$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: nsf52EM8sNWyYXtQ7+RdAHgW6kKhxLSxaXA0CdMsfLU= Subject key identifier: 26:84:A0:9D:9C:87:77:80:BA:4E:39:6E:85:1D:B5:E8:2B:C7:FF:B3 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0BDC Signing time: Fri 22 Nov 2024 18:27:51 +0000 Manifest this update: Fri 22 Nov 2024 18:27:50 +0000 Manifest next update: Fri 29 Nov 2024 18:27:50 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: jUPbr1MmrdCCKNn75wr0OamDkc8GcWCp1zTDCFfL5cs=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Nov 22 18:27:50 2024 GMT Not After : Nov 29 18:27:50 2024 GMT Subject: CN=6740cd27-1ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:24:67:99:8e:51:f0:b8:4f:73:57:1e:e8: 69:b9:9a:e3:2b:eb:a7:8b:36:b5:f9:96:d0:7e:84: a2:50:48:a5:23:4b:be:dc:cc:59:db:84:4a:a9:c4: 36:b5:1f:82:b2:64:6f:63:2a:c6:47:20:bd:44:4c: e0:3a:39:91:bb:a6:97:67:0b:dc:ee:54:e9:95:a3: 22:99:d6:a1:9d:7a:a4:ab:12:60:dd:3c:a0:57:a2: 1b:80:81:b7:24:a7:ca:2f:a3:a6:18:f5:3e:93:91: 8f:10:96:44:5a:c0:94:a7:ca:63:b8:9f:c2:b4:8f: 32:66:ab:01:d5:84:9b:e4:04:a3:a1:c2:a1:b8:14: eb:53:93:50:07:1b:49:ad:a0:14:c4:ba:f1:a6:e2: 53:24:b5:bb:15:33:d4:80:e2:9b:28:fe:3c:54:2c: 49:cd:5e:7f:33:5c:0a:fa:26:6d:00:37:6a:7d:a6: eb:02:0b:7a:34:c5:6b:80:31:21:c8:ca:a2:f8:b3: c0:53:47:a4:46:2a:48:64:50:0a:8a:21:2d:12:dd: dd:9e:69:cf:96:3b:b6:6a:b7:6c:92:97:0f:84:8a: 0a:f3:49:47:07:7c:07:4b:90:4d:dd:f5:41:77:3b: bc:1d:21:36:8f:9f:db:61:6a:ff:35:55:21:18:6d: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:84:A0:9D:9C:87:77:80:BA:4E:39:6E:85:1D:B5:E8:2B:C7:FF:B3 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:25:02:42:f4:a4:8e:ce:db:06:9a:48:48:19:85:c4:16: b0:ef:99:1d:72:25:e7:f8:8e:44:c6:58:c4:7f:98:ab:99:4a: 60:28:1f:87:8d:44:11:58:b5:6d:d0:08:10:0c:42:14:6f:86: af:a1:09:70:5d:0a:9f:4c:46:89:ec:44:71:93:36:90:bf:8d: d3:a1:0b:6c:ae:5e:8a:24:91:ac:47:40:62:32:59:c7:b1:a0: 5d:11:46:07:31:42:ce:46:2c:0a:42:8d:9d:5b:88:ae:aa:3e: 0f:ab:09:8d:da:51:32:1c:04:a4:66:40:8c:83:1f:06:62:20: 4e:a7:69:28:10:02:05:6b:86:bc:ca:89:0e:3f:06:b8:89:e8: 74:bd:c5:fe:ab:09:af:52:89:29:4c:85:56:f5:66:69:5e:5b: b9:52:c2:c1:b7:f6:87:ae:ff:5e:28:e4:94:4c:f7:f6:d1:ae: 50:4e:eb:16:c0:62:a3:16:d9:81:89:c2:ba:68:b9:2d:6d:ee: 17:ac:01:5c:52:c3:7e:77:59:5f:b1:9b:24:88:8d:ab:0d:e9: fb:8b:d1:e9:17:5f:14:3b:ff:24:d3:51:d9:ab:00:b5:b5:36: 43:b2:92:66:84:5f:79:92:85:cb:9c:6c:78:1e:21:0f:f5:5d: f5:93:fc:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjQxMTIyMTgyNzUwWhcNMjQxMTI5MTgyNzUwWjAYMRYwFAYD VQQDEw02NzQwY2QyNy0xY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsMkZ5mOUfC4T3NXHuhpuZrjK+uniza1+ZbQfoSiUEilI0u+3MxZ24RKqcQ2 tR+CsmRvYyrGRyC9REzgOjmRu6aXZwvc7lTplaMimdahnXqkqxJg3TygV6IbgIG3 JKfKL6OmGPU+k5GPEJZEWsCUp8pjuJ/CtI8yZqsB1YSb5ASjocKhuBTrU5NQBxtJ raAUxLrxpuJTJLW7FTPUgOKbKP48VCxJzV5/M1wK+iZtADdqfabrAgt6NMVrgDEh yMqi+LPAU0ekRipIZFAKiiEtEt3dnmnPlju2ardskpcPhIoK80lHB3wHS5BN3fVB dzu8HSE2j5/bYWr/NVUhGG3MtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaEoJ2c h3eAuk45boUdtegrx/+zMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWCUCQvSkjs7bBppISBmFxBaw75kdciXn+I5ExljEf5irmUpgKB+H jUQRWLVt0AgQDEIUb4avoQlwXQqfTEaJ7ERxkzaQv43ToQtsrl6KJJGsR0BiMlnH saBdEUYHMULORiwKQo2dW4iuqj4PqwmN2lEyHASkZkCMgx8GYiBOp2koEAIFa4a8 yokOPwa4ieh0vcX+qwmvUokpTIVW9WZpXlu5UsLBt/aHrv9eKOSUTPf20a5QTusW wGKjFtmBicK6aLktbe4XrAFcUsN+d1lfsZskiI2rDen7i9HpF18UO/8k01HZqwC1 tTZDspJmhF95koXLnGx4HiEP9V31k/x4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org