$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: WVcYzJ2aExVslDkwYaumdfynapVwyhWUoaLp1wQ6pQk= Subject key identifier: 64:EC:69:C0:92:11:AB:75:04:E2:6A:8E:DF:74:F2:D8:BB:5E:78:C1 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: 30 Signing time: Thu 19 Sep 2024 05:54:52 +0000 Manifest this update: Thu 19 Sep 2024 05:54:51 +0000 Manifest next update: Thu 26 Sep 2024 05:54:51 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: DlQQYKv13tEsyARHE2H2Ux0E1J2IaN5pGeKDaDR92xg=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Sep 19 05:54:51 2024 GMT Not After : Sep 26 05:54:51 2024 GMT Subject: CN=66ebbcac-712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:bb:24:15:dd:08:f7:ae:8f:b1:0f:65:70: 98:69:ed:91:14:ad:07:02:b0:22:91:d0:4a:6d:b0: b6:16:25:26:fc:d4:52:33:50:be:f6:f3:ad:35:4d: e4:ce:20:b1:10:8f:cd:be:91:bc:54:29:bf:b4:3f: 7a:ba:a4:35:af:8d:15:01:f9:c0:ca:60:9c:92:82: ab:d5:97:48:f5:fa:75:c5:b0:e4:09:28:16:2a:e3: d6:55:6d:b6:f4:a7:60:2a:9e:26:5d:e9:65:bb:6d: ae:01:4d:f5:1c:52:9f:6c:10:bd:18:57:1b:71:0a: 53:be:64:16:ea:9b:9d:34:57:5a:6b:da:65:40:15: ba:99:cc:f7:cd:1a:ee:a4:cc:6e:a9:a4:c4:d6:30: 38:f1:e2:92:d5:42:bb:cd:68:39:8a:0c:2b:09:64: 1c:76:f8:43:30:df:1f:b3:f4:e9:5f:59:5f:10:dc: ff:d6:01:4e:5c:b5:4b:d1:94:fb:67:26:e8:b0:94: 85:8b:b6:0c:a4:4f:cb:a0:8a:3c:27:40:14:73:8e: 7d:67:b8:40:72:41:f9:5b:b8:c4:31:5e:ab:7d:4c: 83:a2:d5:1f:9f:79:46:81:8a:d3:b8:cb:95:d1:e8: 57:d7:cd:ea:f7:f4:4b:f3:2c:b1:13:a9:c0:06:45: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:69:C0:92:11:AB:75:04:E2:6A:8E:DF:74:F2:D8:BB:5E:78:C1 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b9:95:ca:aa:6a:30:3c:ce:6d:af:bf:dc:f6:e2:81:c3:b0: 23:11:54:2c:e8:03:01:a4:43:93:67:da:8f:9f:16:0b:a4:1a: b0:f2:bf:78:84:fa:72:04:ff:e2:7c:da:b9:bd:c1:25:08:d0: 94:4c:58:d3:ae:ba:74:1d:86:26:38:39:d6:b6:9b:10:d6:22: 59:ec:53:20:ab:df:86:cc:1d:73:cd:92:e1:1b:ed:c0:9d:41: ab:1d:54:15:ed:9c:ab:bc:a2:82:80:d3:12:05:ab:a8:92:b6: 2d:dd:50:ec:64:f6:54:27:71:d0:c2:0b:b4:76:7e:e5:6a:4f: 4d:89:1e:17:ed:62:5a:dd:8d:f1:b2:30:8b:59:5b:49:58:39: 72:64:b5:f6:cf:9a:11:52:4d:6c:47:1f:11:16:7c:bf:79:7d: b5:d2:e3:0d:a8:3f:a6:6e:56:90:2a:2e:a2:14:82:b1:27:6e: aa:88:97:d8:0b:55:5f:0d:45:2c:ae:2f:f2:be:1f:53:d2:d3: ed:3b:84:66:85:de:85:61:fc:e2:b0:ec:b0:a2:2f:e6:22:b5: b6:e5:30:c5:c2:c4:cb:4d:12:e7:5d:c6:33:63:4a:35:1a:30: 16:35:14:8b:b4:38:4f:97:01:ab:0a:9d:e1:01:70:ac:ec:6c: 35:f7:98:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzIzOTExMC8GA1UEBRMoNkM5QTEyMjExNTc5MUI4RTE1MDQ4MDE3QTk3NTdFNTg3 QUI1NkY4MDAeFw0yNDA5MTkwNTU0NTFaFw0yNDA5MjYwNTU0NTFaMBgxFjAUBgNV BAMTDTY2ZWJiY2FjLTcxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsZLskFd0I966PsQ9lcJhp7ZEUrQcCsCKR0EptsLYWJSb81FIzUL728601TeTO ILEQj82+kbxUKb+0P3q6pDWvjRUB+cDKYJySgqvVl0j1+nXFsOQJKBYq49ZVbbb0 p2AqniZd6WW7ba4BTfUcUp9sEL0YVxtxClO+ZBbqm500V1pr2mVAFbqZzPfNGu6k zG6ppMTWMDjx4pLVQrvNaDmKDCsJZBx2+EMw3x+z9OlfWV8Q3P/WAU5ctUvRlPtn JuiwlIWLtgykT8ugijwnQBRzjn1nuEByQflbuMQxXqt9TIOi1R+feUaBitO4y5XR 6FfXzer39EvzLLETqcAGRRGPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZOxpwJIR q3UE4mqO33Ty2LteeMEwHwYDVR0jBBgwFoAUbJoSIRV5G44VBIAXqXV+WHq1b4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMjM5Lzc0N0FBNDRBMkYw MjExRUY4QzdBNTg3MEM0RjlBRTAyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYkpvU0lSVjVHNDRWQklBWHFYVi1XSHExYjRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz MjM5Lzc0N0FBNDRBMkYwMjExRUY4QzdBNTg3MEM0RjlBRTAyL2JKb1NJUlY1RzQ0 VkJJQVhxWFYtV0hxMWI0QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+5lcqqajA8zm2vv9z24oHDsCMRVCzoAwGkQ5Nn2o+fFgukGrDyv3iE +nIE/+J82rm9wSUI0JRMWNOuunQdhiY4Oda2mxDWIlnsUyCr34bMHXPNkuEb7cCd QasdVBXtnKu8ooKA0xIFq6iSti3dUOxk9lQncdDCC7R2fuVqT02JHhftYlrdjfGy MItZW0lYOXJktfbPmhFSTWxHHxEWfL95fbXS4w2oP6ZuVpAqLqIUgrEnbqqIl9gL VV8NRSyuL/K+H1PS0+07hGaF3oVh/OKw7LCiL+YitbblMMXCxMtNEuddxjNjSjUa MBY1FIu0OE+XAasKneEBcKzsbDX3mAg= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:05 2024 by rpki-client on console-ams.rpki-client.org