$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: Kv+xif4RqnaXqamPhc/pPX61Z7yBmV30YAUiGzzmUpk= Subject key identifier: 2E:21:65:11:BA:52:B0:37:87:FC:D7:B3:20:E9:7C:96:86:57:5B:E5 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 0708 Signing time: Sat 18 May 2024 22:40:23 +0000 Manifest this update: Sat 18 May 2024 22:40:22 +0000 Manifest next update: Sat 25 May 2024 22:40:22 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: z42bRYuulOwm2bLfhV77fMTbzwJkdTx+nwQ1vUxR8MY=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: Oph2x9Vp/wRbnmNVSfwAUkY9uyB9bFqNjrTtaJzSXt8=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: P6bxUSy63TcpMzTVAQgQmX0eHutBIeOB9x7RsTvT1eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: May 18 22:40:22 2024 GMT Not After : May 25 22:40:22 2024 GMT Subject: CN=66492e56-f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:42:ec:e6:6d:af:b4:47:75:d8:2d:23:13: c9:2d:fc:de:f3:58:d1:ba:5a:eb:8c:bd:d4:2e:e2: e0:e6:45:c6:80:cc:04:10:f9:3b:ea:5d:81:35:8c: e0:95:c2:e4:14:66:99:61:2e:bb:5a:ca:10:6b:3b: 2a:13:54:58:9a:09:c8:f3:a3:60:82:5e:7f:c1:cc: c1:62:7a:27:98:15:f5:95:c6:e6:fa:53:fa:88:03: d3:54:14:d8:85:2d:23:2a:14:b3:d3:b5:a4:2e:c8: 21:63:12:90:db:ac:2f:f2:8a:5e:b6:17:8e:c0:96: 5a:41:9b:da:c1:d9:92:53:70:df:24:a1:e9:50:0f: 33:e4:c0:91:08:dd:58:0e:f0:0e:cf:fb:67:53:06: 38:99:0a:90:90:5f:1a:c3:14:55:ca:53:3c:86:6b: bb:b4:cf:92:6f:a4:f7:41:1c:77:01:6d:a2:a3:5c: b1:52:f8:bc:cc:74:39:5d:e5:23:ac:69:a7:61:03: 96:f3:a7:5a:63:e0:e2:82:51:d2:31:4f:0f:84:d0: 82:87:36:7d:5f:88:93:d7:15:d5:bc:76:ea:7e:f0: b2:d5:92:47:2f:92:00:6d:69:70:4c:53:27:5d:07: 46:87:cf:77:95:a0:bd:32:bb:f2:a1:0d:15:43:68: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:65:11:BA:52:B0:37:87:FC:D7:B3:20:E9:7C:96:86:57:5B:E5 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2a:a2:8f:55:bd:82:14:7b:5b:60:bc:ad:bd:f3:58:c6:44: bc:e4:2a:7e:53:05:18:bd:d0:6a:6a:c7:9e:41:d4:33:b0:9d: e8:bc:b8:9e:e1:73:85:bd:79:a4:50:00:91:51:7d:c1:8f:50: 09:03:f9:1e:8d:ea:1a:23:e9:0f:67:b5:f1:5f:ef:5e:0f:49: f5:89:fd:0c:94:41:c8:0e:d0:6f:1e:41:e6:af:df:0e:44:d2: d2:a4:c4:03:aa:8e:8d:53:12:98:5b:82:24:1b:22:d6:98:11: 09:ab:06:ea:8f:4b:0c:c3:ca:04:a6:3a:c0:ae:e9:19:8d:ee: 1a:39:8c:c3:e3:13:8d:b4:e6:9f:00:c0:d6:39:65:e3:2e:bc: 5e:58:75:9b:3e:f3:fc:c8:7e:8a:4f:3e:55:e8:da:e1:9a:5c: cb:05:07:8a:ac:3a:6f:a0:aa:67:90:55:06:32:a2:0e:c1:c8: 2e:02:11:62:6a:9a:d0:0a:1e:50:76:19:92:78:79:79:40:b1: ac:b1:e2:b4:5d:32:51:8b:9a:29:3d:c4:51:6d:76:87:3d:cc: f4:40:54:56:62:df:d4:cc:8c:51:24:a2:3e:a1:35:e6:91:46: 0d:16:69:53:c9:3f:1d:9c:99:7d:a8:a1:2c:4c:62:43:c3:65: e5:16:d3:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjQwNTE4MjI0MDIyWhcNMjQwNTI1MjI0MDIyWjAYMRYwFAYD VQQDEw02NjQ5MmU1Ni1mNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwdC7OZtr7RHddgtIxPJLfze81jRulrrjL3ULuLg5kXGgMwEEPk76l2BNYzg lcLkFGaZYS67WsoQazsqE1RYmgnI86Nggl5/wczBYnonmBX1lcbm+lP6iAPTVBTY hS0jKhSz07WkLsghYxKQ26wv8opetheOwJZaQZvawdmSU3DfJKHpUA8z5MCRCN1Y DvAOz/tnUwY4mQqQkF8awxRVylM8hmu7tM+Sb6T3QRx3AW2io1yxUvi8zHQ5XeUj rGmnYQOW86daY+DiglHSMU8PhNCChzZ9X4iT1xXVvHbqfvCy1ZJHL5IAbWlwTFMn XQdGh893laC9MrvyoQ0VQ2iu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4hZRG6 UrA3h/zXsyDpfJaGV1vlMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBKqKPVb2CFHtbYLytvfNYxkS85Cp+UwUYvdBqaseeQdQzsJ3ovLie 4XOFvXmkUACRUX3Bj1AJA/kejeoaI+kPZ7XxX+9eD0n1if0MlEHIDtBvHkHmr98O RNLSpMQDqo6NUxKYW4IkGyLWmBEJqwbqj0sMw8oEpjrArukZje4aOYzD4xONtOaf AMDWOWXjLrxeWHWbPvP8yH6KTz5V6NrhmlzLBQeKrDpvoKpnkFUGMqIOwcguAhFi aprQCh5QdhmSeHl5QLGsseK0XTJRi5opPcRRbXaHPcz0QFRWYt/UzIxRJKI+oTXm kUYNFmlTyT8dnJl9qKEsTGJDw2XlFtOt -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org