$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json) Hash identifier: nJV7c7Dk0aZpYASeX5BsBtZ5I1YAgzQ3Pxrcnqnzf0A= Subject key identifier: 0C:D0:EA:F0:9D:23:E9:B6:41:A5:DF:7D:68:D6:C4:A3:90:DD:D7:29 Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Certificate serial: 125D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft Manifest number: 1252 Signing time: Fri 22 Nov 2024 17:07:13 +0000 Manifest this update: Fri 22 Nov 2024 17:07:13 +0000 Manifest next update: Fri 29 Nov 2024 17:07:13 +0000 Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: grrMLnl2eRQRqJXFmcfVdz7/nFo8xyq5F0SlMKVxl98=) 2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: zhAB02c7MO6g0ZjU60Q0NOMxZrMu/KXiBvCTRD/ktbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Validity Not Before: Nov 22 17:07:13 2024 GMT Not After : Nov 29 17:07:13 2024 GMT Subject: CN=6740ba41-3dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:88:22:88:36:12:00:cc:9b:8e:9d:92:10: c0:65:0e:8e:60:bf:27:8e:be:b7:6d:33:c5:c9:e3: 68:d3:7d:05:db:11:2c:b2:43:5f:70:4a:ac:93:d4: 2f:61:31:79:6f:de:3e:a4:e2:e4:06:fc:8e:4e:ee: 49:1d:70:a5:16:01:2a:a4:f2:1a:2f:0d:47:5e:de: 6d:c7:cd:3b:2b:46:0f:41:91:3e:d3:8a:4b:e0:3c: 43:ab:c5:d9:e8:3d:b7:d5:45:a0:a2:08:05:f0:52: d6:f3:00:54:30:4f:84:36:12:d6:26:4d:d7:dd:b1: a6:df:10:b3:a4:d5:42:7f:cf:ac:33:9f:74:64:41: d1:a6:3a:1e:c5:20:21:b7:8c:a8:16:e1:95:d9:2f: 5f:3b:13:a3:dc:5e:56:b4:b8:e8:2b:af:6c:4a:cb: 45:eb:33:61:8b:6a:9d:4d:91:57:58:a3:be:fe:44: 32:92:83:cb:34:c9:6f:09:ac:45:df:8f:2e:ba:93: 46:02:b4:80:d9:84:13:aa:27:a3:92:fd:78:39:a7: dd:db:0d:8e:51:2a:2e:95:19:8d:52:9d:4b:fe:6c: 75:5f:3e:d0:12:cf:33:f0:3a:b3:87:8d:d0:87:be: bb:1b:dc:32:68:79:80:b1:0e:2d:50:b9:68:59:51: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D0:EA:F0:9D:23:E9:B6:41:A5:DF:7D:68:D6:C4:A3:90:DD:D7:29 X509v3 Authority Key Identifier: keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ac:75:36:55:ab:f7:9a:41:96:a2:ca:01:00:9e:9c:61:87: 1d:ca:fc:0a:25:0a:4e:63:d5:26:48:9c:59:45:97:68:6e:2b: da:bf:35:a7:84:95:c4:2d:02:1f:2f:a0:36:3a:56:42:41:69: 54:67:4d:64:98:9a:93:33:4a:ca:c0:46:96:f4:7a:99:3d:dc: 0e:ee:1c:26:13:49:39:14:21:b4:39:f4:47:e1:3f:6a:a5:e7: 8a:39:c8:4d:45:a7:5e:d2:d7:a4:74:7e:76:12:2c:53:21:2c: ef:b1:f5:9b:1f:e4:45:f2:87:bf:fa:07:73:ed:4b:77:2f:da: f2:ed:b2:41:2e:46:32:de:a8:8f:c8:3b:9d:1b:0a:ce:b1:08: 73:39:82:20:05:91:78:d2:72:0c:a1:3c:f4:3e:7b:21:8f:c7: 3b:04:77:b3:f9:eb:a3:f5:76:7c:53:78:9a:e4:a8:56:11:a7: 68:49:0b:38:7b:3a:c1:ee:54:52:1c:4a:b0:8c:0d:d0:77:ca: d3:4a:52:a6:e3:f8:54:a3:ff:5b:78:c0:9a:e0:2d:73:1a:a9: 7a:35:24:97:e7:e7:6b:fb:33:d5:0f:34:7f:21:95:6d:63:38: 8c:d4:74:41:b2:4d:a4:d2:49:b0:ba:b4:8d:cd:b0:cb:00:29: 36:aa:7a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy QUI4NUJFOTQwHhcNMjQxMTIyMTcwNzEzWhcNMjQxMTI5MTcwNzEzWjAYMRYwFAYD VQQDEw02NzQwYmE0MS0zZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZSIIog2EgDMm46dkhDAZQ6OYL8njr63bTPFyeNo030F2xEsskNfcEqsk9Qv YTF5b94+pOLkBvyOTu5JHXClFgEqpPIaLw1HXt5tx807K0YPQZE+04pL4DxDq8XZ 6D231UWgoggF8FLW8wBUME+ENhLWJk3X3bGm3xCzpNVCf8+sM590ZEHRpjoexSAh t4yoFuGV2S9fOxOj3F5WtLjoK69sSstF6zNhi2qdTZFXWKO+/kQykoPLNMlvCaxF 348uupNGArSA2YQTqiejkv14Oafd2w2OUSoulRmNUp1L/mx1Xz7QEs8z8Dqzh43Q h767G9wyaHmAsQ4tULloWVFA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzQ6vCd I+m2QaXffWjWxKOQ3dcpMB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBEMS9DQzc4MzBCMEMzMDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6 RHAzd1NjVlBPVmdxdUZ2cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBurHU2Vav3mkGWosoBAJ6cYYcdyvwKJQpOY9UmSJxZRZdobivavzWn hJXELQIfL6A2OlZCQWlUZ01kmJqTM0rKwEaW9HqZPdwO7hwmE0k5FCG0OfRH4T9q peeKOchNRade0tekdH52EixTISzvsfWbH+RF8oe/+gdz7Ut3L9ry7bJBLkYy3qiP yDudGwrOsQhzOYIgBZF40nIMoTz0Pnshj8c7BHez+euj9XZ8U3ia5KhWEadoSQs4 ezrB7lRSHEqwjA3Qd8rTSlKm4/hUo/9beMCa4C1zGql6NSSX5+dr+zPVDzR/IZVt YziM1HRBsk2k0kmwurSNzbDLACk2qnqy -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org