$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: U5spK7ujFW8Mm5MBR0DI+2KUJZu+0qCitfdMtjF11fs= Subject key identifier: D5:5E:11:0A:26:B5:49:07:7E:20:44:3B:F4:31:E6:84:32:8E:73:48 Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 0954 Signing time: Wed 20 Nov 2024 19:53:45 +0000 Manifest this update: Wed 20 Nov 2024 19:53:45 +0000 Manifest next update: Wed 27 Nov 2024 19:53:45 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 8A2WAGgoLDbnmhoBscmK44ADCXsPt2xPfU73GeEphQQ=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: qUS6mlcyi1gniH5CbNt5WIUtOBMFDznl2mEvc4c5O74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Nov 20 19:53:45 2024 GMT Not After : Nov 27 19:53:45 2024 GMT Subject: CN=673e3e49-80a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:43:24:02:c6:d7:5c:5e:75:dc:05:57:31: c3:c5:94:8f:82:a7:10:70:23:75:96:b6:9e:4a:5b: db:93:36:1a:f8:02:16:e2:87:3a:ab:a0:38:00:69: 76:13:2e:49:7d:24:1d:c9:05:fd:e0:bf:b9:ee:5b: 93:ab:57:d0:8e:5d:f6:84:f4:2b:48:ec:b7:fe:90: 1b:c9:91:ee:41:d3:22:82:0e:3f:fc:36:61:26:a7: 9f:57:73:6e:04:cc:67:ae:f4:9a:91:07:88:4d:6c: 63:3a:19:17:ca:56:81:74:8d:4d:19:0e:a9:e5:8c: c5:3d:72:e8:ec:dc:fd:af:3d:36:d4:d0:ca:48:53: 6e:25:4b:d4:e2:2d:fa:8c:ff:68:e5:5c:e2:c3:29: 95:c2:f6:cb:19:97:0b:91:67:70:d7:2f:5d:5a:a2: a8:d5:e9:e9:d9:69:7a:97:de:f3:b9:a0:16:84:44: 6f:bb:6d:54:c4:f7:8d:0b:42:34:52:b4:91:4e:c5: 46:8d:53:0f:23:ab:04:ed:84:39:42:49:c9:7b:19: 7b:9b:0d:b8:5f:13:6d:d0:9f:74:31:64:63:7b:5b: 51:f5:cf:10:1b:39:1d:32:39:83:90:5c:89:45:25: 0d:da:77:35:5b:a0:53:cf:fd:5b:1a:38:53:1e:75: d5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5E:11:0A:26:B5:49:07:7E:20:44:3B:F4:31:E6:84:32:8E:73:48 X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:8b:ce:39:6f:ec:95:44:fa:3b:76:72:43:ad:75:12:e5:cf: ca:36:15:ab:66:41:d3:3f:a9:2e:37:69:a2:99:73:81:4a:4c: 32:ba:89:3c:bb:5a:f7:38:31:73:62:0c:47:c9:59:57:47:54: f3:99:89:90:27:3f:6b:af:61:a4:4c:ef:66:11:8e:79:36:6d: 38:67:c6:8f:5a:90:e7:1e:10:47:25:76:93:6d:09:b8:f7:62: 86:63:ac:bd:1e:4c:d8:0e:4b:2e:d0:a8:d5:33:2c:b5:e9:fa: 7b:08:26:38:f7:a2:fd:4e:1a:58:3d:08:6b:b9:63:56:55:81: 44:24:5c:e8:66:c4:93:a4:2f:4b:b8:c4:19:4a:bf:a3:05:9d: f5:ab:8c:2b:2b:62:16:83:4e:09:86:04:07:f9:a9:18:56:4b: 9a:6a:0d:db:74:2a:7c:67:8e:6b:6d:ac:4d:2c:17:10:7c:24: a7:55:77:0b:7f:c3:9f:b3:b1:62:ad:3b:4e:f7:b8:2a:4b:93: 44:c0:78:8a:51:6c:aa:c2:2b:a2:50:4d:36:f3:14:59:fb:60: 04:d7:77:16:c0:20:9d:24:5f:e6:c5:e7:b0:10:22:46:18:b4: 73:b9:41:37:e3:a2:b3:c3:2b:82:1f:95:d2:67:69:29:a9:e3: 97:dd:92:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjQxMTIwMTk1MzQ1WhcNMjQxMTI3MTk1MzQ1WjAYMRYwFAYD VQQDEw02NzNlM2U0OS04MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxNDJALG11xeddwFVzHDxZSPgqcQcCN1lraeSlvbkzYa+AIW4oc6q6A4AGl2 Ey5JfSQdyQX94L+57luTq1fQjl32hPQrSOy3/pAbyZHuQdMigg4//DZhJqefV3Nu BMxnrvSakQeITWxjOhkXylaBdI1NGQ6p5YzFPXLo7Nz9rz021NDKSFNuJUvU4i36 jP9o5VziwymVwvbLGZcLkWdw1y9dWqKo1enp2Wl6l97zuaAWhERvu21UxPeNC0I0 UrSRTsVGjVMPI6sE7YQ5QknJexl7mw24XxNt0J90MWRje1tR9c8QGzkdMjmDkFyJ RSUN2nc1W6BTz/1bGjhTHnXVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVeEQom tUkHfiBEO/Qx5oQyjnNIMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTi845b+yVRPo7dnJDrXUS5c/KNhWrZkHTP6kuN2mimXOBSkwyuok8 u1r3ODFzYgxHyVlXR1TzmYmQJz9rr2GkTO9mEY55Nm04Z8aPWpDnHhBHJXaTbQm4 92KGY6y9HkzYDksu0KjVMyy16fp7CCY496L9ThpYPQhruWNWVYFEJFzoZsSTpC9L uMQZSr+jBZ31q4wrK2IWg04JhgQH+akYVkuaag3bdCp8Z45rbaxNLBcQfCSnVXcL f8Ofs7FirTtO97gqS5NEwHiKUWyqwiuiUE028xRZ+2AE13cWwCCdJF/mxeewECJG GLRzuUE346KzwyuCH5XSZ2kpqeOX3ZKo -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:49 2024 by rpki-client on console-fra.rpki-client.org