$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: 1T4PJRjUq9t/9OHOYNDuj7wYWWP7zIzOcAgln8ykP2Y= Subject key identifier: D7:20:FD:8E:DB:97:11:35:1E:EA:39:98:62:96:40:E3:36:06:59:30 Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 05EC Signing time: Wed 20 Nov 2024 20:11:43 +0000 Manifest this update: Wed 20 Nov 2024 20:11:42 +0000 Manifest next update: Wed 27 Nov 2024 20:11:42 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: vfXTIdLWkbXJxijj90TkgST3N81BSolff3FBAb+H/Lg=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: LyuoMJXz1NyXM9pSNW11Fa6fRcMflVH6LhgfRij1kVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: Nov 20 20:11:42 2024 GMT Not After : Nov 27 20:11:42 2024 GMT Subject: CN=673e427e-1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:3b:a4:b8:57:6a:5f:61:e5:d4:0b:41:9c: 1c:26:45:ee:3a:ad:66:12:f6:e1:c1:63:8a:7e:65: 9b:f5:1d:49:e4:5b:28:7f:91:04:f5:8e:6d:94:65: 87:21:b6:d4:c4:47:48:d3:41:8f:2c:e2:47:0a:f1: 1c:81:07:41:af:92:32:a0:52:88:47:cd:d2:bc:1b: e5:32:3c:0f:88:09:3d:5b:20:d7:fd:f0:b6:cb:a9: e8:9a:72:aa:71:fc:66:f5:35:6b:68:5b:ce:cc:b4: 8f:68:a8:7b:43:2a:33:16:cd:3f:ad:2d:c7:f9:81: 2f:d4:18:e7:c3:9f:f3:d3:86:ab:6f:0c:4c:4d:11: 2d:fb:7c:25:f2:5c:55:33:8e:33:8a:3b:e9:3f:48: 7d:68:69:cf:6f:1f:eb:54:2e:01:df:31:30:28:ea: 68:50:81:69:ca:7e:84:19:c5:52:a8:33:90:30:05: 37:4a:e1:86:a8:55:ee:4d:4b:cf:8f:47:38:2b:35: 91:92:86:63:0b:bc:4a:10:be:b5:ff:00:b9:4c:80: 7f:6c:4e:f3:d8:e0:af:36:71:16:64:08:bd:44:98: 98:8f:da:ab:72:fc:d7:f1:15:3c:9c:6d:8f:fa:9e: 9c:32:01:3c:d3:11:a4:ac:48:3a:87:d8:17:34:15: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:FD:8E:DB:97:11:35:1E:EA:39:98:62:96:40:E3:36:06:59:30 X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:9d:ec:16:14:c2:b1:ac:d9:f1:2f:b9:f2:65:60:4c:fc: bc:03:70:e0:be:09:84:99:4e:1a:40:fa:e2:31:f6:65:09:cb: 93:b3:fa:3d:6f:9d:ef:2c:e0:29:e4:4c:6a:a7:97:e6:25:a6: 64:b9:b7:8a:d9:b9:6c:2a:a3:75:27:ae:58:c4:89:22:22:28: 28:2e:c0:ab:2c:e3:ef:78:31:d8:92:31:6f:5e:6b:f5:99:7f: 39:55:6e:c3:1e:2e:0f:3b:63:d1:9f:fb:0a:7b:a2:df:90:dd: 21:8b:e2:29:b0:73:68:f2:78:1b:7a:ed:7a:88:28:4b:b5:83: 95:c8:69:72:3f:74:7d:79:7e:41:54:28:77:14:c3:fe:ab:ab: 41:4b:1c:9f:2b:11:e1:ac:6d:23:8b:97:df:8c:6e:22:c2:b4: 33:c5:f9:7a:8b:0d:c1:3a:2b:e8:75:fa:b1:6d:9c:aa:f2:3e: c0:56:dc:b8:e9:36:fe:f4:db:3d:46:70:79:22:93:33:6e:32: b3:c7:f5:63:be:27:a8:08:8c:4b:a9:a8:de:73:33:5e:77:55: e9:9b:fe:d3:d8:92:fd:3e:a8:12:81:72:aa:70:63:38:07:6a: 16:9d:6d:a3:e9:91:41:2a:c8:1b:d9:4e:03:51:9a:db:1c:c0: e1:6d:16:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjQxMTIwMjAxMTQyWhcNMjQxMTI3MjAxMTQyWjAYMRYwFAYD VQQDEw02NzNlNDI3ZS0xYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eA7pLhXal9h5dQLQZwcJkXuOq1mEvbhwWOKfmWb9R1J5Fsof5EE9Y5tlGWH IbbUxEdI00GPLOJHCvEcgQdBr5IyoFKIR83SvBvlMjwPiAk9WyDX/fC2y6nomnKq cfxm9TVraFvOzLSPaKh7QyozFs0/rS3H+YEv1Bjnw5/z04arbwxMTREt+3wl8lxV M44zijvpP0h9aGnPbx/rVC4B3zEwKOpoUIFpyn6EGcVSqDOQMAU3SuGGqFXuTUvP j0c4KzWRkoZjC7xKEL61/wC5TIB/bE7z2OCvNnEWZAi9RJiYj9qrcvzX8RU8nG2P +p6cMgE80xGkrEg6h9gXNBXgqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcg/Y7b lxE1Huo5mGKWQOM2BlkwMB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWJ3sFhTCsazZ8S+58mVgTPy8A3DgvgmEmU4aQPriMfZlCcuTs/o9 b53vLOAp5Exqp5fmJaZkubeK2blsKqN1J65YxIkiIigoLsCrLOPveDHYkjFvXmv1 mX85VW7DHi4PO2PRn/sKe6LfkN0hi+IpsHNo8ngbeu16iChLtYOVyGlyP3R9eX5B VCh3FMP+q6tBSxyfKxHhrG0ji5ffjG4iwrQzxfl6iw3BOivodfqxbZyq8j7AVty4 6Tb+9Ns9RnB5IpMzbjKzx/VjvieoCIxLqajeczNed1Xpm/7T2JL9PqgSgXKqcGM4 B2oWnW2j6ZFBKsgb2U4DUZrbHMDhbRaC -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:03 2024 by rpki-client on console-ams.rpki-client.org