$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: IHr/3NzlmIto0r6m8XDhjQQfDRhB8Vjetkm9DOi8BhA= Subject key identifier: 88:50:43:F2:EC:4A:E7:27:29:57:1D:66:B9:A9:4B:90:9A:16:A3:B8 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 06E2 Signing time: Fri 22 Nov 2024 21:35:05 +0000 Manifest this update: Fri 22 Nov 2024 21:35:05 +0000 Manifest next update: Fri 29 Nov 2024 21:35:05 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: p3v617hcscFZlpr1HZ40ASxTGVzNas25W9rw+F6aOiQ=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: 0mX5AyQ3/wAE6Y3GapFs8PrduN5XApUo77DD01nsgSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Nov 22 21:35:05 2024 GMT Not After : Nov 29 21:35:05 2024 GMT Subject: CN=6740f909-e23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:5a:b8:73:2c:a3:a6:3f:df:36:7c:30:4f: a3:3c:ab:c2:13:be:67:b2:3e:c0:9d:56:89:67:e5: ff:3a:9c:db:c7:1f:de:39:cf:7e:63:89:ed:cc:6b: de:5d:cb:33:b9:8e:3c:55:77:b8:8d:63:89:43:fc: fd:e3:c3:f8:c4:82:5e:e9:9e:03:30:04:2f:21:26: 6f:35:7a:93:48:e9:5d:fa:00:ac:25:5e:79:c5:d8: f4:29:8f:61:60:95:77:74:e5:84:bf:7a:e2:96:d0: f2:cd:b6:8a:1b:c2:cf:70:c2:bc:48:11:29:e4:5c: 25:73:78:7f:38:e4:a3:62:24:c7:20:3e:ea:e5:c4: 3a:7b:f6:21:10:e9:52:60:c8:c0:34:9d:c0:83:43: fc:bf:1c:a8:ef:44:bd:95:81:7d:5c:8d:ff:61:7a: 79:78:6a:01:cc:86:2e:60:a1:f4:25:1f:4f:7a:06: f4:7a:f2:03:37:35:bc:db:1d:1d:46:b2:bb:7e:a6: d1:fc:bd:fe:93:cb:e2:ec:7e:09:6b:c0:79:6b:55: a3:4b:d3:5e:a5:58:f6:2a:59:ec:bf:56:5c:94:7c: ba:05:2d:bd:49:47:4b:cb:76:ea:b8:39:32:d3:fc: 75:71:11:76:3a:e4:c8:3a:29:72:2d:0f:bd:4c:68: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:43:F2:EC:4A:E7:27:29:57:1D:66:B9:A9:4B:90:9A:16:A3:B8 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:e6:45:7d:7c:c7:56:f2:7d:00:1d:41:38:46:21:c5:4d: 95:12:58:46:e0:2b:a5:41:35:7c:d0:9e:b2:94:99:19:93:11: 0b:78:6c:94:e0:fd:67:99:35:d2:e9:1f:96:02:0d:4e:ce:d3: ff:22:5c:ef:4b:eb:f0:8c:b6:26:1a:ab:cb:c6:5b:1b:dd:c5: aa:38:25:38:d9:d9:65:c5:28:e4:09:b1:fa:d9:20:ed:a1:ed: a4:12:15:cd:cb:c3:26:19:ca:0d:0e:92:f6:9a:bc:d6:f2:bd: 52:b2:8e:f3:b0:73:d6:f8:d6:95:1d:1c:6c:56:17:27:b5:c2: 37:a5:30:8d:2c:69:1d:5d:61:cb:bb:fa:70:a8:93:41:9a:19: 1b:94:e6:18:45:a8:50:c8:51:50:1d:73:7a:d6:34:a6:89:ba: 78:f0:89:4e:3f:31:29:3d:08:cb:f7:a0:f2:7f:36:ff:c2:62: 55:74:a2:15:a8:0c:d4:f8:1b:dd:2e:cb:54:7a:cf:35:92:ac: 19:65:17:dc:00:71:67:5f:c8:33:52:c1:01:10:84:60:bf:03: 33:30:41:0c:9d:65:af:cf:5e:fd:d4:b3:bc:92:f3:0f:a3:ef: 91:bf:f3:2e:6e:1e:5e:48:9d:00:73:1e:6f:28:1e:33:e2:8f: 88:b9:bc:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjQxMTIyMjEzNTA1WhcNMjQxMTI5MjEzNTA1WjAYMRYwFAYD VQQDEw02NzQwZjkwOS1lMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWJauHMso6Y/3zZ8ME+jPKvCE75nsj7AnVaJZ+X/Opzbxx/eOc9+Y4ntzGve XcszuY48VXe4jWOJQ/z948P4xIJe6Z4DMAQvISZvNXqTSOld+gCsJV55xdj0KY9h YJV3dOWEv3riltDyzbaKG8LPcMK8SBEp5Fwlc3h/OOSjYiTHID7q5cQ6e/YhEOlS YMjANJ3Ag0P8vxyo70S9lYF9XI3/YXp5eGoBzIYuYKH0JR9Pegb0evIDNzW82x0d RrK7fqbR/L3+k8vi7H4Ja8B5a1WjS9NepVj2Klnsv1ZclHy6BS29SUdLy3bquDky 0/x1cRF2OuTIOilyLQ+9TGgzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhQQ/Ls SucnKVcdZrmpS5CaFqO4MB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWneZFfXzHVvJ9AB1BOEYhxU2VElhG4CulQTV80J6ylJkZkxELeGyU 4P1nmTXS6R+WAg1OztP/IlzvS+vwjLYmGqvLxlsb3cWqOCU42dllxSjkCbH62SDt oe2kEhXNy8MmGcoNDpL2mrzW8r1Sso7zsHPW+NaVHRxsVhcntcI3pTCNLGkdXWHL u/pwqJNBmhkblOYYRahQyFFQHXN61jSmibp48IlOPzEpPQjL96Dyfzb/wmJVdKIV qAzU+BvdLstUes81kqwZZRfcAHFnX8gzUsEBEIRgvwMzMEEMnWWvz1791LO8kvMP o++Rv/Mubh5eSJ0Acx5vKB4z4o+IubzU -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org