$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: lj3WKIa2Dvnk7n/dlzqCY7353N66PWM8KxiDTF8bOvw= Subject key identifier: 64:0C:A3:08:F3:11:05:33:4B:CA:29:39:11:FA:F1:5C:67:33:D9:C5 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 10BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 10B2 Signing time: Thu 02 May 2024 17:58:54 +0000 Manifest this update: Thu 02 May 2024 17:58:53 +0000 Manifest next update: Thu 09 May 2024 17:58:53 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: C3EUTCiEK2vl8MzPUJZb+SWxaiQ3WmdL2kT+9vxR70I=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: u0Hc0mf9e/VxGMmZrJNfBfe9rGEoED7i+SlUJS8/+Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: May 2 17:58:53 2024 GMT Not After : May 9 17:58:53 2024 GMT Subject: CN=6633d45d-0db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:02:2e:09:6a:a0:ca:4d:a8:d3:ac:0c:03: a0:6c:88:45:fc:41:40:e7:62:09:e5:2c:04:3d:95: be:00:f4:d5:5c:52:eb:5a:aa:dd:d6:32:0c:67:7e: d6:91:85:75:c3:8a:68:d5:84:a4:85:43:75:61:d6: ed:5b:39:99:ef:50:c5:18:c9:03:05:00:b3:d8:48: 43:38:d1:2b:cb:ba:49:48:47:a6:50:2b:30:ee:6d: 3f:b8:3a:ac:2f:a9:e8:1c:17:a0:f9:b7:82:33:47: d3:07:db:fa:10:1d:7d:d9:18:95:4f:10:23:ec:aa: 4d:c4:43:16:14:84:4f:8f:a4:c3:0e:2f:f0:cf:21: 3f:0a:f9:1f:72:e6:fa:91:09:3d:53:56:f6:3f:88: ac:6c:9a:6f:7c:e9:aa:ac:45:39:29:d0:43:1a:26: 78:9e:74:93:2c:8c:8c:af:bc:ea:6c:44:e7:81:f7: d8:49:6f:ac:01:30:19:67:79:14:f1:fc:76:4a:1a: 03:9b:6b:5d:0a:5e:04:ee:b8:33:38:33:9d:d5:d5: 73:7c:29:33:ee:06:3a:0b:8c:57:96:fa:19:25:e3: 58:8d:95:78:83:4e:16:34:4a:40:80:ad:3f:6a:8c: 68:d4:a2:17:a6:39:52:73:4a:11:d9:56:e4:b5:1f: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:A3:08:F3:11:05:33:4B:CA:29:39:11:FA:F1:5C:67:33:D9:C5 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:51:9c:08:e8:99:e6:37:69:ce:9f:27:8b:de:39:80:34:b9: ea:44:4d:46:2e:4f:db:15:59:13:30:3e:04:a3:24:96:df:67: 25:43:09:51:b5:fa:41:fe:85:a3:14:52:ad:09:0d:6e:b3:a1: 1b:0d:7c:89:b1:74:a2:79:6c:f0:9a:99:c5:39:ad:7d:fa:f2: b8:44:29:96:fa:09:d4:9a:b9:dc:32:c2:4d:73:d7:72:be:b6: 99:ec:1a:31:96:38:25:c3:40:24:a9:b5:68:c2:5b:f0:22:8a: 8f:a3:a4:11:f6:70:5a:9d:cc:46:1e:3a:b6:dd:a5:d8:ab:7b: 7f:2c:62:5e:3b:2a:7a:bb:a6:fe:88:b3:a6:17:5f:bf:06:5f: 44:71:9f:f5:a3:7f:6f:54:02:2c:03:bd:a6:e9:35:a1:45:29: c1:d0:84:2a:e9:15:db:08:c6:3d:60:73:54:cd:88:80:42:1e: c6:9e:dd:fb:b7:a6:4a:91:55:58:ec:dd:11:12:89:fc:80:d5: 22:dd:2e:bc:65:12:00:93:34:ac:d3:80:c1:5f:91:72:15:77: 4a:87:bd:a4:b0:fa:8a:c9:a9:b8:bc:13:32:14:5b:35:f1:c9: 6e:91:84:87:5f:2a:05:d2:b9:0c:c1:ee:6b:5f:c4:36:b8:33: 2b:09:dd:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjQwNTAyMTc1ODUzWhcNMjQwNTA5MTc1ODUzWjAYMRYwFAYD VQQDEw02NjMzZDQ1ZC0wZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuoCLglqoMpNqNOsDAOgbIhF/EFA52IJ5SwEPZW+APTVXFLrWqrd1jIMZ37W kYV1w4po1YSkhUN1YdbtWzmZ71DFGMkDBQCz2EhDONEry7pJSEemUCsw7m0/uDqs L6noHBeg+beCM0fTB9v6EB192RiVTxAj7KpNxEMWFIRPj6TDDi/wzyE/Cvkfcub6 kQk9U1b2P4isbJpvfOmqrEU5KdBDGiZ4nnSTLIyMr7zqbETngffYSW+sATAZZ3kU 8fx2ShoDm2tdCl4E7rgzODOd1dVzfCkz7gY6C4xXlvoZJeNYjZV4g04WNEpAgK0/ aoxo1KIXpjlSc0oR2VbktR/rYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQMowjz EQUzS8opORH68VxnM9nFMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATUZwI6JnmN2nOnyeL3jmANLnqRE1GLk/bFVkTMD4EoySW32clQwlR tfpB/oWjFFKtCQ1us6EbDXyJsXSieWzwmpnFOa19+vK4RCmW+gnUmrncMsJNc9dy vraZ7Boxljglw0AkqbVowlvwIoqPo6QR9nBancxGHjq23aXYq3t/LGJeOyp6u6b+ iLOmF1+/Bl9EcZ/1o39vVAIsA72m6TWhRSnB0IQq6RXbCMY9YHNUzYiAQh7Gnt37 t6ZKkVVY7N0REon8gNUi3S68ZRIAkzSs04DBX5FyFXdKh72ksPqKyam4vBMyFFs1 8clukYSHXyoF0rkMwe5rX8Q2uDMrCd0d -----END CERTIFICATE-----Generated at Thu May 2 20:04:38 2024 by rpki-client on console-ams.rpki-client.org