$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: Sjh2edN0Rwd90PtLT4xvvu7VSnelXz6qTreQFSBjv6E= Subject key identifier: 0F:86:E4:25:FE:BC:75:C6:5F:04:F2:23:76:EB:21:4B:40:47:B4:D2 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 133C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1312 Signing time: Wed 20 Nov 2024 17:00:20 +0000 Manifest this update: Wed 20 Nov 2024 17:00:19 +0000 Manifest next update: Wed 27 Nov 2024 17:00:19 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: oTIGmzLwNRICzevi5Rbv2sRpEb8NI0jSnXcKWiNICOY=) 2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: uEmwwGXbLGwcgl1RlF9qOwgmZadJbirI6oSO1IuzJso=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: O/obPP4Yy8LvINF30ra1g4yXQa4L78ykRo9/qSPYtDU=) 4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4924 (0x133c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Nov 20 17:00:19 2024 GMT Not After : Nov 27 17:00:19 2024 GMT Subject: CN=673e15a4-c8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:41:fd:f8:00:de:bb:76:56:51:5e:24:3e: 5d:c1:19:e8:e4:99:82:41:e6:88:7a:74:20:d1:f4: d4:09:e6:4b:dc:03:91:77:a3:ac:25:e0:d7:a6:d7: d5:10:43:4a:9a:e3:3a:a4:1b:cb:d0:e3:0a:95:8e: 9a:89:a0:1a:17:e3:64:b9:3a:22:c6:42:ce:8a:ea: 3f:be:6c:34:98:db:28:41:a4:f0:90:d1:fc:b3:0f: 4b:1c:b2:5d:b1:e3:fb:67:de:6e:91:a5:9f:71:b6: 97:d6:d4:82:f4:1d:ab:80:68:ac:bc:8f:b8:e6:41: 05:63:96:ac:5c:db:4c:58:d7:88:fe:84:da:f7:5c: ab:82:dc:54:d5:c4:34:09:97:91:08:c0:8b:3f:5b: 60:9d:dd:d4:71:3d:a2:2b:37:38:6e:0a:f7:c5:07: 92:57:ce:db:63:d5:2c:fb:13:2a:d8:e6:d3:96:c1: 8d:32:b2:2b:c2:8d:20:db:bb:90:fd:32:b8:cf:45: 11:d5:67:cc:55:96:fd:98:ba:98:98:67:53:98:bd: fc:fa:38:76:05:0c:f0:b9:aa:d5:b1:1c:d4:28:70: 7e:13:73:f8:d4:cb:a9:6f:43:4d:86:a0:d5:14:77: e6:59:8f:5d:c3:d5:52:85:ed:0a:a3:36:09:68:74: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:86:E4:25:FE:BC:75:C6:5F:04:F2:23:76:EB:21:4B:40:47:B4:D2 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:0b:21:80:a9:7e:ce:cb:51:c2:5c:4d:7a:3e:11:97:4f: f2:6e:02:a7:86:67:57:d2:b5:5b:b4:4d:91:b3:1c:77:76:b8: e6:71:f6:df:0a:56:fe:62:bd:65:5b:85:5e:e5:30:a1:1c:9d: 63:15:a6:c0:5a:b5:13:a4:8a:27:fa:55:1d:1c:eb:68:73:50: 3f:3a:fb:61:c9:c4:d6:c8:7f:f1:e7:88:42:b1:e9:cd:43:e1: 96:3e:ea:64:45:e1:02:84:b1:e5:b1:30:63:c8:f0:2f:38:f8: 83:76:d3:3f:56:f7:c3:71:64:94:e8:0f:0a:18:9b:68:81:73: 68:52:54:90:bc:5e:35:49:1e:fd:aa:ad:78:16:1a:4b:44:7e: 4f:d6:ec:17:4a:f9:6a:a9:df:9a:12:53:95:5b:b9:17:17:2c: 51:3d:81:c7:c3:dc:37:d5:92:72:87:4b:20:f0:60:d0:72:bd: 4c:ba:b3:1f:ab:7d:84:6f:9a:49:8f:68:fb:ff:79:c5:d2:0b: 53:27:3d:e7:86:dd:45:0f:5d:1e:bb:7a:42:c9:c3:bb:a4:33: d3:e1:e0:c6:98:f4:72:b3:b3:ac:d0:6a:82:49:24:e9:84:5b: e5:23:1d:9c:2f:f7:ee:86:d6:63:0c:f2:16:ec:f3:88:48:1d: a2:37:2e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjQxMTIwMTcwMDE5WhcNMjQxMTI3MTcwMDE5WjAYMRYwFAYD VQQDEw02NzNlMTVhNC1jOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgpB/fgA3rt2VlFeJD5dwRno5JmCQeaIenQg0fTUCeZL3AORd6OsJeDXptfV EENKmuM6pBvL0OMKlY6aiaAaF+NkuToixkLOiuo/vmw0mNsoQaTwkNH8sw9LHLJd seP7Z95ukaWfcbaX1tSC9B2rgGisvI+45kEFY5asXNtMWNeI/oTa91yrgtxU1cQ0 CZeRCMCLP1tgnd3UcT2iKzc4bgr3xQeSV87bY9Us+xMq2ObTlsGNMrIrwo0g27uQ /TK4z0UR1WfMVZb9mLqYmGdTmL38+jh2BQzwuarVsRzUKHB+E3P41Mupb0NNhqDV FHfmWY9dw9VShe0KozYJaHTbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+G5CX+ vHXGXwTyI3brIUtAR7TSMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSAshgKl+zstRwlxNej4Rl0/ybgKnhmdX0rVbtE2Rsxx3drjmcfbf Clb+Yr1lW4Ve5TChHJ1jFabAWrUTpIon+lUdHOtoc1A/OvthycTWyH/x54hCsenN Q+GWPupkReEChLHlsTBjyPAvOPiDdtM/VvfDcWSU6A8KGJtogXNoUlSQvF41SR79 qq14FhpLRH5P1uwXSvlqqd+aElOVW7kXFyxRPYHHw9w31ZJyh0sg8GDQcr1MurMf q32Eb5pJj2j7/3nF0gtTJz3nht1FD10eu3pCycO7pDPT4eDGmPRys7Os0GqCSSTp hFvlIx2cL/fuhtZjDPIW7POISB2iNy6h -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:47 2024 by rpki-client on console-fra.rpki-client.org