$ rpki-client -vvf rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.mft File: B0YeepE6zqHpaHeaBFUnwhof3cU.mft (raw, json) Hash identifier: D40A1qkobqWIWwGe5x4CUiEisYp4t2U+h/l2NCw6o9w= Subject key identifier: 32:B8:92:0A:E5:3C:BB:CD:5A:46:C0:51:C3:5F:9C:E0:0E:F9:A9:53 Authority key identifier: 07:46:1E:7A:91:3A:CE:A1:E9:68:77:9A:04:55:27:C2:1A:1F:DD:C5 Certificate issuer: /CN=A913C509/serialNumber=07461E7A913ACEA1E968779A045527C21A1FDDC5 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B0YeepE6zqHpaHeaBFUnwhof3cU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.mft Manifest number: 01D8 Signing time: Thu 23 May 2024 04:12:45 +0000 Manifest this update: Thu 23 May 2024 04:12:45 +0000 Manifest next update: Thu 30 May 2024 04:12:45 +0000 Files and hashes: 1: B0YeepE6zqHpaHeaBFUnwhof3cU.crl (hash: mHUPDL9WdmhsZHuUpVoxPX9cnPjnZyDVxjy8+eFoHZg=) 2: 25D09EF801DC11EDA4B7F257C4F9AE02.roa (hash: 5/UCqa0InEGLMbo141ZG0dw0rvYwNhvx2BGsOaS2aqM=) 3: 2654333001DC11EDA4B7F257C4F9AE02.roa (hash: jLfpXm4GE/Sm++6iXdHNWJIj3SSwgbQJPu7SMG/WqLM=) 4: 2521225201DC11EDA4B7F257C4F9AE02.roa (hash: j3WuJ6zHKCuKaH6Y3S5iFy9UtYPb+9+Q5/BemWhaNwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.crl rsync://rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B0YeepE6zqHpaHeaBFUnwhof3cU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 04:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C509/serialNumber=07461E7A913ACEA1E968779A045527C21A1FDDC5 Validity Not Before: May 23 04:12:45 2024 GMT Not After : May 30 04:12:45 2024 GMT Subject: CN=664ec23d-8e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:98:f6:0d:7d:9f:58:d5:14:84:fe:84:de: 74:09:42:b4:ba:9a:3f:62:07:c2:a0:81:dc:63:25: 72:ae:4d:55:dd:83:68:29:e2:ef:c0:a3:39:5e:9f: 3c:58:65:28:bb:a3:4e:8d:e5:18:9e:26:ec:8a:33: a5:90:6c:ea:40:6a:91:e4:18:cc:30:d2:8a:b1:b1: a0:7b:13:7d:66:7b:ce:89:6d:b0:ad:7d:c8:6d:a1: 93:7e:24:83:0a:c1:96:42:c3:55:d6:b4:3a:88:e3: ea:38:12:34:cc:2f:f7:8f:1c:25:84:5e:b9:b0:33: 75:c1:75:8e:0b:bb:8d:8a:d8:57:fd:73:e4:8f:19: 83:ad:1e:39:4a:b6:60:da:d6:54:ab:7f:2d:65:c1: 6c:b0:2b:f3:2c:2f:1e:ad:29:ae:eb:8e:f7:50:b3: 12:b7:b7:d2:21:b6:44:56:af:f9:a8:3f:69:d1:62: 96:65:a3:e0:b9:f2:35:36:4c:83:6b:8d:03:ca:d3: 75:5f:f8:80:c1:08:65:d3:7c:70:ab:4b:7d:41:c9: 78:89:52:c8:49:75:5f:89:43:01:a7:e8:94:e1:c5: 82:f3:03:a2:af:2b:2c:77:08:72:dc:c9:16:5d:92: b9:10:84:bb:2b:b0:c0:03:67:e0:03:a7:92:8c:4c: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B8:92:0A:E5:3C:BB:CD:5A:46:C0:51:C3:5F:9C:E0:0E:F9:A9:53 X509v3 Authority Key Identifier: