$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json) Hash identifier: GF0iqEjhOiU+4Ss96cUBJpLHADmHT35v8np+p97eaP8= Subject key identifier: 72:4B:C1:6D:23:6A:D7:C9:FC:21:FA:CE:0F:D5:10:E4:04:3C:FE:87 Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft Manifest number: E5 Signing time: Sat 23 Nov 2024 03:36:21 +0000 Manifest this update: Sat 23 Nov 2024 03:36:21 +0000 Manifest next update: Sat 30 Nov 2024 03:36:21 +0000 Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: F1cIyjoPXqUmDl54dlVgXmZmEVEFpWKm2y2TSibqbWE=) 2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jVn5ZxyveGa/F3Z17pqMoq5Bfa+WnZz2iNW6T6RgwPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A Validity Not Before: Nov 23 03:36:21 2024 GMT Not After : Nov 30 03:36:21 2024 GMT Subject: CN=67414db5-95b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:82:40:63:ad:be:fc:91:b0:89:f1:d0:0f: 8a:18:cd:5b:4b:47:72:3b:cb:86:fd:82:34:8e:b4: 25:fe:af:89:73:16:5e:c9:3b:b4:09:19:fd:48:d8: d6:52:b2:07:d9:c7:f5:1e:92:04:64:fa:d1:ee:b5: 0a:14:f6:6e:dd:71:ad:4a:cb:64:26:12:86:df:0c: 3c:37:ad:57:50:6c:ff:0a:e5:0d:1e:df:57:51:6f: e1:9b:93:7c:86:30:10:c6:64:e0:ce:c6:99:48:d8: 81:59:74:87:95:b6:2f:21:58:b9:c5:60:75:fa:0f: 12:3b:5c:15:2c:7d:b0:ce:4a:b3:48:ff:2a:66:4d: 60:cd:a5:af:ec:2c:fa:b0:be:01:b7:f8:f2:22:86: 03:68:5c:a7:45:30:0f:c6:bb:b7:9b:49:3f:7b:9e: 0e:09:8f:6f:35:40:bc:3d:58:29:34:36:52:3f:cf: f0:4f:2e:cc:35:13:a5:1b:15:69:be:eb:3d:3d:5d: 8e:47:49:75:02:2c:22:23:24:dc:29:f3:ab:ff:81: 30:bb:de:2a:31:a8:be:90:88:90:35:9c:25:0d:2b: c0:be:3d:b6:3f:fb:6a:fe:4a:30:21:7c:47:cf:1b: 7b:6b:ee:43:2f:8c:91:8f:40:a9:11:d4:55:81:cb: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4B:C1:6D:23:6A:D7:C9:FC:21:FA:CE:0F:D5:10:E4:04:3C:FE:87 X509v3 Authority Key Identifier: keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:0a:d1:23:85:8b:f5:51:e4:0c:52:45:bb:2d:0d:c6:eb:68: ab:3b:d7:16:1e:d2:6f:50:7b:e3:4c:48:96:61:63:a4:59:54: 49:13:37:1e:70:c8:63:3e:1c:0f:d6:31:a9:24:35:0d:1a:6f: 3e:99:5e:28:b0:b7:73:d0:de:53:cc:c3:0b:44:9c:65:11:cf: f5:e4:1e:97:92:ac:e9:ad:ce:6b:55:25:9b:fa:07:0b:c1:8d: d9:24:91:60:02:17:2d:f5:45:5d:45:ef:cb:d3:24:a7:8e:56: 02:98:1e:d0:0d:42:e4:47:2c:59:b7:07:c1:1e:66:df:32:9b: f8:e9:01:06:8a:f1:d2:c1:c1:bb:f5:09:e5:03:ad:72:41:44: f4:24:92:2f:ba:fa:bd:18:92:d0:e8:46:b8:a3:55:11:de:19: be:07:a6:72:e1:72:de:a3:a1:d2:38:e9:af:5d:bf:8f:b3:19: d2:fe:8d:1d:64:14:31:92:45:bb:c1:02:9e:7f:48:05:a9:57: 81:6c:d2:c8:8c:a6:53:cd:4b:23:32:b3:5b:2e:d4:35:3e:8f: 26:20:c0:88:4c:d8:6b:e0:3d:71:d3:e0:0e:00:cb:0a:9a:81: 3b:71:2c:26:3a:52:b4:74:61:54:6f:00:78:b4:23:79:d4:57: ee:f8:d8:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OEUxMTAvBgNVBAUTKDZERjA5MzU2NjBCNTI0RDJBODA4MDY0MzY4QjBBRkM1 NjUzOEE2OUEwHhcNMjQxMTIzMDMzNjIxWhcNMjQxMTMwMDMzNjIxWjAYMRYwFAYD VQQDEw02NzQxNGRiNS05NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoOCQGOtvvyRsInx0A+KGM1bS0dyO8uG/YI0jrQl/q+JcxZeyTu0CRn9SNjW UrIH2cf1HpIEZPrR7rUKFPZu3XGtSstkJhKG3ww8N61XUGz/CuUNHt9XUW/hm5N8 hjAQxmTgzsaZSNiBWXSHlbYvIVi5xWB1+g8SO1wVLH2wzkqzSP8qZk1gzaWv7Cz6 sL4Bt/jyIoYDaFynRTAPxru3m0k/e54OCY9vNUC8PVgpNDZSP8/wTy7MNROlGxVp vus9PV2OR0l1AiwiIyTcKfOr/4Ewu94qMai+kIiQNZwlDSvAvj22P/tq/kowIXxH zxt7a+5DL4yRj0CpEdRVgctu5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJLwW0j atfJ/CH6zg/VEOQEPP6HMB8GA1UdIwQYMBaAFG3wk1ZgtSTSqAgGQ2iwr8VlOKaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc4RS9ENUFFN0ZBQzUz Q0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpOS29DQVpEYUxDdnhXVTRw cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi9iZkNUVm1DMUpO S29DQVpEYUxDdnhXVTRwcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1CtEjhYv1UeQMUkW7LQ3G62irO9cWHtJvUHvjTEiWYWOkWVRJEzce cMhjPhwP1jGpJDUNGm8+mV4osLdz0N5TzMMLRJxlEc/15B6Xkqzprc5rVSWb+gcL wY3ZJJFgAhct9UVdRe/L0ySnjlYCmB7QDULkRyxZtwfBHmbfMpv46QEGivHSwcG7 9QnlA61yQUT0JJIvuvq9GJLQ6Ea4o1UR3hm+B6Zy4XLeo6HSOOmvXb+PsxnS/o0d ZBQxkkW7wQKef0gFqVeBbNLIjKZTzUsjMrNbLtQ1Po8mIMCITNhr4D1x0+AOAMsK moE7cSwmOlK0dGFUbwB4tCN51Ffu+Ni+ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org