$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft File: BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft (raw, json) Hash identifier: mfaehv82ERaH+i4KY3azSNRmvE9dZ6pVrv80NVfTOL4= Subject key identifier: 70:2C:F4:88:35:6C:95:2D:09:B7:2A:A3:09:F9:F4:B6:CB:75:4E:4A Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft Manifest number: 0102 Signing time: Sat 23 Nov 2024 03:24:23 +0000 Manifest this update: Sat 23 Nov 2024 03:24:23 +0000 Manifest next update: Sat 30 Nov 2024 03:24:23 +0000 Files and hashes: 1: BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl (hash: sMOGR2YPxVT7aAw8lI5NffBm2RqYTrF79LZqPZsFZUA=) 2: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (hash: /DTvOzCxzqSPZ3Y9r1E+ZaauKupsblc8p2z5X3vzC38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4 Validity Not Before: Nov 23 03:24:23 2024 GMT Not After : Nov 30 03:24:23 2024 GMT Subject: CN=67414ae7-7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:32:a3:5b:3e:95:68:91:4d:4a:4b:17:3f: 3e:35:b9:6c:d8:97:51:b2:45:3c:41:5e:c5:7a:ff: a4:25:f5:b1:31:06:27:86:b8:53:a7:fe:62:3c:3f: 37:5e:65:bd:db:f0:78:d0:52:a7:8e:8e:85:e1:f2: 6a:8c:26:00:b9:32:1d:9a:e6:fc:0a:e6:4a:20:e3: 73:8d:1b:23:34:38:06:c2:18:e6:49:76:cc:42:83: eb:66:64:b5:a0:82:e5:2a:bb:e4:e3:b1:be:33:1c: f2:5b:1a:5e:c1:3c:30:f8:d0:f8:8c:71:31:84:0b: 8c:8e:4c:da:22:89:94:0c:5f:1e:24:77:9b:3d:79: a6:85:56:f7:ae:94:7d:49:5f:13:2e:01:b4:2b:e0: f6:27:73:35:91:e4:8c:6c:23:58:4d:50:ae:c8:f7: b7:20:29:31:6e:a7:d2:68:a6:2f:a4:84:7a:63:1c: b2:e6:96:d8:0f:85:c1:70:49:51:04:a1:68:a9:a2: 3a:15:85:7f:f4:af:ce:07:d2:59:8b:58:96:2e:48: db:37:ee:b5:a1:09:7f:42:f7:9f:5e:59:62:b0:55: a8:7c:97:95:bb:67:d9:65:99:95:a5:f3:5f:47:8d: 62:7d:fc:bf:33:46:c1:a6:c1:d8:7c:db:a9:17:d1: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2C:F4:88:35:6C:95:2D:09:B7:2A:A3:09:F9:F4:B6:CB:75:4E:4A X509v3 Authority Key Identifier: keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:2f:6b:0b:a4:36:c8:93:fa:bf:d0:dc:11:a1:fa:01:fe: 81:2e:f7:dd:16:bb:aa:3f:c8:0d:08:0d:e9:be:bd:10:3b:94: 5b:6b:8e:01:27:a3:63:c2:de:91:76:39:0e:09:25:e6:79:ea: 1e:55:9e:92:56:27:4a:9d:12:16:0c:4a:cf:f8:90:73:a1:95: 69:86:4f:2d:b5:9c:76:82:36:96:a0:49:05:d4:1f:42:76:87: 7a:a6:7e:f7:02:a8:68:4a:26:e9:9f:d6:61:da:9a:40:8f:b5: 89:58:b0:bc:80:b1:ba:49:ce:a9:7f:e6:32:35:5d:15:10:5e: 05:7e:fc:0a:59:5d:c9:7b:0d:e0:0c:83:37:2f:b0:df:a8:5b: 02:20:59:5c:b4:36:e1:b4:de:ea:0d:46:e5:98:74:d3:c8:e9: f2:87:b5:6b:fd:3a:3f:3e:24:7d:e1:7a:4a:bd:86:a9:32:24: 46:96:7c:b0:f5:61:e3:44:20:07:e9:af:02:5b:15:0f:d0:41: 9e:e6:05:85:ae:1b:c7:cc:3b:41:3c:f1:23:7a:9b:eb:3f:cd: 58:96:e0:1e:62:8b:c3:c1:71:9e:1b:20:71:5c:0f:30:ba:fd: 36:ed:8c:08:d0:61:b8:6d:31:33:cf:1b:24:c4:41:16:7f:35: 14:9c:ec:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJGQUIxMTAvBgNVBAUTKDA1ODNBODVGRTMxM0ZDMEQ2MzY2RTIyQzQ0NjZCMjkz RUFENDVBRTQwHhcNMjQxMTIzMDMyNDIzWhcNMjQxMTMwMDMyNDIzWjAYMRYwFAYD VQQDEw02NzQxNGFlNy03YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB8yo1s+lWiRTUpLFz8+Nbls2JdRskU8QV7Fev+kJfWxMQYnhrhTp/5iPD83 XmW92/B40FKnjo6F4fJqjCYAuTIdmub8CuZKIONzjRsjNDgGwhjmSXbMQoPrZmS1 oILlKrvk47G+MxzyWxpewTww+ND4jHExhAuMjkzaIomUDF8eJHebPXmmhVb3rpR9 SV8TLgG0K+D2J3M1keSMbCNYTVCuyPe3ICkxbqfSaKYvpIR6Yxyy5pbYD4XBcElR BKFoqaI6FYV/9K/OB9JZi1iWLkjbN+61oQl/QvefXllisFWofJeVu2fZZZmVpfNf R41iffy/M0bBpsHYfNupF9FhcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAs9Ig1 bJUtCbcqown59LbLdU5KMB8GA1UdIwQYMBaAFAWDqF/jE/wNY2biLERmspPq1Frk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkZBQi8zM0E5Q0M5QzM2 ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9BMWpadUlzUkdheWstclVX dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkZBQi8zM0E5Q0M5QzM2ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9B MWpadUlzUkdheWstclVXdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Ky9rC6Q2yJP6v9DcEaH6Af6BLvfdFruqP8gNCA3pvr0QO5Rba44B J6Njwt6RdjkOCSXmeeoeVZ6SVidKnRIWDErP+JBzoZVphk8ttZx2gjaWoEkF1B9C dod6pn73AqhoSibpn9Zh2ppAj7WJWLC8gLG6Sc6pf+YyNV0VEF4FfvwKWV3Jew3g DIM3L7DfqFsCIFlctDbhtN7qDUblmHTTyOnyh7Vr/To/PiR94XpKvYapMiRGlnyw 9WHjRCAH6a8CWxUP0EGe5gWFrhvHzDtBPPEjepvrP81YluAeYovDwXGeGyBxXA8w uv027YwI0GG4bTEzzxskxEEWfzUUnOw3 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org