$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft File: Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft (raw, json) Hash identifier: pM+XbvXExdtDbVQMWTEMqERW1QccwPD5XoySfdzkPFM= Subject key identifier: 47:80:37:65:DB:AC:14:6C:C5:E7:CD:DE:62:E5:65:38:E4:5C:40:48 Authority key identifier: 06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4 Certificate issuer: /CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft Manifest number: 096B Signing time: Wed 20 Nov 2024 19:57:01 +0000 Manifest this update: Wed 20 Nov 2024 19:57:01 +0000 Manifest next update: Wed 27 Nov 2024 19:57:01 +0000 Files and hashes: 1: Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl (hash: MDDAC/lzd3pJ3CeK4GgiZzLg2hiQ39EB19ltaW66Fa4=) 2: 87B603AAB1A611EC997A0F5AC4F9AE02.roa (hash: wEJV8F0jKuKJCAYC4bFGFKtCEeyPDPY8MQElgZ3jxf8=) 3: 86BEB596B1A611EC997A0F5AC4F9AE02.roa (hash: gE/NDxXClL9axdZSPQkBorOCsMPenK9FykewUcUEW/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4 Validity Not Before: Nov 20 19:57:01 2024 GMT Not After : Nov 27 19:57:01 2024 GMT Subject: CN=673e3f0d-9248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:db:0e:13:bb:b9:be:47:59:4d:f7:d0:89: 2c:4b:e3:9e:68:b5:53:b0:83:77:a0:7d:f9:9e:ce: 0c:99:c6:df:9a:65:7d:a3:8f:8d:00:e4:de:e9:5a: 21:96:cb:a1:de:0f:f4:45:b5:d1:8a:45:2e:16:c2: d8:c8:a9:5a:e1:43:3a:a8:8b:90:e1:df:9d:73:5a: fa:2e:38:9e:20:29:7f:54:dc:3a:b3:c5:5c:0f:66: dc:e0:c9:86:85:f8:c4:c9:db:69:ae:0a:ff:ab:ad: 34:af:6a:13:b7:84:68:2d:08:a6:a5:9c:42:1e:7a: 5c:12:55:2b:b0:55:2c:34:64:d1:f8:a6:4d:8f:60: f4:63:c2:99:06:6f:cd:53:69:64:04:35:53:e1:6d: c8:c6:39:24:12:83:6b:bf:fd:e8:af:f3:0f:21:14: 8e:25:86:7a:9b:7e:84:7b:70:0f:eb:ce:10:8a:32: 6b:c2:42:fb:70:ff:ea:93:ac:ec:84:70:62:07:23: 25:31:e4:bd:16:40:b3:3f:8a:fb:a3:39:0b:ad:d9: a9:01:71:bc:d9:b9:62:f3:45:f3:6c:3f:56:64:5b: e5:43:39:72:2f:6c:b9:19:c8:2a:0b:6c:bb:4e:7e: e3:64:a6:d8:7e:6e:81:8c:f3:c3:a9:b3:56:a3:1b: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:37:65:DB:AC:14:6C:C5:E7:CD:DE:62:E5:65:38:E4:5C:40:48 X509v3 Authority Key Identifier: keyid:06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:14:64:ae:fd:68:d0:b6:a6:04:63:96:68:0b:14:ce:7f:9a: 86:01:4c:2e:b2:b0:6a:2b:3f:e0:ad:3b:bc:eb:6d:19:b4:72: bc:9d:70:57:79:c4:2e:ae:8e:b3:41:b3:01:67:e7:d9:11:76: c3:7b:e0:e3:12:23:41:a9:15:1e:45:9b:48:2d:e2:d3:ae:fb: 0e:92:bf:e1:79:d6:90:79:7d:f4:fb:c9:88:ca:85:7e:4c:ae: 4a:1c:8b:5e:c5:ae:57:65:af:79:ad:b1:72:a1:d4:8e:ee:41: 23:e7:2a:91:bc:12:3d:a0:c7:94:1d:17:ca:26:63:59:21:7c: 5c:0f:dd:ce:ab:ab:7d:37:60:53:5d:04:11:cb:e3:13:e9:4b: 2c:33:32:af:06:d9:4c:7f:97:53:f4:82:e2:5c:53:b4:93:c7: fc:aa:63:98:26:4b:ad:12:5e:d1:35:42:da:c7:01:c5:4a:1e: a9:59:d8:5c:5f:08:d0:69:dd:6d:48:06:34:b4:16:ca:12:24: d0:d5:1a:03:47:99:e4:36:c5:e0:33:27:42:5c:57:1b:83:79: dd:df:b0:db:69:e0:7f:df:5c:bb:d2:3a:98:25:b8:fb:22:fb: 24:21:dd:3b:3f:b8:34:62:a2:64:c3:1d:82:6d:36:36:85:50: 7d:3e:d1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQzIxMTAvBgNVBAUTKDA2MkUzNzE2RENDNjI2QzQ5MjRGRjUzNDdFRjczOTI4 QjgwRDczQzQwHhcNMjQxMTIwMTk1NzAxWhcNMjQxMTI3MTk1NzAxWjAYMRYwFAYD VQQDEw02NzNlM2YwZC05MjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvnbDhO7ub5HWU330IksS+OeaLVTsIN3oH35ns4MmcbfmmV9o4+NAOTe6Voh lsuh3g/0RbXRikUuFsLYyKla4UM6qIuQ4d+dc1r6LjieICl/VNw6s8VcD2bc4MmG hfjEydtprgr/q600r2oTt4RoLQimpZxCHnpcElUrsFUsNGTR+KZNj2D0Y8KZBm/N U2lkBDVT4W3IxjkkEoNrv/3or/MPIRSOJYZ6m36Ee3AP684QijJrwkL7cP/qk6zs hHBiByMlMeS9FkCzP4r7ozkLrdmpAXG82bli80XzbD9WZFvlQzlyL2y5GcgqC2y7 Tn7jZKbYfm6BjPPDqbNWoxt78QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeAN2Xb rBRsxefN3mLlZTjkXEBIMB8GA1UdIwQYMBaAFAYuNxbcxibEkk/1NH73OSi4DXPE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZDMi9DRDEzQ0ZFNDg3 MDExMUVBQjI0RTA5NURDNEY5QUUwMi9CaTQzRnR6R0pzU1NUX1UwZnZjNUtMZ05j OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JpNDNGdHpHSnNTU1RfVTBmdmM1S0xnTmM4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZDMi9DRDEzQ0ZFNDg3MDExMUVBQjI0RTA5NURDNEY5QUUwMi9CaTQzRnR6R0pz U1NUX1UwZnZjNUtMZ05jOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxFGSu/WjQtqYEY5ZoCxTOf5qGAUwusrBqKz/grTu8620ZtHK8nXBX ecQuro6zQbMBZ+fZEXbDe+DjEiNBqRUeRZtILeLTrvsOkr/hedaQeX30+8mIyoV+ TK5KHItexa5XZa95rbFyodSO7kEj5yqRvBI9oMeUHRfKJmNZIXxcD93Oq6t9N2BT XQQRy+MT6UssMzKvBtlMf5dT9ILiXFO0k8f8qmOYJkutEl7RNULaxwHFSh6pWdhc XwjQad1tSAY0tBbKEiTQ1RoDR5nkNsXgMydCXFcbg3nd37DbaeB/31y70jqYJbj7 IvskId07P7g0YqJkwx2CbTY2hVB9PtET -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org