$ rpki-client -vvf rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft File: bkOcbhO3EI4ApuUbi74WKVOg6is.mft (raw, json) Hash identifier: rcpnPLjKnJzep1lBlo0tQLMso1b/eT2a17uARAeKlbw= Subject key identifier: E4:2E:D0:5D:7F:F2:7E:5E:10:A6:F9:59:82:21:68:2A:BD:B1:93:14 Authority key identifier: 6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B Certificate issuer: /CN=A91659DB/serialNumber=6E439C6E13B7108E00A6E51B8BBE162953A0EA2B Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft Manifest number: 0CBC Signing time: Sat 18 May 2024 18:48:18 +0000 Manifest this update: Sat 18 May 2024 18:48:17 +0000 Manifest next update: Sat 25 May 2024 18:48:17 +0000 Files and hashes: 1: bkOcbhO3EI4ApuUbi74WKVOg6is.crl (hash: m4xueyLXACzXQPl0XfgiQqflyDBpgLURLyr5plydCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.crl rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91659DB/serialNumber=6E439C6E13B7108E00A6E51B8BBE162953A0EA2B Validity Not Before: May 18 18:48:17 2024 GMT Not After : May 25 18:48:17 2024 GMT Subject: CN=6648f7f2-f152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:18:4b:57:b3:52:7e:ec:5b:be:7f:86:14: 70:0f:02:e7:7f:b9:03:c8:2f:f0:e5:a3:15:09:e9: c4:f6:ae:e5:61:35:c9:34:36:12:81:cd:3d:09:e3: 07:4c:8e:62:d4:ee:ff:b7:ee:de:6d:50:9a:a4:54: 5e:b8:1a:a1:0b:8c:64:5b:e5:5b:89:15:f1:ff:37: 70:b3:2c:fc:73:86:58:32:0d:f1:b1:0a:ca:83:43: 4f:5f:9f:97:1b:62:91:2e:90:8c:57:1c:e3:ac:52: 4d:6f:71:c9:b4:4a:ef:f1:9d:94:f6:9d:76:4e:a9: 07:a6:cf:9e:18:db:47:38:51:3e:f0:fe:e9:0c:d3: 6b:e4:64:1d:47:a5:f6:83:9f:79:94:93:05:ca:b0: 64:44:c1:b6:a9:61:72:af:39:03:62:63:ea:36:eb: d1:80:a5:32:5a:8e:3f:b5:e4:ae:28:06:8f:42:91: c5:62:79:5a:1e:ab:34:c2:ad:b0:0d:39:16:07:07: 9f:3d:11:1b:e3:94:0e:0a:b7:9a:69:9f:3d:38:8c: 95:08:32:b5:83:aa:53:1e:00:b2:68:a5:d4:ad:ad: f3:20:3d:fa:73:7e:b2:87:6b:6a:a0:ee:7b:21:0a: 75:e7:a2:63:47:0d:e3:cb:8e:9d:bd:ac:87:db:b1: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2E:D0:5D:7F:F2:7E:5E:10:A6:F9:59:82:21:68:2A:BD:B1:93:14 X509v3 Authority Key Identifier: keyid:6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6c:c6:5e:04:62:8d:0a:63:b6:df:c4:95:30:bd:51:0c:26: 09:76:9c:c3:11:93:64:be:67:51:fc:4a:52:6b:2b:f5:12:c0: 61:c2:98:04:06:02:94:a2:27:41:0b:c4:35:9e:17:98:d1:86: 4b:1f:d8:e4:8a:1e:47:89:1a:0e:a8:68:af:31:c3:53:cf:05: 95:b4:ec:dd:ce:86:f1:7d:f7:b9:ea:71:75:e7:41:56:93:08: 13:de:91:03:69:9a:1f:56:50:33:64:a9:0c:6a:7d:c3:48:86: fa:22:54:f0:d7:1f:66:28:89:27:30:7b:9d:97:02:1b:a4:95: 64:01:f0:f9:a6:cb:8c:f8:5e:15:64:31:f9:64:a0:ec:8c:80: 45:95:61:b1:5c:40:9b:b5:44:18:00:a3:83:3c:9e:34:20:97: 1c:dd:42:51:3c:43:10:ea:58:d1:f7:ab:07:8f:9c:c9:04:86: 26:dd:8e:5c:9e:78:e9:3e:0b:ac:dd:dd:41:bf:ae:64:29:2c: b3:f5:8b:b6:86:a5:6b:e4:e2:ca:48:de:61:57:03:28:dd:59: 7c:e3:b6:6d:fb:95:c7:9c:e9:ed:3c:a0:07:07:a2:fd:a9:b2: c2:02:10:ce:57:c1:99:15:b0:9d:95:32:9b:5d:3a:1a:4f:05: 7f:18:04:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5REIxMTAvBgNVBAUTKDZFNDM5QzZFMTNCNzEwOEUwMEE2RTUxQjhCQkUxNjI5 NTNBMEVBMkIwHhcNMjQwNTE4MTg0ODE3WhcNMjQwNTI1MTg0ODE3WjAYMRYwFAYD VQQDEw02NjQ4ZjdmMi1mMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHMYS1ezUn7sW75/hhRwDwLnf7kDyC/w5aMVCenE9q7lYTXJNDYSgc09CeMH TI5i1O7/t+7ebVCapFReuBqhC4xkW+VbiRXx/zdwsyz8c4ZYMg3xsQrKg0NPX5+X G2KRLpCMVxzjrFJNb3HJtErv8Z2U9p12TqkHps+eGNtHOFE+8P7pDNNr5GQdR6X2 g595lJMFyrBkRMG2qWFyrzkDYmPqNuvRgKUyWo4/teSuKAaPQpHFYnlaHqs0wq2w DTkWBwefPREb45QOCreaaZ89OIyVCDK1g6pTHgCyaKXUra3zID36c36yh2tqoO57 IQp156JjRw3jy46dvayH27HdoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQu0F1/ 8n5eEKb5WYIhaCq9sZMUMB8GA1UdIwQYMBaAFG5DnG4TtxCOAKblG4u+FilToOor MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTlEQi8yMzVGOTQ0NEM3 QjUxMUU5ODdGM0Y2MkNDNEY5QUUwMi9ia09jYmhPM0VJNEFwdVViaTc0V0tWT2c2 aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrT2NiaE8zRUk0QXB1VWJpNzRXS1ZPZzZpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTlEQi8yMzVGOTQ0NEM3QjUxMUU5ODdGM0Y2MkNDNEY5QUUwMi9ia09jYmhPM0VJ NEFwdVViaTc0V0tWT2c2aXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbMZeBGKNCmO238SVML1RDCYJdpzDEZNkvmdR/EpSayv1EsBhwpgE BgKUoidBC8Q1nheY0YZLH9jkih5HiRoOqGivMcNTzwWVtOzdzobxffe56nF150FW kwgT3pEDaZofVlAzZKkMan3DSIb6IlTw1x9mKIknMHudlwIbpJVkAfD5psuM+F4V ZDH5ZKDsjIBFlWGxXECbtUQYAKODPJ40IJcc3UJRPEMQ6ljR96sHj5zJBIYm3Y5c nnjpPgus3d1Bv65kKSyz9Yu2hqVr5OLKSN5hVwMo3Vl847Zt+5XHnOntPKAHB6L9 qbLCAhDOV8GZFbCdlTKbXToaTwV/GAT9 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org