$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json) Hash identifier: f+x3MohrD1deE1EIkJy3tcHF8VKpfzoBeh1VhOrecns= Subject key identifier: A1:F0:DF:19:E5:8D:CF:1A:AB:A3:C2:C2:63:C4:0C:BD:A6:CB:80:36 Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft Manifest number: CD Signing time: Sat 23 Nov 2024 03:51:27 +0000 Manifest this update: Sat 23 Nov 2024 03:51:27 +0000 Manifest next update: Sat 30 Nov 2024 03:51:27 +0000 Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: Fnbje5oIrFe7wXYppoDRDOn0PpKSzneDvxJ52xu67dw=) 2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 1J6SBhKfyTeug2CS1rB/AAJ6IDeL/Dzh4xQR/iFRSiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: Nov 23 03:51:27 2024 GMT Not After : Nov 30 03:51:27 2024 GMT Subject: CN=6741513f-ad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:24:3d:6e:c7:67:1f:fc:4b:3e:f4:b2:19: 88:1e:0e:30:58:9c:80:92:cb:e1:d1:14:e1:87:08: 07:c4:f5:c4:01:4b:ce:07:ea:c9:60:c6:07:c0:e6: 60:e7:d4:78:a0:59:65:e7:a7:85:a9:2a:18:0a:35: 35:ff:05:73:37:af:05:19:2c:db:ed:a8:a5:7d:57: 78:70:e4:f4:07:b4:ea:22:45:ed:96:0e:82:61:2f: 1c:cb:22:b1:12:8a:9e:b0:b8:1f:ac:0c:cb:29:6e: 9e:4b:72:de:86:71:b1:6e:59:4a:d2:56:d5:1c:57: 3c:df:0a:e0:3d:e2:ef:34:ec:e9:9f:3e:99:b2:f2: 02:11:00:ae:86:67:03:6d:11:e5:f3:7d:6e:3b:8e: 58:1a:7d:e1:f0:97:31:04:71:fc:6b:7e:e1:3c:44: 2c:26:30:0d:1b:fc:a0:4a:c0:a5:0a:45:59:39:c4: c5:90:51:47:fc:6b:1c:b0:29:a5:47:c1:41:26:8c: 71:07:9b:2b:1b:12:f5:f2:28:45:99:49:7b:6c:10: e1:2a:58:43:40:88:d8:26:f9:53:51:8b:34:2e:b5: b8:68:17:33:d2:09:5a:69:5f:35:7e:c7:c9:4c:8d: 6b:c3:26:c4:d0:94:f2:3f:d2:c7:a3:58:15:75:39: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:DF:19:E5:8D:CF:1A:AB:A3:C2:C2:63:C4:0C:BD:A6:CB:80:36 X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:52:f1:cb:cd:bd:d5:21:bd:4c:ab:54:a0:8c:a5:be:58: 28:35:cd:9a:3b:1e:62:3a:6b:91:10:c8:4e:6a:51:5f:d3:23: 2b:ef:07:b6:98:8a:81:a6:59:87:37:5c:28:70:5a:4a:d2:8d: 39:c8:a2:45:94:77:ba:4a:b3:79:a0:d6:91:89:1d:14:6f:37: c6:44:11:21:18:39:e9:31:be:6a:66:29:bd:b4:ee:e6:a7:8c: 20:6d:13:e7:0c:4c:53:68:df:a9:64:39:2b:d7:b1:ba:a5:63: df:47:cb:ad:b7:45:9f:2a:12:d5:59:44:db:68:b1:ac:01:d4: 23:27:05:b7:c1:e8:b2:d8:6f:6b:88:6a:53:56:db:60:ae:02: 21:d6:9a:f5:5e:4f:3d:75:9f:da:7b:d9:2f:49:b1:a5:71:9b: bb:52:00:6d:bb:de:d9:98:9c:af:a3:6b:7d:cf:c9:4e:53:d3: 7f:ee:78:ea:26:41:17:91:01:73:c2:86:80:74:02:aa:e1:77: 10:ef:7b:47:02:c7:99:38:01:a0:32:8b:de:cb:f5:8e:b1:e4: 52:d6:13:9a:d9:02:3e:9d:aa:cc:54:3c:7c:41:78:44:a5:bb: 09:c8:76:9f:28:fe:67:2a:65:b7:8b:22:8d:1c:91:30:d6:bb: 64:f8:2f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw RkVCN0NBNDQwHhcNMjQxMTIzMDM1MTI3WhcNMjQxMTMwMDM1MTI3WjAYMRYwFAYD VQQDEw02NzQxNTEzZi1hZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi4kPW7HZx/8Sz70shmIHg4wWJyAksvh0RThhwgHxPXEAUvOB+rJYMYHwOZg 59R4oFll56eFqSoYCjU1/wVzN68FGSzb7ailfVd4cOT0B7TqIkXtlg6CYS8cyyKx EoqesLgfrAzLKW6eS3LehnGxbllK0lbVHFc83wrgPeLvNOzpnz6ZsvICEQCuhmcD bRHl831uO45YGn3h8JcxBHH8a37hPEQsJjANG/ygSsClCkVZOcTFkFFH/GscsCml R8FBJoxxB5srGxL18ihFmUl7bBDhKlhDQIjYJvlTUYs0LrW4aBcz0glaaV81fsfJ TI1rwybE0JTyP9LHo1gVdTmmswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHw3xnl jc8aq6PCwmPEDL2my4A2MB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDJFMy80RjQxNzlBNDczQzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJP eVNSM2Roa3ltY0VQNjN5a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHiFLxy8291SG9TKtUoIylvlgoNc2aOx5iOmuREMhOalFf0yMr7we2 mIqBplmHN1wocFpK0o05yKJFlHe6SrN5oNaRiR0UbzfGRBEhGDnpMb5qZim9tO7m p4wgbRPnDExTaN+pZDkr17G6pWPfR8utt0WfKhLVWUTbaLGsAdQjJwW3weiy2G9r iGpTVttgrgIh1pr1Xk89dZ/ae9kvSbGlcZu7UgBtu97ZmJyvo2t9z8lOU9N/7njq JkEXkQFzwoaAdAKq4XcQ73tHAseZOAGgMovey/WOseRS1hOa2QI+narMVDx8QXhE pbsJyHafKP5nKmW3iyKNHJEw1rtk+C8+ -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org