$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: UbaSUh9Aol/bCdLjBgQC5Rak43BYLUJ1cdEZ/nyStGw= Subject key identifier: 25:8F:B3:04:65:1A:EE:2D:88:7F:47:17:68:D2:58:2F:FC:04:29:33 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 01E9 Signing time: Tue 07 May 2024 04:15:24 +0000 Manifest this update: Tue 07 May 2024 04:15:24 +0000 Manifest next update: Tue 14 May 2024 04:15:23 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: ZJGxFjk7kS1ABSiyLtKiJUTBNyGZvYJcxGYg0EPGpTI=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: StSWuqA5M52P8Zo9eXzjGOXkepikf8IxKvNkU5ke2Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: May 7 04:15:24 2024 GMT Not After : May 14 04:15:23 2024 GMT Subject: CN=6639aadc-158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:40:dd:c2:94:c4:b8:5a:09:41:72:e7:db: 0e:6d:b6:f2:80:b0:41:fb:d4:3d:54:f7:8c:26:86: 0c:c7:db:f3:e6:2b:d1:bf:07:55:c7:9a:ff:ee:3d: ca:01:5f:1d:1f:fa:ee:13:73:e0:1b:8f:ae:47:c5: 1c:72:a8:89:56:ec:24:51:a0:d2:32:51:9a:20:37: 37:f2:93:30:3f:29:87:ad:cb:ab:48:ab:4b:69:49: d1:7e:63:04:dd:b7:8b:c6:82:ff:51:43:cf:22:da: d4:59:92:13:b8:23:11:da:ef:b7:8e:00:50:97:3b: 3d:94:b6:c8:df:1a:ff:17:35:2d:73:13:b8:b3:33: 0e:15:61:6a:3b:9a:60:31:22:c2:cc:1e:a7:c7:ae: 85:7d:fe:7e:0e:65:15:90:d9:c8:0a:84:74:14:77: 24:04:72:20:b4:c2:68:13:38:d6:bb:55:48:d5:e9: e6:07:14:9f:6a:e3:d5:48:a6:a5:cb:71:40:79:4a: d1:fa:c9:f5:87:a2:e9:f5:29:a2:eb:7b:d0:bb:8a: 23:79:e7:c4:2b:82:4f:b6:6f:52:8c:03:06:1b:bc: ad:4f:8f:dd:66:13:c7:d5:b8:96:5e:e0:e2:09:17: 2c:a8:36:8f:00:4e:90:7e:24:01:34:98:16:8f:6e: 59:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:B3:04:65:1A:EE:2D:88:7F:47:17:68:D2:58:2F:FC:04:29:33 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:61:f9:78:4a:00:1e:6d:a6:7a:0f:4b:c7:9d:91:bc:28: 06:7c:68:51:06:eb:63:06:b1:c3:8d:a2:19:09:d9:1b:f5:cb: 12:ac:f0:fa:21:e7:7e:dd:9a:cd:c3:be:f1:7a:1a:31:f5:4e: 53:18:36:43:a5:11:b1:ad:58:72:12:74:39:6a:35:db:5b:f7: c3:34:1c:27:11:4e:29:87:77:0e:91:20:f4:4f:c1:c9:79:a7: 01:01:e7:e5:b8:61:69:ed:c0:09:32:98:1d:6d:e5:e9:bd:32: e0:97:1e:32:b5:d2:3f:65:fe:51:f5:44:91:8f:da:84:5c:05: 00:1b:a4:ee:fd:b4:07:1f:6b:42:8f:a9:52:20:52:d8:50:2e: e6:c0:7b:3f:23:0e:09:9b:8c:68:5c:90:77:c0:1f:0d:d4:fe: 00:dc:2b:18:8c:76:c7:d5:72:8a:62:f0:04:28:bc:29:d3:bc: 04:2e:c5:72:79:df:0d:93:f3:42:07:3b:94:db:e8:1b:c3:aa: 87:5f:45:ec:0d:1f:e1:85:a0:35:45:8b:c2:0d:35:47:0e:e0: 9b:1e:1c:a5:a6:7d:ff:7f:b0:9c:65:8f:ae:c9:6b:e9:f1:35: 67:0a:cb:54:1f:4d:cf:9b:3d:37:47:31:69:4d:00:45:cd:95: 17:45:1e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjQwNTA3MDQxNTI0WhcNMjQwNTE0MDQxNTIzWjAYMRYwFAYD VQQDEw02NjM5YWFkYy0xNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ZA3cKUxLhaCUFy59sObbbygLBB+9Q9VPeMJoYMx9vz5ivRvwdVx5r/7j3K AV8dH/ruE3PgG4+uR8UccqiJVuwkUaDSMlGaIDc38pMwPymHrcurSKtLaUnRfmME 3beLxoL/UUPPItrUWZITuCMR2u+3jgBQlzs9lLbI3xr/FzUtcxO4szMOFWFqO5pg MSLCzB6nx66Fff5+DmUVkNnICoR0FHckBHIgtMJoEzjWu1VI1enmBxSfauPVSKal y3FAeUrR+sn1h6Lp9Smi63vQu4ojeefEK4JPtm9SjAMGG7ytT4/dZhPH1biWXuDi CRcsqDaPAE6QfiQBNJgWj25ZHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWPswRl Gu4tiH9HF2jSWC/8BCkzMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfk2H5eEoAHm2meg9Lx52RvCgGfGhRButjBrHDjaIZCdkb9csSrPD6 Ied+3ZrNw77xehox9U5TGDZDpRGxrVhyEnQ5ajXbW/fDNBwnEU4ph3cOkSD0T8HJ eacBAefluGFp7cAJMpgdbeXpvTLglx4ytdI/Zf5R9USRj9qEXAUAG6Tu/bQHH2tC j6lSIFLYUC7mwHs/Iw4Jm4xoXJB3wB8N1P4A3CsYjHbH1XKKYvAEKLwp07wELsVy ed8Nk/NCBzuU2+gbw6qHX0XsDR/hhaA1RYvCDTVHDuCbHhylpn3/f7CcZY+uyWvp 8TVnCstUH03Pmz03RzFpTQBFzZUXRR6b -----END CERTIFICATE-----Generated at Tue May 7 05:39:52 2024 by rpki-client on console-fra.rpki-client.org