$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: jIMHcJGeP3SNJ7m9VsMrtKsDtlsFewR07ftgKs8TcSs= Subject key identifier: 6C:31:E6:4D:12:64:5E:82:5A:DB:DF:1C:CC:7C:FC:48:7D:F8:0A:69 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 02F1 Signing time: Sat 23 Nov 2024 00:49:58 +0000 Manifest this update: Sat 23 Nov 2024 00:49:57 +0000 Manifest next update: Sat 30 Nov 2024 00:49:57 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: aDLKWamKtCAsRXjYIG1k4zEd/zZ2ySoTqGEkc6vMhtQ=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 17zYLasmjWkylExtRqYU5N/LN7+1/9TF71dGXdEDivA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Nov 23 00:49:57 2024 GMT Not After : Nov 30 00:49:57 2024 GMT Subject: CN=674126b5-e2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:5d:8f:ab:81:ac:54:e0:e5:be:fd:1d:81: ad:be:85:a0:3f:d2:7d:f7:8a:4b:3d:d6:c5:38:33: a2:f3:ed:03:ff:48:3e:78:8f:50:c2:c5:1f:d6:48: 04:e1:ef:be:d2:fd:b5:f1:ea:d3:c7:01:97:62:4b: db:58:42:12:99:ca:3e:11:f8:f2:d5:ed:ac:fb:9f: 16:89:11:f0:6c:09:11:54:df:4c:47:81:f8:b8:87: 52:c1:07:2f:42:97:44:ba:cb:9a:a6:10:02:4e:9d: 99:eb:3e:58:3e:23:99:17:5c:b2:a4:39:dc:eb:52: 79:41:fe:df:32:b3:47:d3:d6:56:c3:65:dd:25:e4: 01:a5:40:e4:b1:51:76:27:07:e6:e9:e1:f4:0d:0c: e6:89:4c:24:e9:df:8e:29:34:92:a7:fb:1b:e6:bb: 9e:2f:d9:33:ec:37:a0:b8:bc:2d:27:fa:f6:d8:8d: 1c:d7:3f:27:5d:8f:9a:a9:46:98:5c:ca:30:d2:0f: cd:ed:a7:cf:f3:bb:15:12:33:a6:d9:c1:db:e6:75: c8:b4:bb:fd:4d:b9:bb:f0:32:da:63:be:f8:2b:77: 7f:13:1b:64:a5:7f:1c:4d:f3:fe:3f:8e:ed:40:ab: 9c:6f:c1:6b:66:8b:05:f7:82:c3:48:8c:34:13:9d: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:31:E6:4D:12:64:5E:82:5A:DB:DF:1C:CC:7C:FC:48:7D:F8:0A:69 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c9:e7:55:96:45:9c:26:20:c1:ad:68:b0:06:4c:b7:02:60: 09:a4:17:46:c4:ee:f8:c1:9d:5a:0f:a5:57:8b:af:7d:0a:6b: 60:ce:35:41:78:31:97:5d:26:7b:03:39:0d:8d:0e:a5:d9:1e: 15:6b:7d:3d:2d:b7:01:de:db:e0:8c:d1:4b:eb:32:03:ec:31: 1f:06:bc:03:d5:e6:db:f0:37:98:3a:b0:ab:3e:be:0c:0a:df: a8:e7:10:b5:dd:8b:fe:e2:89:f3:6e:fc:82:1c:a4:46:18:f0: 66:0c:79:eb:5c:3e:46:6f:db:8c:1b:cf:1c:c8:91:ac:7b:16: e2:c6:6c:89:44:8c:ea:52:21:97:2c:02:03:70:85:6a:be:8c: ae:15:60:f1:7b:8b:32:ec:8d:aa:63:59:5d:9f:71:f6:aa:08: 20:19:e7:eb:8a:51:fb:b1:d4:a8:ff:13:2d:0f:13:2c:0e:9c: 0a:c8:44:99:df:31:66:b8:81:50:89:c2:1c:dd:d8:ca:04:13: d0:9f:b3:84:bb:c6:a0:86:0d:a8:b4:57:af:fa:a7:23:42:05: 15:f4:b5:d6:be:af:a9:cf:52:f1:63:aa:9f:45:9f:86:82:2e: db:57:18:49:e8:b5:7a:3d:a2:34:5f:34:e5:58:c8:9e:e6:a6: bd:2e:48:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjQxMTIzMDA0OTU3WhcNMjQxMTMwMDA0OTU3WjAYMRYwFAYD VQQDEw02NzQxMjZiNS1lMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbpdj6uBrFTg5b79HYGtvoWgP9J994pLPdbFODOi8+0D/0g+eI9QwsUf1kgE 4e++0v218erTxwGXYkvbWEISmco+Efjy1e2s+58WiRHwbAkRVN9MR4H4uIdSwQcv QpdEusuaphACTp2Z6z5YPiOZF1yypDnc61J5Qf7fMrNH09ZWw2XdJeQBpUDksVF2 Jwfm6eH0DQzmiUwk6d+OKTSSp/sb5rueL9kz7DeguLwtJ/r22I0c1z8nXY+aqUaY XMow0g/N7afP87sVEjOm2cHb5nXItLv9Tbm78DLaY774K3d/ExtkpX8cTfP+P47t QKucb8FrZosF94LDSIw0E50V6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwx5k0S ZF6CWtvfHMx8/Eh9+AppMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxyedVlkWcJiDBrWiwBky3AmAJpBdGxO74wZ1aD6VXi699CmtgzjVB eDGXXSZ7AzkNjQ6l2R4Va309LbcB3tvgjNFL6zID7DEfBrwD1ebb8DeYOrCrPr4M Ct+o5xC13Yv+4onzbvyCHKRGGPBmDHnrXD5Gb9uMG88cyJGsexbixmyJRIzqUiGX LAIDcIVqvoyuFWDxe4sy7I2qY1ldn3H2qgggGefrilH7sdSo/xMtDxMsDpwKyESZ 3zFmuIFQicIc3djKBBPQn7OEu8aghg2otFev+qcjQgUV9LXWvq+pz1LxY6qfRZ+G gi7bVxhJ6LV6PaI0XzTlWMie5qa9Lkh3 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org