$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json) Hash identifier: ddKiW1hh+EPL+nYJ29QPkSjvgZgBFoesXFdStQRAnQI= Subject key identifier: 40:F7:08:8D:1F:C1:82:04:28:A9:42:39:95:89:B8:E6:A2:19:EC:26 Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft Manifest number: EB Signing time: Sun 19 May 2024 05:49:34 +0000 Manifest this update: Sun 19 May 2024 05:49:33 +0000 Manifest next update: Sun 26 May 2024 05:49:33 +0000 Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: 7oNslG8RIOwl03y8628bDAos31jjDA8dijFDhYd4rOw=) 2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: WyTsaKM9AgGR0mrkDwgxzr2KZxKdSvDUWhHRY9oRT+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Validity Not Before: May 19 05:49:33 2024 GMT Not After : May 26 05:49:33 2024 GMT Subject: CN=664992ee-0f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:0a:a1:8d:22:a8:e7:13:2b:f2:f6:c2:67: 88:38:ce:8c:4f:b1:f2:e1:73:7f:6a:96:18:3a:74: 15:82:06:76:89:9d:08:ed:76:94:81:05:18:94:8f: 6f:3a:7e:52:45:ac:33:57:ed:40:12:b1:4b:43:cf: 41:95:be:70:79:bb:eb:87:30:fb:95:8a:d3:5f:c6: 5d:aa:8e:e9:12:2e:1a:5c:53:f0:65:c7:1a:ff:bb: fe:24:c7:e3:6d:7e:f0:79:39:cd:3b:ea:f4:b3:e8: 28:98:2e:14:28:e2:2a:8e:19:21:87:6d:81:8c:67: 71:87:bc:ae:0e:df:f9:7b:07:11:17:aa:29:3e:5f: 2b:4d:e9:52:b0:a7:7b:ef:54:2a:a4:c6:81:cd:e3: 08:a5:1e:d0:f7:1e:4c:fb:28:81:8a:1d:f9:88:f1: c4:e7:fb:79:ff:21:cc:94:99:85:72:55:3a:fa:95: c1:e5:39:c0:cc:10:ef:1a:b1:3d:71:2a:ed:66:ad: aa:e1:40:c5:f2:f7:0f:e3:54:84:8f:54:10:e1:cc: 13:39:8a:9b:10:14:e6:29:53:d8:2f:0f:d9:97:65: 28:5f:67:bf:23:81:da:d6:3a:73:cd:17:be:4d:56: 6d:7d:f9:17:22:03:a6:1e:8b:91:46:ad:77:c8:64: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F7:08:8D:1F:C1:82:04:28:A9:42:39:95:89:B8:E6:A2:19:EC:26 X509v3 Authority Key Identifier: keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ff:5a:fe:bf:35:4d:97:b4:0c:8e:7c:1d:7d:ea:0b:48:42: d7:76:25:cf:83:78:eb:8b:a7:db:ba:8f:09:02:af:aa:01:b9: c0:94:8d:42:b7:5c:1d:c6:a0:31:60:a1:20:ca:13:89:36:a1: b6:15:15:51:cf:d5:51:2d:59:f2:cd:85:3c:24:59:f5:66:a8: 37:74:85:c2:df:e6:6e:8d:62:e0:63:82:fe:17:46:bb:4d:bf: c2:80:c0:1d:93:be:db:b4:71:1f:99:bb:70:a6:d0:2d:13:fd: 47:a7:5d:51:c7:98:29:3b:11:0e:5b:97:d3:52:f6:e7:8b:be: f1:25:c3:86:ab:b0:23:03:c4:26:1a:17:d8:6f:f5:44:0c:53: fc:e6:a8:15:c9:29:03:8d:26:f2:c2:a4:d4:0a:77:15:f5:d8: eb:9a:34:26:71:86:62:83:15:6c:72:90:4e:c4:1e:22:aa:d9: b7:2d:eb:27:aa:50:1f:83:7d:65:b3:01:9c:f2:f3:69:63:c1: 31:76:ef:9e:69:c7:f1:7b:51:a6:63:f6:8e:0a:58:06:ec:81: d3:bc:0e:25:4d:4d:44:bd:62:f8:41:1a:48:e3:3a:6e:23:87: a1:a1:e3:ca:53:3e:ec:bb:f0:5d:b5:18:de:27:68:81:4a:65: 01:41:44:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx MTFGMkJDQTYwHhcNMjQwNTE5MDU0OTMzWhcNMjQwNTI2MDU0OTMzWjAYMRYwFAYD VQQDEw02NjQ5OTJlZS0wZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA4KoY0iqOcTK/L2wmeIOM6MT7Hy4XN/apYYOnQVggZ2iZ0I7XaUgQUYlI9v On5SRawzV+1AErFLQ89Blb5webvrhzD7lYrTX8Zdqo7pEi4aXFPwZcca/7v+JMfj bX7weTnNO+r0s+gomC4UKOIqjhkhh22BjGdxh7yuDt/5ewcRF6opPl8rTelSsKd7 71QqpMaBzeMIpR7Q9x5M+yiBih35iPHE5/t5/yHMlJmFclU6+pXB5TnAzBDvGrE9 cSrtZq2q4UDF8vcP41SEj1QQ4cwTOYqbEBTmKVPYLw/Zl2UoX2e/I4Ha1jpzzRe+ TVZtffkXIgOmHouRRq13yGQT9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED3CI0f wYIEKKlCOZWJuOaiGewmMB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDcyMS9DOTEyN0IzRUFEQzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dE QXpWTVMtTkRNZFVSSHl2S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ/1r+vzVNl7QMjnwdfeoLSELXdiXPg3jri6fbuo8JAq+qAbnAlI1C t1wdxqAxYKEgyhOJNqG2FRVRz9VRLVnyzYU8JFn1Zqg3dIXC3+ZujWLgY4L+F0a7 Tb/CgMAdk77btHEfmbtwptAtE/1Hp11Rx5gpOxEOW5fTUvbni77xJcOGq7AjA8Qm GhfYb/VEDFP85qgVySkDjSbywqTUCncV9djrmjQmcYZigxVscpBOxB4iqtm3Lesn qlAfg31lswGc8vNpY8Exdu+eacfxe1GmY/aOClgG7IHTvA4lTU1EvWL4QRpI4zpu I4ehoePKUz7su/BdtRjeJ2iBSmUBQUR7 -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org