$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: btirrKrmYbcss7rI0nLy6Mfm/D23yFWNhlKaYqnhwRc= Subject key identifier: BC:CF:B6:30:E0:AA:E8:A1:DD:13:70:AD:80:0C:E9:41:F5:AD:EF:CF Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: 21 Signing time: Thu 21 Nov 2024 05:55:52 +0000 Manifest this update: Thu 21 Nov 2024 05:55:51 +0000 Manifest next update: Thu 28 Nov 2024 05:55:51 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: 7Ljz5qDFItH9nHaL6dedzTWsADZ8cz8hSNYbneTs2eU=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: xeZt84UMp+B7UEH+ve0Je8d8/kwmPLcBVN2BEDa+kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: Nov 21 05:55:51 2024 GMT Not After : Nov 28 05:55:51 2024 GMT Subject: CN=673ecb67-0685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:48:f8:c5:9d:e9:67:85:ef:da:20:61:a9: 14:2a:bc:76:3a:1e:24:ee:be:6d:9f:46:cd:fc:8d: c0:40:44:00:c4:76:19:2e:93:f8:51:ff:9c:e7:a8: 27:62:19:7e:16:c9:d5:0e:97:b5:cc:7a:e0:80:2d: ef:43:0d:1d:4d:52:93:84:46:12:ba:3c:10:43:79: 98:19:5b:77:b1:e9:cc:77:4b:c4:95:e5:29:2b:3f: 43:8f:6a:86:ad:d4:87:24:34:73:59:c6:53:72:e5: 35:77:f0:a4:39:fb:f7:c9:b9:f9:98:af:34:1c:3d: 1b:ad:35:4f:e1:5f:b9:97:3e:52:d8:a3:e5:81:91: a6:dd:72:c6:5d:e3:7e:a1:57:17:52:14:16:d4:25: 31:4f:d4:c6:a8:be:5c:01:5c:82:87:3e:a5:73:69: 03:35:18:7b:f9:3c:70:93:bb:ee:73:28:2a:bb:9a: 78:80:22:2d:54:8e:50:b0:3b:b1:e9:09:09:b9:8e: 24:de:9e:40:59:a8:6e:67:e6:95:01:df:ba:00:a5: 12:7c:07:ef:08:18:ba:9d:c6:cd:8e:76:80:b8:72: ba:24:d4:5b:9e:97:b5:85:7c:ca:44:6c:3d:7e:fa: 9e:8e:66:f0:e5:8a:56:85:3a:d8:f6:56:20:27:f3: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CF:B6:30:E0:AA:E8:A1:DD:13:70:AD:80:0C:E9:41:F5:AD:EF:CF X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b6:72:2f:7e:3d:7a:6e:55:69:13:db:65:76:1e:1f:39:8e: 5b:79:1b:74:8b:bd:e3:e8:eb:6b:d0:d5:e1:3c:06:0e:43:91: 3c:4e:96:ed:12:46:3e:5b:6f:e3:6a:41:ad:ad:1c:f1:f5:1d: 86:9f:6f:9f:02:c1:f6:ce:68:68:44:5d:17:ce:2f:2f:ed:dc: c3:d0:bc:46:af:a8:b5:8d:09:73:81:ad:1f:0e:6b:70:ac:a6: 8f:6e:c2:bb:d2:e0:4b:55:c3:c7:9b:de:68:ac:61:a9:00:47: 65:37:ce:98:11:66:1b:85:63:bc:5c:9f:73:ba:af:bb:8a:5f: 05:ec:30:fb:73:19:bb:1a:27:13:b4:40:8b:f5:a2:69:34:4e: 22:77:be:11:ab:b8:72:c2:46:2b:14:c7:8d:37:4e:9a:f4:c1: 58:50:a9:25:49:ab:a2:79:2f:9b:8d:3a:4a:24:6f:42:fd:5a: 17:8d:14:25:92:dd:a7:4d:ca:15:d5:55:ea:3c:03:00:14:30: 1e:23:bf:b1:55:dc:42:b8:af:b8:9f:5e:0c:5f:e1:d5:9b:bd: da:10:f7:6d:00:aa:62:86:70:91:ba:6d:80:50:3c:55:ca:22: 9c:17:02:9a:87:53:54:21:0c:d9:00:22:58:e9:26:a2:46:a6: 2f:36:c0:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDNGODExMC8GA1UEBRMoNkRCNjYwN0RBNjk1REQwOUUwMjk4MDNBMkZGMjYyNUFE ODgzODJFMzAeFw0yNDExMjEwNTU1NTFaFw0yNDExMjgwNTU1NTFaMBgxFjAUBgNV BAMTDTY3M2VjYjY3LTA2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRj0j4xZ3pZ4Xv2iBhqRQqvHY6HiTuvm2fRs38jcBARADEdhkuk/hR/5znqCdi GX4WydUOl7XMeuCALe9DDR1NUpOERhK6PBBDeZgZW3ex6cx3S8SV5SkrP0OPaoat 1IckNHNZxlNy5TV38KQ5+/fJufmYrzQcPRutNU/hX7mXPlLYo+WBkabdcsZd436h VxdSFBbUJTFP1MaovlwBXIKHPqVzaQM1GHv5PHCTu+5zKCq7mniAIi1UjlCwO7Hp CQm5jiTenkBZqG5n5pUB37oApRJ8B+8IGLqdxs2OdoC4crok1Fuel7WFfMpEbD1+ +p6OZvDlilaFOtj2ViAn82RtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvM+2MOCq 6KHdE3CtgAzpQfWt788wHwYDVR0jBBgwFoAUbbZgfaaV3QngKYA6L/JiWtiDguMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0M0Y4L0Y3OTBDQzVBN0M2 QTExRUY5QTY4ODg1N0M0RjlBRTAyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmJaZ2ZhYVYzUW5nS1lBNkxfSmlXdGlEZ3VNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 M0Y4L0Y3OTBDQzVBN0M2QTExRUY5QTY4ODg1N0M0RjlBRTAyL2JiWmdmYWFWM1Fu Z0tZQTZMX0ppV3RpRGd1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACW2ci9+PXpuVWkT22V2Hh85jlt5G3SLvePo62vQ1eE8Bg5DkTxOlu0S Rj5bb+NqQa2tHPH1HYafb58CwfbOaGhEXRfOLy/t3MPQvEavqLWNCXOBrR8Oa3Cs po9uwrvS4EtVw8eb3misYakAR2U3zpgRZhuFY7xcn3O6r7uKXwXsMPtzGbsaJxO0 QIv1omk0TiJ3vhGruHLCRisUx403Tpr0wVhQqSVJq6J5L5uNOkokb0L9WheNFCWS 3adNyhXVVeo8AwAUMB4jv7FV3EK4r7ifXgxf4dWbvdoQ920AqmKGcJG6bYBQPFXK IpwXApqHU1QhDNkAIljpJqJGpi82wMc= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org