$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: pSrxHFpg3U3WeXnWcWiWVEu1P8HS8zBhKScac70PjK0= Subject key identifier: A7:B0:14:00:A0:15:F2:D6:13:4C:51:52:CD:11:65:34:D2:79:DE:7D Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 0489 Signing time: Wed 20 Nov 2024 23:38:42 +0000 Manifest this update: Wed 20 Nov 2024 23:38:42 +0000 Manifest next update: Wed 27 Nov 2024 23:38:42 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: KEBmNyKdE7Bp4So2gg1jyCbY9y8Xn5DYuiO9nKKBOeM=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Nov 20 23:38:42 2024 GMT Not After : Nov 27 23:38:42 2024 GMT Subject: CN=673e7302-2660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:9d:a5:2a:95:63:fd:12:26:ce:c8:aa:78: 09:14:23:d5:92:98:5c:d1:af:5b:45:83:56:83:e8: db:3f:0f:59:3c:8f:6f:01:f4:52:38:4f:11:e0:7c: 99:c0:a5:c4:59:2c:5d:c3:6d:67:56:22:77:67:c2: 63:96:72:4c:de:c4:b2:25:7d:bd:0b:d0:02:67:62: 36:e7:2f:ec:dc:54:b6:d3:59:83:c0:5d:c9:59:4e: 20:12:dc:a7:b8:a6:62:70:c7:86:07:0e:61:f6:04: 87:c5:55:7c:a2:c8:e7:9b:58:36:a7:fd:0c:52:6b: 48:21:e7:5e:cc:c9:19:e0:c5:32:b5:36:c3:d6:9f: 66:a9:14:04:11:cb:54:ce:19:d7:a5:24:03:a9:a3: 03:e8:8b:03:32:eb:e2:ed:ec:ed:44:98:64:b5:c4: ef:fb:f9:49:d2:6d:f2:7a:bd:2d:78:bc:7d:59:26: 33:34:90:cf:44:c7:84:54:82:ee:bb:05:77:ae:d9: 21:3f:91:6f:3e:66:55:f1:87:4f:04:06:da:d7:f7: f9:20:07:c1:8d:6a:dd:3b:b4:f1:cc:28:ff:37:aa: 04:a9:7b:b3:80:97:33:c3:8a:d0:b0:21:9c:ff:e1: d5:94:a1:75:a2:c7:1d:b3:cf:f8:fd:95:0e:37:00: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:14:00:A0:15:F2:D6:13:4C:51:52:CD:11:65:34:D2:79:DE:7D X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:36:1e:e5:e7:55:70:8e:81:6c:7c:02:87:08:c3:54:ce:df: 6b:b8:bf:df:2a:a8:dd:c5:3d:61:2f:a4:d3:75:a6:8c:51:fd: 9c:67:a9:15:f4:45:87:c4:65:5b:b1:da:0b:cc:d2:66:e0:b2: 53:98:41:d1:b4:21:da:f8:3c:08:df:11:f7:e4:e0:81:6a:6a: 6b:99:5d:b7:ba:59:b6:5e:07:c9:26:9f:4b:82:87:fd:9d:e6: 8d:fa:c8:4d:e4:df:82:67:bc:00:34:af:26:63:74:89:24:b8: 5d:b0:19:38:9a:13:d4:50:8a:7a:ba:3f:1d:c7:cf:1b:ff:50: 38:79:d5:86:fc:c4:8d:a8:33:df:b5:4c:b7:6c:f5:24:95:c1: b8:99:3b:ca:ca:87:58:6f:54:51:8e:b5:bd:fe:0f:35:f9:db: 30:52:a8:e9:5d:32:74:97:c2:68:98:ef:31:df:8e:9d:a7:50: 9b:7b:b4:a1:cf:3f:f1:ff:31:bf:c9:ae:73:46:f0:ac:8d:77: 79:f1:b7:bb:58:11:15:93:82:74:43:92:be:bb:31:68:54:26: f5:83:e0:9f:fd:92:df:eb:32:82:e6:49:80:c2:8c:9d:89:c4: ef:ec:74:95:1b:37:ea:da:93:67:b9:21:31:60:26:56:0d:a6: c9:a5:72:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjQxMTIwMjMzODQyWhcNMjQxMTI3MjMzODQyWjAYMRYwFAYD VQQDEw02NzNlNzMwMi0yNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOydpSqVY/0SJs7IqngJFCPVkphc0a9bRYNWg+jbPw9ZPI9vAfRSOE8R4HyZ wKXEWSxdw21nViJ3Z8JjlnJM3sSyJX29C9ACZ2I25y/s3FS201mDwF3JWU4gEtyn uKZicMeGBw5h9gSHxVV8osjnm1g2p/0MUmtIIedezMkZ4MUytTbD1p9mqRQEEctU zhnXpSQDqaMD6IsDMuvi7eztRJhktcTv+/lJ0m3yer0teLx9WSYzNJDPRMeEVILu uwV3rtkhP5FvPmZV8YdPBAba1/f5IAfBjWrdO7TxzCj/N6oEqXuzgJczw4rQsCGc /+HVlKF1oscds8/4/ZUONwByzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKewFACg FfLWE0xRUs0RZTTSed59MB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTNh7l51VwjoFsfAKHCMNUzt9ruL/fKqjdxT1hL6TTdaaMUf2cZ6kV 9EWHxGVbsdoLzNJm4LJTmEHRtCHa+DwI3xH35OCBamprmV23ulm2XgfJJp9Lgof9 neaN+shN5N+CZ7wANK8mY3SJJLhdsBk4mhPUUIp6uj8dx88b/1A4edWG/MSNqDPf tUy3bPUklcG4mTvKyodYb1RRjrW9/g81+dswUqjpXTJ0l8JomO8x346dp1Cbe7Sh zz/x/zG/ya5zRvCsjXd58be7WBEVk4J0Q5K+uzFoVCb1g+Cf/ZLf6zKC5kmAwoyd icTv7HSVGzfq2pNnuSExYCZWDabJpXIw -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org