$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: k3uB9bLfdhwJSXkrR5vrOrbvUu7j0iYxl3hNAVMQHI4= Subject key identifier: BF:1A:C2:4D:C3:1F:16:28:1A:5B:21:B2:E4:18:F2:E7:86:39:32:9B Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 056C Signing time: Fri 22 Nov 2024 22:53:37 +0000 Manifest this update: Fri 22 Nov 2024 22:53:37 +0000 Manifest next update: Fri 29 Nov 2024 22:53:37 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: GfJ5a8cyX+rtwqbRRubNOFbzWDCGhmmQqvodNO3gK2g=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 47HHXDnt39bkXS2AX3ZMrOCuV1oFM3pi8+pcdA0rJXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Nov 22 22:53:37 2024 GMT Not After : Nov 29 22:53:37 2024 GMT Subject: CN=67410b71-156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:c4:7a:5b:e4:ba:1d:98:bb:0b:19:4b:12: 5b:04:7d:f6:55:6e:8e:33:76:ad:0f:de:aa:7a:16: af:e4:2f:66:f8:27:94:1a:64:0a:cb:96:32:ed:01: c9:48:56:be:1b:4d:8c:d4:9c:b0:d8:e2:9a:11:79: bd:a5:4f:82:b6:cb:1c:31:18:ec:1f:79:47:f8:0c: 00:c0:61:f1:ab:6c:49:21:bd:d4:ce:fb:2a:93:dc: 2b:f6:ac:bb:e9:fb:55:78:0c:09:e4:22:0b:d4:8d: 99:1b:7c:9d:56:05:d1:07:ef:d5:7f:36:2b:de:c4: 45:76:00:ad:99:87:16:5f:3f:83:e3:06:17:cb:78: 74:db:3d:3b:c9:8d:bd:ca:7d:3f:0a:aa:76:76:fb: f7:35:03:3e:6b:44:f2:dd:62:05:10:43:32:27:35: 9a:71:e4:c5:9e:9b:01:84:95:1f:d8:d3:80:00:85: 4f:3d:6c:ce:22:99:92:c0:21:68:f8:62:91:d3:b3: 09:35:d4:f6:32:c9:3b:51:ab:25:15:fc:15:d1:57: a5:49:bb:14:15:f3:9c:a9:b8:78:5a:e6:b6:2c:75: e0:89:4b:50:91:87:64:e7:2c:02:90:70:44:91:13: 56:29:d5:38:f3:91:24:2e:ae:18:cd:5b:d0:41:d2: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:C2:4D:C3:1F:16:28:1A:5B:21:B2:E4:18:F2:E7:86:39:32:9B X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:d8:52:93:fc:36:f9:56:0a:91:22:80:57:06:e9:55:f0: fe:8d:e8:d9:31:e4:66:68:93:5e:09:bd:ab:55:76:ad:60:41: 56:81:be:1e:73:6b:b4:40:a9:ef:0e:a4:6a:d6:fd:eb:2a:e5: 07:0f:3e:de:32:bf:6c:c6:5c:b9:a6:1d:73:f1:13:ea:b5:ff: 06:8a:0d:b0:54:99:a4:21:6e:1c:db:cf:21:87:ae:88:4a:27: 58:27:f8:86:ed:84:72:e3:0c:fa:4f:86:cc:bf:c1:2c:3f:49: 04:99:54:b8:56:5e:9a:0c:cf:47:3e:63:66:1b:b7:a4:42:d9: a7:8d:06:b6:bc:db:b5:dd:47:70:04:ec:3e:df:b1:1f:2a:f4: db:64:99:39:b7:95:c1:ab:ba:3f:53:65:bd:47:f5:27:b7:86: bd:b9:5b:0f:b6:6a:4e:1c:e1:4f:23:ef:91:2a:9a:7c:9d:80: 56:80:ee:9e:a0:d1:f7:4d:d5:c2:b3:57:7e:4d:56:0b:1f:97: e6:fd:6c:85:5c:b6:92:0b:fc:70:d9:eb:35:9d:29:3c:8f:a0: 2f:71:f4:20:8a:d7:53:3f:6d:71:ad:18:6f:af:c6:ed:f7:cd: bf:f6:c1:dd:60:76:91:3a:00:f2:b7:65:e9:b5:93:ce:da:93: 0e:04:5d:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjQxMTIyMjI1MzM3WhcNMjQxMTI5MjI1MzM3WjAYMRYwFAYD VQQDEw02NzQxMGI3MS0xNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugLEelvkuh2YuwsZSxJbBH32VW6OM3atD96qehav5C9m+CeUGmQKy5Yy7QHJ SFa+G02M1Jyw2OKaEXm9pU+CtsscMRjsH3lH+AwAwGHxq2xJIb3Uzvsqk9wr9qy7 6ftVeAwJ5CIL1I2ZG3ydVgXRB+/VfzYr3sRFdgCtmYcWXz+D4wYXy3h02z07yY29 yn0/Cqp2dvv3NQM+a0Ty3WIFEEMyJzWaceTFnpsBhJUf2NOAAIVPPWzOIpmSwCFo +GKR07MJNdT2Msk7UaslFfwV0VelSbsUFfOcqbh4Wua2LHXgiUtQkYdk5ywCkHBE kRNWKdU485EkLq4YzVvQQdKyXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8awk3D HxYoGlshsuQY8ueGOTKbMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF7thSk/w2+VYKkSKAVwbpVfD+jejZMeRmaJNeCb2rVXatYEFWgb4e c2u0QKnvDqRq1v3rKuUHDz7eMr9sxly5ph1z8RPqtf8Gig2wVJmkIW4c288hh66I SidYJ/iG7YRy4wz6T4bMv8EsP0kEmVS4Vl6aDM9HPmNmG7ekQtmnjQa2vNu13Udw BOw+37EfKvTbZJk5t5XBq7o/U2W9R/Unt4a9uVsPtmpOHOFPI++RKpp8nYBWgO6e oNH3TdXCs1d+TVYLH5fm/WyFXLaSC/xw2es1nSk8j6AvcfQgitdTP21xrRhvr8bt 982/9sHdYHaROgDyt2XptZPO2pMOBF3Q -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org