$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json) Hash identifier: YmDjwn+otQrx3Ptob/SC38uCQX5bwEFCOD6Np61VWHQ= Subject key identifier: 5F:8A:7F:32:F6:2D:E0:F1:5E:03:FC:B2:E3:87:62:BE:46:7A:D4:D2 Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft Manifest number: 0971 Signing time: Fri 22 Nov 2024 20:37:56 +0000 Manifest this update: Fri 22 Nov 2024 20:37:56 +0000 Manifest next update: Fri 29 Nov 2024 20:37:56 +0000 Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: xc6tQD3JX6FStwY4altwYq7c+gT0/ncpHXXsD72QHy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C Validity Not Before: Nov 22 20:37:56 2024 GMT Not After : Nov 29 20:37:56 2024 GMT Subject: CN=6740eba4-164a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:88:65:d4:07:3d:f3:c0:88:b6:3a:f7:33: c4:39:b5:3d:09:d1:1e:93:95:0b:d8:14:a5:0a:f9: d1:ac:c9:a8:c1:de:cc:5b:f2:c1:75:4c:25:e6:32: 35:b5:bb:22:60:57:e6:1b:01:89:9b:42:b5:98:ee: 43:9e:bf:aa:b1:f7:a1:01:57:9e:93:46:f9:52:39: d1:a0:c3:1c:42:8b:be:c6:0d:3a:8d:a2:1f:37:50: d4:e1:7d:b9:fa:ad:51:3e:43:86:26:62:30:8c:76: 75:10:d3:d9:93:e7:41:43:40:91:86:7e:c9:89:4a: ab:86:e6:ed:7b:41:4f:8a:7e:64:35:e4:a8:67:8f: 30:83:b0:82:99:b0:62:03:6c:b3:a7:76:a0:3e:2f: 62:e6:47:80:e2:6a:6d:98:ab:e2:f0:6e:f6:77:df: df:42:74:5c:78:7e:03:1c:fc:33:fd:80:e7:7e:ec: e8:84:ab:26:0b:80:cc:d6:3b:69:b4:a9:fe:22:62: b8:fd:b1:f3:e9:76:41:36:ad:ef:6b:03:2a:da:b1: 5e:5d:f1:3e:c5:a9:47:18:f8:3f:ce:d9:e9:8b:d5: ba:42:43:3e:11:c3:9f:5c:60:ad:90:99:93:75:3e: a9:19:ad:2e:fb:26:23:44:8f:37:ab:9b:ec:ba:58: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:7F:32:F6:2D:E0:F1:5E:03:FC:B2:E3:87:62:BE:46:7A:D4:D2 X509v3 Authority Key Identifier: keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ad:1d:04:e9:1e:6e:71:b0:ad:f3:65:74:01:c0:46:a1:a8: e3:18:5d:4d:51:c4:41:f3:32:15:1c:0d:02:86:c9:ce:7e:83: 9b:ec:db:dc:27:ff:97:bc:eb:2a:14:28:42:44:2e:45:e7:ca: a2:14:f1:c6:03:44:80:ea:8c:13:1e:c1:25:34:94:97:d4:37: 62:ef:d6:71:36:ef:f6:8d:a5:2f:8d:59:c1:50:53:ce:1c:84: fe:c5:77:70:42:2d:7c:c6:01:be:3c:6e:b9:26:f5:74:83:16: bf:34:47:d7:5a:05:b5:02:60:28:64:dc:24:d8:ae:31:31:81: 87:2d:aa:89:e6:f4:55:bb:ea:1a:85:20:3e:4e:c2:34:aa:c4: 4b:df:c3:f9:8b:e0:da:9c:f9:d7:ce:ad:91:0a:73:70:cc:ec: 7a:12:e8:ce:c6:72:59:89:9d:c3:29:ab:40:b6:97:99:91:c5: 8b:3a:ef:55:c0:bc:f3:69:89:2a:de:85:b8:5f:96:54:f0:82: 5b:17:9d:4f:d2:87:bb:17:a9:fc:34:02:c1:60:2c:de:fa:d8: 83:c7:ae:c0:a1:9f:39:43:33:50:8b:53:96:f4:64:61:84:be: e1:4f:d8:1f:f8:c6:e3:0d:ef:f9:94:66:9d:ec:c8:31:78:2d: a8:27:ff:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD ODcyODk0OUMwHhcNMjQxMTIyMjAzNzU2WhcNMjQxMTI5MjAzNzU2WjAYMRYwFAYD VQQDEw02NzQwZWJhNC0xNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GWIZdQHPfPAiLY69zPEObU9CdEek5UL2BSlCvnRrMmowd7MW/LBdUwl5jI1 tbsiYFfmGwGJm0K1mO5Dnr+qsfehAVeek0b5UjnRoMMcQou+xg06jaIfN1DU4X25 +q1RPkOGJmIwjHZ1ENPZk+dBQ0CRhn7JiUqrhubte0FPin5kNeSoZ48wg7CCmbBi A2yzp3agPi9i5keA4mptmKvi8G72d9/fQnRceH4DHPwz/YDnfuzohKsmC4DM1jtp tKn+ImK4/bHz6XZBNq3vawMq2rFeXfE+xalHGPg/ztnpi9W6QkM+EcOfXGCtkJmT dT6pGa0u+yYjRI83q5vsulicNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+KfzL2 LeDxXgP8suOHYr5GetTSMB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0 eFB6Wk1ZNmxLbG5JY29sSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFrR0E6R5ucbCt82V0AcBGoajjGF1NUcRB8zIVHA0ChsnOfoOb7Nvc J/+XvOsqFChCRC5F58qiFPHGA0SA6owTHsElNJSX1Ddi79ZxNu/2jaUvjVnBUFPO HIT+xXdwQi18xgG+PG65JvV0gxa/NEfXWgW1AmAoZNwk2K4xMYGHLaqJ5vRVu+oa hSA+TsI0qsRL38P5i+DanPnXzq2RCnNwzOx6EujOxnJZiZ3DKatAtpeZkcWLOu9V wLzzaYkq3oW4X5ZU8IJbF51P0oe7F6n8NALBYCze+tiDx67AoZ85QzNQi1OW9GRh hL7hT9gf+MbjDe/5lGad7MgxeC2oJ/8t -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org