$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: 4cSasUkzDd2F23qT1JKM5pKqdLzFiGd9yElN+wFnD5g= Subject key identifier: 03:87:45:9E:C3:90:F4:C2:50:02:D2:18:53:7E:1A:E0:7A:E2:80:30 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0D67 Signing time: Sun 24 Nov 2024 17:46:28 +0000 Manifest this update: Sun 24 Nov 2024 17:46:27 +0000 Manifest next update: Sun 01 Dec 2024 17:46:27 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: axty1bIUGwqfWqzZuAyhkZZYh/qIZKLtd+URA7XT5Pk=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Nov 24 17:46:27 2024 GMT Not After : Dec 1 17:46:27 2024 GMT Subject: CN=67436673-76f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:28:1d:7e:74:0b:db:a4:3f:d8:81:ce:7c: 77:07:2a:cb:2d:fd:b1:34:e8:98:ea:34:1c:ef:95: 1f:1d:6c:8d:a7:46:d6:be:f0:66:ba:75:0f:cd:43: 75:ba:8d:e3:24:b7:3a:f3:9a:0f:0a:8a:a4:90:e5: 1b:6f:50:98:f5:86:65:20:6c:68:8e:0a:e0:01:c0: b6:33:a0:2b:bc:3c:4c:3f:31:40:f4:03:aa:ac:fa: 8f:a2:74:ef:81:4e:ff:36:8c:4e:cd:de:5d:17:ad: 87:9c:95:3b:62:ca:08:80:e8:98:56:fd:2a:cf:f0: 05:10:97:9e:f5:ec:50:49:7b:f6:e1:b3:bd:8c:37: d7:9c:6e:e6:95:99:25:42:8f:82:84:50:2c:7f:e9: e9:44:9f:97:2a:48:a3:38:9e:ce:27:d7:3e:c4:f0: c4:a8:ed:0c:65:0b:94:c9:9a:d0:5e:ec:d2:64:83: 8e:ca:90:98:7a:33:bd:4d:95:bd:4c:ab:0c:25:3d: e2:43:01:a8:80:47:44:3f:e9:86:0b:70:ca:ca:85: d7:c8:62:84:74:45:6e:50:82:f5:2a:8c:b1:52:d1: a6:29:6b:14:8a:9f:90:a6:e3:20:36:ac:c1:28:1a: 3e:5a:13:f8:63:de:e9:2f:09:0a:15:fc:b7:20:e4: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:87:45:9E:C3:90:F4:C2:50:02:D2:18:53:7E:1A:E0:7A:E2:80:30 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:06:e8:56:0a:08:52:fb:e5:aa:cb:3f:79:f9:ee:d5:cc:f0: c3:60:3d:51:9a:1d:67:7e:b1:2d:89:b5:75:07:b2:7d:74:37: be:fd:4c:18:ad:4e:80:6b:ac:e3:76:11:93:44:32:47:16:31: 1b:f5:26:3a:b2:d7:14:54:6e:46:35:35:10:02:dd:06:02:df: ab:a0:b3:16:92:a7:5c:21:f7:5c:33:f2:24:88:c0:9b:91:fc: 22:54:55:09:f1:7f:27:64:a3:f1:81:a4:4e:cc:67:cd:1f:2c: 4e:e4:62:b4:8d:49:cb:22:0e:9b:44:01:eb:27:d0:fd:70:ff: c4:d3:ff:2d:d0:25:5d:35:26:a7:9d:55:af:2f:90:97:49:22: 3c:9f:80:a4:88:fe:dd:ad:2c:25:f0:3f:6c:72:d2:37:f9:6e: b6:b0:7a:0f:03:a9:3d:c2:39:31:5d:cd:bc:62:93:67:d8:8a: 2d:60:cd:3a:1d:12:f0:be:28:71:e4:d8:bf:bb:7a:11:ef:3e: 4a:5e:da:4c:e7:dc:18:9c:61:dc:39:1c:2b:91:c3:88:71:ea: 66:06:84:e7:e1:08:3d:6e:81:a8:8e:48:fe:e4:be:d4:34:bd: b2:63:30:d9:b3:5c:a3:cc:62:32:c6:d6:40:51:be:56:aa:70: c6:f8:67:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjQxMTI0MTc0NjI3WhcNMjQxMjAxMTc0NjI3WjAYMRYwFAYD VQQDEw02NzQzNjY3My03NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylAoHX50C9ukP9iBznx3ByrLLf2xNOiY6jQc75UfHWyNp0bWvvBmunUPzUN1 uo3jJLc685oPCoqkkOUbb1CY9YZlIGxojgrgAcC2M6ArvDxMPzFA9AOqrPqPonTv gU7/NoxOzd5dF62HnJU7YsoIgOiYVv0qz/AFEJee9exQSXv24bO9jDfXnG7mlZkl Qo+ChFAsf+npRJ+XKkijOJ7OJ9c+xPDEqO0MZQuUyZrQXuzSZIOOypCYejO9TZW9 TKsMJT3iQwGogEdEP+mGC3DKyoXXyGKEdEVuUIL1KoyxUtGmKWsUip+QpuMgNqzB KBo+WhP4Y97pLwkKFfy3IOQbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOHRZ7D kPTCUALSGFN+GuB64oAwMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARBuhWCghS++Wqyz95+e7VzPDDYD1Rmh1nfrEtibV1B7J9dDe+/UwY rU6Aa6zjdhGTRDJHFjEb9SY6stcUVG5GNTUQAt0GAt+roLMWkqdcIfdcM/IkiMCb kfwiVFUJ8X8nZKPxgaROzGfNHyxO5GK0jUnLIg6bRAHrJ9D9cP/E0/8t0CVdNSan nVWvL5CXSSI8n4CkiP7drSwl8D9sctI3+W62sHoPA6k9wjkxXc28YpNn2IotYM06 HRLwvihx5Ni/u3oR7z5KXtpM59wYnGHcORwrkcOIcepmBoTn4Qg9boGojkj+5L7U NL2yYzDZs1yjzGIyxtZAUb5WqnDG+GeO -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:23 2024 by rpki-client on console-fra.rpki-client.org