$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft File: vR2pHc9Y0IwVyUUayvYvirO-JCA.mft (raw, json) Hash identifier: yOX6eA7EblpKwUMiAW0wfyA151Suw66Pv4py57O0XYU= Subject key identifier: 6B:38:62:22:9F:7F:F9:1E:C8:4C:EE:8C:C5:58:8C:55:A1:CC:C5:55 Authority key identifier: BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20 Certificate issuer: /CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft Manifest number: 02BA Signing time: Fri 31 May 2024 04:06:56 +0000 Manifest this update: Fri 31 May 2024 04:06:55 +0000 Manifest next update: Fri 07 Jun 2024 04:06:55 +0000 Files and hashes: 1: vR2pHc9Y0IwVyUUayvYvirO-JCA.crl (hash: NcadH6z/1+0PtpEADAh0OJiJOkgwE0tOG7fHFD0rVfw=) 2: 51C4917C2F1D11EDA3E29B09C4F9AE02.roa (hash: 1qWAIn6F9vGhO4BdvhObdHxn/58yUdbUg8nJsHtmQ6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420 Validity Not Before: May 31 04:06:55 2024 GMT Not After : Jun 7 04:06:55 2024 GMT Subject: CN=66594ce0-d054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:5e:6b:eb:47:39:91:2e:fb:56:c9:73:9e: 7a:de:ae:b5:aa:99:2c:ca:73:65:d0:b0:8c:34:8c: 3e:4c:08:03:d4:0b:86:e9:e3:f1:0b:c6:54:d7:9e: f7:5e:3c:fa:67:4a:d0:e9:b0:8b:ff:e6:70:f0:78: 9a:07:32:1e:83:ae:45:1d:13:a3:40:55:88:22:62: fd:cc:63:79:55:9e:3d:af:16:c0:17:99:c9:65:39: 4d:e5:5c:4f:1b:2f:71:7c:21:de:56:48:36:a5:8d: 24:90:35:d1:32:04:0e:f5:9b:63:38:f8:25:ee:30: 5f:e4:f1:6f:82:1c:a0:3d:3f:2a:d9:93:71:e9:84: 49:d6:65:51:80:63:a7:55:71:8f:55:9a:b1:5c:5a: fa:ad:28:1c:03:a2:56:4e:00:09:9c:8a:6f:f9:34: 9d:94:a9:56:44:48:9c:fd:45:87:79:b3:fa:e9:cf: 59:65:67:c1:a8:7b:69:09:95:0d:8a:8b:cf:a3:85: c8:64:97:ff:c6:fc:cc:5e:08:29:3a:ae:28:99:c4: b9:7b:9c:1a:f1:d8:56:67:c4:7a:76:27:fc:ad:43: a9:b5:45:c0:0c:56:f5:c7:bb:81:e1:1d:59:32:76: 6e:78:db:ff:b9:57:2f:89:53:76:4f:fe:c8:07:e5: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:62:22:9F:7F:F9:1E:C8:4C:EE:8C:C5:58:8C:55:A1:CC:C5:55 X509v3 Authority Key Identifier: keyid:BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a3:ae:b1:4e:dc:6b:70:72:cd:6b:b4:d7:92:de:95:b1:0c: ef:e4:bc:05:71:f9:0a:5e:71:26:02:ed:21:a0:71:34:ce:dc: bf:a4:92:85:94:1b:80:c9:ce:20:79:79:2b:61:84:3e:6b:27: 47:3e:31:ff:34:77:e7:3b:76:66:ac:b3:30:fb:f1:4b:17:3f: 92:b4:81:2b:43:7a:9e:f9:c5:92:93:6e:38:f3:24:73:0c:04: e9:7a:f0:41:4c:60:26:dc:c7:1b:3c:64:c9:12:f6:39:83:7d: e5:b6:e6:14:f7:68:c5:2c:ac:df:c3:a0:64:b9:6a:4e:e8:06: 3f:51:81:a7:ba:0e:66:68:c4:9d:9d:7a:67:8f:29:c4:6a:b5: 63:a8:a1:77:3a:3f:35:36:fb:62:82:0a:49:6e:54:0b:ff:fc: 6f:6e:8c:5d:8d:85:92:dd:9f:ff:df:22:ea:53:8f:0a:65:54: 2e:e4:12:63:e9:16:d6:bb:68:b8:81:c8:50:9f:94:f2:5f:e5: b0:a3:f5:48:36:63:db:3e:4e:c6:c6:57:73:66:6a:fe:3e:8a: de:ae:de:23:7e:a0:cb:56:7c:aa:a4:fc:1d:f2:0e:ef:f2:d7: b4:e5:a7:ea:80:91:56:de:35:66:a4:48:77:f0:38:f1:70:0e: 4f:76:1b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNzcxMTAvBgNVBAUTKEJEMURBOTFEQ0Y1OEQwOEMxNUM5NDUxQUNBRjYyRjhB QjNCRTI0MjAwHhcNMjQwNTMxMDQwNjU1WhcNMjQwNjA3MDQwNjU1WjAYMRYwFAYD VQQDEw02NjU5NGNlMC1kMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5Vea+tHOZEu+1bJc5563q61qpksynNl0LCMNIw+TAgD1AuG6ePxC8ZU1573 Xjz6Z0rQ6bCL/+Zw8HiaBzIeg65FHROjQFWIImL9zGN5VZ49rxbAF5nJZTlN5VxP Gy9xfCHeVkg2pY0kkDXRMgQO9ZtjOPgl7jBf5PFvghygPT8q2ZNx6YRJ1mVRgGOn VXGPVZqxXFr6rSgcA6JWTgAJnIpv+TSdlKlWREic/UWHebP66c9ZZWfBqHtpCZUN iovPo4XIZJf/xvzMXggpOq4omcS5e5wa8dhWZ8R6dif8rUOptUXADFb1x7uB4R1Z MnZueNv/uVcviVN2T/7IB+WNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs4YiKf f/keyEzujMVYjFWhzMVVMB8GA1UdIwQYMBaAFL0dqR3PWNCMFclFGsr2L4qzviQg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI3Ny9BNzVFRTJCOEFB NkIxMUVDOUM1NDYxMjFDNEY5QUUwMi92UjJwSGM5WTBJd1Z5VVVheXZZdmlyTy1K Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSMnBIYzlZMEl3VnlVVWF5dll2aXJPLUpDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI3Ny9BNzVFRTJCOEFBNkIxMUVDOUM1NDYxMjFDNEY5QUUwMi92UjJwSGM5WTBJ d1Z5VVVheXZZdmlyTy1KQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLo66xTtxrcHLNa7TXkt6VsQzv5LwFcfkKXnEmAu0hoHE0zty/pJKF lBuAyc4geXkrYYQ+aydHPjH/NHfnO3ZmrLMw+/FLFz+StIErQ3qe+cWSk2448yRz DATpevBBTGAm3McbPGTJEvY5g33ltuYU92jFLKzfw6BkuWpO6AY/UYGnug5maMSd nXpnjynEarVjqKF3Oj81NvtiggpJblQL//xvboxdjYWS3Z//3yLqU48KZVQu5BJj 6RbWu2i4gchQn5TyX+Wwo/VINmPbPk7GxldzZmr+Porert4jfqDLVnyqpPwd8g7v 8te05afqgJFW3jVmpEh38DjxcA5Pdhs3 -----END CERTIFICATE-----Generated at Fri May 31 04:53:58 2024 by rpki-client on console-fra.rpki-client.org