$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft File: M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json) Hash identifier: 0RgzCgjO+xDfx+I1X12VOotkUhxN0u47xe5ZZLcvV3o= Subject key identifier: B6:F8:2D:57:18:28:CE:D0:78:97:2E:DA:5E:16:CD:95:D2:29:6B:EB Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft Manifest number: BC Signing time: Wed 01 May 2024 06:43:46 +0000 Manifest this update: Wed 01 May 2024 06:43:45 +0000 Manifest next update: Wed 08 May 2024 06:43:45 +0000 Files and hashes: 1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: B7QMCJXrTpPv5qMg8X4WG+ijhVAlR9SczdBOBkhrHaQ=) 2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: UiMUfP+Afx3AVPbPGOw0M7KCWhDE9bm97COTKK0LRA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Validity Not Before: May 1 06:43:45 2024 GMT Not After : May 8 06:43:45 2024 GMT Subject: CN=6631e4a2-056f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:0e:29:7f:41:10:6c:7c:c2:8d:89:9e:b9: 98:82:81:2b:26:27:95:48:51:06:4a:05:af:b3:69: 15:71:99:f6:3b:2b:a3:1e:98:2f:e4:92:3c:6c:12: 8f:9f:7a:b5:7b:1e:cc:24:55:07:fc:e9:7a:52:38: 61:08:0e:ad:b9:f5:15:cc:f0:0f:96:18:89:e1:bf: ef:7f:6e:33:27:b0:67:f5:df:c6:0b:b7:69:0c:af: 2c:aa:9c:00:90:51:ce:5e:cd:51:48:f7:18:8e:c6: dc:a3:00:fb:d5:83:03:d4:b9:cb:82:fd:81:13:3f: 35:b0:24:04:ae:39:4f:8b:0f:93:3b:15:e6:1b:8f: 3f:ab:ef:51:5b:d1:40:3e:d9:5d:b7:ab:c2:85:0a: 11:20:26:b3:0e:e1:11:42:ed:d3:aa:28:60:60:77: 57:81:e4:95:6d:a3:27:ad:c5:26:c4:ad:95:6c:d5: da:c8:fb:53:92:d6:c9:1b:fd:e6:11:f3:6c:0f:b0: c7:80:17:3b:01:09:df:e1:e5:58:24:72:0a:38:16: 7a:da:45:2a:59:00:4b:bf:e7:bd:f5:02:bc:d4:fa: a8:6f:45:85:45:59:8b:3f:25:72:c0:d3:65:39:c3: 79:1d:f0:31:24:66:5a:3a:aa:cf:f3:2e:49:86:96: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F8:2D:57:18:28:CE:D0:78:97:2E:DA:5E:16:CD:95:D2:29:6B:EB X509v3 Authority Key Identifier: keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:76:af:3c:80:de:4d:61:c8:83:a9:02:b3:0e:7a:55:90:0b: d0:d3:30:a5:88:67:9b:6e:ed:14:96:da:a4:01:ad:70:4c:ea: 0b:7f:bb:21:5d:69:b5:11:1d:f1:e6:b4:e7:1c:43:19:22:e6: 3f:02:02:e6:27:f0:67:43:c4:60:02:70:d8:8d:16:ff:ad:6a: 82:fa:c4:4b:10:30:c2:53:e4:42:4b:f6:fa:e5:c8:66:62:8e: 77:fb:33:88:d8:d7:ad:b5:64:38:bc:05:bc:8a:7e:d2:b9:24: 7e:bc:3c:d5:c9:0e:f3:f9:a4:4b:13:41:c9:07:6a:42:5a:8a: bb:16:6e:9b:ca:59:59:2d:4b:1d:88:44:1b:db:95:62:b3:a5: 8e:9b:40:53:e7:16:db:a5:af:13:78:b1:a4:e5:42:cd:79:ab: 00:28:48:36:a7:7b:98:24:40:67:2d:ab:5a:be:c2:4b:a9:92: 2e:ac:cc:c5:d3:e4:8b:38:9a:19:4e:b9:3e:2a:f7:58:65:1b: e8:45:d6:7c:e9:f4:80:6f:e7:87:4d:e1:4c:37:50:c5:99:0d: cf:68:0e:ac:c7:ea:b2:5f:22:b4:aa:a6:12:c2:5e:5b:b2:08: cc:f8:e9:3f:3c:e5:ef:1c:f7:53:3e:32:2c:a4:d4:03:a0:21: 48:2f:4e:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0 MTlCRjc0MTUwHhcNMjQwNTAxMDY0MzQ1WhcNMjQwNTA4MDY0MzQ1WjAYMRYwFAYD VQQDEw02NjMxZTRhMi0wNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU0OKX9BEGx8wo2JnrmYgoErJieVSFEGSgWvs2kVcZn2OyujHpgv5JI8bBKP n3q1ex7MJFUH/Ol6UjhhCA6tufUVzPAPlhiJ4b/vf24zJ7Bn9d/GC7dpDK8sqpwA kFHOXs1RSPcYjsbcowD71YMD1LnLgv2BEz81sCQErjlPiw+TOxXmG48/q+9RW9FA Ptldt6vChQoRICazDuERQu3TqihgYHdXgeSVbaMnrcUmxK2VbNXayPtTktbJG/3m EfNsD7DHgBc7AQnf4eVYJHIKOBZ62kUqWQBLv+e99QK81Pqob0WFRVmLPyVywNNl OcN5HfAxJGZaOqrP8y5JhpZD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb4LVcY KM7QeJcu2l4WzZXSKWvrMB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5 QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01K NDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3dq88gN5NYciDqQKzDnpVkAvQ0zCliGebbu0UltqkAa1wTOoLf7sh XWm1ER3x5rTnHEMZIuY/AgLmJ/BnQ8RgAnDYjRb/rWqC+sRLEDDCU+RCS/b65chm Yo53+zOI2NettWQ4vAW8in7SuSR+vDzVyQ7z+aRLE0HJB2pCWoq7Fm6byllZLUsd iEQb25Vis6WOm0BT5xbbpa8TeLGk5ULNeasAKEg2p3uYJEBnLatavsJLqZIurMzF 0+SLOJoZTrk+KvdYZRvoRdZ86fSAb+eHTeFMN1DFmQ3PaA6sx+qyXyK0qqYSwl5b sgjM+Ok/POXvHPdTPjIspNQDoCFIL05c -----END CERTIFICATE-----Generated at Wed May 1 07:23:56 2024 by rpki-client on console-ams.rpki-client.org