$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: UxUNw8Ct3K+0XlvlQQf8uYBKRJRN3drmaL3PJRnOBbI= Subject key identifier: 4C:AE:24:68:D2:48:A2:87:45:D8:60:F7:7A:67:7F:9E:6F:87:C2:BD Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 24C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 24A8 Signing time: Fri 22 Nov 2024 15:46:44 +0000 Manifest this update: Fri 22 Nov 2024 15:46:43 +0000 Manifest next update: Fri 29 Nov 2024 15:46:43 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: 0sgA/Jx27tf0UyQkIUQrlkTPrqY0kqNIn6iO7sEry5Y=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: FOz+uDL2D22lJCuQ1AmteerbbeonZiSVvd9VihdE6tg=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: EBO15MW174X/0lG9Tyg/d0MIdJqeD9aANY0+I0S/im0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9408 (0x24c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: Nov 22 15:46:43 2024 GMT Not After : Nov 29 15:46:43 2024 GMT Subject: CN=6740a764-6409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:a0:81:b9:6e:89:f9:bd:e8:28:75:f3:06: f0:9c:59:f6:29:ab:93:c8:54:13:2c:51:68:80:96: 40:0a:c8:d7:a2:e4:be:eb:83:8c:e9:08:80:73:5d: d9:3f:66:54:02:01:51:62:46:c5:55:00:1f:5c:11: 7a:25:f6:1f:ef:8e:85:96:8d:b5:ca:04:d6:14:10: bc:57:8c:be:6f:eb:6f:22:8d:81:fe:16:4b:65:4c: d6:f3:a7:2d:53:dc:3d:4d:27:19:90:d8:3b:bd:2d: 53:f9:bd:23:08:2e:0f:fc:6b:6f:08:ad:d8:27:24: ac:1d:df:27:e2:ab:7a:40:ce:12:a3:7a:59:58:20: f6:2c:67:4a:f0:b7:ed:4b:13:3a:b9:61:27:fe:36: c1:94:10:17:fb:16:aa:1c:d5:c9:3c:6c:45:14:51: 93:3d:6f:ff:ee:3c:2b:10:27:90:90:e8:a8:0d:98: d8:20:d1:74:aa:81:c1:2a:f4:b8:e3:46:0b:6c:06: 7b:0d:64:67:bf:07:d6:3b:28:21:1f:d0:65:a5:d5: 45:f3:9a:f5:ef:b7:ad:18:ae:86:9c:39:18:36:ec: af:30:d0:00:03:35:98:19:cb:f6:fa:72:83:6f:81: 45:1c:51:fd:36:64:d6:3b:cc:2e:73:d2:a1:68:f4: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:24:68:D2:48:A2:87:45:D8:60:F7:7A:67:7F:9E:6F:87:C2:BD X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:31:34:c1:47:3e:23:1f:84:f5:01:40:cb:bc:9f:20:30:a5: c3:92:22:bf:72:43:bf:bf:b2:83:9c:83:c9:68:90:2e:d2:85: a5:e0:36:bc:38:56:18:61:ad:96:25:7a:00:8d:ec:e3:08:1c: 74:1f:27:b9:48:3c:a8:5e:37:8c:8a:f7:98:29:01:5e:c9:09: 87:53:56:c2:a5:87:19:db:0c:ca:4c:8d:37:07:2d:25:18:9d: 92:0e:31:fd:6c:2f:71:95:f5:31:f4:00:e0:60:b7:c2:d4:f8: 74:08:bf:16:64:d4:df:23:fa:b6:66:b8:54:49:bc:cd:2c:39: a8:90:07:08:86:58:b1:d8:17:92:b2:bb:9a:0e:0c:b8:80:47: 76:19:62:be:da:9a:64:e1:c7:25:d1:a8:14:c8:56:91:71:42: 26:8f:77:74:77:91:ce:fc:43:12:f1:0a:58:d3:49:04:83:2e: bd:81:bb:af:a2:98:6f:4c:36:14:c3:a2:74:2b:63:46:af:df: da:17:61:b8:2d:37:2d:97:2f:1d:7c:1d:87:a1:d9:5a:c2:90: 98:ab:82:6e:da:64:de:b0:ec:d5:08:29:91:84:57:13:51:e1: 60:5c:4d:88:0f:32:ea:80:b6:32:0f:81:1d:aa:bc:e9:a4:4b: 89:0a:04:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjQxMTIyMTU0NjQzWhcNMjQxMTI5MTU0NjQzWjAYMRYwFAYD VQQDEw02NzQwYTc2NC02NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6aggbluifm96Ch18wbwnFn2KauTyFQTLFFogJZACsjXouS+64OM6QiAc13Z P2ZUAgFRYkbFVQAfXBF6JfYf746Flo21ygTWFBC8V4y+b+tvIo2B/hZLZUzW86ct U9w9TScZkNg7vS1T+b0jCC4P/GtvCK3YJySsHd8n4qt6QM4So3pZWCD2LGdK8Lft SxM6uWEn/jbBlBAX+xaqHNXJPGxFFFGTPW//7jwrECeQkOioDZjYINF0qoHBKvS4 40YLbAZ7DWRnvwfWOyghH9BlpdVF85r177etGK6GnDkYNuyvMNAAAzWYGcv2+nKD b4FFHFH9NmTWO8wuc9KhaPQ8rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyuJGjS SKKHRdhg93pnf55vh8K9MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYMTTBRz4jH4T1AUDLvJ8gMKXDkiK/ckO/v7KDnIPJaJAu0oWl4Da8 OFYYYa2WJXoAjezjCBx0Hye5SDyoXjeMiveYKQFeyQmHU1bCpYcZ2wzKTI03By0l GJ2SDjH9bC9xlfUx9ADgYLfC1Ph0CL8WZNTfI/q2ZrhUSbzNLDmokAcIhlix2BeS sruaDgy4gEd2GWK+2ppk4ccl0agUyFaRcUImj3d0d5HO/EMS8QpY00kEgy69gbuv ophvTDYUw6J0K2NGr9/aF2G4LTctly8dfB2HodlawpCYq4Ju2mTesOzVCCmRhFcT UeFgXE2IDzLqgLYyD4EdqrzppEuJCgRO -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org