$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft File: VV50iV-5CWGfKZw_nQuwhV_YFug.mft (raw, json) Hash identifier: QeCSHM0Y/m329hagebyCPjKt9x+5C5lcKUcrTRNClP4= Subject key identifier: 1F:7D:C9:B1:B6:1D:4A:E9:12:0F:06:B1:3D:16:90:70:F5:5B:4F:D7 Authority key identifier: 55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8 Certificate issuer: /CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8 Certificate serial: 342C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft Manifest number: 342C Signing time: Sun 24 Nov 2024 15:10:18 +0000 Manifest this update: Sun 24 Nov 2024 15:10:17 +0000 Manifest next update: Sun 01 Dec 2024 15:10:17 +0000 Files and hashes: 1: VV50iV-5CWGfKZw_nQuwhV_YFug.crl (hash: qvDscpskPEnsBFUp1kqhNnljk53s95tqgIcZuDEvOSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13356 (0x342c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8 Validity Not Before: Nov 24 15:10:17 2024 GMT Not After : Dec 1 15:10:17 2024 GMT Subject: CN=674341d9-9e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:4e:89:48:f7:87:70:c7:39:a2:eb:f1:a6: 48:aa:51:b1:b8:e7:da:76:88:6b:03:55:31:30:4a: 70:7b:91:80:58:26:39:e2:22:59:ff:24:79:73:35: f8:b5:8a:56:46:1a:c5:3f:94:8b:07:52:bd:7d:7c: 94:5b:e5:09:ea:50:58:98:c8:b5:d8:13:48:5a:e7: e6:87:d8:46:9a:37:22:a8:fd:36:1e:bf:8c:31:20: 7d:cd:1e:05:39:51:ee:4a:9a:ff:71:31:d4:d4:d9: 90:b2:74:1b:1f:e5:bd:58:96:73:8b:03:c3:51:2f: 3d:08:35:b8:2f:e7:55:cf:e9:1f:cd:51:d9:59:a0: 99:a4:16:a3:61:26:de:23:97:d9:8f:9c:0e:bb:e8: e3:5c:2c:c2:96:98:57:b5:01:1f:1e:a2:91:20:84: 51:82:33:e1:6f:fd:86:06:67:e8:21:ec:db:55:c2: 00:6a:91:91:99:db:13:b5:b8:e3:c2:30:1d:64:f9: 78:37:4a:e1:6e:dc:84:b6:b7:7b:af:cd:fa:6f:6d: bb:88:fa:0f:65:b1:08:ba:5b:08:ff:a4:15:ca:a5: c3:76:ac:b1:55:91:f0:23:b2:cf:85:16:6f:f4:0e: 10:a3:9e:32:c0:6d:2d:0d:f4:65:b7:83:90:d8:c3: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:C9:B1:B6:1D:4A:E9:12:0F:06:B1:3D:16:90:70:F5:5B:4F:D7 X509v3 Authority Key Identifier: keyid:55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a2:2b:9b:55:9d:dd:4e:d1:22:01:fc:c7:b1:98:e8:5d:53: 8c:61:80:cc:80:67:bd:e8:23:f8:61:aa:48:86:04:86:c3:83: c3:d4:27:f8:7d:14:e5:eb:60:3d:6b:9b:5b:d5:6b:e4:16:3a: 6f:15:f1:36:6b:ae:ab:bf:46:80:a5:e0:61:d9:74:42:43:0a: 97:30:2c:a8:66:c9:44:e1:c9:6d:5f:71:82:f2:87:10:d5:16: 82:5c:9c:82:eb:f5:29:69:c8:c4:85:ff:c2:08:86:ad:12:7b: ed:f7:f2:d2:7b:3d:b2:68:6f:a5:68:27:bd:47:29:e4:a1:d5: 13:7d:cf:a0:96:18:57:ec:aa:34:1a:c2:a6:bd:72:25:90:45: 3c:43:88:0f:a6:8b:54:67:8e:17:8e:39:b2:b1:62:ab:f1:11: c1:49:e2:b3:1d:fa:a5:f9:f8:30:0f:f0:db:d9:d3:fe:ab:fb: b2:df:68:b7:ad:aa:7f:88:4d:bb:26:a3:d5:ae:54:c6:58:a2: bc:60:62:80:f5:32:4e:26:07:8a:7a:5d:94:bf:92:31:0b:78: 95:97:06:44:67:9b:5d:2b:1f:42:ae:d6:86:8f:ea:5c:97:b1: 8e:fc:d9:9d:a7:e7:d4:05:cc:c3:8f:0b:e6:ed:e3:b5:22:a7: 5f:83:a9:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKDU1NUU3NDg5NUZCOTA5NjE5RjI5OUMzRjlEMEJCMDg1 NUZEODE2RTgwHhcNMjQxMTI0MTUxMDE3WhcNMjQxMjAxMTUxMDE3WjAYMRYwFAYD VQQDEw02NzQzNDFkOS05ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqtOiUj3h3DHOaLr8aZIqlGxuOfadohrA1UxMEpwe5GAWCY54iJZ/yR5czX4 tYpWRhrFP5SLB1K9fXyUW+UJ6lBYmMi12BNIWufmh9hGmjciqP02Hr+MMSB9zR4F OVHuSpr/cTHU1NmQsnQbH+W9WJZziwPDUS89CDW4L+dVz+kfzVHZWaCZpBajYSbe I5fZj5wOu+jjXCzClphXtQEfHqKRIIRRgjPhb/2GBmfoIezbVcIAapGRmdsTtbjj wjAdZPl4N0rhbtyEtrd7r836b227iPoPZbEIulsI/6QVyqXDdqyxVZHwI7LPhRZv 9A4Qo54ywG0tDfRlt4OQ2MPSVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB99ybG2 HUrpEg8GsT0WkHD1W0/XMB8GA1UdIwQYMBaAFFVedIlfuQlhnymcP50LsIVf2Bbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC83MTJGQzJDMjFE QTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNXR2ZLWndfblF1d2hWX1lG dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWNTBpVi01Q1dHZktad19uUXV3aFZfWUZ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC83MTJGQzJDMjFEQTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNX R2ZLWndfblF1d2hWX1lGdWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLoiubVZ3dTtEiAfzHsZjoXVOMYYDMgGe96CP4YapIhgSGw4PD1Cf4 fRTl62A9a5tb1WvkFjpvFfE2a66rv0aApeBh2XRCQwqXMCyoZslE4cltX3GC8ocQ 1RaCXJyC6/UpacjEhf/CCIatEnvt9/LSez2yaG+laCe9RynkodUTfc+glhhX7Ko0 GsKmvXIlkEU8Q4gPpotUZ44XjjmysWKr8RHBSeKzHfql+fgwD/Db2dP+q/uy32i3 rap/iE27JqPVrlTGWKK8YGKA9TJOJgeKel2Uv5IxC3iVlwZEZ5tdKx9CrtaGj+pc l7GO/Nmdp+fUBczDjwvm7eO1Iqdfg6lm -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:01 2024 by rpki-client on console-fra.rpki-client.org