$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: PxAC99ysdMTZU2xDnzNLVfHsMITfFZyb7snani8CNms= Subject key identifier: 1A:62:56:BA:98:C8:6B:0E:2C:0F:8A:96:4D:06:8A:CC:2D:BA:14:F0 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 050C Signing time: Sun 19 May 2024 01:07:27 +0000 Manifest this update: Sun 19 May 2024 01:07:26 +0000 Manifest next update: Sun 26 May 2024 01:07:26 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: R0RsbGyv8psznHmJwOE8wVpi5XrBNTL10Db4KP7xNxU=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 47HHXDnt39bkXS2AX3ZMrOCuV1oFM3pi8+pcdA0rJXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: May 19 01:07:26 2024 GMT Not After : May 26 01:07:26 2024 GMT Subject: CN=664950cf-c6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:71:60:7a:81:d2:10:22:42:a2:ea:75:60:d2: 0c:19:a1:b5:b6:17:fd:ba:f3:9e:09:95:9f:02:ae: c9:97:9e:86:6c:3a:66:47:0c:53:d9:8c:f2:76:c9: f9:08:ab:d1:1d:60:31:f8:44:a1:6f:c5:a8:d0:d5: da:ec:8e:93:d0:75:08:9f:bc:b6:2b:4b:e3:23:86: 2e:45:c5:e4:9d:33:91:62:03:c6:f9:53:08:9d:af: db:8b:59:54:b7:7c:73:a4:44:d3:fe:e8:99:a2:b1: 8e:87:2c:3d:36:be:8a:78:29:4d:17:64:da:1e:75: f1:8d:75:a1:cf:77:e5:fb:26:35:34:3e:84:8c:d1: a7:35:4c:a5:61:45:67:1d:2a:c4:9a:12:db:91:9a: 12:af:a1:f1:fb:9e:5a:36:01:e0:e3:f5:07:ad:c8: 1d:57:8f:bc:e0:76:00:43:c0:2e:9d:05:7a:97:e9: 09:f3:be:42:d6:ac:86:38:57:d3:09:fd:fe:4e:39: ad:b7:1d:1d:ee:6c:1e:32:41:44:cb:cc:ed:00:5b: aa:29:c1:30:c4:3e:20:48:23:7e:54:f8:1e:d1:e0: 07:97:d0:4b:31:a8:43:f1:bb:7c:70:a6:69:aa:f7: 12:b0:c8:ed:27:0b:98:09:8b:37:c4:c7:10:02:07: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:62:56:BA:98:C8:6B:0E:2C:0F:8A:96:4D:06:8A:CC:2D:BA:14:F0 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:a2:f2:5e:7f:17:e7:be:37:b9:c6:06:17:1f:4c:2d:eb: ca:30:39:42:54:0b:47:5f:aa:b5:43:db:20:d8:cf:ef:b5:37: e4:12:c2:a0:b1:ea:38:a6:a9:60:0f:2f:e9:3a:8a:b1:b5:34: e3:3a:08:63:0b:52:b4:bd:bc:42:44:18:76:02:9c:91:29:c6: cf:a4:10:80:99:a1:30:6a:3b:e2:49:e2:f4:c6:81:1c:e2:24: 36:2e:37:05:90:03:73:49:be:33:05:18:1a:c6:8b:e0:ef:e1: 92:59:7b:c2:f1:f5:a6:e0:d5:1e:e8:e6:f1:da:33:d9:6c:f1: a8:14:76:dc:55:0a:7c:2a:47:01:16:b3:2e:8d:01:0e:aa:3d: 2d:59:07:12:e1:f9:9e:eb:f4:6d:f5:bd:b1:b5:6f:81:5a:a0: 8a:8d:84:0d:91:79:c6:05:8c:5f:f8:1d:9c:ef:8d:75:bd:c5: b4:84:85:78:7a:f6:86:ac:bc:5b:e9:58:37:59:95:5d:e0:2b: 99:97:a8:22:7e:3f:ee:9c:9c:5f:f4:db:c2:53:36:c9:26:89: e4:54:c3:ca:e3:2f:de:4c:41:86:19:81:ad:b7:79:74:95:2a: cf:61:c8:bf:2b:a8:dd:a6:5c:d2:5d:2d:b1:e6:4d:58:d9:bd: 9f:48:2a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjQwNTE5MDEwNzI2WhcNMjQwNTI2MDEwNzI2WjAYMRYwFAYD VQQDEw02NjQ5NTBjZi1jNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43FgeoHSECJCoup1YNIMGaG1thf9uvOeCZWfAq7Jl56GbDpmRwxT2Yzydsn5 CKvRHWAx+EShb8Wo0NXa7I6T0HUIn7y2K0vjI4YuRcXknTORYgPG+VMIna/bi1lU t3xzpETT/uiZorGOhyw9Nr6KeClNF2TaHnXxjXWhz3fl+yY1ND6EjNGnNUylYUVn HSrEmhLbkZoSr6Hx+55aNgHg4/UHrcgdV4+84HYAQ8AunQV6l+kJ875C1qyGOFfT Cf3+Tjmttx0d7mweMkFEy8ztAFuqKcEwxD4gSCN+VPge0eAHl9BLMahD8bt8cKZp qvcSsMjtJwuYCYs3xMcQAgcnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpiVrqY yGsOLA+Klk0GiswtuhTwMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjZqLyXn8X5743ucYGFx9MLevKMDlCVAtHX6q1Q9sg2M/vtTfkEsKg seo4pqlgDy/pOoqxtTTjOghjC1K0vbxCRBh2ApyRKcbPpBCAmaEwajviSeL0xoEc 4iQ2LjcFkANzSb4zBRgaxovg7+GSWXvC8fWm4NUe6Obx2jPZbPGoFHbcVQp8KkcB FrMujQEOqj0tWQcS4fme6/Rt9b2xtW+BWqCKjYQNkXnGBYxf+B2c7411vcW0hIV4 evaGrLxb6Vg3WZVd4CuZl6gifj/unJxf9NvCUzbJJonkVMPK4y/eTEGGGYGtt3l0 lSrPYci/K6jdplzSXS2x5k1Y2b2fSCqw -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org