$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: pv6DMe5a2/wJGMibl4EanSfPoOkFUhBA6V/dZG6Jjy8= Subject key identifier: B4:1B:58:18:3A:3E:46:9E:B6:32:05:94:00:D1:65:FB:5B:15:A4:F5 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0EFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0EEF Signing time: Fri 22 Nov 2024 17:37:31 +0000 Manifest this update: Fri 22 Nov 2024 17:37:30 +0000 Manifest next update: Fri 29 Nov 2024 17:37:30 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: kohzEX42twvNlg102haY3ijeOfPM3YTh3UwpIEatRA0=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Nov 22 17:37:30 2024 GMT Not After : Nov 29 17:37:30 2024 GMT Subject: CN=6740c15a-0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:26:ca:8b:0b:fb:9a:b7:a7:d4:6b:3f:f6: c6:d3:b2:e3:9c:ca:24:94:c7:a4:c0:ff:c2:41:42: ea:d1:d0:7f:8b:25:c5:0d:9b:3d:15:77:49:83:54: 70:72:15:54:a8:ce:2a:d8:46:63:78:74:93:5c:71: a5:ce:5a:64:c9:3f:b6:b4:05:97:b2:ff:bc:7a:c7: 3c:8e:8f:86:8c:69:5f:8b:ba:0e:a1:0c:b5:78:3e: 3a:4b:fc:51:c1:a0:a4:f1:34:78:04:3d:69:44:6a: f9:43:cb:16:ef:fb:31:98:ec:23:38:8c:a4:f9:ef: 7a:1c:05:24:84:e6:1f:7d:01:08:86:25:6e:60:96: d6:7d:1b:36:9c:39:95:1e:db:9d:84:7d:9e:1c:05: ed:df:4c:0f:11:9c:d3:f6:73:1a:2b:cf:57:62:09: f7:67:f9:6e:f4:01:ca:87:e6:0a:ec:86:02:61:65: 7c:cc:21:85:23:32:ac:c1:e9:4b:e5:80:51:28:b4: 75:69:1d:65:b9:0a:23:c7:af:f6:77:c2:61:50:47: bd:f6:62:7c:98:73:b8:d0:31:2e:35:82:f6:3d:df: 2d:cc:40:bf:e8:29:a0:bf:9a:3a:4f:97:33:b7:2e: 6d:39:33:b7:5d:4d:04:11:b0:6a:27:23:18:61:23: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:58:18:3A:3E:46:9E:B6:32:05:94:00:D1:65:FB:5B:15:A4:F5 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4e:cc:6b:74:ee:20:24:e6:39:2c:1c:52:10:2c:16:e2:61: 22:e0:c2:31:c8:84:ec:92:2b:65:8f:0c:64:e4:2b:1a:b6:ac: 53:3a:51:9b:40:97:bf:9c:da:93:08:da:4f:3c:17:e2:5f:45: 88:e2:ef:38:22:1c:b8:b2:77:4f:fa:4d:fe:1e:d4:ff:a0:af: ea:0f:ca:40:ca:70:26:82:53:26:17:d7:00:f1:96:cf:4e:14: bc:58:72:99:14:33:f6:52:54:7f:e8:82:69:a4:34:c9:1e:a3: 11:f7:67:25:67:4e:0b:25:f2:a7:03:f8:12:f5:23:fa:88:00: 20:49:c3:c3:e5:a3:63:cb:7d:e4:05:d7:08:0c:11:2a:36:54: 0b:13:c1:4d:d6:69:e9:a2:d2:2a:66:d9:4d:c8:0d:94:73:7b: 84:0f:a1:9f:be:3c:b4:fe:17:ff:ad:c5:45:23:1d:6e:3d:6f: 1a:67:75:48:89:30:c9:6c:18:cc:e7:a2:a2:19:17:87:49:89: 04:0f:b8:a7:4f:af:30:75:da:b4:11:6f:a4:39:65:ec:f8:be: ae:b4:90:61:c7:31:a4:5c:c3:36:f4:79:05:53:93:10:ad:b5: 2b:47:1a:6a:77:8b:a5:6c:1f:53:91:c1:9a:db:2f:25:46:c4: f4:d8:d2:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjQxMTIyMTczNzMwWhcNMjQxMTI5MTczNzMwWjAYMRYwFAYD VQQDEw02NzQwYzE1YS0wYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtomyosL+5q3p9RrP/bG07LjnMoklMekwP/CQULq0dB/iyXFDZs9FXdJg1Rw chVUqM4q2EZjeHSTXHGlzlpkyT+2tAWXsv+8esc8jo+GjGlfi7oOoQy1eD46S/xR waCk8TR4BD1pRGr5Q8sW7/sxmOwjOIyk+e96HAUkhOYffQEIhiVuYJbWfRs2nDmV HtudhH2eHAXt30wPEZzT9nMaK89XYgn3Z/lu9AHKh+YK7IYCYWV8zCGFIzKswelL 5YBRKLR1aR1luQojx6/2d8JhUEe99mJ8mHO40DEuNYL2Pd8tzEC/6Cmgv5o6T5cz ty5tOTO3XU0EEbBqJyMYYSN/BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQbWBg6 PkaetjIFlADRZftbFaT1MB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwTsxrdO4gJOY5LBxSECwW4mEi4MIxyITskitljwxk5CsatqxTOlGb QJe/nNqTCNpPPBfiX0WI4u84Ihy4sndP+k3+HtT/oK/qD8pAynAmglMmF9cA8ZbP ThS8WHKZFDP2UlR/6IJppDTJHqMR92clZ04LJfKnA/gS9SP6iAAgScPD5aNjy33k BdcIDBEqNlQLE8FN1mnpotIqZtlNyA2Uc3uED6Gfvjy0/hf/rcVFIx1uPW8aZ3VI iTDJbBjM56KiGReHSYkED7inT68wddq0EW+kOWXs+L6utJBhxzGkXMM29HkFU5MQ rbUrRxpqd4ulbB9TkcGa2y8lRsT02NJ6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org