$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft File: BdNlUA2kssABifPGyllQ4AdMfEo.mft (raw, json) Hash identifier: /JhF8xA9eENlSym8/zdjbrbe8oGBxls3aLFnG3tvlMA= Subject key identifier: FE:D8:D0:11:0F:DA:3D:60:37:AD:6D:E5:E4:A9:EC:A9:E2:D9:EC:57 Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft Manifest number: 0179 Signing time: Thu 21 Nov 2024 02:17:15 +0000 Manifest this update: Thu 21 Nov 2024 02:17:15 +0000 Manifest next update: Thu 28 Nov 2024 02:17:15 +0000 Files and hashes: 1: BdNlUA2kssABifPGyllQ4AdMfEo.crl (hash: fRqWqlSLpYoEDIdIFdc8oqb/uHxMHvqcycu0PtWmRD8=) 2: AD0CC70C122411EF8BEED51AC4F9AE02.roa (hash: sih6mQqPoKN1rm8wAr4RUW0iwS5gVukg8/r3VRi8nKM=) 3: 999FA66011C711EF80B27457C4F9AE02.roa (hash: EoETNpgvN9v8EH94Mbq7/LheJHevwldFfgY8FqaKxMc=) 4: A6524550C4E411EEAFF83C50C4F9AE02.roa (hash: zeOZPrdq1QYgQ7FqLmTlQVfbrQDcr8FRd1myKoEPr/Y=) 5: C44A1D987E0511EDBA2BAF7FC4F9AE02.roa (hash: QFxZjY9gepscppIE/Uca9rqzFdisePbNZRWKpDghEqA=) 6: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (hash: VWAke7VHpns9xFQDA7gYHfWXd2qEDLHOvc5MVgox5e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Validity Not Before: Nov 21 02:17:15 2024 GMT Not After : Nov 28 02:17:15 2024 GMT Subject: CN=673e982b-e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:e1:95:74:97:57:60:2c:94:6d:ca:4b:c5: 9e:53:96:ed:55:c1:fb:81:9a:43:3f:66:91:33:1e: a3:a4:dc:29:8e:15:a2:8b:06:a9:a8:f7:a9:49:94: e9:a3:93:8c:5a:1a:92:ba:4b:0d:19:af:66:ab:12: 9e:57:2f:11:a0:fb:d5:93:37:25:f0:88:ff:d6:93: 68:9d:07:68:4e:f6:77:28:82:e1:89:c8:59:8c:0c: cd:5c:21:ff:05:90:89:d5:0d:2d:cf:8e:6e:fc:54: a9:c6:8e:6b:61:5c:37:d6:a1:5c:6b:c0:3e:fb:87: 91:51:11:91:8d:62:e0:c6:fb:d2:83:8a:c9:d0:49: e8:95:b6:63:2a:2e:c3:e7:bb:3e:b2:8f:51:a8:99: da:ce:36:fd:fc:04:3b:b9:95:97:27:c9:4f:df:b9: 3c:b0:52:00:db:3d:8e:72:65:10:a7:0a:7a:bc:e0: f7:d9:4c:29:5f:8f:48:aa:f2:2e:11:1c:7c:49:82: 85:b0:c2:3f:9d:68:85:ee:26:1c:e7:22:73:cf:5d: e5:a5:ff:64:33:d5:63:89:9c:46:4b:67:ee:41:4b: 2b:94:61:ff:61:57:b4:66:78:3a:fc:a4:76:bb:1c: 80:81:d1:c2:ea:02:bb:cc:c4:bf:67:3f:2d:1c:cb: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:D0:11:0F:DA:3D:60:37:AD:6D:E5:E4:A9:EC:A9:E2:D9:EC:57 X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b0:c3:15:ce:e7:32:85:04:41:23:bb:61:62:b5:b4:f2:ff: 3a:b8:b8:4d:76:63:05:73:b1:78:cd:98:e9:ef:f9:a1:93:df: 9e:4d:51:01:6d:d3:93:53:79:38:01:b3:24:f4:53:19:35:e3: 3e:d8:f7:97:20:db:1a:b0:20:0f:02:7a:26:03:c7:21:04:44: 02:b7:2b:49:5d:c6:fd:55:8e:18:3f:9c:e0:5d:15:13:f5:3d: 4d:73:2d:4e:f6:1b:01:36:3c:8d:22:51:02:21:0f:bd:83:ef: b7:40:dc:de:97:a1:fc:8f:64:b3:20:df:2d:d7:44:5b:68:78: 18:23:71:f8:35:18:f8:9c:ee:ab:74:ad:e4:b6:b2:68:11:e7: dc:79:68:4e:1b:9a:af:7c:f4:51:78:92:32:b2:51:9f:c7:bc: 39:6e:ca:fb:f7:20:7d:69:fd:b0:e5:71:9a:bf:c8:0c:e7:c6: 04:25:7b:61:85:45:ad:f1:67:38:a4:09:e6:27:0f:8b:46:a5: 4d:33:27:37:ac:ae:93:00:fc:34:c2:9a:c9:28:00:70:c9:e5: 47:b5:62:6d:87:f0:19:31:88:f9:35:ae:29:60:01:83:87:55: 52:7c:c6:2f:f1:4a:3f:59:4c:4c:1f:70:1a:e5:99:fe:21:20: 6d:dd:11:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjQxMTIxMDIxNzE1WhcNMjQxMTI4MDIxNzE1WjAYMRYwFAYD VQQDEw02NzNlOTgyYi1lN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxPhlXSXV2AslG3KS8WeU5btVcH7gZpDP2aRMx6jpNwpjhWiiwapqPepSZTp o5OMWhqSuksNGa9mqxKeVy8RoPvVkzcl8Ij/1pNonQdoTvZ3KILhichZjAzNXCH/ BZCJ1Q0tz45u/FSpxo5rYVw31qFca8A++4eRURGRjWLgxvvSg4rJ0EnolbZjKi7D 57s+so9RqJnazjb9/AQ7uZWXJ8lP37k8sFIA2z2OcmUQpwp6vOD32UwpX49IqvIu ERx8SYKFsMI/nWiF7iYc5yJzz13lpf9kM9VjiZxGS2fuQUsrlGH/YVe0Zng6/KR2 uxyAgdHC6gK7zMS/Zz8tHMv+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Y0BEP 2j1gN61t5eSp7Kni2exXMB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9FQTY3QTk4QzdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3Nz QUJpZlBHeWxsUTRBZE1mRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4sMMVzucyhQRBI7thYrW08v86uLhNdmMFc7F4zZjp7/mhk9+eTVEB bdOTU3k4AbMk9FMZNeM+2PeXINsasCAPAnomA8chBEQCtytJXcb9VY4YP5zgXRUT 9T1Ncy1O9hsBNjyNIlECIQ+9g++3QNzel6H8j2SzIN8t10RbaHgYI3H4NRj4nO6r dK3ktrJoEefceWhOG5qvfPRReJIyslGfx7w5bsr79yB9af2w5XGav8gM58YEJXth hUWt8Wc4pAnmJw+LRqVNMyc3rK6TAPw0wprJKABwyeVHtWJth/AZMYj5Na4pYAGD h1VSfMYv8Uo/WUxMH3Aa5Zn+ISBt3RHX -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:04 2024 by rpki-client on console-fra.rpki-client.org