$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: 34HUJHQHrWguXj44I5Dq68DXhL8lk/+jdc6S+3l1v54= Subject key identifier: 03:27:A4:88:4F:DB:9D:E3:53:6C:87:F6:5F:7E:47:F6:92:DA:E3:55 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 03E5 Signing time: Thu 21 Nov 2024 00:06:07 +0000 Manifest this update: Thu 21 Nov 2024 00:06:07 +0000 Manifest next update: Thu 28 Nov 2024 00:06:07 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: hffjJOSugT5oV4kwZ8RvYRn75xLWWlJfm0UDc0CJ4cc=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: wbQbC/y/BoLpuBcZscBy8Nrhi/a1crcaQwZZg6SBHJw=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: KqdP0dpBiQajD3B3GJ5ylfFEtSefS6F+/jUA7AVd2/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Nov 21 00:06:07 2024 GMT Not After : Nov 28 00:06:07 2024 GMT Subject: CN=673e796f-b2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:65:61:5d:61:44:ac:0b:6b:ac:f7:be:d1: c7:38:d7:24:5b:b5:2f:2c:bb:25:7c:5a:1d:c6:15: af:d6:20:1b:2b:ed:7c:6e:af:cd:c8:71:5c:ca:54: 64:50:c2:36:cd:c3:1c:c5:c2:5f:37:a1:9c:64:48: e8:dd:a0:ea:38:b3:e4:29:91:0f:b6:8c:27:64:ff: ee:8e:c7:5c:88:9a:81:68:4b:d8:6f:a0:64:54:be: c8:fc:7c:2f:12:a0:54:9d:21:93:a2:77:9e:87:00: 4a:81:ca:9c:28:d1:48:9d:ae:8a:be:47:bb:10:e3: a3:8b:a0:ef:7e:e3:92:a1:77:cd:c1:9c:0a:9e:96: 23:39:77:05:81:38:00:58:8c:b2:fe:a9:c5:28:cf: 1b:ae:53:14:3a:2f:1c:3a:63:1b:b9:ea:b8:6d:bf: 04:42:39:5a:ba:09:63:7c:1b:20:a6:09:21:2f:d5: 5e:76:ac:10:9e:07:89:d6:f6:db:97:10:b4:cf:af: 80:19:d3:32:0d:31:51:b2:99:5f:1c:09:4e:ea:69: c8:f9:cc:fa:cf:01:a3:91:3d:31:4b:92:c1:96:36: 5c:1e:9e:8d:46:7d:b1:16:a2:32:76:7d:81:6c:0b: 65:01:5f:54:af:0f:36:93:fd:c6:41:38:a9:57:a0: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:A4:88:4F:DB:9D:E3:53:6C:87:F6:5F:7E:47:F6:92:DA:E3:55 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4f:62:9b:3c:6f:16:80:b7:c0:42:6a:9e:c0:ef:d4:9d:d3: 12:2d:bf:e2:eb:0c:a5:31:98:76:05:71:72:5a:d9:45:4c:fe: a9:1e:82:ed:a2:1a:55:69:a0:8b:da:10:b0:4c:b7:0c:74:9a: 31:aa:a5:ac:66:fc:01:84:89:55:1b:c1:63:05:b8:26:60:7c: 67:81:d2:8a:b8:19:e2:26:a2:9b:5f:61:0d:6e:19:82:23:78: 31:ab:02:6f:3d:b1:22:b2:98:a8:68:92:30:8b:25:52:7c:5a: 9e:bc:bc:5e:51:6b:be:dd:24:72:1f:07:b6:91:bb:9d:9e:9c: b5:55:e4:15:96:c4:a4:10:80:9e:23:b5:fa:dc:23:6b:84:4a: 7f:61:a5:b1:f2:0a:62:d3:55:0a:ad:f9:5c:bf:46:31:43:0d: ac:74:a8:cf:8a:2a:61:81:5f:7c:1b:ec:f3:0f:ef:4d:52:5f: b8:dc:8f:86:73:21:fd:b0:d5:6b:c2:be:5f:71:bf:e8:d6:e4: 1c:db:83:a5:1b:7d:eb:36:32:31:4f:94:14:28:84:db:de:1c: 77:35:90:3f:4f:d0:ab:39:d6:a9:1c:db:65:33:e1:05:06:ed: 0e:d8:1b:71:2f:dd:c0:e3:a5:fd:89:34:02:80:77:3b:90:11: fb:21:4d:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjQxMTIxMDAwNjA3WhcNMjQxMTI4MDAwNjA3WjAYMRYwFAYD VQQDEw02NzNlNzk2Zi1iMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00BlYV1hRKwLa6z3vtHHONckW7UvLLslfFodxhWv1iAbK+18bq/NyHFcylRk UMI2zcMcxcJfN6GcZEjo3aDqOLPkKZEPtownZP/ujsdciJqBaEvYb6BkVL7I/Hwv EqBUnSGToneehwBKgcqcKNFIna6Kvke7EOOji6DvfuOSoXfNwZwKnpYjOXcFgTgA WIyy/qnFKM8brlMUOi8cOmMbueq4bb8EQjlaugljfBsgpgkhL9VedqwQngeJ1vbb lxC0z6+AGdMyDTFRsplfHAlO6mnI+cz6zwGjkT0xS5LBljZcHp6NRn2xFqIydn2B bAtlAV9Urw82k/3GQTipV6DeJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMnpIhP 253jU2yH9l9+R/aS2uNVMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzT2KbPG8WgLfAQmqewO/UndMSLb/i6wylMZh2BXFyWtlFTP6pHoLt ohpVaaCL2hCwTLcMdJoxqqWsZvwBhIlVG8FjBbgmYHxngdKKuBniJqKbX2ENbhmC I3gxqwJvPbEispioaJIwiyVSfFqevLxeUWu+3SRyHwe2kbudnpy1VeQVlsSkEICe I7X63CNrhEp/YaWx8gpi01UKrflcv0YxQw2sdKjPiiphgV98G+zzD+9NUl+43I+G cyH9sNVrwr5fcb/o1uQc24OlG33rNjIxT5QUKITb3hx3NZA/T9CrOdapHNtlM+EF Bu0O2BtxL93A46X9iTQCgHc7kBH7IU16 -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org