keyid:07:46:1E:7A:91:3A:CE:A1:E9:68:77:9A:04:55:27:C2:1A:1F:DD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B0YeepE6zqHpaHeaBFUnwhof3cU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C509/A5B8FB2E01D711ED9339314EC4F9AE02/B0YeepE6zqHpaHeaBFUnwhof3cU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:77:e8:bf:70:e0:cf:4d:55:a8:cf:fe:e2:ab:33:43:ae:7c: 16:9c:e4:25:12:4c:bb:05:e1:7e:2e:02:a7:8c:e8:04:87:f9: b8:c7:9f:f6:58:0f:d0:a8:db:49:90:43:08:e7:82:5c:eb:19: 15:27:a7:5d:20:76:ca:b2:83:3d:ed:1d:19:7f:10:83:11:2a: 7f:3a:c9:fa:c9:d1:c8:d1:90:e7:1f:56:ad:01:7c:54:90:2d: 49:1d:a5:a3:66:04:a9:5a:69:1e:66:5c:b2:c7:19:20:31:06: 40:40:39:84:f8:1e:69:1b:00:09:d5:69:6d:90:84:d7:2c:99: fa:29:98:49:d3:76:54:9a:fc:71:14:31:c6:a7:86:2b:12:01: 2a:66:44:51:fd:52:09:00:f4:37:14:e7:09:67:f6:5b:f6:66: fe:f6:a8:a7:a0:93:78:eb:1c:1c:12:98:32:1e:01:2d:de:68: ae:b0:37:89:d4:b3:ae:bf:6e:bd:13:d9:e0:57:68:14:27:f1: 6b:dd:d9:45:68:61:ad:a7:17:c3:16:fd:f4:f8:02:f5:28:e9: 9d:33:49:cf:cf:8d:5f:e5:ea:bc:97:9b:19:50:ae:4a:35:5e: b9:90:25:06:77:8c:bd:e0:be:ed:4b:aa:0e:e2:43:76:cb:0b: 85:2a:4d:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MDkxMTAvBgNVBAUTKDA3NDYxRTdBOTEzQUNFQTFFOTY4Nzc5QTA0NTUyN0My MUExRkREQzUwHhcNMjQwNTIzMDQxMjQ1WhcNMjQwNTMwMDQxMjQ1WjAYMRYwFAYD VQQDEw02NjRlYzIzZC04ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquWY9g19n1jVFIT+hN50CUK0upo/YgfCoIHcYyVyrk1V3YNoKeLvwKM5Xp88 WGUou6NOjeUYnibsijOlkGzqQGqR5BjMMNKKsbGgexN9ZnvOiW2wrX3IbaGTfiSD CsGWQsNV1rQ6iOPqOBI0zC/3jxwlhF65sDN1wXWOC7uNithX/XPkjxmDrR45SrZg 2tZUq38tZcFssCvzLC8erSmu6473ULMSt7fSIbZEVq/5qD9p0WKWZaPgufI1NkyD a40DytN1X/iAwQhl03xwq0t9Qcl4iVLISXVfiUMBp+iU4cWC8wOiryssdwhy3MkW XZK5EIS7K7DAA2fgA6eSjEwm7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK4kgrl PLvNWkbAUcNfnOAO+alTMB8GA1UdIwQYMBaAFAdGHnqROs6h6Wh3mgRVJ8IaH93F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUwOS9BNUI4RkIyRTAx RDcxMUVEOTMzOTMxNEVDNEY5QUUwMi9CMFllZXBFNnpxSHBhSGVhQkZVbndob2Yz Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwWWVlcEU2enFIcGFIZWFCRlVud2hvZjNjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUwOS9BNUI4RkIyRTAxRDcxMUVEOTMzOTMxNEVDNEY5QUUwMi9CMFllZXBFNnpx SHBhSGVhQkZVbndob2YzY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBud+i/cODPTVWoz/7iqzNDrnwWnOQlEky7BeF+LgKnjOgEh/m4x5/2 WA/QqNtJkEMI54Jc6xkVJ6ddIHbKsoM97R0ZfxCDESp/Osn6ydHI0ZDnH1atAXxU kC1JHaWjZgSpWmkeZlyyxxkgMQZAQDmE+B5pGwAJ1WltkITXLJn6KZhJ03ZUmvxx FDHGp4YrEgEqZkRR/VIJAPQ3FOcJZ/Zb9mb+9qinoJN46xwcEpgyHgEt3miusDeJ 1LOuv269E9ngV2gUJ/Fr3dlFaGGtpxfDFv30+AL1KOmdM0nPz41f5eq8l5sZUK5K NV65kCUGd4y94L7tS6oO4kN2ywuFKk1h -----END CERTIFICATE-----Generated at Thu May 23 05:07:05 2024 by rpki-client on console-fra.rpki-client.org