$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json) Hash identifier: cHHGJNzS6C8AOqvsY+47TLy1eM1SE0ybREYVWD9lTvc= Subject key identifier: 97:3F:30:7A:8D:13:91:37:56:04:96:D8:43:78:D2:E3:B0:14:EB:1C Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft Manifest number: 2A Signing time: Sun 19 May 2024 08:33:24 +0000 Manifest this update: Sun 19 May 2024 08:33:24 +0000 Manifest next update: Sun 26 May 2024 08:33:24 +0000 Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: 5R8o4YxrlB+EtLMye5RRhTctBxNhxoJzcjndQdJyVb4=) 2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: XCfCmftMwhI1jamDgRcIxFJNNZ6OneW30ciSDRXltTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: May 19 08:33:24 2024 GMT Not After : May 26 08:33:24 2024 GMT Subject: CN=6649b954-75bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:6c:82:b8:aa:14:85:c6:a9:3e:34:97:d2: 3c:8c:d8:0b:2c:d6:d8:97:22:c1:1f:5a:ef:78:c0: 13:43:ea:3a:79:05:44:f3:ae:21:92:e1:c8:da:6c: 7f:ab:a2:ac:2a:70:b9:87:7e:7e:63:be:60:b6:22: b8:87:8e:ec:04:f6:01:c8:f8:2e:a7:17:da:d0:fd: d0:6a:ad:18:5f:d8:1a:bf:73:8d:37:a1:44:31:e5: 37:8b:30:a7:b1:c1:91:0b:ef:0f:f6:c7:5e:6d:85: 67:d3:50:2e:c4:d2:d3:82:d9:c3:8b:04:b6:5d:56: c7:0a:8a:1b:1b:56:0e:9c:57:15:2d:98:9a:a6:67: 5e:37:1a:08:04:d9:90:24:5a:38:18:94:a6:95:47: 76:2c:99:f0:4d:30:72:86:47:3d:2e:93:eb:cc:a4: a1:68:8b:c1:e8:d5:37:5a:fc:e4:d5:2d:e1:d3:4a: 6b:3e:27:62:e4:db:c2:c8:ee:60:e0:08:72:20:67: 83:75:19:c2:13:6b:74:34:db:3a:2c:98:8e:02:a6: 74:11:a1:6c:3d:42:b1:13:88:4f:eb:e6:41:c8:87: 92:49:0e:27:ab:6a:d8:d0:cc:c7:ed:22:ef:c2:09: 6c:12:e0:c4:2e:eb:b7:ec:04:d3:c9:6c:30:0a:59: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:30:7A:8D:13:91:37:56:04:96:D8:43:78:D2:E3:B0:14:EB:1C X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:59:34:e3:d1:db:ee:e0:c7:c1:3a:85:0c:d4:69:98:51:0d: e4:9d:fc:6a:15:b0:ad:77:36:01:98:e5:6d:cc:f8:05:cb:fc: b5:32:fe:00:0d:cb:24:be:4e:d5:1b:d7:f6:14:1e:40:e1:e0: 11:db:c8:50:f4:41:ea:c4:65:f6:1e:75:8b:b2:33:1d:f6:b1: 93:d0:94:f3:54:f8:41:a0:e4:f7:61:b9:94:28:9e:94:b7:f0: 01:22:08:d0:b3:ec:ad:55:1c:96:9f:48:16:6f:df:0a:da:7b: b8:7e:62:5d:ae:2c:ad:80:15:e3:2c:dc:2c:3f:45:71:09:4e: ca:4a:4c:2f:c4:40:0b:47:7d:54:29:79:8e:0e:c6:df:b9:93: f9:1e:9e:e8:32:e6:e6:27:46:30:ea:a6:00:da:d3:4f:bb:e3: 8e:aa:35:66:6a:f7:8c:1e:71:fd:47:bc:25:25:bd:d8:00:0e: 05:6e:66:11:d1:38:e4:78:d5:ca:03:e1:f1:df:23:50:31:7a: 59:48:6f:8a:b4:27:31:20:56:76:06:15:ca:ed:94:d5:21:7a: d0:08:a3:27:b8:c5:cb:7d:d5:75:8d:05:16:57:5c:14:01:19: 31:2f:46:dc:89:a4:85:3c:d2:87:76:aa:a9:c5:7e:4f:50:da: 62:16:c4:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OEREMTExMC8GA1UEBRMoMDZENjJDN0E4NDA3NkUxQzY0OTQwNDA2MjU4OTE5RDY3 RDE1QUJFMTAeFw0yNDA1MTkwODMzMjRaFw0yNDA1MjYwODMzMjRaMBgxFjAUBgNV BAMTDTY2NDliOTU0LTc1YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDof2yCuKoUhcapPjSX0jyM2Ass1tiXIsEfWu94wBND6jp5BUTzriGS4cjabH+r oqwqcLmHfn5jvmC2IriHjuwE9gHI+C6nF9rQ/dBqrRhf2Bq/c403oUQx5TeLMKex wZEL7w/2x15thWfTUC7E0tOC2cOLBLZdVscKihsbVg6cVxUtmJqmZ143GggE2ZAk WjgYlKaVR3YsmfBNMHKGRz0uk+vMpKFoi8Ho1Tda/OTVLeHTSms+J2Lk28LI7mDg CHIgZ4N1GcITa3Q02zosmI4CpnQRoWw9QrETiE/r5kHIh5JJDieratjQzMftIu/C CWwS4MQu67fsBNPJbDAKWZ5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlz8weo0T kTdWBJbYQ3jS47AU6xwwHwYDVR0jBBgwFoAUBtYseoQHbhxklAQGJYkZ1n0Vq+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REQxLzI1REQ1OUY4RTFD OTExRUVCRTFGNTA2OEM0RjlBRTAyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnRZc2VvUUhiaHhrbEFRR0pZa1oxbjBWcS1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REQxLzI1REQ1OUY4RTFDOTExRUVCRTFGNTA2OEM0RjlBRTAyL0J0WXNlb1FIYmh4 a2xBUUdKWWtaMW4wVnEtRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlZNOPR2+7gx8E6hQzUaZhRDeSd/GoVsK13NgGY5W3M+AXL/LUy/gAN yyS+TtUb1/YUHkDh4BHbyFD0QerEZfYedYuyMx32sZPQlPNU+EGg5PdhuZQonpS3 8AEiCNCz7K1VHJafSBZv3wrae7h+Yl2uLK2AFeMs3Cw/RXEJTspKTC/EQAtHfVQp eY4Oxt+5k/kenugy5uYnRjDqpgDa00+7446qNWZq94wecf1HvCUlvdgADgVuZhHR OOR41coD4fHfI1AxellIb4q0JzEgVnYGFcrtlNUhetAIoye4xct91XWNBRZXXBQB GTEvRtyJpIU80od2qqnFfk9Q2mIWxH0= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org