$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: ScL4iKdN+Yvj24iaz3fy1W5+7Yo3gqMUk2pyiRcKhjA= Subject key identifier: 0D:29:65:9E:E7:9D:97:4B:DD:53:CE:1C:DE:E8:04:E2:56:8F:AB:68 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: 1E Signing time: Wed 23 Oct 2024 06:36:10 +0000 Manifest this update: Wed 23 Oct 2024 06:36:10 +0000 Manifest next update: Wed 30 Oct 2024 06:36:10 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: cedvNuvDMOHZQdDabkfVjpupi+UR1gEe6mdk6ZMeNpw=) 2: 8272075A718811EFA05C8C34C4F9AE02.roa (hash: IdGZVtOAucmj5mJ6qIXuEryRVBqu9HTxzD1KXjCff2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Oct 23 06:36:10 2024 GMT Not After : Oct 30 06:36:10 2024 GMT Subject: CN=6718995a-490f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:6a:d6:01:5b:81:ea:54:c5:ab:f8:b5:b0: a6:93:28:5b:19:05:ee:c8:16:24:dc:86:c0:28:09: fa:61:56:c4:53:31:14:08:3d:2c:d2:7d:dd:8a:4b: 87:4b:55:a9:60:4a:fa:0e:7a:dd:3c:3e:3f:14:c7: e3:c8:18:e0:44:99:d4:04:82:1b:1b:dd:56:6b:aa: dc:28:d5:57:55:4e:95:fa:eb:aa:d1:9f:f5:af:aa: f2:19:fb:ae:7c:fa:c2:6a:60:20:86:5e:fa:2f:fb: b5:75:a7:e5:63:23:0b:d6:3b:3c:ad:94:e9:cc:7c: a3:b6:1c:74:d5:f7:03:f3:a6:72:24:fe:a7:35:14: 36:3a:09:9b:40:88:d0:74:d9:54:31:f1:c9:53:61: f6:49:76:08:f1:c4:ed:b8:70:12:23:5a:3b:dc:60: 7a:7e:46:aa:9c:46:a6:ef:1c:39:cf:06:eb:ca:24: 08:db:30:6c:70:92:82:c9:07:4e:2c:82:83:03:4f: 49:25:3d:94:93:bd:8e:0b:3d:97:85:4f:6e:86:c6: 32:bb:49:7a:3e:c2:9e:ef:79:3b:41:e2:6f:a6:b3: e1:38:ea:6a:87:1a:dd:fa:b5:e3:64:96:95:b2:96: b2:ea:b4:da:97:92:69:8e:5c:0b:9d:15:9c:6a:05: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:29:65:9E:E7:9D:97:4B:DD:53:CE:1C:DE:E8:04:E2:56:8F:AB:68 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:19:4c:86:8c:83:f9:55:9d:e3:7e:37:95:ff:9b:27:ec:0b: 60:04:87:49:9a:33:58:b4:60:4c:bd:1a:1d:ac:28:b9:14:16: 53:e5:c5:45:3a:0a:5e:61:b0:09:db:c6:41:82:92:66:07:19: 29:7d:a2:41:a2:18:92:1f:b8:c5:ca:4d:86:d1:c7:1d:3e:8f: 45:5f:48:eb:d7:10:53:52:d8:d7:35:63:93:8d:c7:e2:a8:60: 76:4f:9a:57:33:8c:83:fe:a5:11:3a:37:d1:bb:5c:3c:fb:71: cc:3d:d5:c0:11:09:53:1a:88:ff:3f:d6:f2:d4:9f:f1:d1:49: 95:6b:f3:f7:e4:ad:01:77:2d:cd:79:41:49:aa:95:ba:ab:ca: 46:47:6e:a6:83:ce:14:f3:07:18:f8:17:43:ff:1c:24:7d:aa: 14:39:f4:bd:7e:e8:b0:f2:44:a1:44:bf:fd:4a:cb:6d:34:3a: b1:b7:6c:19:1f:d9:07:ab:99:33:b9:49:0b:d3:10:7d:34:8e: 3e:8b:f9:5d:63:ba:ab:c0:c4:3b:d7:a4:2c:78:f6:35:8d:e3: 7f:ca:94:51:c0:ad:f1:f6:2b:b0:4a:f1:b7:f3:01:6c:11:7d: 3a:13:0d:8c:b6:ad:71:ea:fc:64:54:76:9c:96:83:c9:e5:1f: fb:4b:a2:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkM4RjExMC8GA1UEBRMoMDU3Mzk1QjQ4NzhGQjFBNjdGQ0JBRDU4MjYxN0I3QkFB RjJDMzFGRjAeFw0yNDEwMjMwNjM2MTBaFw0yNDEwMzAwNjM2MTBaMBgxFjAUBgNV BAMTDTY3MTg5OTVhLTQ5MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8hWrWAVuB6lTFq/i1sKaTKFsZBe7IFiTchsAoCfphVsRTMRQIPSzSfd2KS4dL ValgSvoOet08Pj8Ux+PIGOBEmdQEghsb3VZrqtwo1VdVTpX666rRn/WvqvIZ+658 +sJqYCCGXvov+7V1p+VjIwvWOzytlOnMfKO2HHTV9wPzpnIk/qc1FDY6CZtAiNB0 2VQx8clTYfZJdgjxxO24cBIjWjvcYHp+RqqcRqbvHDnPBuvKJAjbMGxwkoLJB04s goMDT0klPZSTvY4LPZeFT26GxjK7SXo+wp7veTtB4m+ms+E46mqHGt36teNklpWy lrLqtNqXkmmOXAudFZxqBRyXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDSllnued l0vdU84c3ugE4laPq2gwHwYDVR0jBBgwFoAUBXOVtIePsaZ/y61YJhe3uq8sMf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2QzhGL0ZBMEUwNUE0NkI1 QTExRUZCQzk5OTI1Q0M0RjlBRTAyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01m OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlhPVnRJZVBzYVpfeTYxWUpoZTN1cThzTWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 QzhGL0ZBMEUwNUE0NkI1QTExRUZCQzk5OTI1Q0M0RjlBRTAyL0JYT1Z0SWVQc2Fa X3k2MVlKaGUzdXE4c01mOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ0ZTIaMg/lVneN+N5X/myfsC2AEh0maM1i0YEy9Gh2sKLkUFlPlxUU6 Cl5hsAnbxkGCkmYHGSl9okGiGJIfuMXKTYbRxx0+j0VfSOvXEFNS2Nc1Y5ONx+Ko YHZPmlczjIP+pRE6N9G7XDz7ccw91cARCVMaiP8/1vLUn/HRSZVr8/fkrQF3Lc15 QUmqlbqrykZHbqaDzhTzBxj4F0P/HCR9qhQ59L1+6LDyRKFEv/1Ky200OrG3bBkf 2QermTO5SQvTEH00jj6L+V1juqvAxDvXpCx49jWN43/KlFHArfH2K7BK8bfzAWwR fToTDYy2rXHq/GRUdpyWg8nlH/tLooI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:21 2024 by rpki-client on console-fra.rpki-client.org