$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: GDjZPydqKa17ylJtLSbhm7bgFveu2bpj453DklDDa+Y= Subject key identifier: BD:AC:80:86:C7:8A:47:64:0A:FB:DC:0E:4D:7A:9E:D9:53:C1:7C:65 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 9C Signing time: Sat 23 Nov 2024 04:24:40 +0000 Manifest this update: Sat 23 Nov 2024 04:24:40 +0000 Manifest next update: Sat 30 Nov 2024 04:24:40 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: i8cckBQMkgphQpeQz+vt00uju3BXLrcnU8EP72FPLdI=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: /3mHHQ5ywC61lDBuvznFXCgZZLB0pg7SUYIieP44Gxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Nov 23 04:24:40 2024 GMT Not After : Nov 30 04:24:40 2024 GMT Subject: CN=67415908-354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:92:a9:1b:5c:04:f3:c6:71:0b:c6:46:dd: fe:47:20:03:06:4f:4b:60:0b:04:2b:1e:a2:01:82: e1:1a:41:40:60:02:38:81:d5:2e:83:7d:09:e6:c5: ff:91:32:05:f4:05:ec:9d:a1:ad:e7:c3:e5:69:f4: 7e:3a:a3:bb:4b:8f:c7:4f:15:0f:6f:d6:5e:29:f7: 2d:39:57:a3:d2:d8:7b:ce:ee:c3:a6:dd:f9:df:4e: 63:04:21:20:f7:20:24:a5:a7:42:9e:3c:43:4a:c7: 94:3c:c8:a9:95:75:df:55:06:16:34:02:60:18:a5: 68:f7:40:7b:ef:67:ff:9f:45:71:6c:05:62:ce:e9: 30:27:21:86:e9:1c:99:0f:f9:14:22:0d:97:8d:b8: de:22:e5:de:99:4b:0d:10:ed:17:7e:f5:46:92:26: 02:90:23:88:66:4a:48:74:94:58:fe:20:e9:51:f4: c0:9a:a0:bc:d7:8f:6b:69:54:d7:45:9e:30:27:fd: 40:7b:3d:72:40:5b:7d:47:02:c0:55:86:83:bd:bf: 49:01:76:12:83:76:8e:68:fb:3b:8b:bc:46:71:9c: 80:b8:cb:fc:42:8e:c6:37:3d:0f:b1:cf:c1:df:0d: 0c:a8:bd:39:2a:fd:43:71:cc:52:cd:7a:bc:54:c4: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:80:86:C7:8A:47:64:0A:FB:DC:0E:4D:7A:9E:D9:53:C1:7C:65 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:89:34:3d:19:f1:92:fa:c7:b1:e6:70:78:33:78:bc:cb:18: 98:11:0c:08:c8:ed:32:a3:3e:13:32:6c:9d:67:8e:c7:e0:00: 89:92:70:7e:ea:f0:c4:a7:36:c5:62:01:88:95:eb:87:4d:8f: db:20:5a:00:3a:9e:07:35:2d:70:48:e6:9b:0b:4f:a3:cb:5e: fb:5b:26:f3:44:ac:8e:63:56:da:4b:7e:f5:b8:b1:98:2e:e5: 62:68:ab:3b:d8:3c:9b:7f:cd:6b:43:0e:5c:cb:6b:3c:a7:c1: bf:04:56:a5:69:33:1d:38:88:34:8c:ce:d0:e1:bd:aa:f5:fd: 0a:7b:3c:c7:69:a9:5e:e0:62:eb:0a:85:49:15:21:6a:6c:78: ed:32:b3:22:29:63:95:9c:db:a1:01:5b:84:18:bb:cc:e2:85: 96:48:dd:cf:12:6c:b7:58:59:d8:43:98:12:e9:f3:68:3c:d2: 50:90:72:26:0a:55:c3:d9:32:43:c1:76:59:85:ca:88:eb:1d: a6:2c:ff:93:e5:0b:24:dc:82:a3:78:e0:5a:a4:14:ef:5b:ff: 15:76:77:45:e2:c5:30:6b:02:a8:d3:7e:1d:f5:78:96:a8:c4: 18:51:7a:d3:67:69:5a:8a:2c:2e:19:03:e5:61:cf:57:ca:3c: 1f:98:36:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjQxMTIzMDQyNDQwWhcNMjQxMTMwMDQyNDQwWjAYMRYwFAYD VQQDEw02NzQxNTkwOC0zNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYuSqRtcBPPGcQvGRt3+RyADBk9LYAsEKx6iAYLhGkFAYAI4gdUug30J5sX/ kTIF9AXsnaGt58PlafR+OqO7S4/HTxUPb9ZeKfctOVej0th7zu7Dpt35305jBCEg 9yAkpadCnjxDSseUPMiplXXfVQYWNAJgGKVo90B772f/n0VxbAVizukwJyGG6RyZ D/kUIg2XjbjeIuXemUsNEO0XfvVGkiYCkCOIZkpIdJRY/iDpUfTAmqC8149raVTX RZ4wJ/1Aez1yQFt9RwLAVYaDvb9JAXYSg3aOaPs7i7xGcZyAuMv8Qo7GNz0Psc/B 3w0MqL05Kv1DccxSzXq8VMTwiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2sgIbH ikdkCvvcDk16ntlTwXxlMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhiTQ9GfGS+sex5nB4M3i8yxiYEQwIyO0yoz4TMmydZ47H4ACJknB+ 6vDEpzbFYgGIleuHTY/bIFoAOp4HNS1wSOabC0+jy177WybzRKyOY1baS371uLGY LuViaKs72Dybf81rQw5cy2s8p8G/BFalaTMdOIg0jM7Q4b2q9f0KezzHaale4GLr CoVJFSFqbHjtMrMiKWOVnNuhAVuEGLvM4oWWSN3PEmy3WFnYQ5gS6fNoPNJQkHIm ClXD2TJDwXZZhcqI6x2mLP+T5Qsk3IKjeOBapBTvW/8VdndF4sUwawKo034d9XiW qMQYUXrTZ2laiiwuGQPlYc9XyjwfmDZp -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org