$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: dTzF6YJ0hPFdXQl36hcvxjIUHAEkFDhbTBZRRPaNefc= Subject key identifier: 97:E6:A8:EB:4A:A4:DA:00:19:F9:E9:99:B1:18:F5:19:2C:71:C5:55 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 098A Signing time: Fri 22 Nov 2024 19:51:10 +0000 Manifest this update: Fri 22 Nov 2024 19:51:10 +0000 Manifest next update: Fri 29 Nov 2024 19:51:10 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: u3uiEPsrHv+7Vx2cb/LAbYkAP5DtQxakAN5QCDigYLs=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 72pvQSlnT9rABWVd/v/7K5BYXphu+YLZZNPRawfEZ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2450 (0x992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Nov 22 19:51:10 2024 GMT Not After : Nov 29 19:51:10 2024 GMT Subject: CN=6740e0ae-67eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:27:21:5e:2a:57:8f:05:ed:af:50:8a:f8: 75:5a:0c:d3:cf:f7:72:71:37:3b:8b:2b:7f:0d:79: a1:3c:57:1e:a5:76:90:91:4c:32:91:e2:e3:ef:9e: 8d:1f:77:95:5a:1b:62:55:79:96:a7:fe:be:bf:e8: 32:a4:34:4d:36:b7:37:e1:d1:10:9d:2e:f1:bb:74: 71:24:62:16:bd:7b:e3:dd:ee:c3:47:9c:6b:e7:21: 10:fa:0d:b8:b7:e9:2a:be:91:d9:40:75:21:47:fc: 47:c5:b9:51:00:3b:c8:b7:96:da:e4:46:db:7e:fa: a1:0e:60:27:e2:56:f7:bd:5f:f8:b7:f5:bd:6d:6b: 40:b1:71:21:4a:63:09:94:94:36:37:a6:fa:0a:ef: 35:61:d7:f2:d7:37:3b:be:c9:bc:d4:98:18:d5:8d: 7c:b5:2c:00:2a:ca:e6:67:a3:da:8e:f2:5f:ec:5b: 8b:44:17:74:fd:8e:5b:01:bb:87:fa:28:a5:45:85: 58:ee:df:94:03:b7:2e:8f:41:a6:01:67:e1:df:9d: 31:c9:39:97:2d:a1:e2:b7:c1:d8:67:d8:41:5b:0a: 96:5e:7f:74:d6:32:be:ea:db:97:c5:64:00:4e:ab: 9e:43:5d:9e:53:57:47:55:50:63:44:47:98:ec:0d: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E6:A8:EB:4A:A4:DA:00:19:F9:E9:99:B1:18:F5:19:2C:71:C5:55 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:3d:bf:c4:b6:76:15:ab:1e:f6:48:fd:5d:5e:d3:ac:16:18: 3a:ae:ac:9d:69:dc:7f:99:c1:a1:46:58:89:09:8f:43:e7:09: 05:0d:0a:96:44:18:ae:18:de:34:eb:bc:e6:32:df:a0:fd:a2: 8b:e5:5d:8e:ea:fd:40:1a:f9:a9:c1:ab:b2:01:48:44:8f:55: 60:26:84:8a:58:95:94:de:7c:e1:51:e8:b7:c7:cb:2e:ff:60: a9:6a:c4:76:d6:88:dd:4b:e8:98:c1:e3:64:e9:3f:c9:14:6a: f9:f5:b6:4c:d3:b2:08:79:6b:f1:17:38:d1:fd:24:53:3b:a4: fe:df:21:7c:3e:fd:d1:4e:7b:be:62:00:59:ea:b4:ec:31:29: aa:4c:0e:b6:e6:bc:f1:16:7f:5d:02:6c:e8:a3:3c:9e:fd:77: 70:1b:a8:df:bd:3a:15:70:24:8d:76:d6:7c:08:34:a6:50:59: 7a:aa:a0:4c:0b:b0:31:ce:4d:d5:88:a2:87:dc:ef:18:ad:4f: f2:fc:c6:0a:36:e1:f4:8d:55:05:ac:96:31:62:b5:9e:75:f8: dc:d8:88:71:86:1b:de:3b:99:30:a8:f3:da:c8:70:8b:34:33: 70:3f:38:d4:4f:fb:67:db:90:88:ce:98:c3:94:54:92:60:3e: 1e:d4:f8:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjQxMTIyMTk1MTEwWhcNMjQxMTI5MTk1MTEwWjAYMRYwFAYD VQQDEw02NzQwZTBhZS02N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOonIV4qV48F7a9Qivh1WgzTz/dycTc7iyt/DXmhPFcepXaQkUwykeLj756N H3eVWhtiVXmWp/6+v+gypDRNNrc34dEQnS7xu3RxJGIWvXvj3e7DR5xr5yEQ+g24 t+kqvpHZQHUhR/xHxblRADvIt5ba5EbbfvqhDmAn4lb3vV/4t/W9bWtAsXEhSmMJ lJQ2N6b6Cu81Ydfy1zc7vsm81JgY1Y18tSwAKsrmZ6PajvJf7FuLRBd0/Y5bAbuH +iilRYVY7t+UA7cuj0GmAWfh350xyTmXLaHit8HYZ9hBWwqWXn901jK+6tuXxWQA TqueQ12eU1dHVVBjREeY7A2CtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfmqOtK pNoAGfnpmbEY9RksccVVMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJPb/EtnYVqx72SP1dXtOsFhg6rqydadx/mcGhRliJCY9D5wkFDQqW RBiuGN4067zmMt+g/aKL5V2O6v1AGvmpwauyAUhEj1VgJoSKWJWU3nzhUei3x8su /2CpasR21ojdS+iYweNk6T/JFGr59bZM07IIeWvxFzjR/SRTO6T+3yF8Pv3RTnu+ YgBZ6rTsMSmqTA625rzxFn9dAmzoozye/XdwG6jfvToVcCSNdtZ8CDSmUFl6qqBM C7Axzk3ViKKH3O8YrU/y/MYKNuH0jVUFrJYxYrWedfjc2IhxhhveO5kwqPPayHCL NDNwPzjUT/tn25CIzpjDlFSSYD4e1PiX -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org