$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: KqFuWTy0u0f4d1pn3lVwAK1sZZIshZtIn1b5uiwgODA= Subject key identifier: EF:BE:A2:20:DF:B1:AF:4E:50:48:79:72:8B:64:E3:84:A4:9C:CA:64 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 07 Signing time: Thu 21 Nov 2024 06:13:52 +0000 Manifest this update: Thu 21 Nov 2024 06:13:51 +0000 Manifest next update: Thu 28 Nov 2024 06:13:51 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: pdmQ8z8kUHqbv+gvnXE2GfWjh5FszyHvD2t33onaI0o=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Nov 21 06:13:51 2024 GMT Not After : Nov 28 06:13:51 2024 GMT Subject: CN=673ecf9f-5610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:76:65:00:5b:fd:59:58:26:9c:bc:8c:90: 91:01:b1:70:9c:6a:f4:e5:e0:b8:15:4a:1d:68:ee: e5:e5:4b:b6:a5:ba:fb:cc:1b:f7:ee:76:5f:d4:92: 13:7f:cf:d6:df:d4:ad:cb:f5:b4:ea:fd:75:d9:4f: c7:8c:42:a2:f9:15:4a:e6:04:8b:c6:1e:7f:2e:84: 62:ee:13:b0:28:3f:f0:bf:e0:f5:d1:1b:c4:99:63: 98:8f:5d:71:83:74:04:a7:93:f1:7b:c8:b5:06:ee: a7:d4:70:e0:2c:a3:28:8d:73:f3:9a:f3:8f:96:94: 32:1f:95:79:46:7e:ee:13:83:0f:6e:6f:fe:ce:5b: 34:82:da:2f:ac:cf:83:17:ea:42:a6:11:d0:74:f9: 3c:af:b4:49:87:45:33:7f:84:c4:34:12:ec:dc:c2: 99:7e:6e:fa:ba:ba:f8:5f:a5:63:da:3f:d4:43:4b: cf:06:06:22:a2:de:e2:02:da:5d:30:4d:7d:6f:fb: 34:56:f1:e6:18:84:97:9d:cb:e6:bc:79:59:d3:f1: 52:90:6a:c0:0d:02:1f:ad:b7:1f:ed:a7:d5:cb:18: 8a:6e:7c:2a:12:1f:2c:65:f2:50:bf:43:47:0f:bb: fa:c8:15:96:78:bd:e0:e8:80:a9:cb:5f:b6:1c:03: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BE:A2:20:DF:B1:AF:4E:50:48:79:72:8B:64:E3:84:A4:9C:CA:64 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:76:10:39:6d:a9:b2:52:dc:e9:72:f4:b0:24:40:98:27:53: db:22:52:cb:e9:fa:b1:5e:ea:23:da:ec:cd:d9:8b:5a:d9:af: 5b:e2:d1:3b:7e:e5:52:13:71:78:69:49:e6:09:4f:8c:24:2d: 72:c7:bd:53:16:a3:86:f3:a1:0c:76:d5:97:87:04:15:93:02: 32:3a:05:fe:b5:28:41:69:df:4c:9b:76:4b:06:5e:89:f9:ce: 5e:71:a5:c7:dd:5c:29:71:90:2c:bb:76:10:40:c9:2a:ad:42: 58:37:4f:86:d4:51:a7:23:24:2f:cb:b1:c8:c2:51:cc:3d:7e: 3f:1d:02:4e:02:6a:13:ee:38:9e:21:29:ac:29:3f:26:46:c5: 3d:b0:d9:85:9c:94:43:e6:ec:f9:e4:ab:e2:8f:64:93:01:eb: e4:29:20:56:7b:7c:79:ec:f9:19:96:d4:02:40:42:74:51:b6: 7f:d7:f9:9e:40:08:fd:2a:35:9a:f0:bd:8b:00:f4:f7:9f:4a: e4:56:b4:4b:3c:b0:d2:cc:05:df:94:c1:90:71:9b:19:b8:e4: 87:58:91:57:81:a8:92:01:1a:60:07:ae:30:2c:b3:47:96:fa: 66:4b:12:5a:ce:fb:4a:fa:8e:03:ff:c3:29:70:de:3a:db:79: 10:47:0f:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEQzRTExMC8GA1UEBRMoMDdGMzFCNDc0NzEzQjNBMTUyQzZBNUY4RjQ4REVEMjA5 N0RDMjQxRjAeFw0yNDExMjEwNjEzNTFaFw0yNDExMjgwNjEzNTFaMBgxFjAUBgNV BAMTDTY3M2VjZjlmLTU2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcvHZlAFv9WVgmnLyMkJEBsXCcavTl4LgVSh1o7uXlS7aluvvMG/fudl/UkhN/ z9bf1K3L9bTq/XXZT8eMQqL5FUrmBIvGHn8uhGLuE7AoP/C/4PXRG8SZY5iPXXGD dASnk/F7yLUG7qfUcOAsoyiNc/Oa84+WlDIflXlGfu4Tgw9ub/7OWzSC2i+sz4MX 6kKmEdB0+TyvtEmHRTN/hMQ0Euzcwpl+bvq6uvhfpWPaP9RDS88GBiKi3uIC2l0w TX1v+zRW8eYYhJedy+a8eVnT8VKQasANAh+ttx/tp9XLGIpufCoSHyxl8lC/Q0cP u/rIFZZ4veDogKnLX7YcA01BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU776iIN+x r05QSHlyi2TjhKScymQwHwYDVR0jBBgwFoAUB/MbR0cTs6FSxqX49I3tIJfcJB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0JERUU5RTI0OUZE NzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQl9NYlIwY1RzNkZTeHFYNDlJM3RJSmZjSkI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZG U3hxWDQ5STN0SUpmY0pCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJ2EDltqbJS3Oly9LAkQJgnU9siUsvp+rFe6iPa7M3Zi1rZr1vi0Tt+ 5VITcXhpSeYJT4wkLXLHvVMWo4bzoQx21ZeHBBWTAjI6Bf61KEFp30ybdksGXon5 zl5xpcfdXClxkCy7dhBAySqtQlg3T4bUUacjJC/LscjCUcw9fj8dAk4CahPuOJ4h KawpPyZGxT2w2YWclEPm7Pnkq+KPZJMB6+QpIFZ7fHns+RmW1AJAQnRRtn/X+Z5A CP0qNZrwvYsA9PefSuRWtEs8sNLMBd+UwZBxmxm45IdYkVeBqJIBGmAHrjAss0eW +mZLElrO+0r6jgP/wylw3jrbeRBHD1M= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org