$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json) Hash identifier: WxFaFLCMruecc33VMZ1KAU+5JSAtEEgWuX+R9yo6N0Y= Subject key identifier: 0A:5D:19:77:86:64:F6:16:96:BC:7F:39:66:46:A3:90:F9:F6:67:27 Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft Manifest number: 04F9 Signing time: Fri 22 Nov 2024 23:14:38 +0000 Manifest this update: Fri 22 Nov 2024 23:14:37 +0000 Manifest next update: Fri 29 Nov 2024 23:14:37 +0000 Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: hCBgbmbfl2Mpq8zxm9JObQ/jApJ8SNTmB/A2fVfC8+g=) 2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: q+L5tLTqjDOQUKLHpaKDvKoXYe9C7le5sZCMKuytaU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14 Validity Not Before: Nov 22 23:14:37 2024 GMT Not After : Nov 29 23:14:37 2024 GMT Subject: CN=6741105d-d1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:53:a4:8a:48:d3:b7:ee:8c:d5:b4:9b:27: 0a:01:73:17:2c:aa:d1:74:f8:95:44:e0:7f:a3:06: 4a:86:ab:e1:0b:67:ad:b5:7a:dc:e4:b1:31:81:18: 4d:b1:26:c3:d8:03:8c:56:6c:ed:83:be:50:8c:86: c9:c5:8b:7a:76:6a:de:41:47:58:64:54:9f:33:86: 0e:7b:44:5e:d9:ae:a6:81:46:8a:7a:d9:84:f7:90: 70:d7:50:08:1a:ba:a0:8d:85:ef:34:6e:0b:d4:15: fd:52:54:72:12:0b:b4:fc:10:ce:de:0c:8e:b8:82: dc:29:0f:04:3e:41:1b:e8:fe:ea:9b:2a:41:2f:70: 8b:28:b5:c0:94:0a:22:be:77:2f:7d:f9:b6:ef:5d: 57:46:8a:c3:38:03:57:83:63:80:db:17:ea:69:d0: 6a:69:30:bb:73:20:72:c2:a8:47:ee:e5:1f:ee:bb: 41:cd:3f:bc:72:2b:3f:c8:f8:75:21:43:d9:94:0a: b5:36:b4:95:84:93:d9:a2:0c:2c:e9:63:50:fc:dc: 98:e2:94:ff:cd:2f:d7:6d:30:21:26:74:75:ba:5e: e3:74:1a:0c:c3:b1:26:f8:1e:50:69:a1:0e:d3:41: 15:b5:ee:19:6a:6c:fb:4d:97:f1:72:6c:c8:c3:c6: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5D:19:77:86:64:F6:16:96:BC:7F:39:66:46:A3:90:F9:F6:67:27 X509v3 Authority Key Identifier: keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:52:bd:2c:a9:ce:ed:2d:e1:91:bf:bf:e0:7f:8e:21:03: fb:4e:7d:f4:f1:4d:99:16:41:46:80:7d:84:3f:cc:1a:d4:91: e4:ea:48:ea:ef:04:4e:fa:48:fa:90:9a:1d:7a:07:43:43:3c: b8:10:97:94:a3:41:71:a2:54:9a:fc:3f:4c:69:9a:87:55:8d: 35:48:4f:b5:19:4e:a6:16:4b:a3:62:3b:c0:8f:6b:e4:b1:3b: 9d:94:0e:30:f8:83:8f:7e:f1:61:27:43:41:da:59:12:4c:66: 5d:6d:51:a7:93:8f:bf:03:29:a8:45:f2:8b:a6:fc:62:dc:98: f0:51:14:da:cd:32:30:47:d6:07:77:6f:76:19:4c:5f:a2:d7: ef:f6:14:80:8a:06:2a:4d:f7:6b:8d:d5:33:35:21:3f:94:3d: fe:a0:87:79:b7:6f:c2:6a:1d:d0:01:d3:fe:7d:71:68:45:21: 76:fd:02:4e:5a:4f:be:56:59:ab:4b:86:15:b7:dc:a8:55:7b: 37:d8:9f:60:b4:3f:f2:ef:ff:2e:0e:3b:96:8b:58:9c:00:19: b9:6c:f6:02:c6:2c:a2:f6:cf:ac:13:70:12:b2:06:d4:07:c0: 7a:95:91:24:33:8b:6b:bb:51:91:d6:7a:bf:8c:8d:ad:34:75: 05:59:03:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA4ODgxMTAvBgNVBAUTKDk4MUE2RUIzODNBNzk2NTk1MTIwMURGQzcxQjJFQTBE NDQ5NjFCMTQwHhcNMjQxMTIyMjMxNDM3WhcNMjQxMTI5MjMxNDM3WjAYMRYwFAYD VQQDEw02NzQxMTA1ZC1kMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22VTpIpI07fujNW0mycKAXMXLKrRdPiVROB/owZKhqvhC2ettXrc5LExgRhN sSbD2AOMVmztg75QjIbJxYt6dmreQUdYZFSfM4YOe0Re2a6mgUaKetmE95Bw11AI GrqgjYXvNG4L1BX9UlRyEgu0/BDO3gyOuILcKQ8EPkEb6P7qmypBL3CLKLXAlAoi vncvffm2711XRorDOANXg2OA2xfqadBqaTC7cyBywqhH7uUf7rtBzT+8cis/yPh1 IUPZlAq1NrSVhJPZogws6WNQ/NyY4pT/zS/XbTAhJnR1ul7jdBoMw7Em+B5QaaEO 00EVte4Zamz7TZfxcmzIw8Yy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApdGXeG ZPYWlrx/OWZGo5D59mcnMB8GA1UdIwQYMBaAFJgabrODp5ZZUSAd/HGy6g1ElhsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDg4OC82QzhFM0FBNkVC MTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxsbFJJQjM4Y2JMcURVU1dH eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CcHVzNE9ubGxsUklCMzhjYkxxRFVTV0d4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDg4OC82QzhFM0FBNkVCMTQxMUVCQjJEN0RENjhDNEY5QUUwMi9tQnB1czRPbmxs bFJJQjM4Y2JMcURVU1dHeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvc1K9LKnO7S3hkb+/4H+OIQP7Tn308U2ZFkFGgH2EP8wa1JHk6kjq 7wRO+kj6kJodegdDQzy4EJeUo0FxolSa/D9MaZqHVY01SE+1GU6mFkujYjvAj2vk sTudlA4w+IOPfvFhJ0NB2lkSTGZdbVGnk4+/AymoRfKLpvxi3JjwURTazTIwR9YH d292GUxfotfv9hSAigYqTfdrjdUzNSE/lD3+oId5t2/Cah3QAdP+fXFoRSF2/QJO Wk++VlmrS4YVt9yoVXs32J9gtD/y7/8uDjuWi1icABm5bPYCxiyi9s+sE3ASsgbU B8B6lZEkM4tru1GR1nq/jI2tNHUFWQOq -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org