$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: f5rblZzTmgYlQ8AbeICW2sGYG3qCMHVYf4EzPwOgR+k= Subject key identifier: BE:96:88:51:22:35:98:77:1B:47:F7:3E:5A:8E:5C:5B:29:BE:53:CB Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 0741 Signing time: Sat 18 May 2024 22:26:16 +0000 Manifest this update: Sat 18 May 2024 22:26:16 +0000 Manifest next update: Sat 25 May 2024 22:26:16 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: ey/egk18Sg33lDShygfthNqSWEzjNAj9dfDI8MEDkxs=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: yarKsg2U8YvvYfEm7F0GcX7kW9C/La3i1X0o1SxeiQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: May 18 22:26:16 2024 GMT Not After : May 25 22:26:16 2024 GMT Subject: CN=66492b08-58be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:c6:70:19:08:16:e7:d6:07:24:e8:47:08: 68:7e:cc:f4:12:9b:a9:ac:e0:b1:f9:f8:d6:29:e7: 8e:e2:43:31:d2:fc:71:b2:7e:b7:46:60:9c:d6:71: 68:3a:ed:8d:1d:22:c7:d9:0a:75:5a:3a:c2:12:13: 86:42:73:94:49:03:7a:53:08:28:a9:68:62:26:e2: 53:41:3a:54:8c:75:29:3a:c7:56:3b:13:02:8b:0a: fc:e9:de:1c:97:33:b3:1d:08:c4:8f:c3:5a:dd:cf: e2:cc:d9:30:e5:b7:a9:08:2e:5a:4d:f0:a7:0c:96: e6:71:82:aa:3d:e9:0f:68:e7:5d:c8:e4:87:17:29: f1:c8:0f:06:ef:bf:5b:27:0d:00:2e:51:f6:8c:49: ec:8d:2f:26:45:8c:81:98:87:ae:9b:b4:00:a6:70: 45:30:23:88:9e:bb:2c:ee:7e:8a:0c:27:51:c9:46: 67:56:f5:6f:e0:86:08:30:58:ca:b4:8c:a0:9d:ea: 68:3a:16:e1:c4:ae:8e:26:be:ea:c4:0b:8f:2b:f7: b8:e3:3c:75:fc:b7:73:2b:90:15:f5:b0:66:33:60: 54:e1:32:ec:12:f1:91:3b:a8:e8:40:ba:01:a0:54: 65:6a:f5:b5:c6:57:c0:9a:7d:77:69:14:d5:3d:2d: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:88:51:22:35:98:77:1B:47:F7:3E:5A:8E:5C:5B:29:BE:53:CB X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a8:4c:80:53:67:58:45:27:52:78:cf:77:47:df:21:b6:b5: 3f:77:a9:7e:34:07:e4:78:7d:e1:36:85:41:7c:30:20:5e:85: c7:5c:e6:89:b0:0a:4e:7e:1a:62:4f:0f:88:9b:5f:d3:1f:67: 24:69:44:42:83:46:18:b4:8c:70:62:26:dc:c3:a0:b8:5f:a4: a3:ba:24:9f:7e:c7:c8:e5:63:4b:66:d6:c5:fb:5c:1a:07:f6: ea:b5:45:a0:1a:0a:cc:11:01:b5:78:9f:4a:f6:d7:b6:46:83: a4:2a:7e:ed:88:a1:c8:7a:b6:34:6a:fc:92:ad:7a:ec:0f:d4: f9:44:04:7f:d9:c8:4c:99:d9:76:ce:53:90:8d:a5:54:27:75: ae:b3:59:33:3b:0d:cb:3d:07:64:6c:96:84:b6:b9:9e:8a:75: 36:54:c4:46:71:11:26:ff:53:9a:c2:06:23:6e:ef:34:9f:38: aa:bc:76:9c:78:b6:6c:e7:95:11:58:33:89:73:d7:ee:0c:e5: 71:82:0e:af:90:0f:12:78:7a:cc:92:b5:bc:2a:26:92:1e:2f: 56:f1:47:63:41:b9:1f:0d:ea:48:0f:e7:18:8a:0a:7b:91:db: d5:a2:f3:ec:40:b2:3c:7d:36:cf:1c:1f:76:42:d6:27:cc:8e: b3:05:2c:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjQwNTE4MjIyNjE2WhcNMjQwNTI1MjIyNjE2WjAYMRYwFAYD VQQDEw02NjQ5MmIwOC01OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3TGcBkIFufWByToRwhofsz0EpuprOCx+fjWKeeO4kMx0vxxsn63RmCc1nFo Ou2NHSLH2Qp1WjrCEhOGQnOUSQN6UwgoqWhiJuJTQTpUjHUpOsdWOxMCiwr86d4c lzOzHQjEj8Na3c/izNkw5bepCC5aTfCnDJbmcYKqPekPaOddyOSHFynxyA8G779b Jw0ALlH2jEnsjS8mRYyBmIeum7QApnBFMCOInrss7n6KDCdRyUZnVvVv4IYIMFjK tIygnepoOhbhxK6OJr7qxAuPK/e44zx1/LdzK5AV9bBmM2BU4TLsEvGRO6joQLoB oFRlavW1xlfAmn13aRTVPS1+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6WiFEi NZh3G0f3PlqOXFspvlPLMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACqEyAU2dYRSdSeM93R98htrU/d6l+NAfkeH3hNoVBfDAgXoXHXOaJ sApOfhpiTw+Im1/TH2ckaURCg0YYtIxwYibcw6C4X6SjuiSffsfI5WNLZtbF+1wa B/bqtUWgGgrMEQG1eJ9K9te2RoOkKn7tiKHIerY0avySrXrsD9T5RAR/2chMmdl2 zlOQjaVUJ3Wus1kzOw3LPQdkbJaEtrmeinU2VMRGcREm/1OawgYjbu80nziqvHac eLZs55URWDOJc9fuDOVxgg6vkA8SeHrMkrW8KiaSHi9W8UdjQbkfDepID+cYigp7 kdvVovPsQLI8fTbPHB92QtYnzI6zBSxC -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org