$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: /y2rOhf92XptUQOsmAQlcXMEfs6lHbaM9S6/Dw8sZhk= Subject key identifier: A2:5E:EC:EA:D8:4E:A3:D1:D5:1B:7C:8C:47:F5:16:38:7E:5A:28:CE Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 10C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 10BA Signing time: Sat 18 May 2024 17:54:30 +0000 Manifest this update: Sat 18 May 2024 17:54:29 +0000 Manifest next update: Sat 25 May 2024 17:54:29 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: pz3PyzDWVLcBTdKMal6shdoCnCgr5dKByOXwxIaYlSU=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: u0Hc0mf9e/VxGMmZrJNfBfe9rGEoED7i+SlUJS8/+Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4290 (0x10c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: May 18 17:54:29 2024 GMT Not After : May 25 17:54:29 2024 GMT Subject: CN=6648eb55-5801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:8e:ea:82:b0:fb:b4:27:cb:80:c1:a3:7a: 43:28:e5:61:0c:23:ba:c9:b9:58:fb:06:f1:7b:c1: b3:d9:62:a9:99:55:d2:8e:78:e4:50:81:8a:64:68: b1:7c:14:93:4b:7e:75:e0:d1:a6:8a:b9:a4:4f:e5: fc:2a:10:5a:1c:f4:6c:69:24:f4:2c:c3:a2:49:53: b3:7c:ae:f8:d9:63:6c:00:92:d4:a7:d1:33:6e:d3: bc:c1:02:74:d0:24:94:2d:00:2c:51:1a:92:c3:7d: b5:20:48:78:dc:e4:1e:e8:e9:1d:59:ec:73:dc:15: 0c:a4:a3:3c:5a:4c:d2:28:c0:98:0d:29:61:2a:20: dd:c5:bb:10:a8:48:a7:7e:fe:e2:f0:57:12:66:18: 0a:d1:0c:bb:18:8d:e4:61:d5:50:52:a1:db:fd:c2: 32:99:8c:e7:ad:89:f7:cf:9d:e1:0d:17:60:ca:f2: 68:36:a4:f8:1f:04:68:f0:f5:b6:81:a3:2a:b1:0f: 55:33:b7:bc:91:59:b8:7c:6e:d5:d8:c7:ae:bd:01: ce:be:f3:08:05:32:b5:69:60:54:53:93:a2:00:02: 80:43:ba:10:9c:7d:bd:93:d6:7e:3c:24:2d:96:76: 42:40:21:34:d1:bf:dd:c9:f8:4e:1c:ce:a3:f4:d4: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:EC:EA:D8:4E:A3:D1:D5:1B:7C:8C:47:F5:16:38:7E:5A:28:CE X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:91:a0:ca:dc:e6:e9:16:7a:eb:5f:6c:a9:5d:00:58:b6: c7:49:11:3b:3b:f8:76:12:2d:c3:c2:2e:a2:25:a6:17:32:69: eb:07:72:05:de:5d:09:5e:b4:9d:c4:3f:71:39:c2:91:d6:94: c4:9f:a1:c8:1c:ed:f3:ff:f2:e8:a0:86:1c:49:a7:1e:ad:43: 05:50:f2:07:81:9c:02:b8:89:db:a7:51:3d:19:ee:a0:86:de: ba:77:f8:95:50:53:6f:98:11:c1:3c:0a:d4:67:fd:21:7c:8e: c5:a7:43:c9:11:88:5d:12:93:5b:6d:ad:38:1f:cc:2f:5c:23: ad:1a:50:ca:6b:5b:4c:14:1e:71:5f:68:14:90:2e:83:23:ba: 65:53:64:ef:8a:ad:09:38:18:07:09:6b:e1:f9:6c:41:eb:eb: 28:ee:a6:7f:e2:fd:5f:55:ba:46:86:f4:59:b2:63:25:bb:78: 52:9b:49:16:a9:68:2a:d5:88:d5:aa:b7:5b:7a:f5:98:82:a7: d3:ee:60:73:03:21:b7:f7:43:6f:34:49:a6:6c:00:cb:cf:87: 06:e5:94:94:2b:68:4d:b7:77:26:b1:f3:64:35:1f:26:91:f1: c9:71:ba:00:5e:6b:5f:e5:47:7d:84:c3:15:5d:bc:df:b4:16: dc:57:51:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjQwNTE4MTc1NDI5WhcNMjQwNTI1MTc1NDI5WjAYMRYwFAYD VQQDEw02NjQ4ZWI1NS01ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9mO6oKw+7Qny4DBo3pDKOVhDCO6yblY+wbxe8Gz2WKpmVXSjnjkUIGKZGix fBSTS3514NGmirmkT+X8KhBaHPRsaST0LMOiSVOzfK742WNsAJLUp9EzbtO8wQJ0 0CSULQAsURqSw321IEh43OQe6OkdWexz3BUMpKM8WkzSKMCYDSlhKiDdxbsQqEin fv7i8FcSZhgK0Qy7GI3kYdVQUqHb/cIymYznrYn3z53hDRdgyvJoNqT4HwRo8PW2 gaMqsQ9VM7e8kVm4fG7V2MeuvQHOvvMIBTK1aWBUU5OiAAKAQ7oQnH29k9Z+PCQt lnZCQCE00b/dyfhOHM6j9NS8VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJe7OrY TqPR1Rt8jEf1Fjh+WijOMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbr5Ggytzm6RZ6619sqV0AWLbHSRE7O/h2Ei3Dwi6iJaYXMmnrB3IF 3l0JXrSdxD9xOcKR1pTEn6HIHO3z//LooIYcSacerUMFUPIHgZwCuInbp1E9Ge6g ht66d/iVUFNvmBHBPArUZ/0hfI7Fp0PJEYhdEpNbba04H8wvXCOtGlDKa1tMFB5x X2gUkC6DI7plU2Tviq0JOBgHCWvh+WxB6+so7qZ/4v1fVbpGhvRZsmMlu3hSm0kW qWgq1YjVqrdbevWYgqfT7mBzAyG390NvNEmmbADLz4cG5ZSUK2hNt3cmsfNkNR8m kfHJcboAXmtf5Ud9hMMVXbzftBbcV1Hf -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org