$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: N1zjQDfEdHFynPxF3JwG6sMTQf1Omp3bVrxCdte7oZA= Subject key identifier: 94:C3:AB:C2:F4:30:07:4A:72:77:65:06:01:27:16:58:B2:72:F1:5B Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 01EF Signing time: Sun 19 May 2024 04:14:08 +0000 Manifest this update: Sun 19 May 2024 04:14:08 +0000 Manifest next update: Sun 26 May 2024 04:14:07 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: pWBqXXI4s1SXmonTAxDVwSh6A6zdz+pg0ol1fBP7WtI=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: StSWuqA5M52P8Zo9eXzjGOXkepikf8IxKvNkU5ke2Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: May 19 04:14:08 2024 GMT Not After : May 26 04:14:07 2024 GMT Subject: CN=66497c90-eca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:2a:4f:06:ef:93:cf:8f:9b:11:a9:9d:9e: 4a:9c:6b:a9:29:07:02:dd:60:d5:b7:45:e5:83:8a: 50:48:73:a9:6f:9b:8b:36:40:aa:8b:42:00:9b:a3: 3b:06:34:fc:95:a3:b2:4d:88:36:ba:62:0a:2a:f6: c4:e1:72:c4:ae:16:a3:94:65:e0:7a:42:ec:f5:28: 84:2d:31:38:19:59:2f:b0:21:4e:f1:ba:ee:ae:d0: 77:9d:21:33:f1:2f:2f:7e:e9:3f:3e:0c:55:c6:8c: fc:a3:92:50:9e:8a:dd:c1:4a:f3:7e:61:8c:57:8c: 7a:c6:8e:e9:ea:04:7a:fc:f0:83:f9:cf:1d:b8:2e: 40:a8:ee:98:7a:af:a5:fe:11:23:a5:ad:0a:46:40: cb:8d:a3:df:b3:3c:3d:ba:3c:54:f5:81:84:cb:26: d7:3b:de:1e:38:c1:43:90:fa:5d:08:e9:b3:32:61: 9b:2c:39:6b:d0:41:a0:76:d2:eb:a4:3b:7f:99:5e: dd:7e:a4:a8:91:81:f7:c8:fa:77:6e:71:0f:ce:be: 8b:47:1e:c2:e4:f2:51:7f:7f:b2:00:ae:3c:a1:c3: 0e:91:c1:6e:38:0d:c6:97:ff:de:8b:76:7d:e6:f9: 05:08:ec:bd:cb:96:26:7f:59:1b:1c:09:32:33:f9: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C3:AB:C2:F4:30:07:4A:72:77:65:06:01:27:16:58:B2:72:F1:5B X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:d7:47:47:80:94:0f:7a:ca:6a:c0:41:73:9e:f5:4a:c8: 6c:89:51:d4:a8:b6:78:dc:21:57:bc:da:8b:d3:22:d9:92:13: c7:6f:9c:e8:45:73:f2:eb:f1:96:34:33:39:d0:d5:db:9a:a4: 0b:46:08:18:7e:8f:1c:82:cb:87:a7:44:43:d3:4a:95:51:cd: 5d:a5:5b:81:4b:e6:48:3c:d1:80:d6:4d:8e:2d:20:ac:ef:f5: 71:38:3a:31:19:40:58:98:4e:7d:56:19:68:c8:2d:a5:28:d5: 83:03:2e:92:2e:8e:6a:97:61:95:3f:4d:7d:95:ba:06:b2:cd: f6:d9:34:02:01:60:30:ce:47:9f:1f:04:39:3f:ba:07:db:e2: cb:4f:f7:e4:03:57:82:d0:37:f0:30:36:94:6b:f6:9d:bb:e6: 1d:e1:00:4e:15:45:35:9f:d2:a7:db:e1:3c:49:5b:5b:61:c2: 20:ce:2f:81:0c:a1:62:e0:91:88:23:ac:bb:65:d3:b8:02:93: be:23:39:a6:5f:50:d1:95:80:33:71:32:3e:86:ed:83:b7:c1: fc:96:f3:15:51:df:b3:85:23:aa:9f:74:cb:a0:a9:44:56:88: 7a:d8:43:c4:a5:36:1e:b1:0d:4f:b8:b9:20:2a:e7:28:ce:43: 93:49:c4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjQwNTE5MDQxNDA4WhcNMjQwNTI2MDQxNDA3WjAYMRYwFAYD VQQDEw02NjQ5N2M5MC1lY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zEqTwbvk8+PmxGpnZ5KnGupKQcC3WDVt0Xlg4pQSHOpb5uLNkCqi0IAm6M7 BjT8laOyTYg2umIKKvbE4XLErhajlGXgekLs9SiELTE4GVkvsCFO8brurtB3nSEz 8S8vfuk/PgxVxoz8o5JQnordwUrzfmGMV4x6xo7p6gR6/PCD+c8duC5AqO6Yeq+l /hEjpa0KRkDLjaPfszw9ujxU9YGEyybXO94eOMFDkPpdCOmzMmGbLDlr0EGgdtLr pDt/mV7dfqSokYH3yPp3bnEPzr6LRx7C5PJRf3+yAK48ocMOkcFuOA3Gl//ei3Z9 5vkFCOy9y5Ymf1kbHAkyM/lOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTDq8L0 MAdKcndlBgEnFliycvFbMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8ddHR4CUD3rKasBBc571SshsiVHUqLZ43CFXvNqL0yLZkhPHb5zo RXPy6/GWNDM50NXbmqQLRggYfo8cgsuHp0RD00qVUc1dpVuBS+ZIPNGA1k2OLSCs 7/VxODoxGUBYmE59VhloyC2lKNWDAy6SLo5ql2GVP019lboGss322TQCAWAwzkef HwQ5P7oH2+LLT/fkA1eC0DfwMDaUa/adu+Yd4QBOFUU1n9Kn2+E8SVtbYcIgzi+B DKFi4JGII6y7ZdO4ApO+IzmmX1DRlYAzcTI+hu2Dt8H8lvMVUd+zhSOqn3TLoKlE Voh62EPEpTYesQ1PuLkgKucozkOTScQq -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org