$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: rMQ0jr2Zfcs/a+AMyMiJi/GVVnFHWnpdpacNUf+vssM= Subject key identifier: A3:0E:29:92:3E:4F:88:45:53:34:4E:8C:2A:61:C9:09:C3:7C:D0:B8 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 128D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 1286 Signing time: Fri 22 Nov 2024 17:05:51 +0000 Manifest this update: Fri 22 Nov 2024 17:05:50 +0000 Manifest next update: Fri 29 Nov 2024 17:05:50 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: UxWngYFnFhXHgZPQ8nY5cxQjRcd0K6rea+lOO5JocD8=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Nov 22 17:05:50 2024 GMT Not After : Nov 29 17:05:50 2024 GMT Subject: CN=6740b9ee-a984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:59:23:2e:c5:a0:7c:47:a7:e3:84:8f:bf: 77:8b:30:b0:83:fc:4d:45:8d:e7:65:b9:ac:c0:3c: 03:47:85:51:88:c3:e6:22:8f:e4:14:c1:bf:d0:68: 2c:9b:ab:9e:21:44:c9:c9:1c:85:53:bd:32:cc:17: e4:f3:38:24:1b:f7:b8:d5:8f:eb:a1:8e:f6:cc:8d: dd:ed:d3:7f:7a:0a:9c:82:59:d9:74:97:6a:d6:79: 84:19:f3:ad:ef:50:55:9c:8c:a4:ca:2f:a8:b8:aa: 99:a0:b8:43:2f:d4:5e:8d:f9:06:42:6e:39:e2:64: 1d:2e:00:bc:f8:fb:ce:20:4d:4a:e7:b8:c0:9c:11: 67:48:1b:d4:1b:0e:0f:e9:c2:0a:1f:ea:eb:fe:9a: 26:35:45:56:95:06:03:7c:1e:b5:b8:bb:d4:0d:23: 37:2e:80:a3:08:49:6c:f4:1a:54:6a:2b:34:10:d6: ca:71:59:d6:1a:8c:3c:99:31:0d:ed:e2:54:4a:9c: a1:12:47:33:c4:d8:80:6d:d3:11:7c:c3:30:02:3c: b3:0b:13:c4:9b:d1:5b:ef:5b:27:aa:c0:19:ed:ed: bc:63:73:a2:93:c3:7d:44:bc:d4:17:f0:a8:54:70: 90:da:64:8e:78:e1:04:e0:ca:84:28:95:91:19:af: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:29:92:3E:4F:88:45:53:34:4E:8C:2A:61:C9:09:C3:7C:D0:B8 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2a:6e:84:3a:11:14:99:b1:34:d1:4e:df:16:43:00:d8:9f: df:e1:24:5d:50:0c:b0:bb:92:64:97:be:d0:6f:f8:ee:1e:9e: 5d:2c:7c:12:62:ff:0c:65:59:7e:70:3f:a2:66:82:a4:01:07: 0d:73:da:9c:12:27:99:25:6b:0e:b8:4d:10:f9:01:d0:2f:89: 46:5a:88:1a:aa:33:ac:68:9d:6e:73:81:d2:4d:60:c0:82:43: 98:08:46:49:b0:af:18:c7:9e:55:b1:6c:5e:e7:94:35:3a:11: 20:b5:23:79:13:85:f0:e1:b1:e0:b4:b3:a6:94:c8:10:59:34: f0:95:d8:e9:02:f5:b2:10:45:83:28:d7:a7:7c:d1:09:71:48: de:77:79:e1:45:2f:9b:a2:3e:e1:27:39:0c:32:ee:0c:07:b0: 02:80:67:7c:af:f3:6e:ca:9d:9d:98:e4:9b:3b:74:bc:2b:a8: c1:ea:70:0f:91:85:12:3d:2f:0f:55:47:16:ec:bb:5f:73:d0: 0c:05:61:74:a8:de:d4:b0:b8:c5:ad:d1:49:d0:8c:45:21:d5: 3c:a9:3e:2a:0b:03:a5:c3:0a:90:5a:21:75:6e:2d:90:0e:85: f1:3a:65:d7:a1:bf:53:a7:bf:a6:55:6b:df:08:c3:f1:25:4a: 90:2d:08:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjQxMTIyMTcwNTUwWhcNMjQxMTI5MTcwNTUwWjAYMRYwFAYD VQQDEw02NzQwYjllZS1hOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4JZIy7FoHxHp+OEj793izCwg/xNRY3nZbmswDwDR4VRiMPmIo/kFMG/0Ggs m6ueIUTJyRyFU70yzBfk8zgkG/e41Y/roY72zI3d7dN/egqcglnZdJdq1nmEGfOt 71BVnIykyi+ouKqZoLhDL9RejfkGQm454mQdLgC8+PvOIE1K57jAnBFnSBvUGw4P 6cIKH+rr/pomNUVWlQYDfB61uLvUDSM3LoCjCEls9BpUais0ENbKcVnWGow8mTEN 7eJUSpyhEkczxNiAbdMRfMMwAjyzCxPEm9Fb71snqsAZ7e28Y3Oik8N9RLzUF/Co VHCQ2mSOeOEE4MqEKJWRGa8afQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMOKZI+ T4hFUzROjCphyQnDfNC4MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuKm6EOhEUmbE00U7fFkMA2J/f4SRdUAywu5Jkl77Qb/juHp5dLHwS Yv8MZVl+cD+iZoKkAQcNc9qcEieZJWsOuE0Q+QHQL4lGWogaqjOsaJ1uc4HSTWDA gkOYCEZJsK8Yx55VsWxe55Q1OhEgtSN5E4Xw4bHgtLOmlMgQWTTwldjpAvWyEEWD KNenfNEJcUjed3nhRS+boj7hJzkMMu4MB7ACgGd8r/Nuyp2dmOSbO3S8K6jB6nAP kYUSPS8PVUcW7Ltfc9AMBWF0qN7UsLjFrdFJ0IxFIdU8qT4qCwOlwwqQWiF1bi2Q DoXxOmXXob9Tp7+mVWvfCMPxJUqQLQie -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org