$ rpki-client -vvf rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft File: bailJkp9xvzYjT1M3PSGecJi9w4.mft (raw, json) Hash identifier: CwPFEmYszJRNlMcEjj7NNNbxYtqQi/F66uQ0Ldr6VVo= Subject key identifier: E7:55:11:20:9F:EB:E8:E3:E7:19:63:8F:A1:03:02:9F:71:25:C2:5C Authority key identifier: 6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E Certificate issuer: /CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft Manifest number: 0368 Signing time: Sat 23 Nov 2024 00:29:24 +0000 Manifest this update: Sat 23 Nov 2024 00:29:23 +0000 Manifest next update: Sat 30 Nov 2024 00:29:23 +0000 Files and hashes: 1: bailJkp9xvzYjT1M3PSGecJi9w4.crl (hash: 2JDH4yk4h2NasxsGPSvQf84X6qWfk7tLEsF0q422qk0=) 2: 07C387B6898E11EC9543A60FC4F9AE02.roa (hash: Z8nOZSdO25Utl4pPDw4ubtfpNujKkQIc0psO5bVfVdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F536/serialNumber=6DA8A5264A7DC6FCD88D3D4CDCF48679C262F70E Validity Not Before: Nov 23 00:29:23 2024 GMT Not After : Nov 30 00:29:23 2024 GMT Subject: CN=674121e3-5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:4b:69:fb:17:2f:18:2b:50:ad:c3:d5:8c: 5b:e7:33:c3:9c:1a:9b:4a:5e:f4:0e:aa:ba:7e:6e: ea:4a:29:8e:85:c9:1d:dc:90:8a:50:ac:2c:52:14: 11:0f:d2:b7:38:4d:6b:84:8a:b4:c3:ad:fb:34:bf: 40:17:82:9b:2b:f4:71:fe:8e:52:0e:f3:8d:a2:c4: 66:1c:95:c4:ca:1b:f4:e1:1e:87:b2:83:80:ac:b1: e9:b0:9a:ed:b6:ed:7b:97:fd:b1:fd:ad:01:18:04: 39:fa:57:c4:05:07:53:6d:f8:72:9a:4b:62:80:5f: 77:d5:f7:20:8d:fe:15:0d:01:dc:b4:94:3f:f0:44: 74:1e:f2:a9:da:89:96:59:e5:0d:b9:49:9f:6f:d5: be:c7:f2:d0:c2:8c:6e:96:d5:86:4b:7b:97:ba:3e: dd:85:f2:f3:47:12:24:a8:0a:a7:e2:5b:42:ec:dd: e6:87:ce:96:14:18:dd:30:04:81:23:9c:42:c4:68: 96:56:68:31:8a:89:8b:ce:dd:3f:d5:01:24:6a:3f: cd:6b:4a:a7:ff:30:ca:94:3c:f0:5a:93:65:59:45: 71:e4:0e:98:c9:45:46:87:ab:90:76:ea:d9:a3:6a: c2:68:be:6c:4b:df:51:19:31:aa:72:82:49:9b:e1: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:55:11:20:9F:EB:E8:E3:E7:19:63:8F:A1:03:02:9F:71:25:C2:5C X509v3 Authority Key Identifier: keyid:6D:A8:A5:26:4A:7D:C6:FC:D8:8D:3D:4C:DC:F4:86:79:C2:62:F7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bailJkp9xvzYjT1M3PSGecJi9w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F536/EAAEDED0898A11ECB6A4F70BC4F9AE02/bailJkp9xvzYjT1M3PSGecJi9w4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:c9:88:f3:8e:4a:f1:82:0d:ce:70:ba:60:59:a3:ab:1b: 