$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft File: bath0S4_GW9RaThyPIAnWZxddVI.mft (raw, json) Hash identifier: dR50dpJS4HMyAY7Sm21hn6CNRxTG70/oxqmSZToBA+c= Subject key identifier: 2C:A8:BF:4E:54:59:94:65:17:EB:72:C3:0A:34:70:30:16:93:0F:6F Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 Certificate issuer: /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft Manifest number: 56 Signing time: Sat 23 Nov 2024 05:07:42 +0000 Manifest this update: Sat 23 Nov 2024 05:07:41 +0000 Manifest next update: Sat 30 Nov 2024 05:07:41 +0000 Files and hashes: 1: bath0S4_GW9RaThyPIAnWZxddVI.crl (hash: doLUP2jckmoY9E2+9eJ3zCJkHAnocUZJlzpZ9icB980=) 2: F2022074272711EF91A40124C4F9AE02.roa (hash: UgSans1dKX/IYLF307H9wWjQO8qhKZGKUPwGt0P+vBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552 Validity Not Before: Nov 23 05:07:41 2024 GMT Not After : Nov 30 05:07:41 2024 GMT Subject: CN=6741631d-1282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:e0:d6:50:1e:44:00:6c:15:89:0e:32:c5: a8:18:18:da:fb:0a:d9:ac:a2:9a:fe:4a:dc:1b:f8: 72:75:ad:c6:d8:24:26:ce:98:ab:0a:de:11:b3:61: 3e:14:28:9a:79:3a:e2:be:7e:3f:34:d1:ee:31:15: 17:2b:b7:8f:84:17:4c:12:0c:08:c8:2f:17:d0:ff: 41:31:6b:66:66:2d:16:d7:38:52:83:9f:5e:37:9b: 49:1e:de:30:25:43:78:80:f2:bc:1b:28:0c:13:41: 96:66:0b:61:d4:77:bf:f5:bb:75:48:64:4e:cd:52: 13:d2:14:7b:fc:72:f6:7f:e7:10:de:f5:48:44:e3: fb:73:b8:b7:79:ab:10:19:1d:4c:fb:ec:06:91:eb: f8:81:7a:e6:28:4d:3a:fe:9e:57:71:a3:9b:da:ae: 27:3a:51:c5:17:c1:c8:97:dc:ab:88:08:c0:b2:c5: 2c:10:4f:37:b9:24:4b:74:ce:3c:ca:8e:92:02:d7: fd:cf:ac:6f:63:4d:48:39:81:25:30:45:a3:37:4c: 85:e2:ef:3c:27:38:0a:e7:4c:0d:64:2e:f7:f7:1f: c1:af:16:12:40:39:f2:b4:36:6d:fd:2e:ad:94:01: 87:4b:3e:1c:fd:8b:17:2d:50:58:b2:e9:d5:2b:68: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:BF:4E:54:59:94:65:17:EB:72:C3:0A:34:70:30:16:93:0F:6F X509v3 Authority Key Identifier: keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0f:ee:6f:99:a6:f0:5a:f4:bd:77:7c:a2:82:4c:11:72:ad: 86:52:de:5d:5f:3d:7f:69:68:62:42:6e:d1:6a:1d:bf:9a:3c: d4:90:56:3e:8f:38:27:11:91:47:20:d0:92:47:e0:03:52:75: 66:85:57:f4:cd:09:48:0e:71:13:60:26:2a:28:84:a4:68:7e: 4b:ba:49:a1:19:85:35:07:0b:a7:c7:e7:bc:99:87:b8:44:6e: 94:fd:46:e3:21:60:83:3b:84:84:7f:d9:16:19:fb:5f:e5:27: 96:e1:cd:63:f2:91:f1:a5:75:56:57:af:b3:a0:2d:c6:1d:cc: cc:77:a4:95:d9:c3:27:20:4d:5e:03:e1:39:eb:f5:27:2b:1e: ae:f5:90:5f:88:f6:3d:11:f2:4c:38:ac:85:12:db:69:a8:66: dc:9e:18:54:8e:5b:d1:a3:3c:9d:1a:12:42:19:bb:1a:36:c9: 91:35:a5:85:9b:b2:08:ce:89:53:74:75:01:5e:74:51:2a:fe: a2:70:82:37:9b:5d:a8:1d:45:45:ad:29:cc:f9:8d:be:a9:70: 14:7f:25:7f:7b:2c:d8:2b:fa:5f:a7:ac:14:b8:92:2a:8a:3e: 69:0b:2d:0e:c9:60:a4:60:23:9d:a9:c8:d1:e9:fe:bc:1b:8b: 46:90:70:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUJDQzExMC8GA1UEBRMoNkRBQjYxRDEyRTNGMTk2RjUxNjkzODcyM0M4MDI3NTk5 QzVENzU1MjAeFw0yNDExMjMwNTA3NDFaFw0yNDExMzAwNTA3NDFaMBgxFjAUBgNV BAMTDTY3NDE2MzFkLTEyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+rODWUB5EAGwViQ4yxagYGNr7Ctmsopr+Stwb+HJ1rcbYJCbOmKsK3hGzYT4U KJp5OuK+fj800e4xFRcrt4+EF0wSDAjILxfQ/0Exa2ZmLRbXOFKDn143m0ke3jAl Q3iA8rwbKAwTQZZmC2HUd7/1u3VIZE7NUhPSFHv8cvZ/5xDe9UhE4/tzuLd5qxAZ HUz77AaR6/iBeuYoTTr+nldxo5varic6UcUXwciX3KuICMCyxSwQTze5JEt0zjzK jpIC1/3PrG9jTUg5gSUwRaM3TIXi7zwnOArnTA1kLvf3H8GvFhJAOfK0Nm39Lq2U AYdLPhz9ixctUFiy6dUraGxxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULKi/TlRZ lGUX63LDCjRwMBaTD28wHwYDVR0jBBgwFoAUbath0S4/GW9RaThyPIAnWZxddVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQkNDLzJBRTg5ODFBMjcy NzExRUY5MTQzRTYyMkM0RjlBRTAyL2JhdGgwUzRfR1c5UmFUaHlQSUFuV1p4ZGRW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYmF0aDBTNF9HVzlSYVRoeVBJQW5XWnhkZFZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QkNDLzJBRTg5ODFBMjcyNzExRUY5MTQzRTYyMkM0RjlBRTAyL2JhdGgwUzRfR1c5 UmFUaHlQSUFuV1p4ZGRWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMP7m+ZpvBa9L13fKKCTBFyrYZS3l1fPX9paGJCbtFqHb+aPNSQVj6P OCcRkUcg0JJH4ANSdWaFV/TNCUgOcRNgJioohKRofku6SaEZhTUHC6fH57yZh7hE bpT9RuMhYIM7hIR/2RYZ+1/lJ5bhzWPykfGldVZXr7OgLcYdzMx3pJXZwycgTV4D 4Tnr9ScrHq71kF+I9j0R8kw4rIUS22moZtyeGFSOW9GjPJ0aEkIZuxo2yZE1pYWb sgjOiVN0dQFedFEq/qJwgjebXagdRUWtKcz5jb6pcBR/JX97LNgr+l+nrBS4kiqK PmkLLQ7JYKRgI52pyNHp/rwbi0aQcK0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org