$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: dtPTpi8k99XTQmoZl11AHoXGht/8Q+cGraBuhtlIahs= Subject key identifier: F9:EF:D6:81:2A:1A:6A:58:25:6F:EC:A2:78:F8:69:F6:4F:FD:AB:FD Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 033C Signing time: Sat 23 Nov 2024 00:37:05 +0000 Manifest this update: Sat 23 Nov 2024 00:37:04 +0000 Manifest next update: Sat 30 Nov 2024 00:37:04 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: hUreYq8UtKZh0lU2DWLnQ0lYH/moMN+q38kwnAfq6mQ=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: L901qTQEw8muSYE46ShEAdagWkbgFQt2yEJzIv31kfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Nov 23 00:37:04 2024 GMT Not After : Nov 30 00:37:04 2024 GMT Subject: CN=674123b1-c866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:09:16:27:80:a8:73:29:76:a1:23:75:43: 0d:81:49:22:e9:f5:90:b2:d4:a5:44:85:8b:ca:89: 3d:ea:b8:14:43:99:87:8e:b6:5e:11:e2:96:4b:19: 6a:ac:01:08:98:91:0a:00:e9:f8:a8:59:36:6a:5c: 0b:b7:ec:41:65:65:ef:24:79:a5:87:ab:6a:b8:ff: e0:41:f0:f3:26:d1:22:12:76:94:5a:99:7f:26:b9: 05:01:44:63:fc:a0:1f:e0:7c:42:e0:1f:ab:41:26: 3a:f1:1e:b4:d9:20:23:c0:c5:e9:c2:86:5d:84:bb: cd:db:b7:8a:90:95:c3:ec:6e:13:e8:f8:15:f2:43: a3:bd:14:94:c8:51:94:20:66:ce:09:0a:a7:ee:f5: a9:cf:28:99:bb:72:db:e2:b2:05:a8:d8:18:9c:7a: c7:af:5a:9d:32:d9:e3:c3:b9:6b:5f:6d:5e:be:61: b3:b1:d1:b8:b3:bd:6f:e6:af:e0:42:ca:ee:85:3e: 98:9f:74:9b:7d:14:5c:25:0f:87:f9:95:bb:b4:f1: 69:a5:cb:87:71:ce:db:ab:a8:49:41:e8:21:77:01: ee:b6:4c:6e:43:d7:26:8e:36:c1:31:30:a1:d7:df: 00:84:a7:d1:22:13:6e:86:94:81:72:cf:ef:87:8e: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:D6:81:2A:1A:6A:58:25:6F:EC:A2:78:F8:69:F6:4F:FD:AB:FD X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:37:ba:2a:b5:f7:38:98:c4:24:a6:c8:67:21:42:f6:62:7a: 8a:f0:e2:cd:38:21:a5:67:4c:86:4b:d7:e1:d5:29:c2:02:76: d9:82:76:f7:23:f0:b8:79:d0:13:d4:d8:f6:ab:89:69:db:ea: a5:6e:65:8d:df:05:58:11:3c:de:84:64:3c:2a:84:65:70:a1: 79:db:6f:f3:ea:97:ee:43:7e:63:bc:83:78:f4:1d:cf:4c:ec: fe:27:10:ff:7b:a4:61:d8:f1:64:ff:bf:0d:9d:97:22:84:5d: 30:a4:03:f5:ca:07:c5:bf:aa:17:6a:05:5e:7f:0b:87:94:11: 33:97:3e:73:81:07:57:88:6a:44:d5:1b:e3:c5:da:08:a7:c8: a0:57:13:fd:0f:9f:81:c2:26:bf:be:ed:75:59:93:71:01:0a: 3a:3f:7e:cd:1c:13:99:b4:7f:dc:f1:86:74:0e:64:48:ae:18: 4d:96:d0:71:d1:e0:1e:90:98:90:04:b3:38:ea:40:e2:8d:db: b6:e6:40:bb:4b:8f:40:13:63:72:16:9a:16:de:ee:2c:6b:63: 68:12:2c:a0:4c:60:64:6f:a7:d8:98:7f:f4:a4:64:c7:65:6a: d4:2d:9f:e5:75:56:06:eb:91:cd:2b:15:55:11:b7:09:6b:76: d2:57:8e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjQxMTIzMDAzNzA0WhcNMjQxMTMwMDAzNzA0WjAYMRYwFAYD VQQDEw02NzQxMjNiMS1jODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FUJFieAqHMpdqEjdUMNgUki6fWQstSlRIWLyok96rgUQ5mHjrZeEeKWSxlq rAEImJEKAOn4qFk2alwLt+xBZWXvJHmlh6tquP/gQfDzJtEiEnaUWpl/JrkFAURj /KAf4HxC4B+rQSY68R602SAjwMXpwoZdhLvN27eKkJXD7G4T6PgV8kOjvRSUyFGU IGbOCQqn7vWpzyiZu3Lb4rIFqNgYnHrHr1qdMtnjw7lrX21evmGzsdG4s71v5q/g QsruhT6Yn3SbfRRcJQ+H+ZW7tPFppcuHcc7bq6hJQeghdwHutkxuQ9cmjjbBMTCh 198AhKfRIhNuhpSBcs/vh44XFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnv1oEq GmpYJW/sonj4afZP/av9MB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeN7oqtfc4mMQkpshnIUL2YnqK8OLNOCGlZ0yGS9fh1SnCAnbZgnb3 I/C4edAT1Nj2q4lp2+qlbmWN3wVYETzehGQ8KoRlcKF522/z6pfuQ35jvIN49B3P TOz+JxD/e6Rh2PFk/78NnZcihF0wpAP1ygfFv6oXagVefwuHlBEzlz5zgQdXiGpE 1RvjxdoIp8igVxP9D5+Bwia/vu11WZNxAQo6P37NHBOZtH/c8YZ0DmRIrhhNltBx 0eAekJiQBLM46kDijdu25kC7S49AE2NyFpoW3u4sa2NoEiygTGBkb6fYmH/0pGTH ZWrULZ/ldVYG65HNKxVVEbcJa3bSV45X -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org