$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft File: BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json) Hash identifier: YSWNCwKtw7mg8oGdg3A5w6ucfcbHfUknR/kDkzQPM/g= Subject key identifier: D1:28:E6:2E:83:72:D1:0D:2B:0C:EA:D7:CC:38:F8:82:7C:E4:79:F6 Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft Manifest number: 047D Signing time: Fri 31 May 2024 02:15:05 +0000 Manifest this update: Fri 31 May 2024 02:15:04 +0000 Manifest next update: Fri 07 Jun 2024 02:15:04 +0000 Files and hashes: 1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: 738G92UyzOIES7GAD2+p0UdZBAF1CStiUojyLCplmeA=) 2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: TyGAFa0F9A6M+JmR5QkaYk924b/uPOON+IfGsqbnRAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: May 31 02:15:04 2024 GMT Not After : Jun 7 02:15:04 2024 GMT Subject: CN=665932a8-179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:93:cc:10:3f:65:64:b3:a8:2f:c8:19:46: bc:12:eb:90:15:b1:67:d2:95:96:11:17:ca:21:9e: 6f:0b:1c:ba:db:f5:c3:ef:d6:e3:f3:17:5f:43:fb: 4a:9d:af:c5:fa:2f:20:f9:9c:16:7f:be:96:8b:77: f9:73:5b:75:d8:aa:b1:fe:cd:68:e1:87:69:19:ff: 64:f8:89:44:ec:f9:a5:f3:d4:09:8d:92:92:9c:de: 90:78:9b:d9:7c:d9:d0:f6:b1:01:ef:36:1b:1d:e1: d4:8d:86:fd:28:54:22:cb:8e:b6:0a:89:56:40:e3: d4:29:7c:74:6e:f3:3a:b2:db:ad:0b:86:71:57:c9: 51:15:66:65:d6:20:c8:81:12:02:d8:6a:4a:e5:39: d8:94:43:4c:d5:ed:05:8f:0d:7a:3d:95:44:c6:23: c3:3f:4e:72:75:1a:61:ab:40:c9:bc:f7:04:57:22: 23:a9:09:94:52:59:a1:13:e3:0b:d9:de:64:b8:9e: 5e:f0:79:af:52:db:6a:41:e5:5f:8a:e6:7f:58:04: d6:7b:99:76:c7:55:69:f7:85:f9:87:81:15:5a:19: a3:98:2c:18:c8:cf:90:d6:5a:d3:bb:fc:d4:28:5e: f4:bd:8b:6b:ce:b9:ff:f4:7b:1d:ce:78:6d:95:a3: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:E6:2E:83:72:D1:0D:2B:0C:EA:D7:CC:38:F8:82:7C:E4:79:F6 X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:97:2d:b9:bd:04:54:d9:e6:a1:ab:9a:ea:ec:60:24:88:8e: f5:2e:21:57:ca:5e:8f:53:4e:8a:50:c5:e5:2d:59:07:9e:02: 73:4d:4a:b8:d6:85:8f:4e:ae:b2:9e:cb:7b:4c:f3:99:e0:44: f4:4e:50:e1:53:96:59:00:c6:e9:f5:d4:00:aa:cf:77:f0:71: 1e:28:f9:77:18:42:50:2e:c1:45:ce:12:15:d9:93:7a:c6:f1: 34:26:9a:77:8b:37:d2:e7:b8:13:6e:51:9a:ec:71:17:3a:b0: 9a:f6:86:89:91:6a:cd:b0:cd:ae:6f:d9:4a:93:d5:77:71:ca: a3:b8:d8:df:10:4b:e0:f9:1f:5d:b9:19:63:b1:ae:ba:20:a8: 1a:92:73:8d:34:b1:91:5f:c6:63:41:eb:8b:f8:b6:af:d7:c6: 3b:a5:b8:30:30:f5:f0:38:df:9d:12:ef:68:d1:02:ea:1c:de: 55:ea:c9:7c:d3:a5:4a:93:2e:51:34:bf:c9:0d:bc:94:13:bf: 69:9b:bf:6a:0a:1e:4b:36:d3:79:8e:29:2d:fe:9f:55:0e:57: ba:30:59:94:3f:a7:13:db:b3:28:3e:ce:dc:0c:c7:51:e2:42: 5a:fd:db:57:ad:11:94:b6:4d:71:8b:b9:3f:9f:73:71:7b:4d: 13:25:8d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjQwNTMxMDIxNTA0WhcNMjQwNjA3MDIxNTA0WjAYMRYwFAYD VQQDEw02NjU5MzJhOC0xNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy+TzBA/ZWSzqC/IGUa8EuuQFbFn0pWWERfKIZ5vCxy62/XD79bj8xdfQ/tK na/F+i8g+ZwWf76Wi3f5c1t12Kqx/s1o4YdpGf9k+IlE7Pml89QJjZKSnN6QeJvZ fNnQ9rEB7zYbHeHUjYb9KFQiy462ColWQOPUKXx0bvM6stutC4ZxV8lRFWZl1iDI gRIC2GpK5TnYlENM1e0Fjw16PZVExiPDP05ydRphq0DJvPcEVyIjqQmUUlmhE+ML 2d5kuJ5e8HmvUttqQeVfiuZ/WATWe5l2x1Vp94X5h4EVWhmjmCwYyM+Q1lrTu/zU KF70vYtrzrn/9HsdznhtlaONCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEo5i6D ctENKwzq18w4+IJ85Hn2MB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRl N09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ly25vQRU2eahq5rq7GAkiI71LiFXyl6PU06KUMXlLVkHngJzTUq4 1oWPTq6ynst7TPOZ4ET0TlDhU5ZZAMbp9dQAqs938HEeKPl3GEJQLsFFzhIV2ZN6 xvE0Jpp3izfS57gTblGa7HEXOrCa9oaJkWrNsM2ub9lKk9V3ccqjuNjfEEvg+R9d uRljsa66IKgaknONNLGRX8ZjQeuL+Lav18Y7pbgwMPXwON+dEu9o0QLqHN5V6sl8 06VKky5RNL/JDbyUE79pm79qCh5LNtN5jikt/p9VDle6MFmUP6cT27MoPs7cDMdR 4kJa/dtXrRGUtk1xi7k/n3Nxe00TJY0Y -----END CERTIFICATE-----Generated at Fri May 31 02:50:45 2024 by rpki-client on console-fra.rpki-client.org