d2:a0:8c:02:f8:9c:7f: 91:37:94:8e:74:b9:40:14:91:ad:0c:60:bd:62:85: d1:d2:10:90:65:e8:54:dd:2a:87:a6:e8:0f:dd:35: 1c:e5:c4:e2:8e:2f:d9:39:f2:47:af:d8:1e:67:da: 43:24:3d:72:1d:f3:6e:47:74:19:40:2d:91:9f:a5: 78:cc:8c:16:f2:80:b3:8d:1a:a0:75:0d:ac:5c:ff: 71:9a:1e:8d:9e:dc:7a:98:06:12:7d:d9:ff:37:0b: f5:41:37:42:81:a2:9e:2a:47:fa:87:68:5d:71:b7: c3:1c:36:4f:8c:b6:47:c8:05:2a:13:c5:b3:ee:e9: a6:d9:ef:1c:17:3c:bd:e6:96:87:f4:77:72:52:6b: 39:72:c7:2f:d3:21:e7:3a:75:7e:e5:d0:bc:58:35: 3f:81:77:d8:de:de:b8:9e:a7:ad:c1:07:8f:76:51: 12:84:ee:37:78:cb:43:7e:6e:01:2d:3a:f3:c7:41: 51:d4:68:53:3b:cf:e5:97:3f:7d:b6:cd:66:d8:90: 97:35:78:af:c5:6c:c9:8f:1a:35:6f:fc:02:fc:b9: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:39:BA:16:0A:48:73:55:FB:48:98:B0:CD:24:85:AB:0E:59:A8:1B X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9e:3e:6d:6c:1c:63:2d:9b:5f:7d:00:50:b2:b5:9d:ce:3c: f8:d8:e2:97:70:f9:ea:bc:c8:bb:54:f6:b5:7d:31:a1:91:b5: 24:ff:3b:a7:44:89:6a:9f:5a:7c:f9:59:1d:4d:3e:5a:84:66: 20:29:64:bf:f3:7d:00:58:d1:10:17:ea:31:3b:c2:8e:53:6f: 8e:e7:d5:33:5d:ed:e5:95:05:df:75:5a:56:66:a1:89:11:b7: d7:34:fc:b9:87:bc:10:3d:a2:c4:9c:ba:c3:ec:ed:f7:80:ee: 8f:b6:d9:a3:94:84:07:00:53:68:55:a1:cc:86:e6:16:4f:d4: 86:5c:50:e0:54:01:1a:64:ca:ea:02:e2:17:6c:7d:9f:11:44: 58:8f:02:03:a5:e3:82:ba:d3:5e:73:2b:1d:9a:cf:4e:9c:99: b7:2d:13:7d:1c:89:18:07:23:b7:6d:93:69:ed:fb:76:61:7f: 07:33:aa:4f:0a:8a:e7:c4:8b:cf:43:1c:b0:3f:48:c1:f3:9f: 4b:3b:b7:b2:8a:1c:c5:64:6b:26:28:5f:1b:8d:4b:a5:0d:58: 6b:e6:27:8e:54:b8:46:37:38:17:e7:2e:98:18:42:b3:d1:01: 47:1e:8b:0a:c2:51:63:4e:8f:54:15:5f:85:bd:94:01:78:54: 3c:07:36:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjQwNDI5MDAxNjUyWhcNMjQwNTA2MDAxNjUyWjAYMRYwFAYD VQQDEw02NjJlZTZmNS02ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVsRah/gRu+UhvKSAdIMbenNr8rGahISWSj1N6DZBNOkC0WTztKgjAL4nH+R N5SOdLlAFJGtDGC9YoXR0hCQZehU3SqHpugP3TUc5cTiji/ZOfJHr9geZ9pDJD1y HfNuR3QZQC2Rn6V4zIwW8oCzjRqgdQ2sXP9xmh6Nntx6mAYSfdn/Nwv1QTdCgaKe Kkf6h2hdcbfDHDZPjLZHyAUqE8Wz7umm2e8cFzy95paH9HdyUms5cscv0yHnOnV+ 5dC8WDU/gXfY3t64nqetwQePdlEShO43eMtDfm4BLTrzx0FR1GhTO8/llz99ts1m 2JCXNXivxWzJjxo1b/wC/Lm1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ45uhYK SHNV+0iYsM0khasOWagbMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTnj5tbBxjLZtffQBQsrWdzjz42OKXcPnqvMi7VPa1fTGhkbUk/zun RIlqn1p8+VkdTT5ahGYgKWS/830AWNEQF+oxO8KOU2+O59UzXe3llQXfdVpWZqGJ EbfXNPy5h7wQPaLEnLrD7O33gO6PttmjlIQHAFNoVaHMhuYWT9SGXFDgVAEaZMrq AuIXbH2fEURYjwIDpeOCutNecysdms9OnJm3LRN9HIkYByO3bZNp7ft2YX8HM6pP CornxIvPQxywP0jB859LO7eyihzFZGsmKF8bjUulDVhr5ieOVLhGNzgX5y6YGEKz 0QFHHosKwlFjTo9UFV+FvZQBeFQ8BzZT -----END CERTIFICATE-----Generated at Mon Apr 29 03:35:10 2024 by rpki-client on console-fra.rpki-client.org