$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json) Hash identifier: oJIHP1GP+QnI3HtCNPnjEB9/df2GN9mh9uEyw++9Zow= Subject key identifier: 9A:DC:42:74:61:C3:57:15:34:CD:26:87:2F:93:EE:CE:42:04:D5:01 Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft Manifest number: 1A Signing time: Thu 21 Nov 2024 05:58:08 +0000 Manifest this update: Thu 21 Nov 2024 05:58:07 +0000 Manifest next update: Thu 28 Nov 2024 05:58:07 +0000 Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: Bxo4S3WZQVvdZwdaHl4SI07agDSItOzsQjzILJlaIsE=) 2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E Validity Not Before: Nov 21 05:58:07 2024 GMT Not After : Nov 28 05:58:07 2024 GMT Subject: CN=673ecbf0-093e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:e2:05:81:ee:f2:4d:7b:d8:48:a6:ac:83: 7c:86:81:b5:20:ea:16:33:ee:7a:b1:82:78:d9:ad: 9f:1f:d5:16:af:ae:b2:ad:3e:43:2f:24:77:38:f3: cd:42:a0:90:a1:3b:4b:5e:b9:bc:83:1c:37:33:1d: 2c:1b:ab:93:40:f1:aa:e5:32:9f:cb:48:32:ee:e0: 22:a1:38:58:e6:bf:0b:22:2c:3b:d2:07:23:a3:3c: 68:a8:64:f8:d0:55:04:f9:9d:92:02:0b:8f:d5:be: 69:ca:d3:c0:b1:1b:10:28:9b:bb:05:8b:ef:d3:66: 96:da:2d:bc:35:39:a8:24:89:e7:56:4a:0c:5b:78: f9:78:14:fe:2f:6b:9d:5c:df:84:bd:74:27:d4:56: 5f:8a:54:03:03:fc:0d:e5:21:93:1d:85:2d:7d:af: 32:74:c7:48:09:35:f5:e4:48:1c:d0:89:f7:8a:dd: 35:ac:dd:3d:7a:65:86:2c:63:bd:50:93:09:36:c7: 38:59:91:cb:b6:69:04:fa:0e:16:a4:df:d4:08:d5: 2e:d6:ee:dd:76:f5:0a:bd:5d:f6:e1:39:9e:c0:cc: 4d:36:6f:67:a9:55:b0:67:dc:5e:23:de:de:b9:a7: 73:f8:c8:97:96:c3:92:22:1a:53:64:f8:45:ae:cf: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:42:74:61:C3:57:15:34:CD:26:87:2F:93:EE:CE:42:04:D5:01 X509v3 Authority Key Identifier: keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3c:1e:23:8e:c2:c2:4b:3a:c5:6f:7e:fc:4e:bf:64:18:3d: 96:27:d6:f9:c3:17:5f:51:89:90:6e:ec:49:8a:55:cf:37:fd: 56:e2:55:f9:1c:b8:de:2c:53:ef:9b:e6:a5:cb:01:09:53:a2: 51:d5:98:31:38:d3:94:b8:eb:6a:13:ef:b0:ad:33:da:68:f5: 44:b4:ee:8b:66:47:ae:e9:40:65:b4:08:ec:99:8c:54:63:70: d7:6b:8d:4a:34:a1:16:f5:96:e9:2b:c1:a9:60:c8:7d:6b:0f: 99:51:ce:05:b6:99:41:b9:46:3c:e0:5e:7e:7d:93:02:4d:aa: db:bc:19:26:58:6f:60:ef:cc:57:52:79:76:d9:59:65:d5:23: f4:97:18:3a:cd:8f:fe:8d:94:f5:1d:7b:fb:d5:1d:18:f8:50: 67:4b:13:12:9f:56:00:ab:e6:70:29:90:cf:0a:09:ff:bd:f8: f5:02:e1:dd:7d:fe:9a:2a:08:09:3f:04:d5:ff:93:ea:5e:87: d4:33:a3:78:3e:c4:de:b4:d9:89:ff:5d:29:51:9b:e8:d0:43: 47:90:74:0f:9e:dc:11:fe:60:80:cb:06:17:52:fc:26:84:7c: 0d:ea:90:54:e8:15:7e:4d:62:63:ff:5d:f5:b3:b4:e8:99:1a: c4:fa:c3:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEQ1QzExMC8GA1UEBRMoMDY1NUJENTI0RTg3RDA3OUU2NUJFMzE2MUFBNjVCRTY4 RjlFODI3RTAeFw0yNDExMjEwNTU4MDdaFw0yNDExMjgwNTU4MDdaMBgxFjAUBgNV BAMTDTY3M2VjYmYwLTA5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi9eIFge7yTXvYSKasg3yGgbUg6hYz7nqxgnjZrZ8f1RavrrKtPkMvJHc4881C oJChO0teubyDHDczHSwbq5NA8arlMp/LSDLu4CKhOFjmvwsiLDvSByOjPGioZPjQ VQT5nZICC4/VvmnK08CxGxAom7sFi+/TZpbaLbw1OagkiedWSgxbePl4FP4va51c 34S9dCfUVl+KVAMD/A3lIZMdhS19rzJ0x0gJNfXkSBzQifeK3TWs3T16ZYYsY71Q kwk2xzhZkcu2aQT6Dhak39QI1S7W7t129Qq9XfbhOZ7AzE02b2epVbBn3F4j3t65 p3P4yJeWw5IiGlNk+EWuz5MvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmtxCdGHD VxU0zSaHL5PuzkIE1QEwHwYDVR0jBBgwFoAUBlW9Uk6H0HnmW+MWGqZb5o+egn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRDVDL0NCRTZEQjBBODI3 NjExRUY4RTgzRUQwREM0RjlBRTAyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWdu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQmxXOVVrNkgwSG5tVy1NV0dxWmI1by1lZ240LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RDVDL0NCRTZEQjBBODI3NjExRUY4RTgzRUQwREM0RjlBRTAyL0JsVzlVazZIMEhu bVctTVdHcVpiNW8tZWduNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEc8HiOOwsJLOsVvfvxOv2QYPZYn1vnDF19RiZBu7EmKVc83/VbiVfkc uN4sU++b5qXLAQlTolHVmDE405S462oT77CtM9po9US07otmR67pQGW0COyZjFRj cNdrjUo0oRb1lukrwalgyH1rD5lRzgW2mUG5RjzgXn59kwJNqtu8GSZYb2DvzFdS eXbZWWXVI/SXGDrNj/6NlPUde/vVHRj4UGdLExKfVgCr5nApkM8KCf+9+PUC4d19 /poqCAk/BNX/k+peh9Qzo3g+xN602Yn/XSlRm+jQQ0eQdA+e3BH+YIDLBhdS/CaE fA3qkFToFX5NYmP/XfWztOiZGsT6wyA= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org