$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json) Hash identifier: y6lejqh5WzlHm1AnnFQiIcyyxQdIAC2oG2xTuoROyd4= Subject key identifier: 0F:B5:0A:B8:11:80:F1:F5:76:EA:6F:DF:7A:E3:F0:17:8B:8D:7A:47 Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft Manifest number: 29 Signing time: Fri 17 May 2024 08:42:41 +0000 Manifest this update: Fri 17 May 2024 08:42:40 +0000 Manifest next update: Fri 24 May 2024 08:42:40 +0000 Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: mognB4rUDXPmLWdaJFCn8mhHwkHBKAMSQjxnSx5ddn0=) 2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: XCfCmftMwhI1jamDgRcIxFJNNZ6OneW30ciSDRXltTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: May 17 08:42:40 2024 GMT Not After : May 24 08:42:40 2024 GMT Subject: CN=66471881-7e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:7f:07:4d:24:d0:f6:11:be:2a:e3:90:9a: 4f:51:7d:3e:77:c7:12:01:15:fa:e9:b6:6e:77:7f: 5f:a3:94:2a:be:96:f3:64:4d:b9:38:55:71:e1:37: 81:62:0c:29:b1:4a:d3:b4:77:27:88:ca:35:d6:21: d8:8a:5b:b8:a0:f7:0e:ad:17:c7:4e:aa:ab:d1:4a: 82:4f:19:d6:53:ab:d0:86:2c:c7:3b:1d:5e:bc:f2: 28:39:30:0c:fc:9f:58:20:7c:af:ee:4b:96:8c:83: 2c:bf:78:eb:b0:2d:14:31:93:aa:e3:29:1d:6c:ca: 0f:e7:de:77:81:10:ff:e6:94:5a:59:9d:52:b5:58: 1d:e7:0a:96:4d:f4:cd:3f:f6:87:a5:a0:06:41:43: 3a:92:c6:b1:78:f2:42:ad:d4:f3:bf:18:5a:1b:97: 5a:ae:7f:3a:4e:e0:ba:f3:d4:df:7d:f0:9d:9a:10: 32:61:3e:0e:48:28:c4:13:6d:55:46:86:da:ad:f7: c8:be:43:62:9c:cd:9b:93:2a:7e:bc:f9:17:25:f4: c2:b5:b5:a7:39:39:74:32:e5:35:ac:cb:78:47:66: ee:77:21:9e:db:91:0d:2c:62:d7:af:95:9f:b0:5f: a6:9e:84:31:4a:6c:b4:f1:77:4b:81:e9:a6:80:0d: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B5:0A:B8:11:80:F1:F5:76:EA:6F:DF:7A:E3:F0:17:8B:8D:7A:47 X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:db:ba:72:f5:e2:f9:54:71:c0:55:8c:b9:b3:7e:ea:3a:ee: 0c:77:65:60:c8:0f:d5:df:25:70:1c:c2:35:b6:5c:15:25:38: 64:4b:57:2b:4e:12:bd:55:f0:c5:08:a8:05:d8:36:5f:4d:02: 38:97:54:68:50:19:7b:df:99:6b:47:94:e5:ea:c8:e5:30:33: 12:3d:07:45:c1:b3:da:c0:16:c6:8f:6d:4c:e3:3a:c3:3e:a8: d4:7a:90:66:6b:f5:e9:c9:07:53:7d:d1:91:86:56:22:8a:9f: 2d:c3:e4:66:0a:b9:2d:eb:ca:e8:ac:bd:d7:71:87:3b:f8:e6: 12:8c:a6:40:d4:ef:86:69:0b:ac:e9:c2:19:43:08:9b:85:0b: 14:13:d5:98:a0:50:c4:c8:1d:ce:9b:63:43:36:b5:c7:fa:c7: 9a:4c:0f:21:17:b2:74:2e:30:47:df:43:56:b4:a2:cf:9f:14: 08:de:2b:67:97:89:00:89:c8:81:e6:f7:f4:11:aa:d8:41:69: 6f:d9:db:64:83:7d:0c:61:fa:2e:5c:4f:c4:8a:9c:36:12:7a: 59:13:2e:0c:c5:cc:94:86:d5:d3:78:8d:a1:35:aa:e5:e4:9b: 10:25:d4:dd:49:2a:23:8d:91:15:b4:6f:54:e2:c3:d9:61:ae: 19:65:81:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OEREMTExMC8GA1UEBRMoMDZENjJDN0E4NDA3NkUxQzY0OTQwNDA2MjU4OTE5RDY3 RDE1QUJFMTAeFw0yNDA1MTcwODQyNDBaFw0yNDA1MjQwODQyNDBaMBgxFjAUBgNV BAMTDTY2NDcxODgxLTdlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAu38HTSTQ9hG+KuOQmk9RfT53xxIBFfrptm53f1+jlCq+lvNkTbk4VXHhN4Fi DCmxStO0dyeIyjXWIdiKW7ig9w6tF8dOqqvRSoJPGdZTq9CGLMc7HV688ig5MAz8 n1ggfK/uS5aMgyy/eOuwLRQxk6rjKR1syg/n3neBEP/mlFpZnVK1WB3nCpZN9M0/ 9oeloAZBQzqSxrF48kKt1PO/GFobl1qufzpO4Lrz1N998J2aEDJhPg5IKMQTbVVG htqt98i+Q2KczZuTKn68+Rcl9MK1tac5OXQy5TWsy3hHZu53IZ7bkQ0sYtevlZ+w X6aehDFKbLTxd0uB6aaADV5pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD7UKuBGA 8fV26m/feuPwF4uNekcwHwYDVR0jBBgwFoAUBtYseoQHbhxklAQGJYkZ1n0Vq+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REQxLzI1REQ1OUY4RTFD OTExRUVCRTFGNTA2OEM0RjlBRTAyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnRZc2VvUUhiaHhrbEFRR0pZa1oxbjBWcS1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REQxLzI1REQ1OUY4RTFDOTExRUVCRTFGNTA2OEM0RjlBRTAyL0J0WXNlb1FIYmh4 a2xBUUdKWWtaMW4wVnEtRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKzbunL14vlUccBVjLmzfuo67gx3ZWDID9XfJXAcwjW2XBUlOGRLVytO Er1V8MUIqAXYNl9NAjiXVGhQGXvfmWtHlOXqyOUwMxI9B0XBs9rAFsaPbUzjOsM+ qNR6kGZr9enJB1N90ZGGViKKny3D5GYKuS3ryuisvddxhzv45hKMpkDU74ZpC6zp whlDCJuFCxQT1ZigUMTIHc6bY0M2tcf6x5pMDyEXsnQuMEffQ1a0os+fFAjeK2eX iQCJyIHm9/QRqthBaW/Z22SDfQxh+i5cT8SKnDYSelkTLgzFzJSG1dN4jaE1quXk mxAl1N1JKiONkRW0b1Tiw9lhrhllgaY= -----END CERTIFICATE-----Generated at Fri May 17 10:59:14 2024 by rpki-client on console-ams.rpki-client.org