$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: BEEsU8l9OYoZDv+D2Ejw+P7kt3oz25lX0h7KqY6gRVk= Subject key identifier: B5:52:B5:E6:44:56:E5:28:66:14:78:BC:83:69:41:8A:97:82:1E:5B Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 034C Signing time: Sun 05 May 2024 03:05:12 +0000 Manifest this update: Sun 05 May 2024 03:05:12 +0000 Manifest next update: Sun 12 May 2024 03:05:12 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: hOc1QblK4a7u5aaIbmZm0Qnzq6J5Lr3lVtkYoKQbJ/s=) 2: 8C891848A8C511EC8F560C42C4F9AE02.roa (hash: 3VG3cE0RBMf0XORCqHNYJBh9WQlsnyh1LMk7PYJ+aS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: May 5 03:05:12 2024 GMT Not After : May 12 03:05:12 2024 GMT Subject: CN=6636f768-107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:e3:7a:32:7d:a9:c7:a2:46:9e:e2:aa:74: a1:3a:12:56:e8:c3:ef:d4:17:f0:3c:4c:1a:24:f5: 14:75:6f:b2:9e:fa:c8:b7:5d:bc:e4:bf:78:03:a6: d2:0c:97:cc:76:97:85:ab:b9:88:4e:91:fe:ce:c3: b6:d8:15:94:4d:06:f4:c7:a3:15:38:76:9d:65:c8: 57:72:be:76:71:dd:6b:ac:00:b4:91:2a:f7:6e:18: 73:0b:02:1d:90:73:0c:90:d9:ad:e7:8a:32:6d:2a: 5f:38:06:6a:e7:66:c2:d2:b6:21:66:7a:0f:a6:18: c3:52:54:d4:6e:b0:4e:a3:74:30:cb:5d:d7:99:26: db:63:7f:83:56:7c:86:17:f6:2e:a7:24:0c:f0:33: ed:91:d2:b8:98:b6:19:46:73:42:23:44:3e:28:13: f3:72:a9:ac:d9:89:3f:08:f4:b0:a6:a6:52:e7:6f: 3b:9c:c1:70:3e:3f:53:94:0c:64:8a:b7:7d:87:cb: 85:81:86:c3:ae:02:00:54:20:55:e8:02:3b:41:d8: 35:ae:70:be:af:c7:73:13:25:a0:9a:03:3e:4b:a1: 23:56:10:48:c7:df:8c:e8:f2:f0:42:d8:11:04:d2: 10:e2:32:de:18:95:b6:ea:3d:aa:e7:7f:a4:21:86: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:52:B5:E6:44:56:E5:28:66:14:78:BC:83:69:41:8A:97:82:1E:5B X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:38:8f:a4:7b:58:9f:3e:9a:c3:77:03:9f:8d:c9:f6:f4:6e: b6:ef:a3:4d:4a:1e:f6:7a:6b:44:23:95:7d:e4:61:3b:b8:e7: a8:99:98:d6:3d:b0:8e:07:03:23:97:d1:19:9c:ce:e8:2f:b6: 1d:dc:28:62:c1:f6:64:85:9c:1f:f3:70:65:b2:4b:c2:aa:90: 4b:b7:7f:94:93:ac:9f:e8:3a:88:93:ac:0a:e7:be:d2:50:bb: 06:98:ee:cc:75:00:69:20:5c:76:fa:cd:d4:cf:fa:28:e0:d9: d4:79:c5:dd:25:c5:85:d8:04:72:17:3e:a8:8c:73:c6:1d:3c: a2:4d:7a:70:dc:cb:3d:82:1e:f4:4b:6c:08:c7:cf:88:ed:75: 8f:a4:b3:ae:82:2d:19:1a:43:8d:96:df:1f:28:ad:eb:9e:7c: 9f:3d:2c:84:19:55:fa:eb:b7:0e:ec:58:48:a5:57:3f:c4:2d: d4:29:83:9d:0c:a4:08:9d:66:58:17:46:35:8b:84:86:4a:17: 3a:e1:c1:34:3c:d3:b5:c4:a7:fc:39:33:a7:40:fd:0a:f2:0e: d5:54:08:10:b7:4b:1f:94:59:42:25:96:c3:e4:7c:db:af:4a: a1:4e:02:e4:e1:4c:19:c2:79:ca:67:fb:f5:d6:e1:99:20:de: f9:b8:24:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjQwNTA1MDMwNTEyWhcNMjQwNTEyMDMwNTEyWjAYMRYwFAYD VQQDEw02NjM2Zjc2OC0xMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YrjejJ9qceiRp7iqnShOhJW6MPv1BfwPEwaJPUUdW+ynvrIt1285L94A6bS DJfMdpeFq7mITpH+zsO22BWUTQb0x6MVOHadZchXcr52cd1rrAC0kSr3bhhzCwId kHMMkNmt54oybSpfOAZq52bC0rYhZnoPphjDUlTUbrBOo3Qwy13XmSbbY3+DVnyG F/YupyQM8DPtkdK4mLYZRnNCI0Q+KBPzcqms2Yk/CPSwpqZS5287nMFwPj9TlAxk ird9h8uFgYbDrgIAVCBV6AI7Qdg1rnC+r8dzEyWgmgM+S6EjVhBIx9+M6PLwQtgR BNIQ4jLeGJW26j2q53+kIYaFLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVSteZE VuUoZhR4vINpQYqXgh5bMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGOI+ke1ifPprDdwOfjcn29G6276NNSh72emtEI5V95GE7uOeomZjW PbCOBwMjl9EZnM7oL7Yd3ChiwfZkhZwf83BlskvCqpBLt3+Uk6yf6DqIk6wK577S ULsGmO7MdQBpIFx2+s3Uz/oo4NnUecXdJcWF2ARyFz6ojHPGHTyiTXpw3Ms9gh70 S2wIx8+I7XWPpLOugi0ZGkONlt8fKK3rnnyfPSyEGVX667cO7FhIpVc/xC3UKYOd DKQInWZYF0Y1i4SGShc64cE0PNO1xKf8OTOnQP0K8g7VVAgQt0sflFlCJZbD5Hzb r0qhTgLk4UwZwnnKZ/v11uGZIN75uCTz -----END CERTIFICATE-----Generated at Sun May 5 03:47:41 2024 by rpki-client on console-fra.rpki-client.org