$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: DMN4yTydwV3mGgeFQ8sGhHoskEbSs+4DZwEbEca0NBU= Subject key identifier: F9:EA:2E:DE:EC:86:08:0B:56:E5:58:E8:19:CF:22:81:3F:1E:26:D1 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 02ED Signing time: Sun 19 May 2024 03:18:05 +0000 Manifest this update: Sun 19 May 2024 03:18:05 +0000 Manifest next update: Sun 26 May 2024 03:18:05 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: Ff091rj7nSL1GmNWzDjF3/gAl3VlFAwJ3TFDQU8aWjI=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: AAppOMe+tdP+Khv5soae2JDmGoAmJgdnM4KtVNbYRbU=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: xNZs82YbiSWtesdFwa0juSZOFHkE0/r8CRQCkzzQj3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: May 19 03:18:05 2024 GMT Not After : May 26 03:18:05 2024 GMT Subject: CN=66496f6d-5f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:7e:15:6c:82:0b:f4:27:8d:79:10:70:94: 6c:c2:4b:81:24:89:da:77:19:c9:42:f7:43:00:3c: f9:3a:2b:95:c2:99:de:db:81:fe:89:4b:3f:81:92: ac:82:3f:ef:18:a7:ad:62:3d:4d:6e:28:6f:5a:7a: 61:54:e4:2d:b6:1f:87:3e:31:29:0a:f5:1d:4a:55: 10:9c:cc:fc:f8:ec:43:a1:f9:ec:29:7e:8a:12:ba: 11:87:80:06:0e:32:e2:15:41:a1:8c:b7:c7:18:0f: 6e:59:5b:ed:ed:9f:57:13:a8:76:02:92:be:d3:64: 3d:2d:ed:67:60:17:f2:1c:39:8d:70:99:4e:4f:cc: a3:e2:e5:cb:ce:c6:92:6d:47:d5:80:9d:dd:9f:ac: 16:3e:f9:d2:92:08:bd:cb:0b:95:44:08:e1:0d:a5: d2:99:8b:c2:e9:37:13:92:e7:39:2b:0e:50:58:e0: 68:d3:36:c0:d6:5b:fe:f0:03:64:00:00:d6:64:04: 47:2c:84:f0:1c:55:3e:7e:1c:fd:4d:50:32:72:b6: 7a:b0:4b:cd:4d:78:c2:43:95:52:38:06:82:37:0a: 06:7d:e1:b0:2c:9f:33:c6:79:14:ff:68:d3:bd:8a: 52:72:01:ad:82:b2:22:77:7b:d8:d7:dd:3d:59:52: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:2E:DE:EC:86:08:0B:56:E5:58:E8:19:CF:22:81:3F:1E:26:D1 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c3:6b:8b:80:33:b4:5a:2f:6c:a5:e4:48:a6:87:e8:e6:86: 80:29:f3:bc:98:24:f0:30:ea:ba:fa:de:41:24:18:38:35:1a: 04:5e:a8:4b:51:e2:46:e2:d1:aa:7d:c8:85:28:de:e5:31:c0: a7:1c:69:dd:fe:f3:6f:7a:f1:1f:b5:1f:13:03:c5:33:08:22: 9d:c5:96:29:60:5d:e8:b6:d7:86:66:b8:f4:3f:53:95:3f:03: d1:a6:23:14:12:6e:03:80:12:25:9a:b8:7c:a5:ff:00:d7:41: f5:3c:51:06:07:0b:b0:7f:b1:39:fc:a3:95:94:34:70:30:cc: b9:9f:76:72:c8:78:f0:08:4e:c9:27:3d:51:14:90:cd:ef:87: b4:38:5c:94:95:17:53:19:81:46:fb:f1:c8:61:e8:16:fd:a4: f8:9b:a9:92:c6:25:aa:14:62:84:42:31:8f:ea:49:42:ce:36: 6c:05:c7:b1:f7:ba:1d:14:23:a1:e1:74:50:7a:be:dc:7c:79: 24:4e:f4:aa:94:90:42:17:a7:dd:3a:fa:c3:f0:3d:bb:3d:89: 47:a6:64:38:13:6c:d0:2e:9e:88:27:a4:a4:a8:37:b4:f4:41: f8:8c:c7:5b:90:4a:00:db:9a:ed:69:74:f5:8c:7a:d5:1c:c9: eb:3f:68:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjQwNTE5MDMxODA1WhcNMjQwNTI2MDMxODA1WjAYMRYwFAYD VQQDEw02NjQ5NmY2ZC01ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHR+FWyCC/QnjXkQcJRswkuBJInadxnJQvdDADz5OiuVwpne24H+iUs/gZKs gj/vGKetYj1NbihvWnphVOQtth+HPjEpCvUdSlUQnMz8+OxDofnsKX6KEroRh4AG DjLiFUGhjLfHGA9uWVvt7Z9XE6h2ApK+02Q9Le1nYBfyHDmNcJlOT8yj4uXLzsaS bUfVgJ3dn6wWPvnSkgi9ywuVRAjhDaXSmYvC6TcTkuc5Kw5QWOBo0zbA1lv+8ANk AADWZARHLITwHFU+fhz9TVAycrZ6sEvNTXjCQ5VSOAaCNwoGfeGwLJ8zxnkU/2jT vYpScgGtgrIid3vY1909WVJBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnqLt7s hggLVuVY6BnPIoE/HibRMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAw2uLgDO0Wi9speRIpofo5oaAKfO8mCTwMOq6+t5BJBg4NRoEXqhL UeJG4tGqfciFKN7lMcCnHGnd/vNvevEftR8TA8UzCCKdxZYpYF3otteGZrj0P1OV PwPRpiMUEm4DgBIlmrh8pf8A10H1PFEGBwuwf7E5/KOVlDRwMMy5n3ZyyHjwCE7J Jz1RFJDN74e0OFyUlRdTGYFG+/HIYegW/aT4m6mSxiWqFGKEQjGP6klCzjZsBcex 97odFCOh4XRQer7cfHkkTvSqlJBCF6fdOvrD8D27PYlHpmQ4E2zQLp6IJ6SkqDe0 9EH4jMdbkEoA25rtaXT1jHrVHMnrP2gy -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org