$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: 9fTsrlF/jNm17mPuPI1imbXG1Umz8LvmEQzawtQUs7w= Subject key identifier: 71:40:1C:A4:20:C5:2C:84:0E:EB:FD:1F:F2:D3:73:1C:23:9C:CC:B4 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: A4 Signing time: Sat 23 Nov 2024 04:18:07 +0000 Manifest this update: Sat 23 Nov 2024 04:18:06 +0000 Manifest next update: Sat 30 Nov 2024 04:18:06 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: cP04TZOVAj5fSWU0CbaPIscA0CqetefRsdO0D3qqzhE=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: zZYRuZju/6K1b+K/WY45YKEObvh7R4AMvppkXjmVq70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Nov 23 04:18:06 2024 GMT Not After : Nov 30 04:18:06 2024 GMT Subject: CN=6741577f-bbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:2e:c0:57:9d:f4:ef:8f:82:81:bf:c7:76: 42:81:0c:47:87:4f:ab:ec:a9:0a:e0:f2:8d:f0:82: 4a:01:66:1a:c6:32:74:72:97:2d:79:79:c1:ba:3c: 58:ea:52:68:86:ba:bd:0b:1f:55:d8:07:78:5f:61: 13:86:1a:08:90:ce:1d:bd:19:e8:c9:06:0a:94:5a: 8a:71:02:53:d3:53:18:09:fc:d7:09:ab:4a:ac:6f: f2:99:53:e4:25:57:b5:44:97:53:9c:9d:5f:17:b5: a0:89:89:17:44:10:cc:bf:42:87:c1:82:62:d5:47: a4:97:96:85:37:f3:38:35:7e:91:0a:3a:05:6b:ec: fe:70:2b:ca:49:c5:b2:e5:a7:c1:33:f0:82:13:45: d7:e9:a0:00:2a:e1:2a:dc:57:17:91:7f:56:56:af: 1c:35:80:1b:2b:f0:b4:eb:b7:52:de:dc:8c:1e:8d: 3d:50:8a:c7:3a:c9:38:89:04:82:11:3e:f6:9f:f4: e0:ee:2f:04:8b:0c:2a:08:66:71:56:5f:76:94:e8: 2b:05:5a:5c:e7:42:c6:7f:a2:06:8c:c3:f0:3c:a1: d2:4a:8d:5d:50:84:ea:d6:86:f7:b5:f6:9a:3e:3b: f8:25:90:b7:29:8b:37:d5:63:82:48:18:93:70:a3: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:1C:A4:20:C5:2C:84:0E:EB:FD:1F:F2:D3:73:1C:23:9C:CC:B4 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:1c:8c:8a:cd:a4:0b:d4:38:02:25:0a:8a:c1:f4:a7:d0:b5: 04:6d:7d:20:3b:b8:52:09:71:fc:74:2d:25:e5:50:28:1d:46: 51:e7:b9:eb:8e:02:a7:42:ed:e9:44:48:3e:f9:da:d6:2d:8b: f1:b0:22:af:75:a9:b0:d4:c5:08:52:77:af:3f:bf:b1:6e:a0: bb:fb:b2:b8:0f:8f:e2:3d:51:29:ab:80:ae:6b:e3:12:16:74: 98:00:46:9f:20:23:7c:5e:56:0c:1a:c7:17:81:09:be:31:dd: bc:91:dc:5f:9b:26:83:d0:86:7f:eb:0e:1f:41:42:54:1e:24: dc:eb:ba:6c:28:0a:30:e2:8a:ed:f2:9a:a6:a8:d0:21:55:f6: 91:d0:0d:c1:cf:bd:44:54:84:94:94:ab:ee:b0:a4:be:61:b8: 10:84:dd:c8:47:01:15:aa:45:ce:f9:75:73:9f:10:3a:e4:b0: 01:99:b0:9e:cc:85:0e:b4:7b:4b:77:96:79:a3:59:de:58:10: 22:44:8e:ba:1b:ac:6b:e7:6f:a3:eb:bf:3e:c5:8c:a7:df:6c: aa:db:08:9e:a5:c9:cd:41:d8:ab:30:98:c3:22:54:9f:1b:ac: 09:9d:f5:8b:2b:db:09:c0:90:0b:28:53:ba:f9:ff:c2:07:ac: d1:1b:62:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjQxMTIzMDQxODA2WhcNMjQxMTMwMDQxODA2WjAYMRYwFAYD VQQDEw02NzQxNTc3Zi1iYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZouwFed9O+PgoG/x3ZCgQxHh0+r7KkK4PKN8IJKAWYaxjJ0cpcteXnBujxY 6lJohrq9Cx9V2Ad4X2EThhoIkM4dvRnoyQYKlFqKcQJT01MYCfzXCatKrG/ymVPk JVe1RJdTnJ1fF7WgiYkXRBDMv0KHwYJi1Uekl5aFN/M4NX6RCjoFa+z+cCvKScWy 5afBM/CCE0XX6aAAKuEq3FcXkX9WVq8cNYAbK/C067dS3tyMHo09UIrHOsk4iQSC ET72n/Tg7i8EiwwqCGZxVl92lOgrBVpc50LGf6IGjMPwPKHSSo1dUITq1ob3tfaa Pjv4JZC3KYs31WOCSBiTcKO84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFAHKQg xSyEDuv9H/LTcxwjnMy0MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGHIyKzaQL1DgCJQqKwfSn0LUEbX0gO7hSCXH8dC0l5VAoHUZR57nr jgKnQu3pREg++drWLYvxsCKvdamw1MUIUnevP7+xbqC7+7K4D4/iPVEpq4Cua+MS FnSYAEafICN8XlYMGscXgQm+Md28kdxfmyaD0IZ/6w4fQUJUHiTc67psKAow4ort 8pqmqNAhVfaR0A3Bz71EVISUlKvusKS+YbgQhN3IRwEVqkXO+XVznxA65LABmbCe zIUOtHtLd5Z5o1neWBAiRI66G6xr52+j678+xYyn32yq2wiepcnNQdirMJjDIlSf G6wJnfWLK9sJwJALKFO6+f/CB6zRG2Lb -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org