$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft File: VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json) Hash identifier: GH/Dofu3JjdU5fzGmyUTZO1zq9fm/S4HCVCGdjPmPlc= Subject key identifier: A3:FF:C6:8A:C6:A8:B6:79:69:D2:B9:4F:41:B3:87:8D:EC:2F:CE:EC Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC Certificate issuer: /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Certificate serial: 1BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft Manifest number: 5018 Signing time: Fri 22 Nov 2024 15:17:30 +0000 Manifest this update: Fri 22 Nov 2024 15:17:29 +0000 Manifest next update: Fri 29 Nov 2024 15:17:29 +0000 Files and hashes: 1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: WtDcLxooGt1Sf30MtfYDqW6OP0+NMYe0H37Fh/VSbLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7161 (0x1bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC Validity Not Before: Nov 22 15:17:29 2024 GMT Not After : Nov 29 15:17:29 2024 GMT Subject: CN=6740a08a-bdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:09:46:53:ab:ff:c5:dc:36:3a:89:64:dd: 70:12:55:bc:d7:c6:11:b7:5f:6a:cd:f3:29:ae:0d: 32:29:f9:ca:83:cf:11:50:15:3a:11:8f:be:23:d7: 8f:a3:b7:29:73:b7:9a:b8:55:31:07:09:71:32:dd: 67:28:e1:d5:5d:aa:f1:ab:57:21:49:6c:0e:0a:c3: 65:3c:cd:42:14:c1:4c:c6:3f:c9:c2:24:72:c9:a1: 3a:5c:20:da:67:0b:5e:8f:c7:eb:2c:df:36:b5:27: 4a:73:0a:8a:e0:de:9a:5c:36:06:98:6f:61:e5:0f: 78:dc:6c:dd:ab:35:79:94:32:c1:7f:03:70:4e:03: 05:87:e5:dc:36:e3:2f:03:c2:4a:42:21:dc:aa:5a: 1b:9e:9c:dc:81:97:bd:a9:22:a8:41:27:b6:30:ae: f4:54:e8:3d:e0:8b:41:cf:5a:6d:b0:29:63:ae:c2: 22:26:9d:5d:fd:b9:0f:fa:c0:5e:bd:a3:51:6d:d7: 09:3e:7e:4f:70:d5:1b:e8:9a:ea:fb:08:6f:7b:b8: e7:43:44:5f:03:87:dd:d1:da:ee:7f:01:92:31:7a: 09:e2:98:a7:86:74:ca:ef:78:8f:5b:29:37:f6:a5: 47:69:b0:af:6a:d0:ae:7d:99:15:b3:cb:74:ac:50: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:C6:8A:C6:A8:B6:79:69:D2:B9:4F:41:B3:87:8D:EC:2F:CE:EC X509v3 Authority Key Identifier: keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:70:e6:01:6a:23:65:f4:ad:65:2c:ed:0c:ca:4c:db:dc:3b: 42:27:e1:14:1f:a7:f7:ea:ae:b2:29:31:e3:61:b5:d6:44:b0: 46:b0:1b:ab:30:54:99:fa:5e:bc:fa:43:bc:8d:ec:61:e0:d0: 0e:3f:75:f4:87:5b:82:cb:3c:a0:7e:6e:2f:64:ce:75:07:24: 35:72:d3:47:dc:f9:a7:83:ff:07:0d:76:06:80:66:fb:86:ad: ff:88:f9:12:5f:e4:e4:65:ff:97:ad:a6:d1:c2:db:4a:7a:0f: fc:98:74:ea:72:42:00:3f:4b:73:73:71:3f:e9:ad:d3:b1:1a: 8d:2b:52:da:4b:28:4f:fc:27:ba:39:35:ab:e2:f7:0b:d3:d6: 0f:10:0c:1b:3e:c7:f4:43:29:78:05:fe:60:2d:25:52:0e:9c: bd:a0:0c:9a:a8:fe:15:66:45:ea:51:2d:5d:a1:3f:cc:00:2d: b5:ae:92:6d:22:bc:20:e3:95:e3:70:e1:2b:6c:08:e0:58:8c: 4d:bc:97:08:15:c2:69:d9:8f:bc:5f:67:a4:98:28:e2:44:60: 30:c9:77:f1:5f:e3:a3:63:13:a6:4a:26:e5:eb:7e:ba:20:82: df:b1:97:e1:c4:ae:c3:f8:32:fa:f3:2b:6f:d0:1c:e1:e5:68: e7:21:81:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwRjkxMTAvBgNVBAUTKDU0NDJERENBRDg5ODUxRDk0QkFBQzBBQjczOTJDRTQx OUEyMThBQ0MwHhcNMjQxMTIyMTUxNzI5WhcNMjQxMTI5MTUxNzI5WjAYMRYwFAYD VQQDEw02NzQwYTA4YS1iZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1cJRlOr/8XcNjqJZN1wElW818YRt19qzfMprg0yKfnKg88RUBU6EY++I9eP o7cpc7eauFUxBwlxMt1nKOHVXarxq1chSWwOCsNlPM1CFMFMxj/JwiRyyaE6XCDa Zwtej8frLN82tSdKcwqK4N6aXDYGmG9h5Q943GzdqzV5lDLBfwNwTgMFh+XcNuMv A8JKQiHcqlobnpzcgZe9qSKoQSe2MK70VOg94ItBz1ptsCljrsIiJp1d/bkP+sBe vaNRbdcJPn5PcNUb6Jrq+whve7jnQ0RfA4fd0drufwGSMXoJ4pinhnTK73iPWyk3 9qVHabCvatCufZkVs8t0rFDJzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP/xorG qLZ5adK5T0Gzh43sL87sMB8GA1UdIwQYMBaAFFRC3crYmFHZS6rAq3OSzkGaIYrM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBGOS9GQ0FBMkMwMDFE QTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVkbExxc0NyYzVMT1Fab2hp c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFTGR5dGlZVWRsTHFzQ3JjNUxPUVpvaGlzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBGOS9GQ0FBMkMwMDFEQTgxMUUyQjBFMkNBQTMwOEIwMkNEMi9WRUxkeXRpWVVk bExxc0NyYzVMT1Fab2hpc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkcOYBaiNl9K1lLO0Mykzb3DtCJ+EUH6f36q6yKTHjYbXWRLBGsBur MFSZ+l68+kO8jexh4NAOP3X0h1uCyzygfm4vZM51ByQ1ctNH3Pmng/8HDXYGgGb7 hq3/iPkSX+TkZf+XrabRwttKeg/8mHTqckIAP0tzc3E/6a3TsRqNK1LaSyhP/Ce6 OTWr4vcL09YPEAwbPsf0Qyl4Bf5gLSVSDpy9oAyaqP4VZkXqUS1doT/MAC21rpJt Irwg45XjcOErbAjgWIxNvJcIFcJp2Y+8X2ekmCjiRGAwyXfxX+OjYxOmSibl6366 IILfsZfhxK7D+DL68ytv0Bzh5WjnIYE6 -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org