$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: 7I8vP1ANllVWIAipia+GKMbahJuEICQnZOyMjhuVhZM= Subject key identifier: E7:37:32:BB:A5:AC:AD:CE:DC:DD:CA:A9:9A:BE:17:24:7A:FD:AA:DE Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: B3 Signing time: Sat 23 Nov 2024 04:08:08 +0000 Manifest this update: Sat 23 Nov 2024 04:08:08 +0000 Manifest next update: Sat 30 Nov 2024 04:08:08 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: j+ImtrffKsvdoT/TQX5AdEvyWzyoJBvHfBrS64S/EE8=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: UGSyRpjL7ttyExQlI14icFC6/cdqhGLMajsfumm8438=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: EFe4wHrIVMtj8gmMScubMWxMxLMQyMD4rQ56V7MM9gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Nov 23 04:08:08 2024 GMT Not After : Nov 30 04:08:08 2024 GMT Subject: CN=67415528-65bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:59:aa:19:9e:36:7c:bc:da:77:c7:3a:83: 3a:b9:1f:52:3c:28:38:92:d8:ba:45:fa:cb:d9:54: 2e:7a:50:c8:7f:26:d1:6e:45:79:b9:3d:d4:5f:a6: 4b:d1:4b:0d:a3:b3:68:39:9c:88:1e:e3:b3:b4:54: 63:ad:f6:06:91:c0:14:ab:db:9d:8f:18:fe:02:1b: fc:3b:b2:4d:24:07:93:c4:a5:42:60:75:f8:fe:53: 9b:19:01:eb:3b:79:c3:06:1a:05:6d:f6:1f:b6:fb: d9:74:76:7c:e0:3b:96:a8:3c:59:ce:26:9c:97:f6: 7d:27:8e:17:b7:2b:37:57:bd:83:1a:ee:ac:77:bf: ed:56:b9:94:72:72:ac:54:8a:3c:98:f2:38:fd:48: 21:de:34:49:d9:d5:3a:7a:43:6f:9e:0e:94:35:88: e3:5b:96:6e:fe:bd:80:c0:f8:70:32:e0:6c:86:40: 92:8d:92:bc:da:e7:09:55:ca:84:55:79:42:d2:d0: 4d:5d:da:f2:ec:e3:94:ff:83:30:77:58:87:e5:68: 96:eb:8c:65:37:5d:c5:ab:19:8e:4e:e0:ce:29:5f: fb:63:6a:ef:85:aa:dc:e6:ea:6f:a9:c2:64:ee:be: 24:e6:2c:94:e3:95:92:05:cb:6c:87:d6:81:a5:8e: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:32:BB:A5:AC:AD:CE:DC:DD:CA:A9:9A:BE:17:24:7A:FD:AA:DE X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:db:b4:b1:fe:1e:d2:a5:e4:8b:9c:7b:54:3f:e5:83:58:ef: c5:de:f6:e0:7e:cb:af:d6:b7:0a:15:0f:44:36:4c:93:66:f9: c7:ab:c2:dc:96:5d:c9:0e:d6:52:c4:22:3a:ae:a7:3d:9e:b5: 2a:5d:c2:55:ca:7d:84:51:ef:28:f8:bf:51:ed:2e:3c:46:60: c8:98:a3:b4:56:8f:9e:db:f8:41:cf:e9:26:f0:a4:52:1d:07: 3f:b6:71:c2:42:c9:7a:b9:b0:66:83:f9:78:ff:0e:e1:b1:bf: 53:59:06:2b:09:2b:5c:b2:1e:36:8c:19:93:b7:8b:74:5d:0c: 60:e3:da:a4:3f:1a:7d:a3:e4:7d:8d:29:b3:19:4d:63:1c:bb: 23:21:55:c9:a8:6a:ff:84:9b:80:62:68:83:4e:99:ae:76:8a: ce:96:9c:45:93:ed:37:78:9f:00:eb:72:5c:7f:7a:41:89:e5: 69:a9:3b:19:68:85:13:9c:2c:c1:a9:70:1c:7b:1c:c7:58:fa: 64:e5:87:33:68:ea:64:32:9d:41:77:c8:64:4d:55:3f:2d:e9: 19:01:96:c7:d1:61:8d:a1:53:fc:89:62:4e:13:27:ad:b4:42: ab:75:ba:59:15:89:02:67:e4:59:c9:dc:99:e2:31:da:f9:59: 1e:3f:65:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjQxMTIzMDQwODA4WhcNMjQxMTMwMDQwODA4WjAYMRYwFAYD VQQDEw02NzQxNTUyOC02NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynpZqhmeNny82nfHOoM6uR9SPCg4kti6RfrL2VQuelDIfybRbkV5uT3UX6ZL 0UsNo7NoOZyIHuOztFRjrfYGkcAUq9udjxj+Ahv8O7JNJAeTxKVCYHX4/lObGQHr O3nDBhoFbfYftvvZdHZ84DuWqDxZziacl/Z9J44Xtys3V72DGu6sd7/tVrmUcnKs VIo8mPI4/Ugh3jRJ2dU6ekNvng6UNYjjW5Zu/r2AwPhwMuBshkCSjZK82ucJVcqE VXlC0tBNXdry7OOU/4Mwd1iH5WiW64xlN13FqxmOTuDOKV/7Y2rvharc5upvqcJk 7r4k5iyU45WSBctsh9aBpY7R5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc3Mrul rK3O3N3KqZq+FyR6/areMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP27Sx/h7SpeSLnHtUP+WDWO/F3vbgfsuv1rcKFQ9ENkyTZvnHq8Lc ll3JDtZSxCI6rqc9nrUqXcJVyn2EUe8o+L9R7S48RmDImKO0Vo+e2/hBz+km8KRS HQc/tnHCQsl6ubBmg/l4/w7hsb9TWQYrCStcsh42jBmTt4t0XQxg49qkPxp9o+R9 jSmzGU1jHLsjIVXJqGr/hJuAYmiDTpmudorOlpxFk+03eJ8A63Jcf3pBieVpqTsZ aIUTnCzBqXAcexzHWPpk5YczaOpkMp1Bd8hkTVU/LekZAZbH0WGNoVP8iWJOEyet tEKrdbpZFYkCZ+RZydyZ4jHa+VkeP2V5 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org