$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: 3rygRhKg51vfH21m2m6pFD019/85gTzDOe5inp6nH04= Subject key identifier: 8E:66:3B:F0:A7:C6:BB:05:57:C1:01:CD:92:2E:E9:8B:DA:CC:ED:69 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 050B Signing time: Wed 20 Nov 2024 19:34:36 +0000 Manifest this update: Wed 20 Nov 2024 19:34:36 +0000 Manifest next update: Wed 27 Nov 2024 19:34:36 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: 40xmKY22d3/vUhAW/ivc7htl52DgFJGr8IyFL2C4C8w=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: +5HXeZzaqL8Fd/KKvyuXF2mNME+6yWjEsjlZ9TCANS8=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: k1c7GSyH3WoRbwuja3aZP/eqPGFzjIJTKfDzkLI42LM=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: WDAtZkvVBWCh4sdS393tb7mD2RpYvoRQQWQo7es9q/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Nov 20 19:34:36 2024 GMT Not After : Nov 27 19:34:36 2024 GMT Subject: CN=673e39cc-8ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:67:f1:03:52:c3:87:d4:40:0f:01:43:a6: 68:9d:2f:8a:af:0e:51:a0:fd:27:ff:2b:0d:56:30: d4:6a:30:9a:6c:56:b5:90:1f:5f:bb:95:4a:db:a9: c2:85:81:7b:00:5c:d1:27:d8:75:28:46:8f:b7:59: b4:74:9c:d0:b1:94:e4:ae:5c:fa:bb:c7:59:00:c6: fc:b6:d7:1d:c0:c9:fc:40:57:79:03:db:79:9f:84: bb:f4:42:00:57:c6:29:f9:66:a9:47:cb:eb:86:12: e3:03:94:60:97:de:5a:e4:0a:f3:1e:7d:4b:fd:f7: 96:df:7d:6b:d9:27:98:d3:d5:63:05:50:88:e0:50: 37:3b:b8:36:61:be:56:23:3f:ab:0d:57:8f:0c:f3: a9:12:16:5d:49:dc:b3:01:8d:c0:26:ef:c2:1d:42: 59:4f:69:da:0f:90:1a:7b:01:d9:9b:b8:a1:c2:13: 85:99:3b:86:14:f8:fe:c5:b4:57:71:70:f5:9b:95: fc:e0:39:8e:22:e2:94:f4:8d:33:2c:46:88:f1:5e: 69:55:53:cd:e1:8a:26:eb:05:db:aa:53:32:28:38: 44:62:b4:12:e6:7a:6e:0d:01:4c:3f:ab:d4:cd:d8: 79:0f:b5:dc:7c:03:e4:70:80:76:4d:82:3f:26:dd: f1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:3B:F0:A7:C6:BB:05:57:C1:01:CD:92:2E:E9:8B:DA:CC:ED:69 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:38:ab:c5:00:fe:15:ee:ae:4a:1f:d6:64:9c:c0:fc:85: ff:28:22:18:b7:5f:52:26:a6:62:25:20:4b:85:cc:62:5e:29: 5f:e9:b7:86:e6:a9:1d:0c:6d:0d:3c:45:ec:f8:d2:5e:fa:ae: 0f:1a:a7:72:64:f4:75:c9:56:02:a1:9a:00:16:6e:7a:b9:32: 06:b6:d8:96:74:1c:c4:2a:e5:af:8d:7f:37:0b:6b:42:a2:c7: b0:2e:93:42:6f:db:03:b0:7e:66:a1:21:cf:16:00:fa:ce:38: f8:69:ba:73:96:e2:44:5d:94:a0:99:fa:a4:af:b3:0a:3a:aa: 24:7b:10:bf:f0:17:53:54:0b:de:fa:c0:61:80:7d:93:83:e7: 7c:3c:c4:48:2d:e3:2b:75:cf:4e:b0:16:74:bf:13:e0:c1:02: b2:58:7a:b8:bf:09:ec:2b:a9:69:f1:4d:1d:ac:9f:49:34:61: d5:96:41:5b:65:cf:da:86:30:81:51:08:5e:93:69:59:25:a6: e3:3c:01:2d:d5:b7:7f:1a:be:4d:bb:fd:6b:d2:94:a0:07:df: dd:39:e4:a3:fd:99:38:2d:53:a0:0b:d9:b6:a8:52:3a:90:ef: 7c:df:8e:6f:96:37:f0:79:e6:5d:f9:13:51:5b:6a:fa:80:45: 7e:76:fd:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjQxMTIwMTkzNDM2WhcNMjQxMTI3MTkzNDM2WjAYMRYwFAYD VQQDEw02NzNlMzljYy04ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ppn8QNSw4fUQA8BQ6ZonS+Krw5RoP0n/ysNVjDUajCabFa1kB9fu5VK26nC hYF7AFzRJ9h1KEaPt1m0dJzQsZTkrlz6u8dZAMb8ttcdwMn8QFd5A9t5n4S79EIA V8Yp+WapR8vrhhLjA5Rgl95a5ArzHn1L/feW331r2SeY09VjBVCI4FA3O7g2Yb5W Iz+rDVePDPOpEhZdSdyzAY3AJu/CHUJZT2naD5AaewHZm7ihwhOFmTuGFPj+xbRX cXD1m5X84DmOIuKU9I0zLEaI8V5pVVPN4Yom6wXbqlMyKDhEYrQS5npuDQFMP6vU zdh5D7XcfAPkcIB2TYI/Jt3xawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5mO/Cn xrsFV8EBzZIu6YvazO1pMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxtzirxQD+Fe6uSh/WZJzA/IX/KCIYt19SJqZiJSBLhcxiXilf6beG 5qkdDG0NPEXs+NJe+q4PGqdyZPR1yVYCoZoAFm56uTIGttiWdBzEKuWvjX83C2tC osewLpNCb9sDsH5moSHPFgD6zjj4abpzluJEXZSgmfqkr7MKOqokexC/8BdTVAve +sBhgH2Tg+d8PMRILeMrdc9OsBZ0vxPgwQKyWHq4vwnsK6lp8U0drJ9JNGHVlkFb Zc/ahjCBUQhek2lZJabjPAEt1bd/Gr5Nu/1r0pSgB9/dOeSj/Zk4LVOgC9m2qFI6 kO98345vljfweeZd+RNRW2r6gEV+dv1s -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org