$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft File: BefEArz0ghV3F3vIMwVVds4ZPrY.mft (raw, json) Hash identifier: GGSd/yBuZT3GV3tmdMTR1dcHJk6fYWnICJ42d40q7oY= Subject key identifier: B1:D2:FC:BE:04:7E:AF:8C:2D:A0:CA:FF:41:2E:46:E3:CA:1D:3D:3D Authority key identifier: 05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6 Certificate issuer: /CN=A91B8D4F/serialNumber=05E7C402BCF4821577177BC833055576CE193EB6 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft Manifest number: 048F Signing time: Fri 17 May 2024 01:45:27 +0000 Manifest this update: Fri 17 May 2024 01:45:26 +0000 Manifest next update: Fri 24 May 2024 01:45:26 +0000 Files and hashes: 1: BefEArz0ghV3F3vIMwVVds4ZPrY.crl (hash: Hzfv1Ue6+GGo0GXKHDMwew1ktSOV85UwI7ZdBfjK2/8=) 2: 444AF4A2EEEE11EB90326C4FC4F9AE02.roa (hash: n+/h/w1/LwNdbpecf5U7gjmfuM7SLXYPYr6dzyYio/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.crl rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D4F/serialNumber=05E7C402BCF4821577177BC833055576CE193EB6 Validity Not Before: May 17 01:45:26 2024 GMT Not After : May 24 01:45:26 2024 GMT Subject: CN=6646b6b7-52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:cd:6e:3a:24:c9:48:7c:44:76:3d:ad:28: e7:65:f0:01:ec:71:f2:a4:fd:10:e1:69:d9:1a:5e: b7:f7:4d:a4:24:1f:73:0f:5a:71:5e:da:6c:cf:4f: ee:51:ce:73:7d:cd:af:79:9f:7b:3a:9b:9d:7d:81: 99:4f:ca:78:72:d9:0d:cb:09:62:dd:a8:5f:27:4d: 0d:cc:de:21:dd:e1:89:e6:08:6c:b1:61:47:9b:5e: 0a:8d:3f:74:94:b6:0c:2a:a0:50:e5:bc:60:09:6a: 34:32:33:a3:58:20:2f:f6:30:8d:42:ab:02:6b:70: 0d:13:5b:23:a4:82:a9:ed:d4:2d:42:74:ac:ce:f0: 21:63:11:bf:99:b8:3d:20:db:c3:d6:a8:15:2f:21: a7:61:bb:22:c8:d4:aa:47:13:85:34:6d:ae:75:d5: 0f:bc:9c:82:16:1d:0f:98:8b:cc:fe:12:b0:96:ba: b8:8e:28:55:49:87:e3:7f:f7:85:0e:20:fa:22:2c: 18:48:72:2b:b0:2c:f6:5f:c3:bf:74:a0:85:98:e3: cc:78:a6:59:ab:f6:c2:8a:a7:34:21:58:97:1e:c4: af:ff:18:1c:d4:ba:cd:b1:fc:99:fd:73:f1:25:74: af:d6:31:56:e3:8c:60:93:9a:70:9c:45:c8:90:f6: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D2:FC:BE:04:7E:AF:8C:2D:A0:CA:FF:41:2E:46:E3:CA:1D:3D:3D X509v3 Authority Key Identifier: keyid:05:E7:C4:02:BC:F4:82:15:77:17:7B:C8:33:05:55:76:CE:19:3E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BefEArz0ghV3F3vIMwVVds4ZPrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D4F/449ECC56EEE111EBBADE2C79C4F9AE02/BefEArz0ghV3F3vIMwVVds4ZPrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:e8:cd:51:2c:11:2f:ed:bf:68:68:01:89:29:62:8d:8e: