$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json) Hash identifier: Rs+g306xVtzceQggfQwmKIMkw8ZZwUolavXErO0+5eI= Subject key identifier: 9F:D7:54:36:FF:F7:B8:4C:5C:EB:86:77:43:35:89:84:A9:8D:C7:3D Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft Manifest number: 05BD Signing time: Fri 22 Nov 2024 22:42:01 +0000 Manifest this update: Fri 22 Nov 2024 22:42:01 +0000 Manifest next update: Fri 29 Nov 2024 22:42:01 +0000 Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: xNe/ag3uz9Rr/T1OKqSnGeI25/3mnhXZgSWpygey/cM=) 2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: TgPklgLkA3xdg2IBb89UQztEAT8+HE02bwjfwGq7aRA=) 3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: ZNMqu5n7q8yqgioaOoz8FWOCKn32okK52a+TXFMlmIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: Nov 22 22:42:01 2024 GMT Not After : Nov 29 22:42:01 2024 GMT Subject: CN=674108b9-6d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:9a:56:9d:cb:ea:58:a4:18:f4:c1:95:91: 7f:81:0e:1a:eb:4d:12:ee:ab:e7:25:4e:f5:60:d5: 44:17:81:98:4f:d5:31:e8:97:03:e6:f6:24:d2:fd: 6a:51:1e:f6:b7:dd:13:ed:7d:25:24:40:a4:ec:d4: 76:94:60:11:0d:fd:02:cb:ff:f1:45:fb:2a:d8:e8: b2:99:0a:f3:65:7a:4e:dc:3f:c2:0d:e8:5d:b4:1e: 83:73:e5:55:0b:68:69:24:52:63:54:59:d4:15:40: f9:49:8b:85:5a:bb:47:c2:42:62:66:c4:b1:bd:e4: 21:0b:49:9b:31:0e:a3:72:10:aa:6b:d5:62:c3:73: 79:6f:09:a1:4e:4e:30:7f:76:85:9f:d2:e4:7b:23: c3:72:d2:ce:13:39:6b:b5:ec:3c:84:29:b8:8b:27: 7f:fb:21:45:69:9d:98:d5:09:10:50:c7:47:81:f0: aa:c4:1c:f2:1d:87:79:d1:9e:9b:c4:6c:6d:5c:2b: bc:dc:84:95:12:16:f4:d8:aa:ca:a8:e7:20:d6:5a: 81:f9:47:2c:96:ba:c1:45:f4:ea:13:0d:f0:2f:61: a9:e5:89:3e:29:e3:29:ce:af:30:87:1e:aa:97:29: c8:28:8f:02:10:e9:2e:7a:bb:f0:09:15:21:3f:4f: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D7:54:36:FF:F7:B8:4C:5C:EB:86:77:43:35:89:84:A9:8D:C7:3D X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f6:33:1e:4b:f7:4a:74:5b:b3:43:a9:ef:7e:13:e2:33:c0: 59:bb:ff:ec:8b:1d:16:5b:66:78:a2:67:f0:4b:6f:a0:65:b4: 67:40:53:bb:ea:9b:2d:a1:a9:06:a6:de:30:bb:64:d0:2b:2e: 1e:df:57:76:fc:60:a7:9f:13:83:19:86:82:e8:d9:11:0d:ea: 1a:65:7b:a8:8e:71:eb:2d:90:9c:ef:fb:a4:4c:31:e7:e3:49: 0a:45:da:f9:d6:fb:c1:80:fb:54:33:67:16:47:4f:6e:86:27: ae:fb:30:b1:55:0a:c4:fd:9f:26:15:80:ee:ce:39:14:80:12: cb:23:8f:d1:eb:e9:44:c8:30:5a:76:dd:2f:ff:1a:f7:02:a4: 65:cb:fb:88:11:d3:66:1f:a5:77:e9:4b:1d:32:e8:d9:7a:dc: 06:88:7a:9f:da:6f:14:82:e9:9b:d0:b2:46:23:05:28:de:e0: d9:4d:b8:86:90:c1:bd:0d:64:50:08:42:5b:c5:5d:8d:36:cf: 63:7b:a2:fe:6c:7d:f7:4d:9a:c1:b2:3a:5f:1b:ba:72:db:52: 57:90:cf:e3:93:77:ac:33:31:3b:19:73:72:b0:7f:9d:2c:87: 4b:c7:44:07:6d:8b:d4:6c:f5:69:ff:90:11:61:a1:6f:5f:f2: 06:ff:8e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjQxMTIyMjI0MjAxWhcNMjQxMTI5MjI0MjAxWjAYMRYwFAYD VQQDEw02NzQxMDhiOS02ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqiaVp3L6likGPTBlZF/gQ4a600S7qvnJU71YNVEF4GYT9Ux6JcD5vYk0v1q UR72t90T7X0lJECk7NR2lGARDf0Cy//xRfsq2OiymQrzZXpO3D/CDehdtB6Dc+VV C2hpJFJjVFnUFUD5SYuFWrtHwkJiZsSxveQhC0mbMQ6jchCqa9Viw3N5bwmhTk4w f3aFn9LkeyPDctLOEzlrtew8hCm4iyd/+yFFaZ2Y1QkQUMdHgfCqxBzyHYd50Z6b xGxtXCu83ISVEhb02KrKqOcg1lqB+UcslrrBRfTqEw3wL2Gp5Yk+KeMpzq8whx6q lynIKI8CEOkuervwCRUhP0+zCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/XVDb/ 97hMXOuGd0M1iYSpjcc9MB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9jMeS/dKdFuzQ6nvfhPiM8BZu//six0WW2Z4omfwS2+gZbRnQFO7 6pstoakGpt4wu2TQKy4e31d2/GCnnxODGYaC6NkRDeoaZXuojnHrLZCc7/ukTDHn 40kKRdr51vvBgPtUM2cWR09uhieu+zCxVQrE/Z8mFYDuzjkUgBLLI4/R6+lEyDBa dt0v/xr3AqRly/uIEdNmH6V36UsdMujZetwGiHqf2m8Ugumb0LJGIwUo3uDZTbiG kMG9DWRQCEJbxV2NNs9je6L+bH33TZrBsjpfG7py21JXkM/jk3esMzE7GXNysH+d LIdLx0QHbYvUbPVp/5ARYaFvX/IG/46x -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org