$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: bi2By6F/7hu3z+c6ukUhJtkYlDU9jW7pi1eTr71sYwM= Subject key identifier: FB:13:14:D9:73:80:CA:47:E7:9B:D4:EF:83:C3:6D:21:34:09:B1:E3 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1AC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1AC1 Signing time: Fri 22 Nov 2024 16:19:09 +0000 Manifest this update: Fri 22 Nov 2024 16:19:09 +0000 Manifest next update: Fri 29 Nov 2024 16:19:09 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: Aa8ra1cBi2hZKmDv0Ag/mLOAYP/N+AfqCpZ+MLQFMRU=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6856 (0x1ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Nov 22 16:19:09 2024 GMT Not After : Nov 29 16:19:09 2024 GMT Subject: CN=6740aefd-4b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:e4:a8:89:47:09:30:f1:ba:50:54:50:66: f9:f1:e9:0e:34:1b:69:0c:bf:b3:bd:ec:d8:cb:89: 16:85:66:0f:6d:9a:53:d7:aa:5e:ee:0b:07:c0:a3: 2d:15:d6:3a:ad:82:d0:df:03:da:7c:50:88:e6:2e: 9a:92:fd:36:04:e8:3c:18:ac:8f:3a:bb:ae:f4:96: 83:af:50:ef:50:8a:77:da:42:e2:22:dc:3d:79:c0: 56:97:10:66:37:4a:4b:2c:26:57:8f:2c:47:1a:06: 41:41:67:ec:e4:ef:30:72:91:92:db:65:94:49:d7: 37:b4:0c:46:85:d1:fe:c1:28:7e:ba:03:20:0c:91: 88:83:4c:7c:10:0a:4c:0e:46:95:4c:0d:d8:a3:c7: ce:ae:b1:dc:bb:0f:50:4f:86:f9:73:a3:2e:ca:a8: 1a:49:02:e0:19:a8:ef:ab:60:3a:b1:e1:a4:88:d2: e1:9c:8f:6f:30:31:57:c0:8f:8d:59:4c:73:2d:02: 81:4f:e4:55:30:8a:cf:18:58:e0:4d:69:dd:7c:3c: b7:eb:71:3f:b0:1e:84:d3:68:36:14:dc:0a:af:1a: 60:84:3c:7e:8e:ec:59:d4:e7:20:52:d8:fd:16:06: cb:b9:27:bd:8f:45:4b:df:32:50:eb:59:9d:e1:92: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:14:D9:73:80:CA:47:E7:9B:D4:EF:83:C3:6D:21:34:09:B1:E3 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bb:00:7e:9c:97:71:47:c2:db:49:66:9a:5d:a3:30:de:af: 4f:24:7f:2f:10:3e:68:d5:d2:d7:58:81:c0:16:5a:17:3b:db: 31:4f:ae:df:05:17:95:df:27:f5:57:0b:e2:73:6d:ec:bb:68: 4e:ec:d4:2b:60:ad:eb:8d:fb:32:f4:f8:2d:f5:fe:56:eb:80: 57:02:b8:45:a1:b8:d2:84:e3:a4:b7:4c:1a:ee:84:08:60:d4: 48:d8:c0:3e:43:06:f4:6f:c7:bf:c2:fd:96:7c:be:af:f8:aa: ea:c1:04:2b:92:49:60:27:c8:76:d3:cb:aa:bd:14:40:ab:55: 85:86:db:5f:8e:33:08:11:4b:ce:3d:65:a1:13:e7:71:79:e1: b1:dd:93:4c:c6:50:52:ec:ef:62:31:03:2f:07:61:1c:46:98: 2b:65:2a:1a:a8:fd:09:b1:a0:f9:f3:25:52:b0:36:08:ab:7c: fc:cb:31:86:94:97:24:21:78:45:18:59:cf:13:b9:c2:b7:27: 30:12:a8:3f:89:e3:8a:c5:71:ef:bb:51:fd:a6:1b:e6:32:27: e5:a0:b4:6a:1f:6f:35:1a:67:9d:58:28:63:44:73:5e:9c:63: 0d:0f:3b:83:49:6a:04:b5:5b:ee:41:5b:75:fa:a6:9f:1a:4a: af:1a:33:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjQxMTIyMTYxOTA5WhcNMjQxMTI5MTYxOTA5WjAYMRYwFAYD VQQDEw02NzQwYWVmZC00YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGfkqIlHCTDxulBUUGb58ekONBtpDL+zvezYy4kWhWYPbZpT16pe7gsHwKMt FdY6rYLQ3wPafFCI5i6akv02BOg8GKyPOruu9JaDr1DvUIp32kLiItw9ecBWlxBm N0pLLCZXjyxHGgZBQWfs5O8wcpGS22WUSdc3tAxGhdH+wSh+ugMgDJGIg0x8EApM DkaVTA3Yo8fOrrHcuw9QT4b5c6MuyqgaSQLgGajvq2A6seGkiNLhnI9vMDFXwI+N WUxzLQKBT+RVMIrPGFjgTWndfDy363E/sB6E02g2FNwKrxpghDx+juxZ1OcgUtj9 FgbLuSe9j0VL3zJQ61md4ZL8LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsTFNlz gMpH55vU74PDbSE0CbHjMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtuwB+nJdxR8LbSWaaXaMw3q9PJH8vED5o1dLXWIHAFloXO9sxT67f BReV3yf1Vwvic23su2hO7NQrYK3rjfsy9Pgt9f5W64BXArhFobjShOOkt0wa7oQI YNRI2MA+Qwb0b8e/wv2WfL6v+KrqwQQrkklgJ8h208uqvRRAq1WFhttfjjMIEUvO PWWhE+dxeeGx3ZNMxlBS7O9iMQMvB2EcRpgrZSoaqP0JsaD58yVSsDYIq3z8yzGG lJckIXhFGFnPE7nCtycwEqg/ieOKxXHvu1H9phvmMifloLRqH281GmedWChjRHNe nGMNDzuDSWoEtVvuQVt1+qafGkqvGjNt -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org