$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: SccsfMgun0vk2tUwiFwmHt6ZCGgeEnK+U4YbC9dPnMo= Subject key identifier: 63:0C:9B:32:DC:D6:26:FF:9B:62:98:0A:28:76:0C:1D:28:B6:4B:04 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0BAC Signing time: Fri 22 Nov 2024 18:41:21 +0000 Manifest this update: Fri 22 Nov 2024 18:41:21 +0000 Manifest next update: Fri 29 Nov 2024 18:41:21 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: tKWeyKbSykZR3tXK7Ef1eMu7CejXOJJ+Oe9BVkGXuYA=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Rf0IxEkwLDNapXsuJXAuul060sZSSoGxkC1k36Bzzhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Nov 22 18:41:21 2024 GMT Not After : Nov 29 18:41:21 2024 GMT Subject: CN=6740d051-9022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:c6:8d:11:96:ed:23:79:07:73:37:6c:9d: 69:30:3d:af:f0:61:d9:d6:73:79:74:3d:7f:3f:3e: fd:6f:99:89:3c:52:62:39:99:a7:ff:eb:b1:23:25: 26:3a:dc:aa:65:62:2e:a8:9f:43:33:de:14:29:05: 39:d2:d6:fe:30:69:15:18:9f:4c:bd:cc:60:c6:a8: 03:82:cf:03:16:09:a5:9d:38:81:61:d4:4e:25:b0: 17:1c:12:67:fe:ec:c5:6e:ff:27:13:e5:0b:ad:1b: 9a:19:76:98:c9:7f:bf:6e:8f:c1:80:99:8b:92:2b: 94:04:00:bf:dc:45:0c:c8:36:5d:f8:e1:ff:10:3f: d1:2e:8e:5d:40:2d:c2:7f:bb:4b:05:7e:21:53:03: 86:de:2b:10:09:59:a5:b1:e4:7e:d2:3a:28:56:a0: 24:1d:76:b1:e1:8b:77:02:92:b7:7a:5b:6e:06:db: c7:18:9a:0a:47:c1:75:4a:2b:81:c0:e1:ce:92:cd: 26:2e:20:9b:68:95:83:9f:50:01:e9:0a:09:41:96: 76:04:67:50:ad:67:a7:8e:ea:d8:b2:23:9f:05:39: 55:25:c1:0d:00:3c:a1:da:ac:21:5b:cb:0d:44:50: 73:36:f4:6d:40:98:b1:7d:0b:e7:db:1e:de:2c:12: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:9B:32:DC:D6:26:FF:9B:62:98:0A:28:76:0C:1D:28:B6:4B:04 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:91:49:1a:68:2e:3a:49:97:01:d4:8e:37:78:4e:05:4f:39: ec:3e:72:92:99:a4:63:1a:1d:f8:f0:37:32:a3:80:71:df:8b: 21:b6:f7:d5:0a:ef:1f:34:2f:b3:e7:51:48:d5:14:eb:a1:b8: dd:8e:88:57:46:c0:1c:38:36:2c:79:0a:6a:eb:77:5b:8b:36: a1:96:2b:42:f6:0a:88:d1:c5:34:24:7b:2b:c2:6b:1f:5a:17: 8a:ba:40:ce:b5:a7:4f:5c:6e:bc:cd:57:1b:3d:ee:45:62:91: a3:18:7d:0d:2d:d4:dd:4b:77:6a:04:ce:c4:8a:98:58:d9:f8: 1c:e3:f9:d2:d5:f1:13:45:ce:a7:e0:7c:c4:b3:eb:4a:b2:64: 53:66:a5:65:23:47:60:d2:e2:29:8d:ab:2b:ce:c7:e4:9b:21: 04:d0:fa:98:ee:a1:38:4a:b2:84:4f:ca:5b:fb:a4:70:a6:03: cc:f1:d9:e8:a4:bf:19:52:35:99:d2:5a:b1:96:2f:91:5f:8a: f6:81:62:34:2d:0e:9e:d0:93:f2:53:83:4b:57:2f:71:21:be: eb:c4:cb:02:a2:3e:5a:af:a8:c6:8c:ac:73:54:4b:a5:00:20: a6:b1:44:9a:55:de:01:64:e4:86:b4:cc:9e:5c:a2:b0:d4:e7: af:05:14:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjQxMTIyMTg0MTIxWhcNMjQxMTI5MTg0MTIxWjAYMRYwFAYD VQQDEw02NzQwZDA1MS05MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3zGjRGW7SN5B3M3bJ1pMD2v8GHZ1nN5dD1/Pz79b5mJPFJiOZmn/+uxIyUm OtyqZWIuqJ9DM94UKQU50tb+MGkVGJ9MvcxgxqgDgs8DFgmlnTiBYdROJbAXHBJn /uzFbv8nE+ULrRuaGXaYyX+/bo/BgJmLkiuUBAC/3EUMyDZd+OH/ED/RLo5dQC3C f7tLBX4hUwOG3isQCVmlseR+0jooVqAkHXax4Yt3ApK3eltuBtvHGJoKR8F1SiuB wOHOks0mLiCbaJWDn1AB6QoJQZZ2BGdQrWenjurYsiOfBTlVJcENADyh2qwhW8sN RFBzNvRtQJixfQvn2x7eLBIbUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMMmzLc 1ib/m2KYCih2DB0otksEMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzkUkaaC46SZcB1I43eE4FTznsPnKSmaRjGh348Dcyo4Bx34shtvfV Cu8fNC+z51FI1RTrobjdjohXRsAcODYseQpq63dbizahlitC9gqI0cU0JHsrwmsf WheKukDOtadPXG68zVcbPe5FYpGjGH0NLdTdS3dqBM7EiphY2fgc4/nS1fETRc6n 4HzEs+tKsmRTZqVlI0dg0uIpjasrzsfkmyEE0PqY7qE4SrKET8pb+6RwpgPM8dno pL8ZUjWZ0lqxli+RX4r2gWI0LQ6e0JPyU4NLVy9xIb7rxMsCoj5ar6jGjKxzVEul ACCmsUSaVd4BZOSGtMyeXKKw1OevBRQ7 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org