$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json) Hash identifier: +5MxD10RtGjxS0CcXef53bZrStGAeokqVhrysAUixhU= Subject key identifier: 0B:10:A0:FF:C4:2F:34:EA:27:D1:81:D7:EB:21:01:F9:D7:43:FA:68 Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft Manifest number: 0524 Signing time: Fri 22 Nov 2024 23:05:50 +0000 Manifest this update: Fri 22 Nov 2024 23:05:50 +0000 Manifest next update: Fri 29 Nov 2024 23:05:50 +0000 Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: 6ve01CUDfoYZz860Dsy34G+Yi+SH5pmp7bNnfoYK4cI=) 2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: l/rvxQeqO+VdRHgLRLz7RrPQYKHzDkdt1MLwmoA9TZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: Nov 22 23:05:50 2024 GMT Not After : Nov 29 23:05:50 2024 GMT Subject: CN=67410e4e-9044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:71:d5:4d:3a:38:94:c2:be:82:d2:dd:3f: 6f:47:d2:4e:61:94:46:59:a7:93:6e:d0:ce:52:76: 17:27:5f:c9:26:d9:ec:46:00:a3:15:e7:e4:62:a8: 00:b9:dd:ef:50:04:8e:2e:31:2c:2a:fa:19:d4:3a: d8:40:f0:2e:34:92:88:42:49:2c:82:49:8d:af:21: 10:fd:36:d5:76:33:ec:b1:e2:24:64:c6:e7:8e:98: 32:e1:05:c4:68:14:da:cb:b6:e2:38:1a:cf:34:18: cd:f7:da:a4:1d:bc:ff:c9:ab:a7:e4:52:f3:19:7a: 30:e0:4a:37:57:97:dd:e6:a2:7a:a0:8a:8a:24:3f: e2:0d:71:c7:dd:2d:f0:6b:02:2e:9d:40:ed:9f:b9: 5f:81:39:6b:f8:82:91:fa:ed:e5:98:31:42:a3:5c: 92:8c:4d:e2:66:c7:f7:43:84:9a:07:4f:2d:7b:63: f7:71:2a:1c:40:de:1a:1a:20:4d:ed:e8:73:33:41: 4b:58:1f:5c:db:14:44:ca:20:90:7f:c0:ae:98:7f: 90:bf:5d:e1:5b:82:6f:a2:0d:11:b1:4b:4a:c9:97: 75:ca:fb:42:26:45:b1:5f:67:b0:a5:92:f4:0b:ff: 53:45:1a:61:31:0d:4a:9f:ec:bf:85:35:8a:0f:f8: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:10:A0:FF:C4:2F:34:EA:27:D1:81:D7:EB:21:01:F9:D7:43:FA:68 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:ef:e7:2e:68:26:d4:00:3b:f8:34:d8:b2:0f:a7:1d:99: e1:2d:7c:08:b2:d4:da:a6:19:bd:ce:7c:ba:f4:5c:14:2e:b2: 35:4e:4a:64:4f:eb:53:a1:94:e4:e7:32:7c:70:a8:ce:18:fe: 21:5d:58:85:13:c6:1c:c4:4e:cd:b3:bf:88:54:85:0e:e9:83: f4:8f:c2:10:bc:29:a7:86:aa:b7:21:03:40:c5:c5:20:49:94: 36:a9:ac:fc:15:93:d4:9e:f9:07:0b:0a:c0:98:3a:c9:c4:e1: 33:8a:ae:18:0c:d3:99:3c:0a:9b:8e:c3:29:f2:ca:72:03:26: a8:be:67:ad:d7:be:c4:c2:3d:e6:ce:0d:02:e8:da:9b:99:b0: d3:9b:3b:57:88:5c:23:26:e9:ba:ba:0a:bf:c4:b6:82:1f:c8: c2:6f:d9:7b:39:fc:c5:75:d8:02:73:c6:fb:e8:50:55:40:cb: 22:e4:7c:30:74:10:96:6c:91:62:aa:48:3d:f2:34:42:c3:50: 20:1a:85:32:39:25:5f:af:b0:e7:c4:01:63:5d:85:69:7a:92: 97:f2:57:4f:fa:02:02:bf:3a:6f:61:9a:dd:b1:22:4e:6c:b1: a0:97:3f:ec:51:6d:0a:34:16:77:06:64:db:88:09:dd:39:3e: bd:df:17:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjQxMTIyMjMwNTUwWhcNMjQxMTI5MjMwNTUwWjAYMRYwFAYD VQQDEw02NzQxMGU0ZS05MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbRx1U06OJTCvoLS3T9vR9JOYZRGWaeTbtDOUnYXJ1/JJtnsRgCjFefkYqgA ud3vUASOLjEsKvoZ1DrYQPAuNJKIQkksgkmNryEQ/TbVdjPsseIkZMbnjpgy4QXE aBTay7biOBrPNBjN99qkHbz/yaun5FLzGXow4Eo3V5fd5qJ6oIqKJD/iDXHH3S3w awIunUDtn7lfgTlr+IKR+u3lmDFCo1ySjE3iZsf3Q4SaB08te2P3cSocQN4aGiBN 7ehzM0FLWB9c2xREyiCQf8CumH+Qv13hW4Jvog0RsUtKyZd1yvtCJkWxX2ewpZL0 C/9TRRphMQ1Kn+y/hTWKD/jOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsQoP/E LzTqJ9GB1+shAfnXQ/poMB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5 dE5DRmszem1tczAzdnFlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAe/nLmgm1AA7+DTYsg+nHZnhLXwIstTaphm9zny69FwULrI1Tkpk T+tToZTk5zJ8cKjOGP4hXViFE8YcxE7Ns7+IVIUO6YP0j8IQvCmnhqq3IQNAxcUg SZQ2qaz8FZPUnvkHCwrAmDrJxOEziq4YDNOZPAqbjsMp8spyAyaovmet177Ewj3m zg0C6NqbmbDTmztXiFwjJum6ugq/xLaCH8jCb9l7OfzFddgCc8b76FBVQMsi5Hww dBCWbJFiqkg98jRCw1AgGoUyOSVfr7DnxAFjXYVpepKX8ldP+gICvzpvYZrdsSJO bLGglz/sUW0KNBZ3BmTbiAndOT693xdO -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org