$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: 0rHMIBtSEzIiftkCWA9h3e5aR2r9ATPqH+fEnLdfsxs= Subject key identifier: 28:53:36:71:79:91:AC:EE:CB:16:22:51:32:87:08:31:C9:E4:1F:1F Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 11AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 119F Signing time: Sat 18 May 2024 17:45:36 +0000 Manifest this update: Sat 18 May 2024 17:45:35 +0000 Manifest next update: Sat 25 May 2024 17:45:35 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: 7osJfMhDHsc2VoXpTPmeFzCC1mliEiTZIpHNk/efo2E=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: VyJcTUUmY99GqXAhdK4GmLS/hVt+DrV2BMhtj+3w7Ek=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: vlIt33QNGdGKAxRpD6wWBqwDfS8rDt2cTjiG9/cS6Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: May 18 17:45:35 2024 GMT Not After : May 25 17:45:35 2024 GMT Subject: CN=6648e940-328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:f1:01:ea:fa:f2:ad:f2:cb:c8:b2:b5:76: 4a:a8:f8:e9:33:51:3e:ff:3b:1f:52:a1:1e:7b:2d: 99:be:9d:0f:65:fd:fb:ee:16:4c:92:e5:d9:64:23: da:7a:9e:56:dc:a2:7c:90:3e:53:48:50:5c:ab:99: b7:ab:42:e6:9f:e2:49:7c:47:8f:35:21:2a:cf:66: 95:e8:a9:98:ed:e0:5f:39:3c:8a:7e:36:98:df:97: 83:75:e8:6f:7b:25:f2:74:81:60:2c:1e:da:ed:81: 60:2d:44:36:36:f7:b2:d7:0c:e3:b9:ea:2b:2d:95: e8:e8:30:ee:4e:3e:c9:f9:d4:70:22:83:3d:65:a5: 45:7b:16:30:2b:50:65:84:a4:3a:3e:1a:a5:5b:a6: 24:48:14:79:c1:cf:c0:b9:36:23:93:f9:34:b6:d3: 3b:00:06:4a:a0:39:fe:59:24:69:46:83:b9:40:5b: df:b7:e6:01:9a:87:5d:63:bc:bf:bf:d1:45:a0:ae: 47:88:8e:40:26:41:60:87:8e:7d:b6:1a:79:dd:42: ea:64:f1:60:8c:9f:7f:70:dd:f5:60:5f:f8:61:59: 51:60:3c:48:76:c4:ba:7b:67:a4:aa:b8:ff:62:a3: 35:9c:b2:5f:ab:94:77:09:62:16:91:43:70:ca:25: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:36:71:79:91:AC:EE:CB:16:22:51:32:87:08:31:C9:E4:1F:1F X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:1b:52:e7:60:03:30:3b:95:2a:0d:c8:72:b0:35:4a:79: 97:1a:d5:e3:3e:71:e5:6a:22:33:3d:e0:e7:e5:57:b1:55:ce: 5a:a5:67:f1:44:a9:05:ae:bd:4b:0c:28:cd:50:25:54:7d:98: d0:ef:28:f7:c5:ab:ba:c7:05:e1:a0:29:7d:2c:ea:a1:e9:30: 2c:37:f7:8c:a4:60:11:65:87:05:a5:c8:d5:c2:5c:65:86:f9: cb:e5:87:bb:f2:65:a9:ec:1e:f3:c6:7d:7e:34:66:93:89:68: e9:db:ef:9f:d3:2f:7b:2b:9e:95:a7:b0:ea:87:6e:d0:be:8c: 27:bb:db:f2:d9:44:b1:eb:97:20:08:f8:d5:55:49:b5:fd:39: a0:34:f5:04:c7:af:77:24:72:bd:4d:59:0f:46:9d:ca:aa:74: 02:4e:09:2c:d0:bb:f0:a7:db:ff:2e:6f:38:ea:33:d3:b9:61: 8f:f9:f4:6d:78:f0:db:59:fa:64:82:01:45:7d:22:f1:33:6f: c5:c1:e0:e1:4a:71:08:99:a7:b1:ef:62:ef:82:a2:97:0f:e1: 54:bd:92:ed:6c:ea:66:52:dc:5b:6c:f8:9b:2c:dd:61:0e:f9: 4f:e2:fd:00:67:64:b4:20:74:d5:5a:8f:59:ac:c0:36:65:70: 2c:16:6d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjQwNTE4MTc0NTM1WhcNMjQwNTI1MTc0NTM1WjAYMRYwFAYD VQQDEw02NjQ4ZTk0MC0zMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ErxAer68q3yy8iytXZKqPjpM1E+/zsfUqEeey2Zvp0PZf377hZMkuXZZCPa ep5W3KJ8kD5TSFBcq5m3q0Lmn+JJfEePNSEqz2aV6KmY7eBfOTyKfjaY35eDdehv eyXydIFgLB7a7YFgLUQ2Nvey1wzjueorLZXo6DDuTj7J+dRwIoM9ZaVFexYwK1Bl hKQ6PhqlW6YkSBR5wc/AuTYjk/k0ttM7AAZKoDn+WSRpRoO5QFvft+YBmoddY7y/ v9FFoK5HiI5AJkFgh459thp53ULqZPFgjJ9/cN31YF/4YVlRYDxIdsS6e2ekqrj/ YqM1nLJfq5R3CWIWkUNwyiUFzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChTNnF5 kazuyxYiUTKHCDHJ5B8fMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6vhtS52ADMDuVKg3IcrA1SnmXGtXjPnHlaiIzPeDn5VexVc5apWfx RKkFrr1LDCjNUCVUfZjQ7yj3xau6xwXhoCl9LOqh6TAsN/eMpGARZYcFpcjVwlxl hvnL5Ye78mWp7B7zxn1+NGaTiWjp2++f0y97K56Vp7Dqh27Qvownu9vy2USx65cg CPjVVUm1/TmgNPUEx693JHK9TVkPRp3KqnQCTgks0Lvwp9v/Lm846jPTuWGP+fRt ePDbWfpkggFFfSLxM2/FweDhSnEImaex72LvgqKXD+FUvZLtbOpmUtxbbPibLN1h DvlP4v0AZ2S0IHTVWo9ZrMA2ZXAsFm1d -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org