$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: W3HbxZrCtxc/KSAGPUVt2+jNP2z66c6/91y3z+HxkQ8= Subject key identifier: EC:C9:70:87:0E:6B:81:48:A6:F4:9E:BD:04:3F:94:4A:96:6F:08:14 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 02BC Signing time: Sat 01 Jun 2024 04:38:49 +0000 Manifest this update: Sat 01 Jun 2024 04:38:49 +0000 Manifest next update: Sat 08 Jun 2024 04:38:49 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: g5NJcjLwhn2sGY9yu+TXJ7boAwpacMNmNRTpfQUgsgk=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: SdiEw5/7A1+mSQhjRwF+90L+XCu7NDNES7xMleeOJcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Jun 1 04:38:49 2024 GMT Not After : Jun 8 04:38:49 2024 GMT Subject: CN=665aa5d9-53b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9e:5e:ef:ea:0e:3b:e5:d4:a5:20:1c:54:4a: 1b:51:3c:4d:3a:e2:79:29:9e:87:b8:81:33:0d:b7: 3c:bc:dc:89:a1:8b:85:6f:68:de:8a:8b:cf:0c:bc: de:dd:bf:02:c3:41:42:00:5c:17:fc:6a:f8:0d:94: 8c:60:c9:59:0c:0b:37:cb:fe:3e:eb:7e:22:0d:f4: 23:71:9a:66:34:34:5c:83:16:83:19:94:7a:f9:c1: ce:ce:c8:0b:1e:81:07:39:39:f7:e2:c8:67:70:63: d0:5f:28:35:ba:a1:2c:7d:32:ae:5d:fc:9f:a6:75: d2:f4:71:c7:97:7e:7e:f7:cf:9b:33:12:fb:e6:40: 26:59:48:a1:4e:ce:fd:0c:12:0b:d3:14:9f:2d:b6: 54:8c:92:d9:1a:a9:95:62:66:03:fe:2d:33:de:fd: b9:3d:38:5a:fa:e7:2e:fb:5c:45:3b:57:fd:e1:a3: c4:bf:4c:bd:fb:a9:bc:85:96:84:67:e4:b7:64:a3: 3d:bf:99:72:dc:d0:ea:da:b5:e6:7c:b5:f3:c4:e2: a3:2e:ae:ff:84:a4:1c:90:f9:ed:34:74:cc:2b:70: 95:72:0c:f9:31:0f:b8:76:62:ab:5a:fa:0a:be:62: 23:f8:05:1c:4d:13:c6:b8:f7:26:68:d8:af:fc:b7: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:70:87:0E:6B:81:48:A6:F4:9E:BD:04:3F:94:4A:96:6F:08:14 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:85:da:a4:b9:cc:65:fb:7b:69:0d:e9:4e:40:62:0d:8d:9d: b3:52:5d:c1:5a:25:2b:93:73:24:e9:73:2a:57:d7:cf:5a:a9: 60:7d:cb:23:33:fd:2c:8e:a5:a6:71:92:f3:5e:1d:6f:f7:94: 21:c2:3f:b2:15:39:f3:f0:47:d3:9a:3b:6c:70:1b:c8:be:e8: e4:c8:a5:39:b3:1e:98:5a:82:72:01:c8:80:c0:5d:76:d3:66: 4b:b2:54:54:7a:0a:70:3f:d0:86:3e:70:5c:7e:7a:92:40:2b: 1e:b6:75:59:f7:6c:d1:6e:ee:11:db:1b:2b:35:2d:54:c5:58: 77:f3:73:f8:c3:d1:68:43:2d:16:ca:a2:d1:d1:66:4f:16:f3: 43:3f:e1:d5:12:4c:8f:42:ab:c2:7c:a8:c9:9a:d7:7a:f6:d3: 19:28:76:df:d4:99:de:4a:ae:e9:b6:2b:f1:a6:81:7e:77:a6: f6:83:d4:60:69:31:cf:41:17:6f:11:0a:36:a3:d6:aa:89:f6: ae:3b:07:c0:fb:02:19:3c:a6:8f:ba:41:e6:99:d1:ef:e7:ff: b8:33:4c:34:5e:4e:e4:67:4e:e0:ab:9d:b3:e5:57:32:40:a2: 5e:89:ee:cf:84:68:34:77:e9:9d:ab:8f:6b:22:0e:8b:2b:fc: 04:9e:3f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjQwNjAxMDQzODQ5WhcNMjQwNjA4MDQzODQ5WjAYMRYwFAYD VQQDEw02NjVhYTVkOS01M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p5e7+oOO+XUpSAcVEobUTxNOuJ5KZ6HuIEzDbc8vNyJoYuFb2jeiovPDLze 3b8Cw0FCAFwX/Gr4DZSMYMlZDAs3y/4+634iDfQjcZpmNDRcgxaDGZR6+cHOzsgL HoEHOTn34shncGPQXyg1uqEsfTKuXfyfpnXS9HHHl35+98+bMxL75kAmWUihTs79 DBIL0xSfLbZUjJLZGqmVYmYD/i0z3v25PTha+ucu+1xFO1f94aPEv0y9+6m8hZaE Z+S3ZKM9v5ly3NDq2rXmfLXzxOKjLq7/hKQckPntNHTMK3CVcgz5MQ+4dmKrWvoK vmIj+AUcTRPGuPcmaNiv/LelJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzJcIcO a4FIpvSevQQ/lEqWbwgUMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0hdqkucxl+3tpDelOQGINjZ2zUl3BWiUrk3Mk6XMqV9fPWqlgfcsj M/0sjqWmcZLzXh1v95Qhwj+yFTnz8EfTmjtscBvIvujkyKU5sx6YWoJyAciAwF12 02ZLslRUegpwP9CGPnBcfnqSQCsetnVZ92zRbu4R2xsrNS1UxVh383P4w9FoQy0W yqLR0WZPFvNDP+HVEkyPQqvCfKjJmtd69tMZKHbf1JneSq7ptivxpoF+d6b2g9Rg aTHPQRdvEQo2o9aqifauOwfA+wIZPKaPukHmmdHv5/+4M0w0Xk7kZ07gq52z5Vcy QKJeie7PhGg0d+mdq49rIg6LK/wEnj/J -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:44 2024 by rpki-client on console-fra.rpki-client.org