$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: yj3uNyLEu+Dgw4K8oXKBK+GX/YqlbDhEFleko8+ibOo= Subject key identifier: 85:94:13:05:14:9A:B8:95:A2:32:5C:7D:BA:FE:B7:88:70:59:A0:F8 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 121E Signing time: Mon 06 May 2024 17:47:07 +0000 Manifest this update: Mon 06 May 2024 17:47:07 +0000 Manifest next update: Mon 13 May 2024 17:47:07 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: RySfnUB4Kbmjx1PxbSDn+zgSOUdNRw10AUGR1nhnHEc=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: zvFpakET3MgB0pnaXjVDegfYWoN+VsdzpaoPXHpxs+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4644 (0x1224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: May 6 17:47:07 2024 GMT Not After : May 13 17:47:07 2024 GMT Subject: CN=6639179b-e5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:58:35:19:c8:2c:05:82:8d:36:8d:c5:cf: fe:cf:62:c3:8f:e5:55:e9:f8:43:18:24:ba:f7:96: 41:5c:c2:a5:36:90:64:1b:7d:bb:23:f5:07:b7:ee: 80:00:24:5f:b9:63:93:f7:09:9e:d1:61:3e:98:e8: 8b:65:d8:c7:fd:c8:1f:98:1a:a6:3b:f7:39:10:a7: 17:0f:09:c3:89:46:13:5a:53:de:3e:a7:16:02:7a: 8a:a1:b6:0e:b0:8a:1a:de:68:04:7d:55:b7:0c:4f: 6a:39:c3:54:92:ec:b9:0f:4c:c4:64:db:9d:65:a4: 02:93:d5:93:28:13:31:a8:f1:cc:81:a6:0f:0f:69: 61:58:06:60:98:5d:3e:7c:44:a2:37:b7:42:d1:26: dd:dc:47:8d:08:ba:a0:ba:68:5c:00:28:14:dc:d8: bd:a0:56:9a:42:de:6b:a3:7c:10:dc:0c:cb:9f:45: a9:46:87:9b:b2:62:2e:b0:17:f4:c1:3a:9e:11:09: 1b:6e:11:fb:29:0d:8c:20:99:6e:b6:e3:15:3d:d1: f1:4a:f4:6b:56:2e:93:53:e2:ce:f4:de:a4:c4:5e: a1:05:1b:0d:48:1e:5d:11:98:3e:31:33:77:d9:91: 4e:19:a8:7b:a7:f0:7c:37:c3:fd:a2:53:de:57:d0: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:13:05:14:9A:B8:95:A2:32:5C:7D:BA:FE:B7:88:70:59:A0:F8 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c6:eb:91:37:b2:b7:27:52:84:66:bb:7c:58:c9:75:31:ae: 08:ea:34:44:e4:23:79:ed:1c:90:26:5b:8d:14:42:6a:2b:48: 8e:97:31:63:49:80:1f:a0:26:cb:7d:61:91:1b:21:9a:e8:aa: bc:fa:a5:0b:40:84:b2:a7:b9:e8:3b:44:94:21:5f:d3:32:66: d1:36:74:ae:c1:70:8e:17:28:c8:f5:c6:af:27:bd:02:f6:93: be:97:6e:15:c7:3f:3d:67:ce:e8:79:48:d8:f2:47:da:83:1e: 03:2d:ef:3f:3a:67:ed:e2:e0:30:fa:6a:38:37:3b:cd:76:ec: 93:0a:54:b6:09:92:be:a4:39:29:53:70:84:0b:bb:8b:73:d9: f5:21:91:71:03:e5:d4:3f:d9:63:65:0d:7d:31:e7:cf:5a:86: 82:25:a9:10:47:3e:aa:45:7c:8e:b8:30:e1:03:43:8f:9e:51: 66:88:e0:36:17:b2:b2:44:68:87:aa:83:dc:e1:b0:d3:46:59: 07:d8:de:ca:d6:a2:6c:f7:19:05:17:7c:6a:1c:4a:ed:49:8b: 36:9d:c9:dd:fd:30:a5:09:35:36:10:22:06:45:04:ca:f8:31: 27:a3:83:53:b8:12:9b:0b:82:3f:c1:61:8b:67:56:60:fc:83: df:69:00:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjQwNTA2MTc0NzA3WhcNMjQwNTEzMTc0NzA3WjAYMRYwFAYD VQQDEw02NjM5MTc5Yi1lNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wVYNRnILAWCjTaNxc/+z2LDj+VV6fhDGCS695ZBXMKlNpBkG327I/UHt+6A ACRfuWOT9wme0WE+mOiLZdjH/cgfmBqmO/c5EKcXDwnDiUYTWlPePqcWAnqKobYO sIoa3mgEfVW3DE9qOcNUkuy5D0zEZNudZaQCk9WTKBMxqPHMgaYPD2lhWAZgmF0+ fESiN7dC0Sbd3EeNCLqgumhcACgU3Ni9oFaaQt5ro3wQ3AzLn0WpRoebsmIusBf0 wTqeEQkbbhH7KQ2MIJlutuMVPdHxSvRrVi6TU+LO9N6kxF6hBRsNSB5dEZg+MTN3 2ZFOGah7p/B8N8P9olPeV9CbkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWUEwUU mriVojJcfbr+t4hwWaD4MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFxuuRN7K3J1KEZrt8WMl1Ma4I6jRE5CN57RyQJluNFEJqK0iOlzFj SYAfoCbLfWGRGyGa6Kq8+qULQISyp7noO0SUIV/TMmbRNnSuwXCOFyjI9cavJ70C 9pO+l24Vxz89Z87oeUjY8kfagx4DLe8/Omft4uAw+mo4NzvNduyTClS2CZK+pDkp U3CEC7uLc9n1IZFxA+XUP9ljZQ19MefPWoaCJakQRz6qRXyOuDDhA0OPnlFmiOA2 F7KyRGiHqoPc4bDTRlkH2N7K1qJs9xkFF3xqHErtSYs2ncnd/TClCTU2ECIGRQTK +DEno4NTuBKbC4I/wWGLZ1Zg/IPfaQBr -----END CERTIFICATE-----Generated at Mon May 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org