$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json) Hash identifier: elfr2ucxZbB53p41nDu3KgfkSgVjHrPoXImk3CSaA6M= Subject key identifier: BF:7F:BD:1B:D5:A4:DD:76:E8:D9:E4:5B:9C:D2:DB:9B:59:2F:A1:DE Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft Manifest number: 040E Signing time: Wed 15 May 2024 02:10:49 +0000 Manifest this update: Wed 15 May 2024 02:10:49 +0000 Manifest next update: Wed 22 May 2024 02:10:49 +0000 Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: hQVDLMympAg5hUSPXbkvsP6FLunhpTdyZBy5rwQXCWA=) 2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: yt/XWmPKG67uSFXOn2w5Gq2AOftyWkDm+CLBqYzlJTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 01:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Validity Not Before: May 15 02:10:49 2024 GMT Not After : May 22 02:10:49 2024 GMT Subject: CN=664419a9-e7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:fb:7f:09:2d:51:48:a7:1e:6a:87:32:f4: 8a:67:20:ae:73:61:81:17:f4:3d:3c:b1:77:c7:1b: 99:13:43:95:19:78:62:aa:d8:05:a3:d5:b4:8a:d2: 0f:6f:73:8f:3c:66:9e:8a:6a:6f:1e:8d:f3:90:e6: f7:69:d3:bd:80:59:87:6a:02:5c:b1:4c:f4:e5:61: 7a:2a:d1:76:e8:3e:e0:63:72:a4:08:4b:1e:70:40: 26:85:3a:01:5d:ae:c5:a0:1f:12:13:d6:fb:c4:e1: 45:c6:82:75:e4:b5:c9:6e:3a:02:c0:b5:88:7f:86: d5:11:4b:78:6c:f4:fa:48:27:64:e6:74:b9:18:56: 36:85:b0:df:ec:54:11:7e:88:8b:b4:a8:1c:d8:3b: 0a:1e:3e:67:39:dc:ec:84:89:ff:ce:72:ce:ae:85: 05:bc:36:77:e2:12:b5:ba:a8:dd:b9:c2:1e:6c:56: 94:16:60:59:6e:a9:ca:1c:94:27:a4:d9:a2:e6:cf: 6c:f8:2a:17:83:d5:4a:6a:07:1b:9c:41:a6:06:1a: d5:1c:47:3b:56:15:66:b6:bb:7f:08:ea:64:54:17: 3a:b4:1c:0b:0c:54:3d:1e:44:40:fe:81:19:90:a5: 8b:93:73:e0:07:cd:2f:1f:3f:d4:15:fb:7e:2f:c2: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:BD:1B:D5:A4:DD:76:E8:D9:E4:5B:9C:D2:DB:9B:59:2F:A1:DE X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:87:bf:8d:5d:29:30:4e:43:15:f6:09:c7:e9:cb:94:46:1a: 3a:3c:f3:ca:5f:57:53:23:06:0d:c9:a7:84:3a:20:00:26:d0: e9:ed:40:ed:18:b5:62:df:1c:ff:ad:2d:03:c7:0c:88:01:eb: 2d:34:64:5a:dd:85:d9:d2:8e:21:16:e0:e7:ee:62:d3:48:ef: 95:1c:06:27:95:98:f8:94:fc:5f:fa:74:ce:fa:7e:d0:de:f9: f2:7f:6d:9f:6d:39:cd:96:4d:aa:48:a8:75:04:32:00:ec:f0: 3f:e4:d1:9f:26:99:9a:84:61:87:28:94:fd:50:fe:2e:4c:ae: b1:3e:d4:ed:62:7f:d6:68:10:b4:28:fc:2f:a6:b1:3c:78:5d: fc:be:ff:aa:fd:6b:a4:03:6b:37:f5:5a:cb:8e:39:58:7b:62: 16:6a:1d:13:d4:78:24:13:cd:cf:da:e5:00:2e:93:62:ed:af: 66:5b:0f:af:01:39:99:84:4f:1c:36:1c:4d:ff:0e:5c:69:3e: 18:25:18:f8:3b:94:fd:39:21:1a:19:81:41:75:3e:71:c3:61: 9d:39:a9:a1:42:94:60:33:29:fe:c1:32:f1:ea:72:68:e2:d1: 16:92:c8:4c:5f:b4:81:90:0f:6b:f3:6a:07:bb:38:d7:81:92: f4:fd:e3:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjQwNTE1MDIxMDQ5WhcNMjQwNTIyMDIxMDQ5WjAYMRYwFAYD VQQDEw02NjQ0MTlhOS1lN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj37fwktUUinHmqHMvSKZyCuc2GBF/Q9PLF3xxuZE0OVGXhiqtgFo9W0itIP b3OPPGaeimpvHo3zkOb3adO9gFmHagJcsUz05WF6KtF26D7gY3KkCEsecEAmhToB Xa7FoB8SE9b7xOFFxoJ15LXJbjoCwLWIf4bVEUt4bPT6SCdk5nS5GFY2hbDf7FQR foiLtKgc2DsKHj5nOdzshIn/znLOroUFvDZ34hK1uqjducIebFaUFmBZbqnKHJQn pNmi5s9s+CoXg9VKagcbnEGmBhrVHEc7VhVmtrt/COpkVBc6tBwLDFQ9HkRA/oEZ kKWLk3PgB80vHz/UFft+L8KRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9/vRvV pN126NnkW5zS25tZL6HeMB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjJDMS8yRUE1MUQ1NjIwREMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVK YUFUNDJsTGl6M2pZa2F4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqh7+NXSkwTkMV9gnH6cuURho6PPPKX1dTIwYNyaeEOiAAJtDp7UDt GLVi3xz/rS0DxwyIAestNGRa3YXZ0o4hFuDn7mLTSO+VHAYnlZj4lPxf+nTO+n7Q 3vnyf22fbTnNlk2qSKh1BDIA7PA/5NGfJpmahGGHKJT9UP4uTK6xPtTtYn/WaBC0 KPwvprE8eF38vv+q/WukA2s39VrLjjlYe2IWah0T1HgkE83P2uUALpNi7a9mWw+v ATmZhE8cNhxN/w5caT4YJRj4O5T9OSEaGYFBdT5xw2GdOamhQpRgMyn+wTLx6nJo 4tEWkshMX7SBkA9r82oHuzjXgZL0/ePN -----END CERTIFICATE-----Generated at Wed May 15 03:08:23 2024 by rpki-client on console-ams.rpki-client.org