$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft File: bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json) Hash identifier: c60AZHc5mV64q3RlY191+eYbj/9jCTBk3R7XMiWKVQY= Subject key identifier: 6D:8B:1A:0A:5B:27:8B:43:B7:1F:4B:A6:04:50:BD:2A:63:B9:33:B6 Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 Certificate issuer: /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft Manifest number: 0397 Signing time: Sat 23 Nov 2024 00:19:56 +0000 Manifest this update: Sat 23 Nov 2024 00:19:55 +0000 Manifest next update: Sat 30 Nov 2024 00:19:55 +0000 Files and hashes: 1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: ti9EFD9jLPAeysVfwvcldR/HD2THVqhGomTa1/UqMi8=) 2: 5BCE86F6777F11ECB4730632C4F9AE02.roa (hash: SPFzGgDFpn4T/AHD6ewSny2S7exdvz/wRQmqo+wpWRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838 Validity Not Before: Nov 23 00:19:55 2024 GMT Not After : Nov 30 00:19:55 2024 GMT Subject: CN=67411fab-3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0b:8b:ae:76:d0:fa:25:1a:ed:12:3e:db:f0: 6d:88:40:f8:76:db:90:14:a2:17:48:85:61:0c:36: b4:79:57:95:59:cf:46:d7:90:1f:54:9a:ef:8d:83: 42:ca:6b:62:48:02:fd:a0:28:d8:2a:7f:0e:37:6b: 80:89:43:dd:29:ab:7e:01:7f:98:e2:91:75:1a:30: 77:f0:b5:79:1b:6c:82:48:b2:0b:66:5a:60:e8:38: c0:53:76:7a:c4:af:be:1a:98:91:87:b5:97:50:a0: 5d:1a:3d:66:1a:57:38:be:c6:eb:ed:e6:7f:84:dc: 04:05:08:5f:ae:a8:45:7d:c4:65:bf:08:a7:0b:d3: 2e:f2:c5:c5:7b:0a:4b:2f:b9:26:65:c8:b4:ab:b3: 8a:a6:33:6b:31:9e:3d:b2:3d:3a:76:30:38:51:2b: 70:6b:2a:1d:b0:7f:d3:be:6d:1b:06:5e:5e:d2:93: 43:d0:16:25:6f:8d:f7:d3:e5:77:e0:91:bc:94:a1: 3b:15:dc:84:a9:aa:1d:5f:d0:e2:17:8e:68:fd:08: 9d:d0:1f:25:ad:f2:9d:3e:fa:56:c5:1e:9c:4a:56: 64:5f:74:91:6d:03:03:f0:96:b9:fa:c9:89:00:2a: 8d:86:24:91:8c:bf:d8:3a:5a:d8:a3:12:d1:61:dc: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8B:1A:0A:5B:27:8B:43:B7:1F:4B:A6:04:50:BD:2A:63:B9:33:B6 X509v3 Authority Key Identifier: keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ac:b1:6a:9e:fe:14:f7:c8:14:9e:6c:0b:87:bd:45:02:41: 1c:c8:d6:55:3f:7f:f3:99:3c:e9:f6:a6:bc:e4:56:d9:b8:b3: 7b:d2:ba:38:51:73:32:3d:1b:db:95:98:35:a9:93:54:b4:34: 38:6a:f4:ac:02:1d:9f:b1:6a:1b:c1:47:60:4d:a0:ee:4f:87: d1:f3:8c:c5:54:46:e3:c2:a3:e4:51:c1:35:b4:0e:28:91:6b: 62:af:ec:9b:a8:96:32:26:4f:9a:97:91:d0:8e:3e:0e:12:f2: c9:12:b8:17:9f:46:7b:9e:80:e7:d4:f0:fb:5d:08:46:e2:12: 7c:91:1a:39:00:13:75:1c:c1:be:e4:b7:b9:98:ca:68:9f:0a: f0:0c:61:6a:d7:a0:db:67:cd:7e:e9:94:08:67:f8:12:56:b0: 9f:68:8f:65:c1:ed:78:3d:b5:e6:e7:4a:52:d8:76:17:eb:81: 99:5d:a3:39:11:bc:fe:d8:cb:e7:d8:30:f0:e9:ec:be:78:b8: aa:8e:6a:07:fd:e6:18:69:3f:bc:4e:6e:73:1d:51:d5:a3:3e: d9:e9:ba:9f:1c:90:cc:a2:bf:f3:6e:60:00:39:9c:36:9f:32: 98:d7:e9:c0:62:e2:7e:d5:ad:78:0d:90:83:6b:f2:81:90:f9: 9d:b4:d2:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0 MTFDNzY4MzgwHhcNMjQxMTIzMDAxOTU1WhcNMjQxMTMwMDAxOTU1WjAYMRYwFAYD VQQDEw02NzQxMWZhYi0zOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QuLrnbQ+iUa7RI+2/BtiED4dtuQFKIXSIVhDDa0eVeVWc9G15AfVJrvjYNC ymtiSAL9oCjYKn8ON2uAiUPdKat+AX+Y4pF1GjB38LV5G2yCSLILZlpg6DjAU3Z6 xK++GpiRh7WXUKBdGj1mGlc4vsbr7eZ/hNwEBQhfrqhFfcRlvwinC9Mu8sXFewpL L7kmZci0q7OKpjNrMZ49sj06djA4UStwayodsH/Tvm0bBl5e0pND0BYlb4330+V3 4JG8lKE7FdyEqaodX9DiF45o/Qid0B8lrfKdPvpWxR6cSlZkX3SRbQMD8Ja5+smJ ACqNhiSRjL/YOlrYoxLRYdxxLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2LGgpb J4tDtx9LpgRQvSpjuTO2MB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3 N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE aHFnWDNOaldScFZCSEhhRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCErLFqnv4U98gUnmwLh71FAkEcyNZVP3/zmTzp9qa85FbZuLN70ro4 UXMyPRvblZg1qZNUtDQ4avSsAh2fsWobwUdgTaDuT4fR84zFVEbjwqPkUcE1tA4o kWtir+ybqJYyJk+al5HQjj4OEvLJErgXn0Z7noDn1PD7XQhG4hJ8kRo5ABN1HMG+ 5Le5mMponwrwDGFq16DbZ81+6ZQIZ/gSVrCfaI9lwe14PbXm50pS2HYX64GZXaM5 Ebz+2Mvn2DDw6ey+eLiqjmoH/eYYaT+8Tm5zHVHVoz7Z6bqfHJDMor/zbmAAOZw2 nzKY1+nAYuJ+1a14DZCDa/KBkPmdtNJX -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org