$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: B62xZOhvCC7nQtW+ADxFHTm4iYKEXlgz8NJeSY1C5tU= Subject key identifier: D8:DE:B1:38:60:C2:22:92:4C:53:1E:BE:08:1C:22:36:ED:B4:29:B7 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 134C Signing time: Fri 22 Nov 2024 18:29:00 +0000 Manifest this update: Fri 22 Nov 2024 18:29:00 +0000 Manifest next update: Fri 29 Nov 2024 18:28:59 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: 8EDerZ0C4yqONiABmvyHcmNPTJDtyWLL2OzXxIojYIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Nov 22 18:29:00 2024 GMT Not After : Nov 29 18:28:59 2024 GMT Subject: CN=6740cd6c-5e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:01:46:2f:64:85:ec:ce:38:6f:19:d9:92: 6a:bb:be:51:6a:ff:fd:62:46:3b:4b:69:90:5e:89: c2:b1:00:c2:63:d6:28:8f:cc:5e:76:e5:ef:a7:cb: 38:8b:41:1b:a5:c7:1a:73:5a:fb:86:04:3b:90:b3: 23:6f:bf:38:4f:a2:a3:7d:10:6d:1a:b7:40:2f:4f: 75:bc:68:df:2d:04:8f:61:4f:07:a8:26:06:e2:ac: da:28:b2:69:73:51:09:35:97:db:c8:67:ef:8b:94: a5:5a:f6:3b:6f:06:3b:68:e3:c2:ef:a1:28:99:13: d9:3d:6d:e7:ed:c2:e4:82:68:19:2f:dc:ee:4a:52: 84:8e:9a:f4:65:4d:bd:59:3c:a6:1e:3f:4a:69:c6: 46:01:0f:04:b0:09:99:64:87:91:92:cc:ce:0a:98: c2:16:69:96:5c:75:ba:95:19:36:d1:c2:a9:b4:b3: a7:f1:06:b7:48:4b:e8:f9:ae:ee:40:18:fd:c8:0f: 36:d7:4a:31:64:ce:bc:e1:4e:82:2e:ca:ff:08:ea: 3a:39:cf:80:32:d9:b8:94:9b:df:26:bf:08:c3:cf: eb:15:62:99:52:15:55:55:4b:74:d8:fd:5a:ca:46: a7:85:57:83:16:bb:70:72:9a:c4:06:67:89:d4:14: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:B1:38:60:C2:22:92:4C:53:1E:BE:08:1C:22:36:ED:B4:29:B7 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cc:5a:a1:25:e9:fb:59:08:6b:ce:bb:50:78:6c:33:89:80: 4a:86:0d:b6:7a:0e:ae:87:ca:46:59:36:48:34:8d:3a:f0:28: 85:96:f7:d4:69:78:64:86:03:eb:71:2c:01:15:df:07:ef:35: 0e:c0:66:fc:80:c8:95:df:61:ed:49:5a:ef:83:09:83:42:64: 34:bb:22:0f:ef:3f:82:3c:ef:35:ae:f3:64:72:09:57:d8:79: 65:ce:bb:0f:11:c5:50:f7:33:38:5b:34:b9:e6:7a:fa:d3:2b: c3:10:d7:98:37:55:41:c2:90:b2:95:59:52:96:2a:6a:60:30: 8b:8c:cc:08:16:f5:4d:3a:c6:a3:9f:e8:9f:c7:78:be:08:fd: 46:6b:a1:09:b6:c1:b5:66:a2:d3:fb:c9:e8:34:1b:76:25:19: c3:9b:e3:0d:3e:20:97:af:cf:bb:58:56:f0:a8:df:dc:c1:cf: 17:e8:72:97:54:6e:ed:89:92:f3:b4:78:16:a7:20:7f:41:2d: 5a:dc:cb:ba:72:fd:e2:3d:c4:98:0c:fa:15:94:30:55:fc:ab: c6:e7:d0:3d:23:83:ae:e8:af:c6:18:b0:e6:76:b6:74:42:38: 68:6a:d6:04:fa:34:0d:42:7c:5e:fd:61:59:f9:a5:fc:7f:77: eb:f3:f6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjQxMTIyMTgyOTAwWhcNMjQxMTI5MTgyODU5WjAYMRYwFAYD VQQDEw02NzQwY2Q2Yy01ZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysMBRi9khezOOG8Z2ZJqu75Rav/9YkY7S2mQXonCsQDCY9Yoj8xeduXvp8s4 i0Ebpccac1r7hgQ7kLMjb784T6KjfRBtGrdAL091vGjfLQSPYU8HqCYG4qzaKLJp c1EJNZfbyGfvi5SlWvY7bwY7aOPC76EomRPZPW3n7cLkgmgZL9zuSlKEjpr0ZU29 WTymHj9KacZGAQ8EsAmZZIeRkszOCpjCFmmWXHW6lRk20cKptLOn8Qa3SEvo+a7u QBj9yA8210oxZM684U6CLsr/COo6Oc+AMtm4lJvfJr8Iw8/rFWKZUhVVVUt02P1a ykanhVeDFrtwcprEBmeJ1BSZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjesThg wiKSTFMevggcIjbttCm3MB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCzFqhJen7WQhrzrtQeGwziYBKhg22eg6uh8pGWTZINI068CiFlvfU aXhkhgPrcSwBFd8H7zUOwGb8gMiV32HtSVrvgwmDQmQ0uyIP7z+CPO81rvNkcglX 2HllzrsPEcVQ9zM4WzS55nr60yvDENeYN1VBwpCylVlSlipqYDCLjMwIFvVNOsaj n+ifx3i+CP1Ga6EJtsG1ZqLT+8noNBt2JRnDm+MNPiCXr8+7WFbwqN/cwc8X6HKX VG7tiZLztHgWpyB/QS1a3Mu6cv3iPcSYDPoVlDBV/KvG59A9I4Ou6K/GGLDmdrZ0 QjhoatYE+jQNQnxe/WFZ+aX8f3fr8/YC -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org