$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: wMML2A1yvxNeuwWU9Vx+IoWXz9qlgAbVIK14zp6xZCs= Subject key identifier: 3A:D1:CA:83:42:D5:E3:0D:92:FA:26:99:B0:DF:4D:4F:F1:D9:AB:18 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 081A Signing time: Fri 22 Nov 2024 20:34:08 +0000 Manifest this update: Fri 22 Nov 2024 20:34:07 +0000 Manifest next update: Fri 29 Nov 2024 20:34:07 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: znjOU394W6W7ps0IZugX4XydaOX99a56av+bV1UlrHg=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: C1ZgQz60lAzJ/pUgilayEtzS5Rl0aKnA28InX9MzEYY=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: mBsQp19MJChPAh0neRjuRaTqTqqlhbgiZ+3pPDgiX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Nov 22 20:34:07 2024 GMT Not After : Nov 29 20:34:07 2024 GMT Subject: CN=6740eac0-b592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:dd:d0:71:62:6e:7d:5d:ed:31:2a:4e:41: 45:01:5a:7c:c2:47:db:68:1b:93:f6:32:55:a3:3c: ee:c2:f1:42:c6:2d:ca:65:c1:bd:bb:83:00:ae:f8: 5c:dc:48:49:7b:42:7c:33:22:e7:9e:ba:f8:e0:f7: 12:e4:f2:2a:33:14:89:47:62:1f:33:18:5e:16:2b: 51:8c:55:08:48:28:b7:04:dd:32:de:60:db:3b:cc: 8d:0f:1b:07:c1:a9:e6:24:94:3b:2e:88:2b:f9:95: c4:25:97:ce:8f:af:f2:8c:54:1b:8a:b3:3e:a5:74: a3:e7:c8:6b:6a:01:c8:aa:db:a7:fb:9f:89:2f:85: f4:6d:17:b4:26:77:9e:80:c4:8d:47:7a:8f:9b:ba: 0c:9a:36:3a:ff:9a:8b:c0:04:4e:3a:e1:ea:4c:14: 62:d8:41:76:6f:28:68:d7:1c:cb:2b:41:02:54:49: 2c:00:6a:79:54:73:23:4b:b8:71:25:4d:ca:24:e8: c3:02:23:93:9e:5d:6b:68:d5:a5:e1:cc:16:31:0d: 7f:64:ec:0a:42:8e:37:c5:bf:c2:0a:d2:ae:56:19: 03:87:5a:bb:8d:9f:e3:f8:df:f5:ea:ab:9c:34:fc: 25:3f:38:4c:1d:a6:44:dc:60:65:e8:1e:14:51:e9: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:CA:83:42:D5:E3:0D:92:FA:26:99:B0:DF:4D:4F:F1:D9:AB:18 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7f:12:4b:bb:f0:cc:ac:64:38:93:5d:c5:c2:e9:05:63:9c: 6b:eb:f6:05:d3:ca:54:51:ac:8f:75:d2:bf:6b:ce:c3:4c:d9: cb:59:cf:c3:83:3b:59:1d:b0:b3:c8:2c:1c:12:61:b1:ea:b1: ea:23:12:70:3c:9f:15:66:6a:a7:b1:bf:d7:fe:7b:88:55:44: e5:dd:07:d6:6b:f6:f2:60:30:d2:f4:0e:e5:d4:f1:90:f1:07: 95:db:a5:6b:50:bd:fc:ef:a9:93:bd:b2:dd:78:6a:09:d2:da: 74:45:3d:b6:3a:c6:b5:9a:d2:aa:62:dc:ba:a6:a4:98:04:8f: 5f:94:68:5e:6c:6d:55:7d:21:a9:8c:49:08:dd:ef:09:32:a1: 5f:42:34:09:c1:c3:64:33:af:7d:2d:b3:48:c9:47:e1:14:4b: 24:70:42:3d:cd:61:64:06:48:41:ec:97:d2:ed:d1:65:1a:ae: 53:5c:b0:60:ab:65:55:30:c2:2a:7e:0d:ec:a4:cb:cb:16:27: eb:39:14:80:25:56:13:5e:9a:d2:10:2d:e5:f8:91:b6:af:70: a0:af:c4:5d:3e:a4:90:1a:90:bf:05:24:c3:98:f0:20:9d:76: 39:41:ed:2c:eb:fe:df:c7:bd:56:f7:cd:70:89:d5:84:97:ca: fc:3b:1e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjQxMTIyMjAzNDA3WhcNMjQxMTI5MjAzNDA3WjAYMRYwFAYD VQQDEw02NzQwZWFjMC1iNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8obd0HFibn1d7TEqTkFFAVp8wkfbaBuT9jJVozzuwvFCxi3KZcG9u4MArvhc 3EhJe0J8MyLnnrr44PcS5PIqMxSJR2IfMxheFitRjFUISCi3BN0y3mDbO8yNDxsH wanmJJQ7Logr+ZXEJZfOj6/yjFQbirM+pXSj58hragHIqtun+5+JL4X0bRe0Jnee gMSNR3qPm7oMmjY6/5qLwAROOuHqTBRi2EF2byho1xzLK0ECVEksAGp5VHMjS7hx JU3KJOjDAiOTnl1raNWl4cwWMQ1/ZOwKQo43xb/CCtKuVhkDh1q7jZ/j+N/16quc NPwlPzhMHaZE3GBl6B4UUekzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrRyoNC 1eMNkvommbDfTU/x2asYMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfxJLu/DMrGQ4k13FwukFY5xr6/YF08pUUayPddK/a87DTNnLWc/D gztZHbCzyCwcEmGx6rHqIxJwPJ8VZmqnsb/X/nuIVUTl3QfWa/byYDDS9A7l1PGQ 8QeV26VrUL3876mTvbLdeGoJ0tp0RT22Osa1mtKqYty6pqSYBI9flGhebG1VfSGp jEkI3e8JMqFfQjQJwcNkM699LbNIyUfhFEskcEI9zWFkBkhB7JfS7dFlGq5TXLBg q2VVMMIqfg3spMvLFifrORSAJVYTXprSEC3l+JG2r3Cgr8RdPqSQGpC/BSTDmPAg nXY5Qe0s6/7fx71W981widWEl8r8Ox7v -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org