$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: tAw7AIW+1/NGuBD4uyQlll30Nr7DJBSYA+oXhpIkSTg= Subject key identifier: 72:41:19:C9:A0:88:CA:24:64:DC:E7:52:FA:45:F5:1F:0B:09:29:33 Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 07A3 Signing time: Fri 22 Nov 2024 20:49:39 +0000 Manifest this update: Fri 22 Nov 2024 20:49:39 +0000 Manifest next update: Fri 29 Nov 2024 20:49:39 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: DE7SDiMRyTff9n7l26SgfxaDxB+Todt4PgNzLHmqxkk=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: YNUo90dPfw7aNa6aT24Mb69b4ZpufKscErkIIX/bwoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Nov 22 20:49:39 2024 GMT Not After : Nov 29 20:49:39 2024 GMT Subject: CN=6740ee63-b179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:c1:bd:27:cb:ec:cc:93:48:fb:c0:27:62: 7f:cd:80:08:f5:5b:fe:a3:22:7d:81:14:bd:cf:f8: 46:c1:c1:dd:56:05:e3:a1:25:fd:6f:a5:94:f8:31: 05:59:f9:72:39:3d:c8:2d:91:3d:b0:ed:ff:8b:f2: 60:7b:39:81:1e:9d:d6:d3:39:20:5c:54:34:7c:13: b9:34:0a:cd:a6:e6:a3:07:73:e9:05:77:aa:57:49: 15:ec:f5:36:98:30:bc:5b:3f:95:04:68:3f:8a:b2: eb:4e:30:af:f0:29:b0:d6:ef:33:67:e1:0d:1c:d2: 5b:4d:50:9a:8c:13:a4:a4:c2:2c:d3:39:e6:8a:64: 99:a6:ac:26:2d:62:72:f0:aa:7d:8b:d3:20:d7:4e: a9:f2:b2:4b:8a:37:79:aa:41:cb:d2:40:a6:6d:d3: 18:43:aa:cc:b1:58:2f:71:6d:0e:8f:8f:77:e9:27: 0e:b0:6b:3d:73:2a:9e:af:6a:74:ad:a7:39:3c:46: a4:1e:4c:c4:05:c9:00:a1:02:27:1e:0f:ed:20:6e: 44:ad:50:d5:63:75:55:fb:0a:3e:90:aa:23:44:2a: 41:22:79:05:6f:85:39:2c:b1:b2:36:a2:54:d6:41: 1c:af:b6:c8:f2:ba:0c:cd:0c:2b:1a:48:43:5f:e3: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:41:19:C9:A0:88:CA:24:64:DC:E7:52:FA:45:F5:1F:0B:09:29:33 X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ca:44:fa:3a:f7:5a:50:e6:93:93:56:5a:07:cc:a9:89:9b: 3c:7f:0e:6a:f5:53:9c:cc:41:50:4b:3e:9e:78:38:d0:36:bd: 33:94:13:91:c3:17:d5:32:a6:a7:65:d1:65:e5:06:12:a1:7f: 89:58:5f:ca:0d:4e:01:09:27:a9:e5:7c:7d:2e:3f:8e:6d:a5: a3:92:2d:53:c3:e4:83:e4:27:14:7e:32:a1:30:a1:a8:f9:e9: 03:65:2f:59:a0:30:17:10:c3:3c:cc:29:d6:96:6d:a1:a2:d3: 6b:3a:71:19:da:13:f9:51:44:ee:0b:5e:d4:91:09:d8:2e:f8: 71:79:0d:fc:78:f9:77:ae:31:0a:b2:34:52:7d:48:fb:36:fc: 3b:22:a5:43:a9:7a:f9:92:8c:62:d9:b9:53:7a:f7:1a:ae:a3: 93:9c:2f:5d:dc:1c:7c:01:94:cb:c5:bf:be:9f:0e:41:39:df: b7:d8:db:35:f7:03:3c:fb:44:06:1c:b0:16:4e:dd:af:84:bc: 85:15:a1:fa:1e:96:d4:a2:a0:7d:64:2a:09:4b:b2:46:38:ca: be:1c:96:0d:6d:18:b3:56:8a:c3:a1:8c:31:3f:c0:b4:ed:85: 17:02:2b:80:b0:0b:95:4e:3c:72:31:6d:e1:51:35:ae:45:26: d6:b3:dc:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjQxMTIyMjA0OTM5WhcNMjQxMTI5MjA0OTM5WjAYMRYwFAYD VQQDEw02NzQwZWU2My1iMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24fBvSfL7MyTSPvAJ2J/zYAI9Vv+oyJ9gRS9z/hGwcHdVgXjoSX9b6WU+DEF WflyOT3ILZE9sO3/i/JgezmBHp3W0zkgXFQ0fBO5NArNpuajB3PpBXeqV0kV7PU2 mDC8Wz+VBGg/irLrTjCv8Cmw1u8zZ+ENHNJbTVCajBOkpMIs0znmimSZpqwmLWJy 8Kp9i9Mg106p8rJLijd5qkHL0kCmbdMYQ6rMsVgvcW0Oj4936ScOsGs9cyqer2p0 rac5PEakHkzEBckAoQInHg/tIG5ErVDVY3VV+wo+kKojRCpBInkFb4U5LLGyNqJU 1kEcr7bI8roMzQwrGkhDX+OiGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJBGcmg iMokZNznUvpF9R8LCSkzMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVykT6OvdaUOaTk1ZaB8ypiZs8fw5q9VOczEFQSz6eeDjQNr0zlBOR wxfVMqanZdFl5QYSoX+JWF/KDU4BCSep5Xx9Lj+ObaWjki1Tw+SD5CcUfjKhMKGo +ekDZS9ZoDAXEMM8zCnWlm2hotNrOnEZ2hP5UUTuC17UkQnYLvhxeQ38ePl3rjEK sjRSfUj7Nvw7IqVDqXr5koxi2blTevcarqOTnC9d3Bx8AZTLxb++nw5BOd+32Ns1 9wM8+0QGHLAWTt2vhLyFFaH6HpbUoqB9ZCoJS7JGOMq+HJYNbRizVorDoYwxP8C0 7YUXAiuAsAuVTjxyMW3hUTWuRSbWs9wZ -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org