$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: X9nUCic0pf0+dRy15++BhgjTtOVPZJRWdAUCNsKMbxU= Subject key identifier: EA:75:70:73:05:A0:A2:A6:82:94:5A:CF:70:44:E0:37:8A:32:54:69 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0C16 Signing time: Fri 22 Nov 2024 18:27:15 +0000 Manifest this update: Fri 22 Nov 2024 18:27:15 +0000 Manifest next update: Fri 29 Nov 2024 18:27:15 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: eYxNELETY/ntrQ+uKZ5DbPtXL2T7y10Mf7Pa3+4AFIY=) 2: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: QL/NLzdNbP6VC/RbcjFAhO7P1ptgQDlD2OI4FmLsmtY=) 3: 12561046368911EEA0CB766BC4F9AE02.roa (hash: /GknOelDIGsOfVA5prSm5KZ1UJQ7GqbrCT0cnToz+2g=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: 0OHkdOYwWuHEae6hLLfEVYlgXJ3hl5nkCEg2iieXkpI=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: MDORN4dVK/WKX8D1PrktvMyAAOKMRM6BT7nSAEts5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Nov 22 18:27:15 2024 GMT Not After : Nov 29 18:27:15 2024 GMT Subject: CN=6740cd03-9383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:7e:3f:47:74:b1:8c:c2:4c:72:74:47:51: b5:62:ca:65:69:c0:e7:9b:5f:ca:8d:ab:1e:ed:a6: e2:8f:e1:24:85:e9:d0:69:da:f7:27:6a:85:ec:fa: b5:cd:73:6a:dd:9e:a1:1e:64:fd:86:7e:4f:60:9a: 1b:82:e1:da:74:f7:d6:fd:79:b8:c2:29:f7:7c:18: ab:e5:a2:2f:38:87:54:9f:88:24:e2:ba:61:05:a1: 19:6f:94:23:63:88:91:69:e9:10:18:22:2a:1d:aa: ed:2d:6a:f2:49:31:16:82:75:81:0b:2f:a6:b7:e6: da:a1:58:7a:ed:6e:8c:b8:02:f0:5a:ed:95:22:0e: 49:98:55:7d:5e:1a:42:1c:e2:03:aa:fc:20:e9:d2: 66:20:b4:9d:70:d1:73:d8:40:27:d4:07:c8:26:25: 40:82:e1:0e:62:94:10:a0:93:89:d0:b6:e7:b0:42: 35:c1:51:8a:54:c5:27:98:0b:14:b4:9a:ea:70:8e: a6:4b:fa:70:7a:aa:a8:3b:af:76:b6:aa:55:b7:e2: 26:ac:b9:51:b9:be:d8:38:0e:7f:28:f5:3e:20:27: fc:15:a1:0f:20:d3:cc:7f:f1:17:4b:e3:a8:ca:2c: ba:f1:c0:a5:1f:f2:26:7c:9b:b0:93:0e:2b:f6:ea: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:70:73:05:A0:A2:A6:82:94:5A:CF:70:44:E0:37:8A:32:54:69 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:e9:bc:33:9a:5b:4e:4b:2d:72:c3:b8:d5:0d:73:b2:c7: 35:bb:f4:7d:30:a7:db:83:ef:9b:da:85:47:27:fd:40:e1:7f: a7:ab:fa:44:b4:fb:dc:d6:bf:7d:78:c9:b6:26:20:1c:c3:d3: 3e:a3:d6:73:19:18:ba:37:78:68:6e:25:88:9c:8a:14:79:d6: 10:0a:85:37:2e:87:9a:db:77:5e:60:65:d3:3e:84:c1:df:0b: a3:3e:95:6e:57:6c:5d:2d:bb:e7:4a:15:9b:49:fb:91:64:3c: 58:2b:38:1a:32:47:e4:14:0c:46:ba:43:2b:ed:78:cc:bf:eb: 5a:c6:05:86:54:8d:b2:73:cd:a1:ae:fa:e5:b0:16:92:ce:54: f5:27:9e:6b:db:05:d1:1c:22:d6:a7:fb:a5:fc:9f:bc:3a:38: c6:6e:42:35:0a:65:0e:19:1b:53:ea:fc:f0:23:2a:3b:7a:1b: 9f:f1:7e:ea:57:a7:e8:b8:2e:5d:9b:a0:25:79:23:b4:5f:e7: a8:47:ad:76:81:e5:e0:22:7b:9a:ea:d0:b8:d3:69:9a:0c:cf: 62:f2:b3:c5:a6:1a:63:d9:02:4c:3c:18:f2:c6:d8:7d:2e:7b: 3b:d2:cd:72:a2:50:e1:52:df:62:65:13:07:e7:d8:43:4c:37: 5a:b1:cd:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjQxMTIyMTgyNzE1WhcNMjQxMTI5MTgyNzE1WjAYMRYwFAYD VQQDEw02NzQwY2QwMy05MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnh+P0d0sYzCTHJ0R1G1YsplacDnm1/Kjase7abij+EkhenQadr3J2qF7Pq1 zXNq3Z6hHmT9hn5PYJobguHadPfW/Xm4win3fBir5aIvOIdUn4gk4rphBaEZb5Qj Y4iRaekQGCIqHartLWrySTEWgnWBCy+mt+baoVh67W6MuALwWu2VIg5JmFV9XhpC HOIDqvwg6dJmILSdcNFz2EAn1AfIJiVAguEOYpQQoJOJ0LbnsEI1wVGKVMUnmAsU tJrqcI6mS/pweqqoO692tqpVt+ImrLlRub7YOA5/KPU+ICf8FaEPINPMf/EXS+Oo yiy68cClH/ImfJuwkw4r9uo2qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp1cHMF oKKmgpRaz3BE4DeKMlRpMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCGOm8M5pbTkstcsO41Q1zssc1u/R9MKfbg++b2oVHJ/1A4X+nq/pE tPvc1r99eMm2JiAcw9M+o9ZzGRi6N3hobiWInIoUedYQCoU3Loea23deYGXTPoTB 3wujPpVuV2xdLbvnShWbSfuRZDxYKzgaMkfkFAxGukMr7XjMv+taxgWGVI2yc82h rvrlsBaSzlT1J55r2wXRHCLWp/ul/J+8OjjGbkI1CmUOGRtT6vzwIyo7ehuf8X7q V6fouC5dm6AleSO0X+eoR612geXgInua6tC402maDM9i8rPFphpj2QJMPBjyxth9 Lns70s1yolDhUt9iZRMH59hDTDdasc0q -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org