$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: I82vIN3XPW7h+Q+HC7294SRrYj+K08luYbV4fv2ROsw= Subject key identifier: EA:51:84:57:04:B6:A1:6B:BC:F9:0B:8E:39:E2:D3:53:82:B1:78:23 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 211F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 2115 Signing time: Fri 22 Nov 2024 15:55:12 +0000 Manifest this update: Fri 22 Nov 2024 15:55:12 +0000 Manifest next update: Fri 29 Nov 2024 15:55:12 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: oL1c+kiaH7ftIq4qqALidMMHfBqidJY+PBSTxA6zRvY=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: L9gCg+OrTuiqw6ExvZDK6OLjojljMO3J6dRtRl48yx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8479 (0x211f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Nov 22 15:55:12 2024 GMT Not After : Nov 29 15:55:12 2024 GMT Subject: CN=6740a960-82ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:92:f3:23:da:72:7d:e8:8a:7a:fe:00:13: 7b:e7:a9:0f:08:06:45:06:49:d4:75:c7:47:5f:ac: 6d:49:77:b4:ad:f4:2c:4d:64:aa:44:36:98:a6:f0: e7:31:eb:f4:0b:f5:0d:b7:83:f4:f9:b0:94:0f:af: 98:78:8a:a2:81:a0:96:80:ea:ca:c3:40:03:de:de: f0:49:45:1e:71:b8:44:56:85:09:3c:cf:54:28:93: c4:0b:0a:e9:84:c3:d6:6a:d3:78:43:cc:05:c9:2d: f4:15:df:84:61:e4:68:53:05:3a:41:ea:a7:9e:b8: fa:72:b9:29:ef:83:e5:39:34:3d:31:9e:ce:22:6c: 8b:a5:7e:61:a3:a0:be:23:50:36:cb:81:61:80:2d: d9:e3:b0:9d:96:22:10:17:e9:0e:06:c9:5c:c2:4a: b9:90:ae:06:ac:a1:ed:58:2d:90:10:2f:60:4d:ab: 7a:b4:c0:98:ed:3d:03:ff:2b:dc:e0:f6:fa:77:fc: fd:a0:f0:cc:83:e7:a4:78:a2:42:ce:70:28:84:1e: a0:28:4e:bc:81:d6:b9:62:37:8a:ea:74:28:d1:11: ce:38:53:26:fc:a4:a9:29:c4:98:75:46:ff:e0:2d: a2:4d:7f:4e:ef:f2:05:c1:7c:ea:26:a3:f0:c6:e9: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:51:84:57:04:B6:A1:6B:BC:F9:0B:8E:39:E2:D3:53:82:B1:78:23 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:a7:ef:4d:33:fd:fe:98:bf:3a:a8:55:3f:23:44:e8:85: 85:80:78:fb:1a:da:da:07:f5:06:de:10:20:28:b7:bf:b9:bd: 28:b2:32:fe:16:bc:51:8d:37:57:1e:fb:3a:69:64:f1:8b:ee: f4:6f:f3:5f:4c:ee:5b:d1:94:31:d3:39:ed:88:12:59:a2:25: f0:a4:0b:c5:fd:ec:2b:ff:36:4e:d7:c4:16:d6:7c:7e:02:9d: eb:14:29:ee:ef:6f:dd:f8:79:1a:0f:70:79:64:bd:d0:51:8e: 28:7d:77:f0:c9:a6:3e:f8:b0:d2:9d:34:23:72:c7:ea:72:ba: 52:51:88:12:36:30:97:da:27:10:c2:07:3f:87:48:ed:7c:bd: 83:5f:b0:3c:bd:73:03:8f:85:17:f0:1a:8e:57:c8:30:64:03: 6e:dc:56:c5:fc:c0:34:1f:f4:bb:c9:7c:d0:90:cc:9c:e0:d9: 9e:d7:d0:c7:3c:a0:b1:ae:ce:b9:a2:da:d0:d7:aa:bc:d2:13: 4c:8e:2c:8c:c4:81:9c:8e:c6:a0:30:f2:03:9c:38:e2:1b:bd: d5:06:b7:e9:95:c7:fa:02:12:0f:3d:29:cf:c3:de:04:b8:75: 9d:9f:35:e1:a6:d6:e4:2c:b9:c2:ac:2e:74:f0:4d:68:92:86: 70:f3:98:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjQxMTIyMTU1NTEyWhcNMjQxMTI5MTU1NTEyWjAYMRYwFAYD VQQDEw02NzQwYTk2MC04MmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZaS8yPacn3oinr+ABN756kPCAZFBknUdcdHX6xtSXe0rfQsTWSqRDaYpvDn Mev0C/UNt4P0+bCUD6+YeIqigaCWgOrKw0AD3t7wSUUecbhEVoUJPM9UKJPECwrp hMPWatN4Q8wFyS30Fd+EYeRoUwU6Qeqnnrj6crkp74PlOTQ9MZ7OImyLpX5ho6C+ I1A2y4FhgC3Z47CdliIQF+kOBslcwkq5kK4GrKHtWC2QEC9gTat6tMCY7T0D/yvc 4Pb6d/z9oPDMg+ekeKJCznAohB6gKE68gda5YjeK6nQo0RHOOFMm/KSpKcSYdUb/ 4C2iTX9O7/IFwXzqJqPwxulTwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpRhFcE tqFrvPkLjjni01OCsXgjMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2L6fvTTP9/pi/OqhVPyNE6IWFgHj7GtraB/UG3hAgKLe/ub0osjL+ FrxRjTdXHvs6aWTxi+70b/NfTO5b0ZQx0zntiBJZoiXwpAvF/ewr/zZO18QW1nx+ Ap3rFCnu72/d+HkaD3B5ZL3QUY4ofXfwyaY++LDSnTQjcsfqcrpSUYgSNjCX2icQ wgc/h0jtfL2DX7A8vXMDj4UX8BqOV8gwZANu3FbF/MA0H/S7yXzQkMyc4Nme19DH PKCxrs65otrQ16q80hNMjiyMxIGcjsagMPIDnDjiG73VBrfplcf6AhIPPSnPw94E uHWdnzXhptbkLLnCrC508E1okoZw85iZ -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org