$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: GrImMA5G/CoE/yL+056tvdeCV06NbIi11W/d/1pBuGI= Subject key identifier: 63:FA:AF:E6:15:A8:41:C4:92:8D:3F:C2:D7:1E:6E:01:BB:13:3F:C1 Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: 74 Signing time: Thu 21 Nov 2024 04:58:24 +0000 Manifest this update: Thu 21 Nov 2024 04:58:24 +0000 Manifest next update: Thu 28 Nov 2024 04:58:24 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: 7JCEkITJppxYSGcOtEP1JbMQs6ac7jHOQmzzjA9OopU=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: Nov 21 04:58:24 2024 GMT Not After : Nov 28 04:58:24 2024 GMT Subject: CN=673ebdf0-1434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:26:b9:c6:5a:10:1d:17:f0:c8:33:6c:c5: 9c:fe:b5:ec:81:68:bf:0e:cf:d6:56:72:3e:97:8a: 64:93:02:1a:fc:69:19:09:c8:e8:eb:46:2f:57:73: f8:55:0e:5c:a1:f8:2e:a7:7c:53:09:72:e5:d8:56: 16:ed:1a:7a:0b:c6:3a:ff:66:30:9f:01:d1:ff:73: 0d:8d:7c:c6:ea:6f:1a:0a:af:63:40:16:f4:51:a2: 84:80:be:7a:29:55:17:81:67:a6:a9:09:29:8c:37: 4c:61:5a:a0:55:ef:31:16:28:a0:3b:dd:12:e8:2a: 49:a3:7a:de:f5:13:0f:54:54:ad:ce:9f:9f:64:fd: 34:1d:ea:49:62:75:b5:05:1d:e1:5a:9d:19:39:61: bb:8c:b5:6a:37:63:b3:4e:79:04:fb:ad:4a:81:cc: 14:59:0b:fb:ac:21:dd:40:dd:38:49:b8:5a:4e:6a: 29:29:04:d4:b7:77:85:32:c2:bd:8b:3f:75:d0:0d: 04:3f:04:a2:3f:97:e8:eb:c6:5c:96:22:84:fe:43: 12:e2:0e:85:d9:23:78:53:a9:5e:61:61:80:75:7f: e6:49:b6:f7:85:27:05:19:9e:08:c7:25:bc:ae:48: fc:2d:0a:cd:f1:23:ac:d2:23:b5:44:bc:d8:a0:88: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:AF:E6:15:A8:41:C4:92:8D:3F:C2:D7:1E:6E:01:BB:13:3F:C1 X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:82:09:1d:ef:9c:43:13:c9:76:d2:ee:1f:b2:23:39:97:28: f8:77:9d:c3:a5:a4:5e:83:7e:c3:12:ac:6b:37:dd:5e:54:27: f6:f6:95:78:70:b9:a6:89:74:96:4e:f1:6a:06:a3:dd:1a:8e: da:3a:13:14:70:2e:83:de:88:2c:46:ba:d8:e3:3e:0c:99:00: ad:df:99:78:8d:56:2b:c0:09:6e:8e:43:49:f0:a2:ab:e8:49: 30:d5:12:82:fb:d7:d0:11:b0:15:22:64:91:97:d7:ae:03:2a: 3f:9e:4f:4d:cc:c3:cf:a6:58:33:03:70:fd:83:d2:09:41:b8: f7:a0:82:d2:da:67:5b:30:f3:a5:5d:f3:d5:af:48:1e:7a:85: 10:28:d7:dd:da:d4:0c:17:a9:05:62:5e:90:f3:4f:8a:7d:81: 7e:d7:8b:7e:c8:33:85:16:a2:dc:7c:83:f3:8a:04:25:33:e3: c4:de:9f:9a:1e:f2:eb:c3:da:14:dc:ab:e4:2b:6c:23:d4:26: f9:90:6a:f9:8e:3d:56:03:7b:cc:b1:54:ea:c8:b0:72:51:8f: 7f:ae:2c:54:cc:db:98:de:fb:ed:a7:b4:32:f1:64:da:df:66: 2b:de:2c:13:da:3c:32:ab:d8:9a:c5:04:e8:53:22:b8:b3:7c: 8c:6b:8d:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTBGQjExMC8GA1UEBRMoNkU0NTczMzQ4NjgwMzI2RDNEQURFOTg1MjE1RDIyNjYy OEI5RjE2QjAeFw0yNDExMjEwNDU4MjRaFw0yNDExMjgwNDU4MjRaMBgxFjAUBgNV BAMTDTY3M2ViZGYwLTE0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvdCa5xloQHRfwyDNsxZz+teyBaL8Oz9ZWcj6XimSTAhr8aRkJyOjrRi9Xc/hV Dlyh+C6nfFMJcuXYVhbtGnoLxjr/ZjCfAdH/cw2NfMbqbxoKr2NAFvRRooSAvnop VReBZ6apCSmMN0xhWqBV7zEWKKA73RLoKkmjet71Ew9UVK3On59k/TQd6klidbUF HeFanRk5YbuMtWo3Y7NOeQT7rUqBzBRZC/usId1A3ThJuFpOaikpBNS3d4Uywr2L P3XQDQQ/BKI/l+jrxlyWIoT+QxLiDoXZI3hTqV5hYYB1f+ZJtveFJwUZngjHJbyu SPwtCs3xI6zSI7VEvNigiGsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY/qv5hWo QcSSjT/C1x5uAbsTP8EwHwYDVR0jBBgwFoAUbkVzNIaAMm09remFIV0iZii58Wsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMEZCLzUwNTZDOEIyMDA1 NjExRUZBNTRENjE0MEM0RjlBRTAyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmtWek5JYUFNbTA5cmVtRklWMGlaaWk1OFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MEZCLzUwNTZDOEIyMDA1NjExRUZBNTRENjE0MEM0RjlBRTAyL2JrVnpOSWFBTW0w OXJlbUZJVjBpWmlpNThXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWCCR3vnEMTyXbS7h+yIzmXKPh3ncOlpF6DfsMSrGs33V5UJ/b2lXhw uaaJdJZO8WoGo90ajto6ExRwLoPeiCxGutjjPgyZAK3fmXiNVivACW6OQ0nwoqvo STDVEoL719ARsBUiZJGX164DKj+eT03Mw8+mWDMDcP2D0glBuPeggtLaZ1sw86Vd 89WvSB56hRAo193a1AwXqQViXpDzT4p9gX7Xi37IM4UWotx8g/OKBCUz48Ten5oe 8uvD2hTcq+QrbCPUJvmQavmOPVYDe8yxVOrIsHJRj3+uLFTM25je++2ntDLxZNrf ZiveLBPaPDKr2JrFBOhTIrizfIxrjVk= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org