$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: Otiv9qEAyzotxz4nkTo/lcY9WYJKmbx8zcitT9Grn/A= Subject key identifier: 40:7C:68:35:B4:41:4D:4D:E6:40:7E:90:E3:72:28:CF:1D:89:47:F7 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: 50 Signing time: Thu 21 Nov 2024 05:17:19 +0000 Manifest this update: Thu 21 Nov 2024 05:17:19 +0000 Manifest next update: Thu 28 Nov 2024 05:17:19 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: pH/vYjlUgq5arb3gH4LWY7JWA86SoKvnuiSEYL7Tx04=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Nov 21 05:17:19 2024 GMT Not After : Nov 28 05:17:19 2024 GMT Subject: CN=673ec25f-6dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:a2:32:b4:85:ce:09:8d:cf:5e:12:ad:9c: 17:ed:ae:f8:b7:4f:8d:ca:98:fe:66:a8:54:0b:33: 77:58:a7:ce:14:fd:68:b9:11:a4:37:6c:44:75:90: 09:5c:92:3f:3a:87:5d:8b:c2:31:41:c4:5d:6b:cc: 74:48:e7:b2:5f:1d:66:1e:38:fd:ac:b1:30:f7:f4: 6c:04:e5:aa:bd:db:38:d2:03:6a:4c:ac:36:68:04: 22:73:9b:63:35:d8:82:2a:72:3a:04:d0:b8:67:28: 8b:c9:41:4d:c4:42:f4:1e:b5:e5:51:e9:db:5c:40: 06:32:17:5b:64:98:22:8b:1c:07:5d:10:21:ba:ed: 6f:ed:d6:a2:90:86:1f:05:2d:de:a4:c3:4f:c2:dd: 5b:22:7d:0d:0a:6e:e6:94:1a:a3:ea:47:9e:02:e5: 52:74:94:fa:18:1c:db:e6:c0:35:9b:31:be:60:19: 53:78:4b:aa:22:8d:d4:24:3a:8b:d7:07:77:4c:85: aa:12:f6:dd:75:59:d6:e3:bd:4a:20:90:29:bd:43: 1f:9c:1e:eb:a5:b8:ce:d4:8a:5f:fc:05:20:d1:82: d1:fe:df:f3:94:72:c3:c6:e2:07:a7:0c:81:14:7a: f4:89:3a:2b:d9:0f:dc:05:68:2b:f0:cb:8c:21:56: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:68:35:B4:41:4D:4D:E6:40:7E:90:E3:72:28:CF:1D:89:47:F7 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8c:2a:30:f9:a1:e0:c3:9c:dc:c8:c3:fa:ae:6b:20:d6:96: 8d:d3:e6:9f:0c:b1:f5:54:83:dd:9f:bd:2f:e7:86:f3:e2:06: 20:28:af:e8:20:c4:12:05:96:6a:fa:ed:ce:de:46:44:7d:de: b0:ea:fc:8a:47:56:f0:0b:66:0a:1e:54:f0:5e:df:40:25:3b: 6d:3d:7c:b2:9d:43:92:e8:ae:e6:66:18:7a:c2:56:b9:e2:a6: d5:e7:05:f1:78:4d:25:24:2c:3c:9d:79:62:2e:42:ee:dd:8f: ba:5d:9d:71:ae:c6:13:8b:47:98:81:9c:4b:5a:a2:ed:d5:8b: 97:28:de:7f:f3:64:55:94:50:6d:f4:d3:c8:cd:cb:dc:be:b2: 86:0c:a6:9f:54:be:d5:67:18:88:d4:01:92:b5:e6:1f:52:31: f0:7f:75:3c:4a:79:4a:64:62:ad:87:a0:ed:cc:20:85:6b:ba: 47:8b:43:60:11:3d:22:4d:2f:b3:1d:ce:a0:8d:86:7d:20:b8: 69:65:ca:9a:ce:aa:a9:f4:38:34:3f:dd:fa:68:22:e3:13:c3: 06:09:5e:6a:2a:10:14:45:89:63:65:f4:fc:f9:7d:6a:ee:c8: 92:76:b0:19:5c:75:4e:f3:78:50:60:ab:f8:58:5e:a1:4a:ab: 6e:c8:87:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzIzOTExMC8GA1UEBRMoNkM5QTEyMjExNTc5MUI4RTE1MDQ4MDE3QTk3NTdFNTg3 QUI1NkY4MDAeFw0yNDExMjEwNTE3MTlaFw0yNDExMjgwNTE3MTlaMBgxFjAUBgNV BAMTDTY3M2VjMjVmLTZkZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSuaIytIXOCY3PXhKtnBftrvi3T43KmP5mqFQLM3dYp84U/Wi5EaQ3bER1kAlc kj86h12LwjFBxF1rzHRI57JfHWYeOP2ssTD39GwE5aq92zjSA2pMrDZoBCJzm2M1 2IIqcjoE0LhnKIvJQU3EQvQeteVR6dtcQAYyF1tkmCKLHAddECG67W/t1qKQhh8F Ld6kw0/C3VsifQ0KbuaUGqPqR54C5VJ0lPoYHNvmwDWbMb5gGVN4S6oijdQkOovX B3dMhaoS9t11WdbjvUogkCm9Qx+cHuuluM7Uil/8BSDRgtH+3/OUcsPG4genDIEU evSJOivZD9wFaCvwy4whVjxNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQHxoNbRB TU3mQH6Q43Iozx2JR/cwHwYDVR0jBBgwFoAUbJoSIRV5G44VBIAXqXV+WHq1b4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMjM5Lzc0N0FBNDRBMkYw MjExRUY4QzdBNTg3MEM0RjlBRTAyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYkpvU0lSVjVHNDRWQklBWHFYVi1XSHExYjRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MjM5Lzc0N0FBNDRBMkYwMjExRUY4QzdBNTg3MEM0RjlBRTAyL2JKb1NJUlY1RzQ0 VkJJQVhxWFYtV0hxMWI0QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMCMKjD5oeDDnNzIw/quayDWlo3T5p8MsfVUg92fvS/nhvPiBiAor+gg xBIFlmr67c7eRkR93rDq/IpHVvALZgoeVPBe30AlO209fLKdQ5LoruZmGHrCVrni ptXnBfF4TSUkLDydeWIuQu7dj7pdnXGuxhOLR5iBnEtaou3Vi5co3n/zZFWUUG30 08jNy9y+soYMpp9UvtVnGIjUAZK15h9SMfB/dTxKeUpkYq2HoO3MIIVrukeLQ2AR PSJNL7MdzqCNhn0guGllyprOqqn0ODQ/3fpoIuMTwwYJXmoqEBRFiWNl9Pz5fWru yJJ2sBlcdU7zeFBgq/hYXqFKq27Ih3U= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org