$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: WiE0KG3Nzpuh2igKr6SSYawermi8Qc/mWuHJCrIFH1w= Subject key identifier: 93:B3:0E:C8:6E:FB:CB:F3:DA:9E:A9:A8:4B:EF:2A:CD:E3:D9:69:AD Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0B4B Signing time: Sun 26 May 2024 17:16:14 +0000 Manifest this update: Sun 26 May 2024 17:16:13 +0000 Manifest next update: Sun 02 Jun 2024 17:16:13 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: DC7zuqQXjJvrO7keicKQdaHU5bI/qA12v3Aep7eeI2k=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: twaSTL512/Vc7JQABHPHi8T2tQ0EWjwmGAEgs0fpQUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: May 26 17:16:13 2024 GMT Not After : Jun 2 17:16:13 2024 GMT Subject: CN=66536e5d-78c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:f3:0f:63:6d:f9:4e:8f:43:cc:4e:ab:36: 34:9e:b3:5e:8a:33:4f:57:75:52:0f:fa:df:d9:dc: ba:2f:c9:60:28:00:81:83:d1:41:f6:9d:cd:68:61: cd:b5:07:d4:4c:39:34:7f:fd:47:cb:42:75:a7:f2: d8:74:d8:ee:d0:a0:f9:ea:33:8f:0f:40:41:25:86: fb:1b:4e:37:82:34:50:15:e3:98:92:d5:e8:d3:38: d9:f4:10:e4:6d:cd:0f:6a:5b:eb:6c:54:d3:24:65: 35:9d:61:53:40:51:20:3c:a4:2c:ed:7c:59:80:e6: da:94:54:d4:bc:32:27:a2:5a:c1:66:0a:39:f9:e7: 3f:f6:d5:98:52:0b:3d:62:c4:b3:ec:19:3e:58:40: fa:65:98:ac:e7:4e:35:e0:8d:e7:0a:cf:83:e9:09: d9:f2:df:eb:bf:22:d6:fb:4d:83:5c:84:2f:43:67: 36:6c:e5:9e:5d:c5:8c:35:9a:9a:52:18:5f:c9:a8: 88:ce:ad:4f:5f:fd:a8:da:ed:9f:09:bf:91:7d:a6: a6:e2:ff:dd:4d:06:a1:25:49:49:56:42:fd:19:e9: 37:61:25:a3:62:94:f9:cf:7c:95:8d:bd:73:da:39: 28:d8:cd:87:8e:74:05:26:7d:98:b7:e3:dc:c8:cc: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:0E:C8:6E:FB:CB:F3:DA:9E:A9:A8:4B:EF:2A:CD:E3:D9:69:AD X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:38:de:f4:b5:73:c5:2d:0d:25:23:16:e9:ae:86:46:30:b2: a6:f3:e1:c7:87:1d:5e:fc:d1:fb:f7:e7:9a:da:5c:3c:c2:7c: ac:09:b5:6a:e4:42:39:cd:b4:f7:db:29:93:54:0d:a4:85:57: a7:3a:55:97:9e:e5:b4:af:99:84:00:cb:5b:91:0c:a1:57:65: a4:e4:a8:33:4e:7f:cd:e2:76:e7:66:25:0c:4e:d7:56:95:55: 78:67:c1:70:35:60:18:b2:0d:e8:31:10:4c:5b:15:65:d5:4a: 71:48:49:98:55:b0:26:05:ad:09:d3:36:41:bc:18:76:49:21: b5:84:76:ba:51:76:84:9a:23:1a:fa:8d:7e:3f:5c:d9:3e:25: ba:7b:1f:68:06:09:69:db:bd:6d:e9:63:c6:58:08:5a:7f:25: c2:ac:c4:d6:31:55:90:4c:86:33:79:2c:16:bc:5d:e0:35:9e: 5b:1e:e1:d9:53:b2:b7:4d:06:d4:e7:ac:19:47:78:27:d3:9e: 7f:45:3e:1b:c7:42:8a:01:a5:76:86:57:7e:fe:f3:55:e6:e5: 1e:01:b8:ec:cd:fc:f1:75:d3:d7:f0:9a:86:99:4e:b6:8e:8f: c9:6e:db:b8:00:f4:4b:05:6e:94:bf:1e:9a:4b:93:b1:f6:be: d2:55:73:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjQwNTI2MTcxNjEzWhcNMjQwNjAyMTcxNjEzWjAYMRYwFAYD VQQDEw02NjUzNmU1ZC03OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsETzD2Nt+U6PQ8xOqzY0nrNeijNPV3VSD/rf2dy6L8lgKACBg9FB9p3NaGHN tQfUTDk0f/1Hy0J1p/LYdNju0KD56jOPD0BBJYb7G043gjRQFeOYktXo0zjZ9BDk bc0PalvrbFTTJGU1nWFTQFEgPKQs7XxZgObalFTUvDInolrBZgo5+ec/9tWYUgs9 YsSz7Bk+WED6ZZis50414I3nCs+D6QnZ8t/rvyLW+02DXIQvQ2c2bOWeXcWMNZqa UhhfyaiIzq1PX/2o2u2fCb+Rfaam4v/dTQahJUlJVkL9Gek3YSWjYpT5z3yVjb1z 2jko2M2HjnQFJn2Yt+PcyMwW6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOzDshu +8vz2p6pqEvvKs3j2WmtMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZON70tXPFLQ0lIxbproZGMLKm8+HHhx1e/NH79+ea2lw8wnysCbVq 5EI5zbT32ymTVA2khVenOlWXnuW0r5mEAMtbkQyhV2Wk5KgzTn/N4nbnZiUMTtdW lVV4Z8FwNWAYsg3oMRBMWxVl1UpxSEmYVbAmBa0J0zZBvBh2SSG1hHa6UXaEmiMa +o1+P1zZPiW6ex9oBglp271t6WPGWAhafyXCrMTWMVWQTIYzeSwWvF3gNZ5bHuHZ U7K3TQbU56wZR3gn055/RT4bx0KKAaV2hld+/vNV5uUeAbjszfzxddPX8JqGmU62 jo/Jbtu4APRLBW6Uvx6aS5Ox9r7SVXNh -----END CERTIFICATE-----Generated at Sun May 26 18:02:33 2024 by rpki-client on console-fra.rpki-client.org