$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.mft File: BVXQTWqnzQiQc4W5769_7ObDXhg.mft (raw, json) Hash identifier: BNjGMhg07inPJA7+sbeP1jB3C2kiexofUDQD8hxy2Kw= Subject key identifier: D2:56:18:37:B4:EE:59:3F:59:96:68:9C:11:DA:6A:C3:30:88:73:C9 Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18 Certificate issuer: /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.mft Manifest number: 02EA Signing time: Sun 19 May 2024 03:20:01 +0000 Manifest this update: Sun 19 May 2024 03:20:01 +0000 Manifest next update: Sun 26 May 2024 03:20:01 +0000 Files and hashes: 1: BVXQTWqnzQiQc4W5769_7ObDXhg.crl (hash: ct65jr5PQX7cL/wJEM0GfRhYPHEDClcyBfISV78ufto=) 2: 97D0D31C312211EE99BC615CC4F9AE02.roa (hash: 19j9T3UauArRfohREtA36x0Ywj4Hu6p1y93I7oKQ3DM=) 3: 2D45FF2E20A911EEBEC77485C4F9AE02.roa (hash: qC9kf33wqjsQKlRR+1/x9+FleLqm5INMPpMOlniO6Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18 Validity Not Before: May 19 03:20:01 2024 GMT Not After : May 26 03:20:01 2024 GMT Subject: CN=66496fe1-d978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:ca:b0:5c:b0:3a:a1:1c:73:ef:10:16:58: c1:6b:96:d5:a6:5e:14:e5:1b:4b:ec:bf:c6:90:fc: 54:62:44:70:d2:8b:17:1c:1a:03:75:98:a3:3b:03: e9:00:99:f5:6c:83:54:2f:e7:f4:56:eb:b1:e8:f6: 82:e9:68:36:bd:a6:87:d7:97:90:19:ac:20:23:c6: 67:7f:46:54:fd:88:72:7a:74:6b:f9:bf:45:c5:31: e3:18:1c:86:97:c6:45:df:e3:8c:0b:f3:99:55:6c: ab:c0:2f:09:32:e8:20:bf:c5:8f:f1:17:2c:66:e5: 38:0f:52:60:30:f6:48:9e:20:26:5d:db:a3:7a:fe: fb:b7:10:3b:33:e2:9e:21:9e:3c:d7:77:5c:b3:43: e3:db:5b:42:41:07:00:05:6b:fc:00:70:a0:52:47: b6:37:94:29:5f:de:36:41:ae:56:d6:26:7a:8a:61: d5:65:4f:fe:11:f4:4e:94:14:7e:b5:24:73:0e:32: 72:d2:dc:1f:ce:7e:a4:da:45:e7:02:7a:be:69:8b: 1d:31:4c:84:d5:42:e2:00:2e:6f:eb:e9:e5:73:0b: 08:81:96:b1:ff:36:82:c5:c3:73:88:5e:91:97:a0: bf:6d:ea:ec:fd:15:43:db:19:4c:cf:79:32:93:2d: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:56:18:37:B4:EE:59:3F:59:96:68:9C:11:DA:6A:C3:30:88:73:C9 X509v3 Authority Key Identifier: keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:eb:8a:33:1f:db:1f:09:bf:5b:a8:e9:ca:4f:3f:44:35:3b: 76:c4:24:c2:5e:75:dd:3d:3c:f9:6a:0d:bd:8e:29:e9:8b:7b: 49:4e:b2:66:66:be:10:90:d2:f3:6c:24:e4:1e:dc:29:4c:d3: d4:07:1b:74:55:c3:ee:a3:3d:82:90:f4:b8:b8:e8:4f:0d:c5: c2:09:24:d6:96:92:7e:02:bd:e0:5b:d7:77:46:76:4b:16:47: d2:02:01:f2:0f:ac:b0:35:40:22:b9:5e:a0:28:d0:6e:b6:81: f0:90:c5:c2:4e:0b:5f:fd:a4:f8:74:0d:91:66:00:1a:11:99: 31:bc:cb:b1:c6:07:d7:7c:59:03:f3:52:e6:11:f9:dc:41:89: 5e:68:39:61:97:d2:88:cf:ac:f1:55:36:df:72:8c:9d:6d:59: 87:89:55:51:13:84:a7:50:8e:23:c9:8e:23:a9:6f:a9:02:02: 07:bb:c2:f1:d0:00:e8:df:16:21:51:e9:bf:5f:95:0a:28:5c: 35:fb:7e:e7:5a:b2:7b:f8:37:8b:74:7a:90:b6:d9:40:0d:e4: a9:7c:53:66:03:a8:9a:7e:2d:51:0e:8b:cf:5e:f3:90:00:00: 18:c9:87:03:b3:0b:d7:ea:42:e5:0c:d3:c3:3e:33:c9:4a:ab: a0:66:db:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFRjkxMTAvBgNVBAUTKDA1NTVEMDRENkFBN0NEMDg5MDczODVCOUVGQUY3RkVD RTZDMzVFMTgwHhcNMjQwNTE5MDMyMDAxWhcNMjQwNTI2MDMyMDAxWjAYMRYwFAYD VQQDEw02NjQ5NmZlMS1kOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRbKsFywOqEcc+8QFljBa5bVpl4U5RtL7L/GkPxUYkRw0osXHBoDdZijOwPp AJn1bINUL+f0Vuux6PaC6Wg2vaaH15eQGawgI8Znf0ZU/YhyenRr+b9FxTHjGByG l8ZF3+OMC/OZVWyrwC8JMuggv8WP8RcsZuU4D1JgMPZIniAmXdujev77txA7M+Ke IZ4813dcs0Pj21tCQQcABWv8AHCgUke2N5QpX942Qa5W1iZ6imHVZU/+EfROlBR+ tSRzDjJy0twfzn6k2kXnAnq+aYsdMUyE1ULiAC5v6+nlcwsIgZax/zaCxcNziF6R l6C/bers/RVD2xlMz3kyky2F9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJWGDe0 7lk/WZZonBHaasMwiHPJMB8GA1UdIwQYMBaAFAVV0E1qp80IkHOFue+vf+zmw14Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVGOS80RTAyRDY4Qzk5 RDgxMUVDQUI2QzVDNkZDNEY5QUUwMi9CVlhRVFdxbnpRaVFjNFc1NzY5XzdPYkRY aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JWWFFUV3FuelFpUWM0VzU3NjlfN09iRFhoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVGOS80RTAyRDY4Qzk5RDgxMUVDQUI2QzVDNkZDNEY5QUUwMi9CVlhRVFdxbnpR aVFjNFc1NzY5XzdPYkRYaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh64ozH9sfCb9bqOnKTz9ENTt2xCTCXnXdPTz5ag29jinpi3tJTrJm Zr4QkNLzbCTkHtwpTNPUBxt0VcPuoz2CkPS4uOhPDcXCCSTWlpJ+Ar3gW9d3RnZL FkfSAgHyD6ywNUAiuV6gKNButoHwkMXCTgtf/aT4dA2RZgAaEZkxvMuxxgfXfFkD 81LmEfncQYleaDlhl9KIz6zxVTbfcoydbVmHiVVRE4SnUI4jyY4jqW+pAgIHu8Lx 0ADo3xYhUem/X5UKKFw1+37nWrJ7+DeLdHqQttlADeSpfFNmA6iafi1RDovPXvOQ AAAYyYcDswvX6kLlDNPDPjPJSqugZtuF -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org