19:46:a8:3d:b0:2c:1f:7b:ae:2d:1c:7e:a9:40:93:f3:b2:5e: 72:40:2f:7a:7e:cf:cd:b1:c6:81:60:c4:f2:de:9c:86:d4:76: 10:7d:73:38:bc:07:54:87:73:de:e4:72:15:15:34:5c:7f:21: e1:57:54:a5:b9:2a:8e:35:ef:3a:13:a4:e0:81:d9:7e:b5:6f: f1:fe:4b:49:76:d2:79:bb:f8:02:26:ab:03:ef:f2:1a:8a:4f: 94:ca:53:4e:27:69:70:c4:2d:4c:3f:22:6a:86:46:da:dd:04: 1d:ae:55:2e:c7:80:6c:08:bc:5c:5e:ed:e8:50:3b:5e:64:20: 85:b1:37:6c:a5:1e:bd:a9:0b:1d:ad:c4:bd:61:dc:5f:4f:d5: b9:f5:c6:a7:4b:02:a2:17:dc:d6:c9:40:c9:ea:f9:49:9d:41: 28:28:9d:69:bb:70:dc:d1:3d:1c:4d:5b:4d:9f:b5:2d:81:d4: ad:58:71:a7:cd:36:99:4d:7e:1c:c2:95:95:95:4b:31:5a:d4: 37:f8:c9:72:84:10:89:b1:93:8c:5d:b2:cf:ca:75:39:d8:40: 30:5f:b2:d1:29:e2:b2:8b:6f:77:10:c3:5a:6f:2b:45:5e:1b: 66:1f:12:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1MzYxMTAvBgNVBAUTKDZEQThBNTI2NEE3REM2RkNEODhEM0Q0Q0RDRjQ4Njc5 QzI2MkY3MEUwHhcNMjQxMTIzMDAyOTIzWhcNMjQxMTMwMDAyOTIzWjAYMRYwFAYD VQQDEw02NzQxMjFlMy01ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqntLafsXLxgrUK3D1Yxb5zPDnBqbSl70Dqq6fm7qSimOhckd3JCKUKwsUhQR D9K3OE1rhIq0w637NL9AF4KbK/Rx/o5SDvONosRmHJXEyhv04R6HsoOArLHpsJrt tu17l/2x/a0BGAQ5+lfEBQdTbfhymktigF931fcgjf4VDQHctJQ/8ER0HvKp2omW WeUNuUmfb9W+x/LQwoxultWGS3uXuj7dhfLzRxIkqAqn4ltC7N3mh86WFBjdMASB I5xCxGiWVmgxiomLzt0/1QEkaj/Na0qn/zDKlDzwWpNlWUVx5A6YyUVGh6uQdurZ o2rCaL5sS99RGTGqcoJJm+H8VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdVESCf 6+jj5xljj6EDAp9xJcJcMB8GA1UdIwQYMBaAFG2opSZKfcb82I09TNz0hnnCYvcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjUzNi9FQUFFREVEMDg5 OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2ellqVDFNM1BTR2VjSmk5 dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhaWxKa3A5eHZ6WWpUMU0zUFNHZWNKaTl3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjUzNi9FQUFFREVEMDg5OEExMUVDQjZBNEY3MEJDNEY5QUUwMi9iYWlsSmtwOXh2 ellqVDFNM1BTR2VjSmk5dzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzLsmI845K8YINznC6YFmjqxsZRqg9sCwfe64tHH6pQJPzsl5yQC96 fs/NscaBYMTy3pyG1HYQfXM4vAdUh3Pe5HIVFTRcfyHhV1SluSqONe86E6Tggdl+ tW/x/ktJdtJ5u/gCJqsD7/Iaik+UylNOJ2lwxC1MPyJqhkba3QQdrlUux4BsCLxc Xu3oUDteZCCFsTdspR69qQsdrcS9YdxfT9W59canSwKiF9zWyUDJ6vlJnUEoKJ1p u3Dc0T0cTVtNn7UtgdStWHGnzTaZTX4cwpWVlUsxWtQ3+MlyhBCJsZOMXbLPynU5 2EAwX7LRKeKyi293EMNabytFXhtmHxIn -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org