$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: BY2hb185p1jrhPcxXAwHZzuQEwc45mEiBtMKAbs5nRo= Subject key identifier: 8A:67:4B:BF:41:C8:DC:A4:9D:69:02:52:21:CC:0A:6B:54:B7:08:92 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 0178 Signing time: Wed 20 Nov 2024 19:54:22 +0000 Manifest this update: Wed 20 Nov 2024 19:54:21 +0000 Manifest next update: Wed 27 Nov 2024 19:54:21 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 8whEda+74pJ+wCPVIC3NoYeCknWTleqKcbyE6jNKIms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Nov 20 19:54:21 2024 GMT Not After : Nov 27 19:54:21 2024 GMT Subject: CN=673e3e6e-7e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:0a:83:12:b6:00:98:7b:b4:08:d6:68:a7: 07:0e:02:27:9b:2d:58:07:39:aa:0d:e2:42:d3:89: 1b:c9:ab:0b:28:61:4c:48:9b:76:94:c0:1b:84:68: 1d:f5:59:d3:4b:64:c3:b8:12:0f:3c:9a:67:8f:35: 84:de:01:1a:ea:42:b5:b9:6e:41:29:ef:ac:de:8c: 94:eb:cf:13:52:09:a6:c2:e8:42:88:cd:71:23:e8: 50:ba:28:29:9a:13:86:6e:d9:e6:30:48:90:54:fc: 7a:fc:94:d6:7e:d3:cf:cc:9a:34:e0:37:01:d9:4c: 08:c8:a4:a9:3e:cd:3f:04:94:48:de:b9:b7:78:0e: ed:a5:48:39:ac:e0:3e:fb:1c:1d:27:32:bb:88:2a: cd:3d:e4:af:bb:d0:42:2e:34:fb:9a:15:52:e8:b1: ed:00:09:19:02:6f:a6:a7:e1:f6:f5:3d:9c:fa:3b: 36:6f:df:40:13:b0:b6:0b:5b:62:af:f3:be:bd:6b: 6d:d5:8e:bd:78:ee:f8:f8:f6:c0:5d:f6:7b:52:99: fc:33:b0:89:86:1f:29:5d:f5:3a:a9:79:f3:b0:bb: 5d:d1:70:ba:48:d4:6a:30:96:25:68:c0:c8:34:96: ed:1d:c7:bc:12:6f:9c:a1:87:84:49:d4:fa:21:97: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:67:4B:BF:41:C8:DC:A4:9D:69:02:52:21:CC:0A:6B:54:B7:08:92 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ee:2c:71:ce:f2:76:31:e9:ac:32:13:0d:05:90:97:2f:ee: 56:a9:f4:75:ae:8e:da:4b:85:b4:15:4b:92:05:86:3c:34:07: 68:6a:86:94:7f:8b:4b:fc:c2:51:ed:aa:eb:af:c5:a4:61:df: 48:7e:35:9b:b7:b0:84:97:aa:d0:b7:54:fc:16:96:0e:4e:eb: ed:e2:74:11:10:6a:7e:08:46:6e:0c:a5:6a:7f:b6:dd:24:73: 6f:9b:63:60:45:d1:fe:98:7a:1f:5f:33:91:c0:a3:2a:ac:2d: 61:a5:4f:66:ac:96:70:1f:f1:b4:e6:ad:09:20:1a:0e:d0:36: aa:1e:a5:f1:86:be:a0:5c:58:27:24:7b:68:e4:e3:e4:4c:a0: b1:55:c9:52:bf:2e:31:34:93:7d:73:4e:e4:76:d2:d7:72:37: 6b:96:3b:20:11:f0:ce:e3:67:48:87:95:07:b0:e8:4a:21:0d: ae:26:36:09:82:e4:9e:eb:8f:4e:b2:8f:ef:0d:a2:fa:3d:fe: d7:d2:ad:56:9a:44:f8:0d:b4:fa:4d:b5:d8:ce:af:f3:0a:c4: bb:bb:98:42:48:08:bd:40:8f:cb:f2:7f:c8:0c:76:53:90:fc: 35:9f:a4:0c:f6:da:f3:9c:ef:46:32:c6:69:f3:d1:c6:f8:50: 5b:51:f8:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjQxMTIwMTk1NDIxWhcNMjQxMTI3MTk1NDIxWjAYMRYwFAYD VQQDEw02NzNlM2U2ZS03ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s8KgxK2AJh7tAjWaKcHDgInmy1YBzmqDeJC04kbyasLKGFMSJt2lMAbhGgd 9VnTS2TDuBIPPJpnjzWE3gEa6kK1uW5BKe+s3oyU688TUgmmwuhCiM1xI+hQuigp mhOGbtnmMEiQVPx6/JTWftPPzJo04DcB2UwIyKSpPs0/BJRI3rm3eA7tpUg5rOA+ +xwdJzK7iCrNPeSvu9BCLjT7mhVS6LHtAAkZAm+mp+H29T2c+js2b99AE7C2C1ti r/O+vWtt1Y69eO74+PbAXfZ7Upn8M7CJhh8pXfU6qXnzsLtd0XC6SNRqMJYlaMDI NJbtHce8Em+coYeESdT6IZeqwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpnS79B yNyknWkCUiHMCmtUtwiSMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw7ixxzvJ2MemsMhMNBZCXL+5WqfR1ro7aS4W0FUuSBYY8NAdoaoaU f4tL/MJR7arrr8WkYd9IfjWbt7CEl6rQt1T8FpYOTuvt4nQREGp+CEZuDKVqf7bd JHNvm2NgRdH+mHofXzORwKMqrC1hpU9mrJZwH/G05q0JIBoO0DaqHqXxhr6gXFgn JHto5OPkTKCxVclSvy4xNJN9c07kdtLXcjdrljsgEfDO42dIh5UHsOhKIQ2uJjYJ guSe649Oso/vDaL6Pf7X0q1WmkT4DbT6TbXYzq/zCsS7u5hCSAi9QI/L8n/IDHZT kPw1n6QM9trznO9GMsZp89HG+FBbUfj6 -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:44 2024 by rpki-client on console-ams.rpki-client.org