$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json) Hash identifier: +1zd3keDCW1CpkqlcBlVQ89fEpKpOQuG+cWrSx+Mgts= Subject key identifier: E3:6A:BD:D4:D9:E9:5D:A8:E5:27:F6:ED:61:8D:B2:50:83:0B:33:E3 Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 104A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft Manifest number: 1040 Signing time: Sat 18 May 2024 17:59:32 +0000 Manifest this update: Sat 18 May 2024 17:59:32 +0000 Manifest next update: Sat 25 May 2024 17:59:32 +0000 Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: mydPzNCsfxZwKxjQFwyrXMg/mkh3XyM43cjrvUIXl7o=) 2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: cMIcgTn0SRzNi+Iky45EfvQ9z//DEQACOWPaeefqdnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4170 (0x104a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: May 18 17:59:32 2024 GMT Not After : May 25 17:59:32 2024 GMT Subject: CN=6648ec84-3145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:56:4a:ea:a4:b5:b9:a0:b4:12:a6:c8:7a: a1:f6:a0:6c:1e:9c:73:c7:c1:c1:e7:49:6f:14:40: c3:e4:27:80:ba:54:a6:6b:ce:f0:64:e7:6a:95:6a: 66:12:76:c2:b3:46:db:4d:3c:99:5d:30:90:fd:0c: 9a:7a:ba:93:66:d8:08:26:49:f2:f1:99:b5:f2:ae: ea:88:26:e7:4c:2a:74:cd:8c:4d:f3:c2:1f:59:cc: 3e:bb:4a:40:4d:fe:07:ab:32:45:c8:28:05:d6:31: c9:ca:5c:fd:4d:92:ff:ac:8b:bc:24:c7:0d:88:08: ed:2f:a7:ce:11:b3:04:27:05:10:8f:77:f4:1a:f6: f3:49:be:13:a0:10:c4:42:1e:91:12:b5:db:68:21: 18:f2:ec:99:b6:97:93:da:64:a7:cf:e9:70:a5:4c: ad:79:75:e3:38:94:17:e9:c8:03:98:9c:3f:6e:4a: b1:51:a1:a2:2c:bb:46:ba:1f:a7:2e:d2:0f:d5:4e: 6b:6c:a0:f0:b6:30:f8:f4:c7:39:80:8c:6f:88:e7: 56:c7:f3:9e:17:9e:25:f9:ca:2d:3e:c7:3f:83:59: 9d:9e:a1:c8:5a:b2:12:74:d2:95:06:e9:56:c6:67: 30:0a:27:6d:6c:6a:41:95:8b:b6:4a:1d:e5:a0:56: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:BD:D4:D9:E9:5D:A8:E5:27:F6:ED:61:8D:B2:50:83:0B:33:E3 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6b:0c:31:1e:38:6f:14:10:8d:c1:0c:5c:85:5e:d9:1b:e9: 34:37:bd:95:db:7a:c9:4c:0d:b9:a3:01:07:a5:21:f5:76:9a: 0b:52:ae:cb:f0:56:9b:70:48:09:ae:6a:25:b2:60:4b:42:63: ea:18:ac:33:f9:03:89:2a:bb:b2:0e:18:70:51:50:b4:f4:85: 16:4f:6c:73:7e:ce:0e:33:d0:09:8b:1a:57:33:06:2e:31:74: c7:13:8c:db:22:60:0e:2f:3a:73:00:ca:b3:44:f2:2b:81:89: 10:a2:d6:f7:53:77:f8:28:87:8b:3d:78:c6:a1:58:9e:3c:60: 4d:ee:39:79:ce:2d:8a:b9:43:9b:3c:11:03:a2:9d:eb:8a:6d: 71:a7:e2:64:2b:58:b1:37:bc:87:b2:c8:3f:28:9a:10:a2:96: d8:83:0b:b2:60:69:01:c7:ce:49:42:cb:ba:a5:bd:b2:71:5a: 2b:f1:83:38:83:d0:03:d9:03:a4:6b:09:76:01:be:f9:41:18: 8a:c1:26:37:99:43:40:a9:d1:94:24:9b:c1:3c:d6:ad:c7:9b: f4:a6:c3:77:6c:d2:94:87:3f:48:39:99:e0:a0:9a:bd:a7:7a: 24:85:c8:5a:a6:ab:05:ba:95:ff:a2:9e:b6:7e:59:71:3f:ea: b5:df:e6:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjQwNTE4MTc1OTMyWhcNMjQwNTI1MTc1OTMyWjAYMRYwFAYD VQQDEw02NjQ4ZWM4NC0zMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm9WSuqktbmgtBKmyHqh9qBsHpxzx8HB50lvFEDD5CeAulSma87wZOdqlWpm EnbCs0bbTTyZXTCQ/QyaerqTZtgIJkny8Zm18q7qiCbnTCp0zYxN88IfWcw+u0pA Tf4HqzJFyCgF1jHJylz9TZL/rIu8JMcNiAjtL6fOEbMEJwUQj3f0GvbzSb4ToBDE Qh6RErXbaCEY8uyZtpeT2mSnz+lwpUyteXXjOJQX6cgDmJw/bkqxUaGiLLtGuh+n LtIP1U5rbKDwtjD49Mc5gIxviOdWx/OeF54l+cotPsc/g1mdnqHIWrISdNKVBulW xmcwCidtbGpBlYu2Sh3loFYn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONqvdTZ 6V2o5Sf27WGNslCDCzPjMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC Z09mZzBTbHU3V0M4RFBZMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4awwxHjhvFBCNwQxchV7ZG+k0N72V23rJTA25owEHpSH1dpoLUq7L 8FabcEgJrmolsmBLQmPqGKwz+QOJKruyDhhwUVC09IUWT2xzfs4OM9AJixpXMwYu MXTHE4zbImAOLzpzAMqzRPIrgYkQotb3U3f4KIeLPXjGoViePGBN7jl5zi2KuUOb PBEDop3rim1xp+JkK1ixN7yHssg/KJoQopbYgwuyYGkBx85JQsu6pb2ycVor8YM4 g9AD2QOkawl2Ab75QRiKwSY3mUNAqdGUJJvBPNatx5v0psN3bNKUhz9IOZngoJq9 p3okhchapqsFupX/op62fllxP+q13+Yf -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org