$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft File: VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json) Hash identifier: hiXDb7fsDx4PDsN0BjqLMjPkPq9DQtp8luofadlc/dA= Subject key identifier: 03:F0:AE:7F:74:0F:1F:8A:94:98:1F:DE:D3:5F:EF:66:0F:30:51:55 Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft Manifest number: 0617 Signing time: Wed 20 Nov 2024 22:11:47 +0000 Manifest this update: Wed 20 Nov 2024 22:11:46 +0000 Manifest next update: Wed 27 Nov 2024 22:11:46 +0000 Files and hashes: 1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: 1bwAtYml57L6zyRoOfV9w6C2pbxh02Ca2ZCE/Am7zPo=) 2: E2C265C67BE311EB9D056E55C4F9AE02.roa (hash: MD81b9D0eJ9diJT0jy9vYYVC/3/w+R5LNMqEGiIws8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Validity Not Before: Nov 20 22:11:46 2024 GMT Not After : Nov 27 22:11:46 2024 GMT Subject: CN=673e5ea2-04ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:0d:96:fd:0d:97:d8:7a:84:78:48:90:11: d3:e2:45:5d:49:22:cf:5e:86:7b:cd:f3:f6:b8:54: 91:de:9a:b6:60:20:85:09:f2:37:88:ee:16:44:3e: 98:a5:7d:92:8c:d5:ae:6c:8e:b4:91:23:ab:1f:d5: 33:bd:d8:a2:e9:c0:ba:2c:77:42:5b:5f:33:bf:08: 85:b0:03:7d:d9:94:7d:90:80:56:fb:2a:b4:d8:1f: 51:ce:dc:da:5a:11:99:5b:a8:e0:ab:3c:9a:69:c1: ba:51:26:fc:37:42:f2:e5:fb:20:35:ff:d2:5e:f7: 77:b3:50:68:b5:30:bb:e3:d0:88:20:15:4e:5d:fa: 06:60:bb:f7:4f:4d:23:f7:19:65:ab:cc:29:28:7e: 38:7a:e1:27:37:b0:0d:2a:12:3b:e0:60:07:36:81: 72:24:5b:f9:fe:51:64:48:cd:c2:e6:94:0d:0a:c6: 52:a9:e1:37:5a:85:1b:4b:f4:18:7c:15:61:3e:6a: 3b:8f:87:93:e8:2c:91:7e:74:05:01:77:e6:d0:b7: 08:44:73:bf:e4:50:f8:6a:d6:f6:ce:9b:b7:3d:a3: 15:e0:94:10:71:bf:bf:04:d7:04:14:3f:7a:ed:27: 40:91:b3:10:c8:e0:68:48:3f:b3:9f:61:06:0c:9c: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F0:AE:7F:74:0F:1F:8A:94:98:1F:DE:D3:5F:EF:66:0F:30:51:55 X509v3 Authority Key Identifier: keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3d:db:65:dc:d1:f3:a9:83:f2:83:1a:d2:ab:4b:20:96:85: 84:18:b5:91:6c:61:4c:8a:f4:f5:16:c1:fc:6d:d7:88:ba:2f: 6e:62:f6:8f:8c:23:bb:b0:a6:05:f5:20:83:ee:1b:56:e6:f6: b5:67:22:f6:55:e5:b2:be:28:10:c4:cf:50:20:51:25:48:ad: a9:c9:4c:45:18:7a:b8:23:3c:23:bf:76:86:c6:73:74:3d:93: 5d:aa:dc:87:08:fe:c3:ad:ca:0a:ed:10:a4:13:a3:a2:bb:b0: 11:24:43:b7:14:29:85:f1:10:0f:63:53:51:6c:b0:ca:c2:15: 09:2d:4a:99:46:2f:28:80:94:31:3e:0e:13:00:cb:d5:6e:db: fa:ab:e9:aa:4b:42:6b:03:ba:7b:35:39:19:44:7a:16:ff:17: d2:cd:18:1d:6f:6b:b9:e1:3e:83:e7:62:a7:cf:a0:a8:fa:47: fa:d9:98:06:06:fa:4d:d4:1d:23:c2:f7:c1:2c:9b:6d:8a:cb: a9:c7:01:34:df:bb:78:fb:d6:dc:f4:22:32:4a:92:89:c6:01: bb:de:d2:d4:81:37:2b:6f:db:19:cc:2d:a2:18:b6:4f:73:cc: e3:12:56:fa:1f:af:55:b6:b1:b9:c3:66:51:1e:2d:91:5a:fe: a3:30:31:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz MkEyMDU4MjAwHhcNMjQxMTIwMjIxMTQ2WhcNMjQxMTI3MjIxMTQ2WjAYMRYwFAYD VQQDEw02NzNlNWVhMi0wNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZQNlv0Nl9h6hHhIkBHT4kVdSSLPXoZ7zfP2uFSR3pq2YCCFCfI3iO4WRD6Y pX2SjNWubI60kSOrH9Uzvdii6cC6LHdCW18zvwiFsAN92ZR9kIBW+yq02B9Rztza WhGZW6jgqzyaacG6USb8N0Ly5fsgNf/SXvd3s1BotTC749CIIBVOXfoGYLv3T00j 9xllq8wpKH44euEnN7ANKhI74GAHNoFyJFv5/lFkSM3C5pQNCsZSqeE3WoUbS/QY fBVhPmo7j4eT6CyRfnQFAXfm0LcIRHO/5FD4atb2zpu3PaMV4JQQcb+/BNcEFD96 7SdAkbMQyOBoSD+zn2EGDJyLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPwrn90 Dx+KlJgf3tNf72YPMFFVMB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUY4OS9EMzVBQTVBQTdCRTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVK aS03MlphcWN2ZjB5b2dXQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdPdtl3NHzqYPygxrSq0sgloWEGLWRbGFMivT1FsH8bdeIui9uYvaP jCO7sKYF9SCD7htW5va1ZyL2VeWyvigQxM9QIFElSK2pyUxFGHq4Izwjv3aGxnN0 PZNdqtyHCP7DrcoK7RCkE6Oiu7ARJEO3FCmF8RAPY1NRbLDKwhUJLUqZRi8ogJQx Pg4TAMvVbtv6q+mqS0JrA7p7NTkZRHoW/xfSzRgdb2u54T6D52Knz6Co+kf62ZgG BvpN1B0jwvfBLJttisupxwE037t4+9bc9CIySpKJxgG73tLUgTcrb9sZzC2iGLZP c8zjElb6H69VtrG5w2ZRHi2RWv6jMDEP -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:42 2024 by rpki-client on console-fra.rpki-client.org