$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json) Hash identifier: J0XGCwh5f+Xye8trpUEtirb6Y0u/b0sKYNBcC8Ns8t0= Subject key identifier: C6:64:6E:11:B8:7A:88:33:41:BF:8A:F4:16:0C:D1:E4:77:18:4C:B7 Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 Certificate issuer: /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft Manifest number: 060D Signing time: Fri 22 Nov 2024 22:11:59 +0000 Manifest this update: Fri 22 Nov 2024 22:11:58 +0000 Manifest next update: Fri 29 Nov 2024 22:11:58 +0000 Files and hashes: 1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: NnBZixtnSCfCFZLGoH4vaECsfS6Ab3SXBB/5IoFBbRQ=) 2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: CT9sDKwuOn2QZQMx4pEbBLxPQ8ETmbh2GeFxmC/fhus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Validity Not Before: Nov 22 22:11:58 2024 GMT Not After : Nov 29 22:11:58 2024 GMT Subject: CN=674101af-23dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:e7:99:8e:b8:7f:27:6a:7a:36:0d:52:22: ab:4d:09:0d:b6:56:74:5a:b5:87:60:c4:18:91:d5: e9:6a:55:71:44:7b:7d:cb:e4:00:38:a4:ac:27:3f: ed:ba:58:1e:8c:3b:40:ff:33:e8:1c:13:61:0b:e7: 78:90:90:f9:53:fe:3f:95:40:94:42:2b:fc:bf:3d: 66:9a:b9:2c:b8:ac:9f:75:21:24:1c:2c:53:19:6c: 9a:cb:94:91:26:32:5e:4b:04:d3:5f:38:bc:1e:61: 89:86:03:ba:4c:b3:db:21:72:6b:89:63:52:6b:51: 4d:9f:7c:45:44:c8:cb:6b:3d:50:77:71:17:6c:56: 9b:7e:4d:72:35:8a:9d:d6:1b:08:a7:f4:50:c2:95: ae:22:23:1e:3f:4f:9b:a2:41:2c:cd:b9:ae:31:b9: c2:f8:94:17:3c:ef:3a:cc:27:8f:da:15:3f:23:2b: dd:a1:1c:10:07:21:40:d3:0e:5d:0f:21:8c:db:71: 87:a8:86:84:27:1f:77:b6:ef:1f:66:01:31:9b:c7: 94:1f:8e:1e:c5:e0:84:b0:01:f8:07:68:93:f7:28: 19:ab:be:4c:f4:19:18:52:8b:74:56:b1:33:60:22: 47:ea:c6:cb:f4:19:49:73:0e:ad:8e:c9:67:72:37: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:64:6E:11:B8:7A:88:33:41:BF:8A:F4:16:0C:D1:E4:77:18:4C:B7 X509v3 Authority Key Identifier: keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4a:1a:81:62:5c:ee:ba:cb:06:c2:ed:fa:37:d4:1c:b6:d8: da:9c:18:29:b3:92:2f:1a:cb:83:b1:70:ef:19:97:83:20:14: de:76:1c:82:92:67:15:9d:a8:28:41:d1:9b:9c:a1:ba:30:91: f6:ac:36:6e:31:90:b8:94:e2:58:5a:3b:a5:5e:a5:0b:bd:45: 44:e8:2f:f4:f9:b9:9c:a4:99:d5:fc:73:9e:8e:41:07:dc:91: ae:7e:6d:60:fb:46:40:45:c8:de:85:c4:21:06:06:9a:72:fb: 6c:fb:e6:87:2d:bc:2e:8a:4f:c1:6c:0e:d2:18:45:06:5c:a9: 0e:4c:db:2c:56:b3:15:d1:9a:67:44:f5:6f:e8:1d:1e:36:db: 09:a4:a6:35:b3:b3:78:68:e8:d8:a6:62:4f:41:f1:ce:e3:c2: cd:c9:96:f4:11:88:38:4b:b3:58:0c:d5:58:80:3a:42:8c:1d: 4d:87:12:1d:f1:e9:ea:2b:22:ab:c2:e0:ae:6b:1e:56:c1:d4: 5a:d1:00:c4:77:94:6c:3e:ac:62:a3:02:b3:a3:da:14:89:77: 90:5d:21:70:44:1b:c1:f1:fe:22:5a:ce:ea:27:a9:54:8f:29: 3d:bb:5a:d9:a8:cb:45:fa:ce:8d:bc:39:4f:38:98:ef:35:3a: de:3e:9b:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3 ODc2QkRCOTMwHhcNMjQxMTIyMjIxMTU4WhcNMjQxMTI5MjIxMTU4WjAYMRYwFAYD VQQDEw02NzQxMDFhZi0yM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw7nmY64fydqejYNUiKrTQkNtlZ0WrWHYMQYkdXpalVxRHt9y+QAOKSsJz/t ulgejDtA/zPoHBNhC+d4kJD5U/4/lUCUQiv8vz1mmrksuKyfdSEkHCxTGWyay5SR JjJeSwTTXzi8HmGJhgO6TLPbIXJriWNSa1FNn3xFRMjLaz1Qd3EXbFabfk1yNYqd 1hsIp/RQwpWuIiMeP0+bokEszbmuMbnC+JQXPO86zCeP2hU/IyvdoRwQByFA0w5d DyGM23GHqIaEJx93tu8fZgExm8eUH44exeCEsAH4B2iT9ygZq75M9BkYUot0VrEz YCJH6sbL9BlJcw6tjslncjdoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZkbhG4 eogzQb+K9BYM0eR3GEy3MB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHShqBYlzuussGwu36N9QcttjanBgps5IvGsuDsXDvGZeDIBTedhyC kmcVnagoQdGbnKG6MJH2rDZuMZC4lOJYWjulXqULvUVE6C/0+bmcpJnV/HOejkEH 3JGufm1g+0ZARcjehcQhBgaacvts++aHLbwuik/BbA7SGEUGXKkOTNssVrMV0Zpn RPVv6B0eNtsJpKY1s7N4aOjYpmJPQfHO48LNyZb0EYg4S7NYDNVYgDpCjB1NhxId 8enqKyKrwuCuax5WwdRa0QDEd5RsPqxiowKzo9oUiXeQXSFwRBvB8f4iWs7qJ6lU jyk9u1rZqMtF+s6NvDlPOJjvNTrePptm -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org