$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: nHJnMGQ5+u4gpZNbbNUJLjzgKmdLG9wMbgAltos+ZL8= Subject key identifier: 2A:15:61:4F:A8:AB:20:8D:FD:5F:6B:2F:1B:55:CC:B4:23:B8:70:C3 Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 17B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 17A9 Signing time: Fri 22 Nov 2024 16:34:11 +0000 Manifest this update: Fri 22 Nov 2024 16:34:11 +0000 Manifest next update: Fri 29 Nov 2024 16:34:11 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: gbkebtFTgEEzrV/Io5BKpTvqwqPkvuw13pbH8utYTxM=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: aRH01IUvItkJMk65lvOFWwpfHYd0U/w3NKuSxLWLFjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6065 (0x17b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Nov 22 16:34:11 2024 GMT Not After : Nov 29 16:34:11 2024 GMT Subject: CN=6740b283-723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:39:27:cf:03:0b:93:b7:50:d5:23:0b:43: 09:33:06:e5:b6:db:fb:23:b0:89:1a:68:c6:a7:09: 31:63:a9:e2:91:86:cb:f8:6a:20:f8:83:0f:b6:eb: c0:34:94:e9:67:3b:22:f5:76:00:74:11:e5:1b:02: 44:c8:be:44:89:e2:73:ea:71:e3:20:f3:48:13:b0: 5a:ea:e7:f5:73:ee:3b:bc:d7:56:78:c7:0a:12:50: 16:a8:4c:84:86:52:5b:12:8b:91:37:7e:77:86:6e: 2d:29:72:cb:fe:6d:60:3c:c5:b2:b3:8a:87:08:78: 26:8e:2a:bc:6b:75:b9:51:ef:ca:99:da:7f:9e:28: c5:88:0c:fa:1c:ce:d2:53:39:e2:36:c7:99:cb:0b: 54:7a:27:fa:de:7a:29:00:e6:c5:09:af:76:0a:d1: 6c:f1:5a:50:2b:b2:8b:f3:1a:ba:6f:c1:41:a1:bf: 82:11:42:cc:94:66:41:86:20:bd:12:9c:e3:cb:15: d3:e5:f4:c1:ee:81:46:2f:9c:df:89:a6:66:6e:41: 69:76:be:55:fd:4b:28:e6:34:78:be:c4:98:71:80: 4b:57:3f:fa:8e:0a:06:1d:7d:19:19:a2:b8:d5:3b: f5:ca:55:99:89:b2:d7:23:a6:ca:7c:95:2d:d9:23: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:61:4F:A8:AB:20:8D:FD:5F:6B:2F:1B:55:CC:B4:23:B8:70:C3 X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:20:ff:72:e2:c3:80:16:09:b1:be:cb:d2:34:a7:63:70: ff:a5:f7:dd:c6:df:dc:88:31:35:56:0b:63:bd:41:4f:79:a8: 93:26:08:ce:db:03:b3:28:d4:cd:dd:b7:89:b6:17:85:4d:04: c8:72:c4:67:9b:64:49:9a:5b:ff:cc:84:f4:97:ce:92:ab:ee: f4:0b:6e:e5:c1:0e:72:45:73:65:95:4b:b2:87:6e:b9:9d:92: f8:ab:12:8a:ad:f6:47:ee:ee:19:ba:00:3d:4e:30:96:19:f7: a9:74:3d:53:33:1e:e1:1f:f8:65:43:2c:49:3f:9a:36:b7:19: 25:bb:79:55:6b:23:d3:46:c8:e3:08:8b:cb:15:1e:58:b9:84: d3:2c:42:f8:08:2c:c7:3b:1b:75:d4:0d:5e:74:03:0e:05:2d: 44:ac:b2:a8:0b:42:f1:1e:be:7f:86:0e:46:ec:11:29:bc:0b: 33:e0:42:83:f0:5e:24:b1:da:d9:35:dd:6b:4c:63:01:6e:52: 96:06:77:c2:0e:02:35:49:77:2d:27:80:c2:66:ef:80:7f:34: df:c9:c4:4f:e8:c5:7b:46:75:44:b0:3b:e4:13:38:27:32:ba: 6a:db:f9:e6:e1:df:aa:a2:d5:2a:cf:77:62:c2:7d:70:07:00: a8:a7:a0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjQxMTIyMTYzNDExWhcNMjQxMTI5MTYzNDExWjAYMRYwFAYD VQQDEw02NzQwYjI4My03MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5A5J88DC5O3UNUjC0MJMwblttv7I7CJGmjGpwkxY6nikYbL+Gog+IMPtuvA NJTpZzsi9XYAdBHlGwJEyL5EieJz6nHjIPNIE7Ba6uf1c+47vNdWeMcKElAWqEyE hlJbEouRN353hm4tKXLL/m1gPMWys4qHCHgmjiq8a3W5Ue/Kmdp/nijFiAz6HM7S UzniNseZywtUeif63nopAObFCa92CtFs8VpQK7KL8xq6b8FBob+CEULMlGZBhiC9 EpzjyxXT5fTB7oFGL5zfiaZmbkFpdr5V/Uso5jR4vsSYcYBLVz/6jgoGHX0ZGaK4 1Tv1ylWZibLXI6bKfJUt2SNGHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoVYU+o qyCN/V9rLxtVzLQjuHDDMB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRhCD/cuLDgBYJsb7L0jSnY3D/pffdxt/ciDE1VgtjvUFPeaiTJgjO 2wOzKNTN3beJtheFTQTIcsRnm2RJmlv/zIT0l86Sq+70C27lwQ5yRXNllUuyh265 nZL4qxKKrfZH7u4ZugA9TjCWGfepdD1TMx7hH/hlQyxJP5o2txklu3lVayPTRsjj CIvLFR5YuYTTLEL4CCzHOxt11A1edAMOBS1ErLKoC0LxHr5/hg5G7BEpvAsz4EKD 8F4ksdrZNd1rTGMBblKWBnfCDgI1SXctJ4DCZu+AfzTfycRP6MV7RnVEsDvkEzgn Mrpq2/nm4d+qotUqz3diwn1wBwCop6DY -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org