$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: z0v2jpQAQaG9O54BvHhnxqLtOVde7MK+ikw48FdqNgM= Subject key identifier: 84:2D:32:36:E9:9E:5E:64:D6:7B:BA:B1:C1:78:F5:C7:4A:AD:2D:0A Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: 11 Signing time: Sun 19 May 2024 08:50:47 +0000 Manifest this update: Sun 19 May 2024 08:50:46 +0000 Manifest next update: Sun 26 May 2024 08:50:46 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: 4LcrhYK9ww73QWihsXXIQotPam9/7gkYCiTGPMISqww=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: rBQ+USzPzRB2tBagyPEKaCTJtKJjIgeSQgYiM3GVByY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: May 19 08:50:46 2024 GMT Not After : May 26 08:50:46 2024 GMT Subject: CN=6649bd67-1d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:32:15:03:9a:3e:2f:d6:64:8a:ca:c0:d9: a7:8d:7a:8d:f7:f6:98:a1:9a:3d:db:57:13:28:d1: 64:15:91:d2:e7:fd:54:86:72:6d:ce:dc:3a:87:91: 39:94:de:d7:86:33:7b:a6:8f:67:a6:fc:7a:c7:3a: 50:f9:80:6c:20:76:08:56:67:f2:36:1a:9b:2d:82: d0:0e:b3:6a:94:e7:26:e4:45:d4:55:d7:13:b6:31: 34:1b:e5:e3:c2:0f:a2:e7:9d:91:5a:48:28:16:7a: 4a:2f:c9:d7:09:91:e1:9c:63:4a:3a:16:99:a4:d5: ac:b8:c6:6f:08:4e:7a:2b:53:35:d8:a0:1e:ac:51: 9e:f6:b0:91:0b:20:63:cd:18:47:59:4b:fa:c7:95: be:a5:3b:cb:4f:a0:13:87:d7:1e:82:9b:cd:14:2d: d5:b5:1e:2a:d4:f4:ba:99:3b:5d:0d:dd:53:7a:60: 1d:62:53:6d:d5:56:bb:ce:40:b6:54:5c:aa:18:c3: 68:16:f5:1c:d6:83:46:26:90:9b:03:07:76:7e:f3: e9:67:ca:00:ce:01:ba:cb:3a:bf:22:cd:ff:5e:04: 31:19:dc:84:0f:01:e9:97:3a:57:f1:52:b0:57:5a: 62:8f:2a:c8:75:78:3f:d3:ec:a3:3a:bf:d1:33:f3: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:32:36:E9:9E:5E:64:D6:7B:BA:B1:C1:78:F5:C7:4A:AD:2D:0A X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:65:b2:ba:d2:f3:69:5f:b1:bb:93:14:cb:d9:77:75:d6:59: 0e:0d:cc:5c:34:42:0f:91:87:79:37:fe:18:9a:79:7b:c6:34: 04:bc:ac:6a:ea:14:70:07:09:3c:71:87:62:0a:7c:73:ca:0a: 56:0f:ba:29:d3:5d:67:27:95:29:d5:d1:61:a1:19:bf:bc:08: bf:98:1e:51:38:a2:8b:55:b5:39:00:e1:7c:16:e2:82:66:0f: 80:e4:71:9b:38:10:6f:9e:77:78:de:cc:12:8d:8b:ef:fc:ff: ff:52:52:d4:45:32:6e:ab:cc:35:ef:39:04:f0:8e:da:43:20: e7:0a:e0:66:45:d0:0b:f6:c2:f7:ef:ad:01:91:50:d9:1c:81: 19:74:ac:cf:0d:7f:8f:05:bf:6f:9c:b5:42:9c:76:de:87:b6: 5e:57:5c:76:ee:ed:6d:01:87:72:d9:8b:a8:82:12:af:f4:0c: ea:b2:8c:5a:cc:15:16:58:55:38:20:72:0d:1e:35:34:7c:b2: 34:79:42:9c:42:74:82:bd:05:ef:fa:6a:ec:67:8b:9a:6c:22: 46:4b:a6:14:a0:02:26:d2:30:81:93:1c:e3:39:2c:4e:60:3b: d2:fc:52:da:40:0c:0d:6d:5b:6a:46:cd:92:c5:d4:12:a6:7d: d5:d5:1e:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTBGQjExMC8GA1UEBRMoNkU0NTczMzQ4NjgwMzI2RDNEQURFOTg1MjE1RDIyNjYy OEI5RjE2QjAeFw0yNDA1MTkwODUwNDZaFw0yNDA1MjYwODUwNDZaMBgxFjAUBgNV BAMTDTY2NDliZDY3LTFkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOKDIVA5o+L9ZkisrA2aeNeo339pihmj3bVxMo0WQVkdLn/VSGcm3O3DqHkTmU 3teGM3umj2em/HrHOlD5gGwgdghWZ/I2GpstgtAOs2qU5ybkRdRV1xO2MTQb5ePC D6LnnZFaSCgWekovydcJkeGcY0o6Fpmk1ay4xm8ITnorUzXYoB6sUZ72sJELIGPN GEdZS/rHlb6lO8tPoBOH1x6Cm80ULdW1HirU9LqZO10N3VN6YB1iU23VVrvOQLZU XKoYw2gW9RzWg0YmkJsDB3Z+8+lnygDOAbrLOr8izf9eBDEZ3IQPAemXOlfxUrBX WmKPKsh1eD/T7KM6v9Ez89bHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhC0yNume XmTWe7qxwXj1x0qtLQowHwYDVR0jBBgwFoAUbkVzNIaAMm09remFIV0iZii58Wsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMEZCLzUwNTZDOEIyMDA1 NjExRUZBNTRENjE0MEM0RjlBRTAyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmtWek5JYUFNbTA5cmVtRklWMGlaaWk1OFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MEZCLzUwNTZDOEIyMDA1NjExRUZBNTRENjE0MEM0RjlBRTAyL2JrVnpOSWFBTW0w OXJlbUZJVjBpWmlpNThXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALxlsrrS82lfsbuTFMvZd3XWWQ4NzFw0Qg+Rh3k3/hiaeXvGNAS8rGrq FHAHCTxxh2IKfHPKClYPuinTXWcnlSnV0WGhGb+8CL+YHlE4ootVtTkA4XwW4oJm D4DkcZs4EG+ed3jezBKNi+/8//9SUtRFMm6rzDXvOQTwjtpDIOcK4GZF0Av2wvfv rQGRUNkcgRl0rM8Nf48Fv2+ctUKcdt6Htl5XXHbu7W0Bh3LZi6iCEq/0DOqyjFrM FRZYVTggcg0eNTR8sjR5QpxCdIK9Be/6auxni5psIkZLphSgAibSMIGTHOM5LE5g O9L8UtpADA1tW2pGzZLF1BKmfdXVHv8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org