$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft File: 1BPN69UikmPRj0A_RCF4UlVUbMQ.mft (raw, json) Hash identifier: yYoS3xA7pELh/g5hVeuh/dkkZZXjX2yxKi/V3eG+ku8= Subject key identifier: D2:83:0E:4C:5C:1C:53:F4:61:A6:F6:DA:0A:60:9A:EA:A1:52:17:03 Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 Certificate issuer: /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft Manifest number: 0317 Signing time: Fri 03 May 2024 03:12:16 +0000 Manifest this update: Fri 03 May 2024 03:12:15 +0000 Manifest next update: Fri 10 May 2024 03:12:15 +0000 Files and hashes: 1: 1BPN69UikmPRj0A_RCF4UlVUbMQ.crl (hash: DRNA/YHXGTxw6g8a6FOsV1aFSzY+yu4F3v3dmNB5RM8=) 2: 1ACED69481C311ECA399B842C4F9AE02.roa (hash: r2Hb/UqD5pmyQy7TRsBROP5SA9uVdOaaIbgMPTbiWBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Validity Not Before: May 3 03:12:15 2024 GMT Not After : May 10 03:12:15 2024 GMT Subject: CN=66345610-51bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:33:08:ca:03:5c:46:9a:0f:b1:3f:24:31: 3e:98:23:c3:d8:e8:69:7c:fc:13:0a:d2:06:17:f8: 69:77:4e:0e:f9:94:80:5f:85:e3:0a:ef:6a:c5:e7: 34:ea:59:b5:a3:73:2f:42:cf:17:f8:5b:6d:9f:c9: 59:f1:ab:ee:af:76:0a:14:e7:ad:8a:09:93:85:d9: cf:48:e8:3a:46:90:5c:fd:bc:ee:98:78:43:07:82: d6:47:55:dc:52:26:66:04:f0:5f:b2:8b:61:b6:24: 21:55:5e:c7:40:63:33:6e:d7:bc:11:13:0b:1f:af: b3:e7:aa:06:5d:fc:13:57:16:d5:49:fe:32:01:fb: d5:a6:50:06:07:d1:7b:5a:f9:59:cb:e4:fc:e7:a7: 50:20:d9:49:3e:a1:c9:90:e2:8c:79:a7:ff:89:f4: 3e:ee:60:e4:cc:33:a5:ed:fb:fc:bc:99:50:af:cf: 2f:3e:19:01:17:5a:e9:da:ae:06:4d:e0:27:d0:09: eb:15:7d:c1:08:75:2e:9c:89:24:22:54:f1:84:5c: 24:f8:1c:3c:04:d0:ed:b8:65:20:99:40:54:b3:84: 47:47:59:81:5e:64:a6:77:d3:5f:79:38:a2:f1:e5: 62:01:db:55:82:d8:c3:bb:15:7a:51:26:45:6f:fa: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:83:0E:4C:5C:1C:53:F4:61:A6:F6:DA:0A:60:9A:EA:A1:52:17:03 X509v3 Authority Key Identifier: keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d2:a2:65:ce:08:ea:70:3e:9f:1a:3c:89:6a:2a:28:ed:c7: 9e:db:0c:47:3b:45:52:58:13:f1:f3:84:31:75:59:6c:76:55: bc:80:7b:64:45:82:76:26:12:dd:a6:76:80:39:af:0b:29:bd: bd:ce:a5:76:62:4d:b2:f9:13:76:8c:9d:98:ab:b8:dd:52:59: f0:67:4a:d2:eb:29:0b:2c:0d:45:02:9d:67:5c:30:21:ad:32: 8b:6e:db:1f:77:16:9d:1c:ee:cf:17:51:fb:98:3e:d3:cf:74: c3:39:ac:ca:be:c8:fa:53:99:50:ec:49:f5:00:f0:be:d6:de: 7d:20:14:d3:a9:7b:29:27:e4:19:87:7c:f5:d8:04:10:f2:20: a6:14:26:d1:cb:5f:59:83:12:65:80:87:85:73:8d:92:36:46: 6d:d3:cf:ea:27:6c:b8:4c:40:f6:09:3c:ca:c6:6b:4c:23:a7: af:f2:17:00:41:75:39:ec:6b:31:a0:db:f0:35:b5:81:48:d6: a9:57:ad:93:8e:d6:54:9b:bb:d7:c1:c6:ce:b9:3e:3f:67:19: 90:a6:52:f8:e2:00:74:6f:bf:12:51:b0:f6:1f:d1:c7:b7:5d: 02:8f:54:5d:0c:e9:af:2b:1f:7c:c8:25:5d:be:a9:a5:b7:3b: 5f:10:bb:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRGNTMxMTAvBgNVBAUTKEQ0MTNDREVCRDUyMjkyNjNEMThGNDAzRjQ0MjE3ODUy NTU1NDZDQzQwHhcNMjQwNTAzMDMxMjE1WhcNMjQwNTEwMDMxMjE1WjAYMRYwFAYD VQQDEw02NjM0NTYxMC01MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTozCMoDXEaaD7E/JDE+mCPD2OhpfPwTCtIGF/hpd04O+ZSAX4XjCu9qxec0 6lm1o3MvQs8X+Fttn8lZ8avur3YKFOetigmThdnPSOg6RpBc/bzumHhDB4LWR1Xc UiZmBPBfsothtiQhVV7HQGMzbte8ERMLH6+z56oGXfwTVxbVSf4yAfvVplAGB9F7 WvlZy+T856dQINlJPqHJkOKMeaf/ifQ+7mDkzDOl7fv8vJlQr88vPhkBF1rp2q4G TeAn0AnrFX3BCHUunIkkIlTxhFwk+Bw8BNDtuGUgmUBUs4RHR1mBXmSmd9NfeTii 8eViAdtVgtjDuxV6USZFb/o6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKDDkxc HFP0Yab22gpgmuqhUhcDMB8GA1UdIwQYMBaAFNQTzevVIpJj0Y9AP0QheFJVVGzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEY1My81QjJCQzdEQTgx QzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWttUFJqMEFfUkNGNFVsVlVi TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCUE42OVVpa21QUmowQV9SQ0Y0VWxWVWJNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEY1My81QjJCQzdEQTgxQzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWtt UFJqMEFfUkNGNFVsVlViTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs0qJlzgjqcD6fGjyJaioo7cee2wxHO0VSWBPx84QxdVlsdlW8gHtk RYJ2JhLdpnaAOa8LKb29zqV2Yk2y+RN2jJ2Yq7jdUlnwZ0rS6ykLLA1FAp1nXDAh rTKLbtsfdxadHO7PF1H7mD7Tz3TDOazKvsj6U5lQ7En1APC+1t59IBTTqXspJ+QZ h3z12AQQ8iCmFCbRy19ZgxJlgIeFc42SNkZt08/qJ2y4TED2CTzKxmtMI6ev8hcA QXU57GsxoNvwNbWBSNapV62TjtZUm7vXwcbOuT4/ZxmQplL44gB0b78SUbD2H9HH t10Cj1RdDOmvKx98yCVdvqmltztfELs1 -----END CERTIFICATE-----Generated at Fri May 3 04:36:52 2024 by rpki-client on console-ams.rpki-client.org