e2:a0:a1:8b:bc:10:e7:fb:53:16:b1:cb:aa:1d:92:07:2e:c1: a7:fd:b5:78:b8:6f:80:50:9c:2e:72:82:75:65:e8:8f:ba:1b: 0b:35:b5:69:8d:47:29:98:17:df:64:ed:48:67:c5:ef:3d:46: 70:73:e0:11:fe:0a:e2:6f:b3:6f:6b:7a:e6:94:f6:87:66:5f: 6f:4b:d7:66:c1:f9:36:ed:a5:0c:bc:4b:cf:d3:c1:d3:f6:37: 82:11:20:48:57:c1:73:db:aa:4d:da:49:be:11:5f:16:ad:a0: 4b:90:9c:d9:8d:15:00:30:a9:bf:9d:3c:db:2e:a5:43:53:b1: a6:43:ca:b0:ee:29:42:78:2a:ae:49:28:db:d0:bc:46:78:35: bb:c8:80:73:d7:ac:fd:ea:49:91:99:8c:4d:23:ef:00:b7:ec: 51:ac:7a:9c:70:16:28:af:63:23:4a:81:b3:c1:10:6b:f5:38: 86:44:1b:4e:d3:5c:e3:6a:2a:86:3b:76:b6:fd:ad:7f:5f:69: a0:0b:dd:f6:ea:5b:cd:39:f2:37:e3:81:c9:c9:98:2b:98:4c: f5:43:6e:6b:9c:02:ef:6e:95:34:36:d7:e4:20:d9:18:ea:ea: 4d:4b:b9:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENEYxMTAvBgNVBAUTKDA1RTdDNDAyQkNGNDgyMTU3NzE3N0JDODMzMDU1NTc2 Q0UxOTNFQjYwHhcNMjQwNTE3MDE0NTI2WhcNMjQwNTI0MDE0NTI2WjAYMRYwFAYD VQQDEw02NjQ2YjZiNy01MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukHNbjokyUh8RHY9rSjnZfAB7HHypP0Q4WnZGl63902kJB9zD1pxXtpsz0/u Uc5zfc2veZ97OpudfYGZT8p4ctkNywli3ahfJ00NzN4h3eGJ5ghssWFHm14KjT90 lLYMKqBQ5bxgCWo0MjOjWCAv9jCNQqsCa3ANE1sjpIKp7dQtQnSszvAhYxG/mbg9 INvD1qgVLyGnYbsiyNSqRxOFNG2uddUPvJyCFh0PmIvM/hKwlrq4jihVSYfjf/eF DiD6IiwYSHIrsCz2X8O/dKCFmOPMeKZZq/bCiqc0IViXHsSv/xgc1LrNsfyZ/XPx JXSv1jFW44xgk5pwnEXIkPYpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHS/L4E fq+MLaDK/0EuRuPKHT09MB8GA1UdIwQYMBaAFAXnxAK89IIVdxd7yDMFVXbOGT62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ0Ri80NDlFQ0M1NkVF RTExMUVCQkFERTJDNzlDNEY5QUUwMi9CZWZFQXJ6MGdoVjNGM3ZJTXdWVmRzNFpQ clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JlZkVBcnowZ2hWM0YzdklNd1ZWZHM0WlByWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ0Ri80NDlFQ0M1NkVFRTExMUVCQkFERTJDNzlDNEY5QUUwMi9CZWZFQXJ6MGdo VjNGM3ZJTXdWVmRzNFpQclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCFujNUSwRL+2/aGgBiSlijY7ioKGLvBDn+1MWscuqHZIHLsGn/bV4 uG+AUJwucoJ1ZeiPuhsLNbVpjUcpmBffZO1IZ8XvPUZwc+AR/grib7Nva3rmlPaH Zl9vS9dmwfk27aUMvEvP08HT9jeCESBIV8Fz26pN2km+EV8WraBLkJzZjRUAMKm/ nTzbLqVDU7GmQ8qw7ilCeCquSSjb0LxGeDW7yIBz16z96kmRmYxNI+8At+xRrHqc cBYor2MjSoGzwRBr9TiGRBtO01zjaiqGO3a2/a1/X2mgC9326lvNOfI344HJyZgr mEz1Q25rnALvbpU0NtfkINkY6upNS7nd -----END CERTIFICATE-----Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org