$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json) Hash identifier: SIxXbU639qyskvrxnOi/0muKNTRFxcO3VgfiGcs2DpY= Subject key identifier: E7:AD:CC:0E:67:45:B3:F4:3E:28:7A:AE:02:02:BC:51:CB:77:EB:2E Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft Manifest number: 027A Signing time: Sat 23 Nov 2024 01:11:00 +0000 Manifest this update: Sat 23 Nov 2024 01:11:00 +0000 Manifest next update: Sat 30 Nov 2024 01:11:00 +0000 Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: JIP2yYtU6vCZTCNkvWsgq2GJq+88DJAtRv0Lcxo/faQ=) 2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: mDMM1HWL4v8E6URAbVQH/swVIK5fppcG8TmZuHg6PMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42 Validity Not Before: Nov 23 01:11:00 2024 GMT Not After : Nov 30 01:11:00 2024 GMT Subject: CN=67412ba4-2532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:7a:be:2e:3e:68:cb:bc:c8:ac:92:8f:b7: cf:4d:45:4e:c2:04:43:8e:10:bc:98:8f:a2:ad:4a: 63:ac:c4:40:ad:c7:46:9b:78:33:97:41:d3:1f:c3: 1d:24:2d:77:ac:9f:c6:c1:25:da:96:5a:ca:93:aa: de:03:14:b8:53:99:f7:3f:27:0e:8b:90:82:49:ec: 8d:43:4e:89:31:26:74:ff:04:ce:88:a5:f4:81:5f: b7:59:bb:e1:7a:59:33:19:d0:67:59:e2:b4:9e:b0: e3:0a:ea:29:a1:1a:d3:b8:6a:90:e1:ab:8c:68:10: b9:5a:12:9f:77:e7:3c:03:96:89:ab:60:34:19:e8: 73:bf:a4:58:c9:f7:96:16:f3:27:bb:e6:10:68:fd: 63:b4:d2:6e:3d:0d:68:d6:95:77:98:f5:19:a9:b5: 6b:d6:03:6f:4e:0b:17:8f:27:02:a8:dc:58:55:c5: a4:ec:21:c1:cc:36:41:a8:bc:c8:a6:9f:01:b7:72: 20:0b:12:48:f2:2a:3e:ee:6c:8e:42:e1:f3:f4:a3: 78:61:16:bb:85:62:9e:fd:75:15:ee:9b:23:1e:22: 9d:12:96:df:77:7f:5d:9b:ba:93:63:e5:14:c1:22: 18:19:1e:02:9a:dd:ba:df:67:3d:e7:7d:37:b0:e6: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:CC:0E:67:45:B3:F4:3E:28:7A:AE:02:02:BC:51:CB:77:EB:2E X509v3 Authority Key Identifier: keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3b:62:4e:c9:b4:45:d5:b0:7e:e7:86:c5:55:0a:f9:3c:7e: d4:13:3a:1d:7a:11:87:e6:f6:c1:c9:46:0e:7e:21:7d:a9:b2: 5f:e9:36:c4:57:da:fd:e9:5f:fa:a4:14:37:49:57:c2:dc:0c: a8:55:b9:ee:c1:5f:03:22:a4:6f:40:8c:f8:83:c0:5a:da:d5: 09:41:bb:41:8a:0d:65:e9:69:cc:29:2d:d9:5f:14:e2:03:08: 23:23:72:25:b1:b2:07:66:05:2a:61:0a:4f:b3:2f:3d:d5:77: f1:d8:2b:b8:c1:fa:27:64:21:75:8e:66:f2:7e:2f:74:16:65: f3:46:46:88:90:2f:75:fb:db:5f:c2:fb:b5:e3:8a:38:58:d1: 26:ff:f5:bb:84:5d:26:72:d2:02:28:22:61:c8:8b:a5:b0:8d: eb:b6:f5:71:20:3f:3f:fd:bc:38:2f:28:6d:4d:58:64:ba:d5: 24:18:50:1d:ae:29:38:df:b1:db:d1:67:00:45:8b:77:9c:82: 7f:a3:a8:7c:df:3c:56:62:5d:47:ec:10:91:74:83:d6:78:3e: 26:25:c1:47:5b:30:8c:19:70:ba:0e:a6:02:7a:a7:53:f2:72: c8:51:b0:18:f4:ae:f5:ed:76:55:36:fc:de:0a:ce:80:45:20: fb:e3:68:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3 MUE1QTRFNDIwHhcNMjQxMTIzMDExMTAwWhcNMjQxMTMwMDExMTAwWjAYMRYwFAYD VQQDEw02NzQxMmJhNC0yNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8d6vi4+aMu8yKySj7fPTUVOwgRDjhC8mI+irUpjrMRArcdGm3gzl0HTH8Md JC13rJ/GwSXallrKk6reAxS4U5n3PycOi5CCSeyNQ06JMSZ0/wTOiKX0gV+3Wbvh elkzGdBnWeK0nrDjCuopoRrTuGqQ4auMaBC5WhKfd+c8A5aJq2A0Gehzv6RYyfeW FvMnu+YQaP1jtNJuPQ1o1pV3mPUZqbVr1gNvTgsXjycCqNxYVcWk7CHBzDZBqLzI pp8Bt3IgCxJI8io+7myOQuHz9KN4YRa7hWKe/XUV7psjHiKdEpbfd39dm7qTY+UU wSIYGR4Cmt2632c95303sOawLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOetzA5n RbP0Pih6rgICvFHLd+suMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3 MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001 dURiU2ozQUJnQzl4cGFUa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7O2JOybRF1bB+54bFVQr5PH7UEzodehGH5vbByUYOfiF9qbJf6TbE V9r96V/6pBQ3SVfC3AyoVbnuwV8DIqRvQIz4g8Ba2tUJQbtBig1l6WnMKS3ZXxTi AwgjI3IlsbIHZgUqYQpPsy891Xfx2Cu4wfonZCF1jmbyfi90FmXzRkaIkC91+9tf wvu144o4WNEm//W7hF0mctICKCJhyIulsI3rtvVxID8//bw4LyhtTVhkutUkGFAd rik437Hb0WcARYt3nIJ/o6h83zxWYl1H7BCRdIPWeD4mJcFHWzCMGXC6DqYCeqdT 8nLIUbAY9K717XZVNvzeCs6ARSD742ig -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org