$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: mDk6RwFFBiU6rN+QI1qgZGr6WKiq0FlQMTZZDvXifE0= Subject key identifier: F7:30:D7:AE:DB:7C:F3:99:F2:6A:B1:81:8B:7B:96:48:AB:3F:A1:53 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 06E9 Signing time: Fri 22 Nov 2024 21:39:12 +0000 Manifest this update: Fri 22 Nov 2024 21:39:11 +0000 Manifest next update: Fri 29 Nov 2024 21:39:11 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: GEy97hQrb2p1aEDMwI97zfzLtDR9D7pdYk9fbc2mVpM=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: nYyMrSqjuG22IDygJd+6M5EAOCSTkJYxZab7RxnoUIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Nov 22 21:39:11 2024 GMT Not After : Nov 29 21:39:11 2024 GMT Subject: CN=6740f9ff-29f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:a8:1a:ef:d7:29:5f:24:99:b0:22:91:d0: 34:7e:a5:5e:bf:31:89:e4:55:b1:53:72:c4:eb:e8: ff:ca:b8:2b:81:f3:d9:c2:5c:bc:5b:91:37:3f:02: 04:88:69:bf:5e:69:01:0a:c3:5c:96:c5:dc:9b:53: 00:4f:48:cb:1d:bf:8b:32:a3:03:e1:a5:05:2b:7c: 0d:ca:ff:4b:80:d7:1a:04:7e:00:01:90:f9:62:90: 50:a4:33:62:39:d2:b8:ac:6f:c8:70:1b:7b:c0:7e: a9:f1:9c:6d:cd:83:70:83:fc:3c:63:b3:d7:62:95: 70:cb:5c:54:6b:81:d3:d2:2e:37:01:96:dc:3d:17: fd:6e:12:9f:8d:41:ea:9c:cf:7a:5c:d9:5e:65:e2: 17:be:3c:f5:e4:dc:7e:37:09:94:8a:02:94:a1:3a: 20:67:d3:4c:df:5c:a0:57:63:9c:78:d4:41:b3:aa: a1:ab:8c:b3:70:6f:c4:9b:e7:e1:e7:4b:01:4e:c1: 8e:99:db:c0:be:53:0a:2d:12:9d:f7:ce:bc:59:6e: 3f:b4:27:d5:e3:fc:40:48:ed:b6:4f:48:41:b7:fa: 0a:0a:cf:4d:43:a0:e8:5e:7c:51:35:7a:5a:88:e6: d8:a6:dd:cc:c8:93:da:62:4b:e4:60:26:12:ad:15: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:D7:AE:DB:7C:F3:99:F2:6A:B1:81:8B:7B:96:48:AB:3F:A1:53 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e9:66:27:98:c4:de:4f:29:81:a3:fb:88:c3:cb:a3:10:33: ba:ad:2e:98:cb:17:a8:33:52:33:ef:a5:c4:26:75:4d:b2:4a: c8:6a:46:f4:7b:a9:e6:08:fe:0a:41:b5:2b:2f:92:d9:4a:d4: 3f:cd:02:a9:37:12:18:3f:02:7e:f6:5a:e9:f5:83:13:ad:83: a5:2e:3b:66:9d:e6:0f:fa:ec:49:52:f5:c6:11:5b:1c:e4:53: 3c:af:87:f2:a0:17:e7:92:54:8d:bd:33:be:e5:39:25:0a:8f: 8e:4e:d8:3f:84:b0:d5:d0:8c:02:19:40:d0:6a:4b:02:d9:5b: 90:71:89:6e:cd:03:4c:be:8c:5a:14:f0:01:87:7f:22:29:4e: 7d:79:23:8c:d9:cf:cc:42:44:f0:50:94:87:fe:fb:3d:01:60: 75:ee:93:7f:cb:32:09:f7:c7:0f:2f:fc:44:8c:df:63:eb:41: 1a:7c:1e:f1:01:48:d2:dc:8e:e5:ba:95:59:6d:63:14:50:32: 74:38:f4:bd:e4:95:d3:aa:97:1a:35:b3:a9:ca:c7:fc:32:f9: 3a:87:39:94:c9:29:4b:93:ab:a3:4e:0f:97:63:d1:e1:a6:7b: 4a:c0:d6:25:98:ff:90:5e:93:15:e6:8e:1e:d6:ac:96:dd:7b: 58:2e:6e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjQxMTIyMjEzOTExWhcNMjQxMTI5MjEzOTExWjAYMRYwFAYD VQQDEw02NzQwZjlmZi0yOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJaoGu/XKV8kmbAikdA0fqVevzGJ5FWxU3LE6+j/yrgrgfPZwly8W5E3PwIE iGm/XmkBCsNclsXcm1MAT0jLHb+LMqMD4aUFK3wNyv9LgNcaBH4AAZD5YpBQpDNi OdK4rG/IcBt7wH6p8ZxtzYNwg/w8Y7PXYpVwy1xUa4HT0i43AZbcPRf9bhKfjUHq nM96XNleZeIXvjz15Nx+NwmUigKUoTogZ9NM31ygV2OceNRBs6qhq4yzcG/Em+fh 50sBTsGOmdvAvlMKLRKd9868WW4/tCfV4/xASO22T0hBt/oKCs9NQ6DoXnxRNXpa iObYpt3MyJPaYkvkYCYSrRVruQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcw167b fPOZ8mqxgYt7lkirP6FTMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn6WYnmMTeTymBo/uIw8ujEDO6rS6YyxeoM1Iz76XEJnVNskrIakb0 e6nmCP4KQbUrL5LZStQ/zQKpNxIYPwJ+9lrp9YMTrYOlLjtmneYP+uxJUvXGEVsc 5FM8r4fyoBfnklSNvTO+5TklCo+OTtg/hLDV0IwCGUDQaksC2VuQcYluzQNMvoxa FPABh38iKU59eSOM2c/MQkTwUJSH/vs9AWB17pN/yzIJ98cPL/xEjN9j60EafB7x AUjS3I7lupVZbWMUUDJ0OPS95JXTqpcaNbOpysf8Mvk6hzmUySlLk6ujTg+XY9Hh pntKwNYlmP+QXpMV5o4e1qyW3XtYLm6R -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org