$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: UvqSsI9bntULATilIcInn5XCA+eA21dCM+iEKru2r+c= Subject key identifier: C1:30:5F:AC:25:33:04:C8:EC:E8:7D:72:5A:37:C0:BC:FC:A4:72:0A Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 0505 Signing time: Fri 03 May 2024 01:17:17 +0000 Manifest this update: Fri 03 May 2024 01:17:16 +0000 Manifest next update: Fri 10 May 2024 01:17:16 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: YHrqzj5lGkIt0EGimhc0lelGXVFg2EMc3I84JCDVfZQ=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 47HHXDnt39bkXS2AX3ZMrOCuV1oFM3pi8+pcdA0rJXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: May 3 01:17:16 2024 GMT Not After : May 10 01:17:16 2024 GMT Subject: CN=66343b1d-6a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:96:9b:8f:dd:4b:f3:35:36:2a:b4:21:d2: e2:52:ef:ae:e4:5d:06:f6:a6:23:5a:46:b1:07:9c: 0a:50:00:2d:2e:58:70:3b:5f:dc:cf:4c:fb:f8:27: 7c:f8:81:95:2b:74:a3:20:d3:ce:30:52:d4:6a:ba: 2b:0d:53:78:43:e4:31:15:13:8c:67:e0:59:e7:1e: 86:fa:de:66:59:fc:03:16:de:a1:43:55:36:d7:b4: 3b:4c:b5:c6:27:62:ee:d7:47:41:c6:ae:24:d2:14: 90:cc:ee:84:29:52:c7:fc:e7:61:a1:44:7d:55:aa: dd:c7:79:62:f5:3d:60:51:58:ac:1a:18:fb:d3:02: 6f:06:77:ae:82:c3:ac:1d:26:ea:7f:9d:7b:df:43: 70:6e:38:50:81:a9:5b:48:db:17:c9:de:bf:c7:ed: c1:98:83:5b:5d:58:07:75:70:32:a6:55:93:32:e0: 5d:b3:d1:5c:1e:84:49:a1:73:f6:cf:87:d3:14:8a: b3:e5:3e:c2:f3:80:b4:de:f6:ff:7f:18:a4:4f:bb: 05:ec:04:09:a3:70:83:b3:fd:96:80:4d:e0:d5:12: 1c:20:0e:5f:12:94:95:43:fe:c5:8a:e2:57:a8:cc: c4:72:3a:7b:c7:1d:60:8d:23:2c:6a:4b:e5:4e:48: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:5F:AC:25:33:04:C8:EC:E8:7D:72:5A:37:C0:BC:FC:A4:72:0A X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ee:2a:46:f3:be:8f:ae:1e:96:a5:cd:8d:af:cf:da:71:a1: c0:4a:73:26:99:4b:ab:4b:bd:9f:1f:b8:ca:39:12:6e:32:10: 7a:35:8e:9d:bf:1a:fc:f8:d0:36:ca:e1:d1:dd:9d:37:44:f2: c5:c8:03:06:67:09:30:b3:ed:02:79:e9:d8:34:cc:07:d9:a7: ff:47:a1:7b:f9:9e:c6:8b:7a:31:05:dd:88:94:7b:4b:e6:8e: e9:cb:b3:43:42:47:2c:db:b4:cb:69:88:b3:13:64:41:ce:64: e3:81:b4:c6:68:a7:89:87:9d:3f:3c:fe:4c:ba:90:82:6c:90: 48:d1:9c:cc:1b:d3:d9:4d:6a:e0:ed:8a:80:15:c5:22:5a:c8: cc:03:fb:71:28:00:2c:9b:ae:72:ef:3c:3e:19:c3:03:e1:cb: e3:68:bc:96:2f:6d:77:9a:6b:94:ae:e0:53:00:e3:88:a8:a6: 58:28:e6:be:a4:1c:30:34:c0:50:a9:09:71:9a:90:ee:61:e0: 6c:c6:3c:8f:79:3e:98:16:42:c9:9f:f8:1e:c5:e9:f4:1a:e2: cf:da:6d:9a:aa:d9:42:21:cd:f1:7c:a8:41:09:32:59:52:b8: 86:fa:17:c1:87:be:d9:30:b4:c1:12:26:aa:31:3d:e2:3b:30: 13:5d:4a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjQwNTAzMDExNzE2WhcNMjQwNTEwMDExNzE2WjAYMRYwFAYD VQQDEw02NjM0M2IxZC02YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3KWm4/dS/M1Niq0IdLiUu+u5F0G9qYjWkaxB5wKUAAtLlhwO1/cz0z7+Cd8 +IGVK3SjINPOMFLUarorDVN4Q+QxFROMZ+BZ5x6G+t5mWfwDFt6hQ1U217Q7TLXG J2Lu10dBxq4k0hSQzO6EKVLH/OdhoUR9Vardx3li9T1gUVisGhj70wJvBneugsOs HSbqf51730NwbjhQgalbSNsXyd6/x+3BmINbXVgHdXAyplWTMuBds9FcHoRJoXP2 z4fTFIqz5T7C84C03vb/fxikT7sF7AQJo3CDs/2WgE3g1RIcIA5fEpSVQ/7FiuJX qMzEcjp7xx1gjSMsakvlTkhKlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEwX6wl MwTI7Oh9clo3wLz8pHIKMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI7ipG876Prh6Wpc2Nr8/acaHASnMmmUurS72fH7jKORJuMhB6NY6d vxr8+NA2yuHR3Z03RPLFyAMGZwkws+0CeenYNMwH2af/R6F7+Z7Gi3oxBd2IlHtL 5o7py7NDQkcs27TLaYizE2RBzmTjgbTGaKeJh50/PP5MupCCbJBI0ZzMG9PZTWrg 7YqAFcUiWsjMA/txKAAsm65y7zw+GcMD4cvjaLyWL213mmuUruBTAOOIqKZYKOa+ pBwwNMBQqQlxmpDuYeBsxjyPeT6YFkLJn/gexen0GuLP2m2aqtlCIc3xfKhBCTJZ UriG+hfBh77ZMLTBEiaqMT3iOzATXUpn -----END CERTIFICATE-----Generated at Fri May 3 03:10:49 2024 by rpki-client on console-ams.rpki-client.org