$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft File: 4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json) Hash identifier: YqlCiudU0OOz3GFTteZOZy1Yixn0J79RDgilRigS8sQ= Subject key identifier: A0:44:36:E1:B5:D5:70:E6:94:59:AE:17:FE:40:32:48:1D:67:24:52 Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 Certificate issuer: /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft Manifest number: 41 Signing time: Sun 19 May 2024 08:10:23 +0000 Manifest this update: Sun 19 May 2024 08:10:22 +0000 Manifest next update: Sun 26 May 2024 08:10:22 +0000 Files and hashes: 1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: 6CAyziUnBlgV8GdlDd+FhFH/uguwt/8V4WpS50DHnvE=) 2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: NyvsbGaq1HKR+L0PRnbDheo2EQMUIsjiG+x1CykE4V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553 Validity Not Before: May 19 08:10:22 2024 GMT Not After : May 26 08:10:22 2024 GMT Subject: CN=6649b3ee-bf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:f0:66:03:ce:e0:05:e7:15:d6:5b:23:d5: fe:c6:30:0f:17:9c:fc:e0:a5:87:41:ca:22:03:d1: 8f:2a:d9:13:c4:4f:8f:40:e3:0f:81:2f:eb:84:23: bf:24:5d:3c:ea:26:61:67:ab:8b:de:dc:23:c7:aa: 88:7b:4b:c6:95:44:04:4e:75:a2:4f:96:e8:a7:df: ff:28:f4:1a:4d:2d:2a:65:76:2e:02:46:9c:cd:8a: d0:75:74:50:35:a9:28:c8:3d:64:98:e5:36:93:d2: b0:4b:b7:70:b5:4b:c2:e3:37:49:ed:1c:46:28:68: ff:ab:2f:71:8b:02:2f:9b:4d:c7:7e:a2:f9:1d:9b: d3:88:f0:6f:d3:96:a8:97:ed:56:a5:b7:48:9a:bf: 80:80:8d:6c:e6:68:a3:b6:b7:2b:89:a7:a8:ca:83: ba:c6:f2:1d:1d:9a:9b:b4:ee:3f:17:a3:bc:6f:3e: ba:78:3a:aa:5f:14:60:b7:5b:77:0b:9e:05:21:a5: 61:8e:c3:a2:62:5f:63:69:31:97:3c:f6:a4:ed:d2: dc:40:a1:00:e8:ca:1c:f8:64:56:c7:8a:48:ea:e8: 03:a6:dc:a8:df:90:70:6e:64:78:c4:56:f3:eb:f3: 6d:a1:a4:c7:0f:b4:79:49:03:35:3f:39:2e:43:fb: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:44:36:E1:B5:D5:70:E6:94:59:AE:17:FE:40:32:48:1D:67:24:52 X509v3 Authority Key Identifier: keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:11:41:29:3b:e5:6a:5c:57:bd:ad:3b:53:55:81:0f:ea:26: e1:c9:06:a1:1c:0e:6e:3c:9a:81:b5:e8:f9:fd:59:35:b0:dc: 3f:76:fc:c3:1d:bb:0a:31:5a:f0:58:7a:0f:d5:52:27:ba:05: 5a:86:69:50:27:bf:b0:66:76:f3:92:00:e9:3a:a3:2f:82:06: 5e:e4:99:87:25:20:12:2b:4c:49:8d:f8:ad:d6:39:e2:f4:af: 4e:c7:71:b6:4a:e1:d7:d5:af:29:fe:03:6a:8a:03:c5:bb:44: 05:96:71:ab:c1:01:53:e1:dc:06:fc:e4:84:82:94:6f:14:88: 4a:78:96:8a:a1:1a:84:3a:a6:d2:ce:15:3f:a6:de:de:70:d1: 65:bc:4d:2f:99:c6:40:a0:41:34:41:7f:23:4f:10:bb:1c:94: 5c:74:bc:81:b5:54:09:4f:8d:49:b1:4e:50:86:28:b7:4a:26: 74:5d:39:62:cd:6e:2c:d2:b2:9e:5b:63:c5:5f:eb:60:8d:0c: cd:9d:53:f3:6e:1a:8a:76:cf:d9:45:b7:35:93:e4:9c:74:bc: cb:e7:23:05:45:ef:63:b4:a3:cc:2a:87:8c:d2:e6:fb:e1:88: 07:68:90:31:f5:d2:fc:09:b9:39:27:b5:61:bc:fe:a9:24:ec: 14:69:92:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkNBRjExMC8GA1UEBRMoRTAxNUYzOTNFN0EzMjNDM0Y0RjFCRkUyNkU1QkZFMDQw RTM1RTU1MzAeFw0yNDA1MTkwODEwMjJaFw0yNDA1MjYwODEwMjJaMBgxFjAUBgNV BAMTDTY2NDliM2VlLWJmNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzyvBmA87gBecV1lsj1f7GMA8XnPzgpYdByiID0Y8q2RPET49A4w+BL+uEI78k XTzqJmFnq4ve3CPHqoh7S8aVRAROdaJPluin3/8o9BpNLSpldi4CRpzNitB1dFA1 qSjIPWSY5TaT0rBLt3C1S8LjN0ntHEYoaP+rL3GLAi+bTcd+ovkdm9OI8G/TlqiX 7Valt0iav4CAjWzmaKO2tyuJp6jKg7rG8h0dmpu07j8Xo7xvPrp4OqpfFGC3W3cL ngUhpWGOw6JiX2NpMZc89qTt0txAoQDoyhz4ZFbHikjq6AOm3KjfkHBuZHjEVvPr 822hpMcPtHlJAzU/OS5D++FFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoEQ24bXV cOaUWa4X/kAySB1nJFIwHwYDVR0jBBgwFoAU4BXzk+ejI8P08b/iblv+BA415VMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2Q0FGL0ZEMjZEQzIyQjZG NDExRUVBQzIwMzgxMEM0RjlBRTAyLzRCWHprLWVqSThQMDhiX2libHYtQkE0MTVW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEJYemstZWpJOFAwOGJfaWJsdi1CQTQxNVZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 Q0FGL0ZEMjZEQzIyQjZGNDExRUVBQzIwMzgxMEM0RjlBRTAyLzRCWHprLWVqSThQ MDhiX2libHYtQkE0MTVWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKERQSk75WpcV72tO1NVgQ/qJuHJBqEcDm48moG16Pn9WTWw3D92/MMd uwoxWvBYeg/VUie6BVqGaVAnv7BmdvOSAOk6oy+CBl7kmYclIBIrTEmN+K3WOeL0 r07HcbZK4dfVryn+A2qKA8W7RAWWcavBAVPh3Ab85ISClG8UiEp4loqhGoQ6ptLO FT+m3t5w0WW8TS+ZxkCgQTRBfyNPELsclFx0vIG1VAlPjUmxTlCGKLdKJnRdOWLN bizSsp5bY8Vf62CNDM2dU/NuGop2z9lFtzWT5Jx0vMvnIwVF72O0o8wqh4zS5vvh iAdokDH10vwJuTkntWG8/qkk7BRpkjM= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org