$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: /5bBO/FAMrFmBlDxc1wRi2+C3W8hFOf8/KZEbTkisBM= Subject key identifier: C4:B5:A6:E8:EE:C8:B6:B5:54:1B:DC:87:24:34:F1:1E:24:67:6B:32 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 40 Signing time: Sat 23 Nov 2024 05:40:23 +0000 Manifest this update: Sat 23 Nov 2024 05:40:23 +0000 Manifest next update: Sat 30 Nov 2024 05:40:23 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: zXY+gA3IWw9X+ayNgdfqe6adC4FMZaMPZqCX9E3R3UY=) 2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: qYV17AXikuAeSaxzOZCrVgywXIZlnGlFYy0FKcc5TD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Nov 23 05:40:23 2024 GMT Not After : Nov 30 05:40:23 2024 GMT Subject: CN=67416ac7-dcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:89:d9:99:71:7e:ea:db:d3:2e:9e:c3:74:de: 8e:63:9f:a6:18:a6:a7:a2:1b:5d:0a:27:4a:32:ce: e0:e1:2b:82:95:ca:d5:9a:e1:5a:36:58:b3:5a:b5: 16:48:96:c7:6d:82:74:f9:e1:6a:bb:82:55:7e:cd: bb:70:36:a7:6c:23:cf:d7:bc:3b:e6:d0:52:3f:7f: 8f:fe:1d:d8:c4:fb:d4:e4:f3:0f:3d:12:34:18:df: d3:09:8a:c6:6f:91:62:d5:2b:fe:2d:32:09:35:2e: c1:8b:2d:72:64:5e:ee:f1:c4:e4:db:d5:67:5f:f2: a6:5b:a2:11:99:5f:3a:6f:50:bb:75:06:70:f2:ab: 35:c9:a7:05:8b:b3:9c:d3:af:de:e8:59:17:43:b5: 82:30:0f:e8:62:c7:c9:f5:2f:82:44:c0:19:2f:b3: b4:4d:a4:dd:e4:0c:3f:1c:12:4b:33:a4:d4:e9:0c: 79:10:63:57:a9:e7:e3:da:2e:ef:3a:c6:42:09:f4: bc:e7:6d:44:92:4f:fb:a9:2b:a3:38:e2:da:bf:47: b9:5a:47:d7:6d:eb:08:73:84:13:ec:c0:86:d6:9e: 51:d9:96:7a:d7:78:d3:9b:de:fb:69:2f:e4:ae:11: ac:8f:a8:95:d6:46:17:84:4f:5b:e8:45:d5:50:44: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:A6:E8:EE:C8:B6:B5:54:1B:DC:87:24:34:F1:1E:24:67:6B:32 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:78:d4:1a:e5:f4:cd:2a:87:f2:ff:49:6a:0b:c2:b1:0e:f1: 33:ac:be:48:6e:84:9a:90:24:29:57:ec:f1:c0:b1:a7:55:a5: 6b:50:4f:7b:46:fd:cd:af:19:92:b6:1b:6a:44:ba:05:c1:d4: e3:36:33:72:78:d7:e0:b1:96:e8:2f:a3:73:8c:f5:5f:ab:8d: c6:7b:56:f8:02:3c:14:c4:33:00:16:1a:41:60:18:7e:fc:26: 81:43:c1:4f:87:8f:e6:ce:b3:6e:75:98:6e:84:66:b9:23:c4: 7f:e0:d5:de:12:13:14:76:88:b3:20:60:85:6f:de:b6:62:1e: 74:e3:f5:f3:85:b3:a6:e4:af:e2:c8:9f:7c:c3:7b:11:68:80: 52:8b:dc:cf:96:b5:91:0b:41:c0:e4:da:6f:d8:86:e5:94:ed: cd:97:a4:8a:8a:15:3d:a8:f1:bf:03:06:6c:3f:a4:31:5c:b5: 89:20:0f:8c:41:79:c0:e1:ae:bf:23:f3:c2:23:1d:29:be:07: 73:c8:d9:fa:32:d5:da:04:2f:24:fa:bd:40:a0:fe:62:b1:fd: 58:7f:a1:43:0e:2f:0e:71:bc:65:01:c0:76:d3:f7:27:e1:14: f2:02:aa:ae:e3:34:3a:d6:17:1a:34:c6:70:59:d5:3c:8e:9a: 10:a8:11:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkM4RjExMC8GA1UEBRMoMDU3Mzk1QjQ4NzhGQjFBNjdGQ0JBRDU4MjYxN0I3QkFB RjJDMzFGRjAeFw0yNDExMjMwNTQwMjNaFw0yNDExMzAwNTQwMjNaMBgxFjAUBgNV BAMTDTY3NDE2YWM3LWRjYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxidmZcX7q29MunsN03o5jn6YYpqeiG10KJ0oyzuDhK4KVytWa4Vo2WLNatRZI lsdtgnT54Wq7glV+zbtwNqdsI8/XvDvm0FI/f4/+HdjE+9Tk8w89EjQY39MJisZv kWLVK/4tMgk1LsGLLXJkXu7xxOTb1Wdf8qZbohGZXzpvULt1BnDyqzXJpwWLs5zT r97oWRdDtYIwD+hix8n1L4JEwBkvs7RNpN3kDD8cEkszpNTpDHkQY1ep5+PaLu86 xkIJ9LznbUSST/upK6M44tq/R7laR9dt6whzhBPswIbWnlHZlnrXeNOb3vtpL+Su EayPqJXWRheET1voRdVQRNYnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxLWm6O7I trVUG9yHJDTxHiRnazIwHwYDVR0jBBgwFoAUBXOVtIePsaZ/y61YJhe3uq8sMf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2QzhGL0ZBMEUwNUE0NkI1 QTExRUZCQzk5OTI1Q0M0RjlBRTAyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01m OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlhPVnRJZVBzYVpfeTYxWUpoZTN1cThzTWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 QzhGL0ZBMEUwNUE0NkI1QTExRUZCQzk5OTI1Q0M0RjlBRTAyL0JYT1Z0SWVQc2Fa X3k2MVlKaGUzdXE4c01mOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFd41Brl9M0qh/L/SWoLwrEO8TOsvkhuhJqQJClX7PHAsadVpWtQT3tG /c2vGZK2G2pEugXB1OM2M3J41+Cxlugvo3OM9V+rjcZ7VvgCPBTEMwAWGkFgGH78 JoFDwU+Hj+bOs251mG6EZrkjxH/g1d4SExR2iLMgYIVv3rZiHnTj9fOFs6bkr+LI n3zDexFogFKL3M+WtZELQcDk2m/YhuWU7c2XpIqKFT2o8b8DBmw/pDFctYkgD4xB ecDhrr8j88IjHSm+B3PI2foy1doELyT6vUCg/mKx/Vh/oUMOLw5xvGUBwHbT9yfh FPICqq7jNDrWFxo0xnBZ1TyOmhCoEUA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org