$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: 5HhKMDagtscMP+c7hvEsWb/m+2U4kATuWc2ZxGJXCNs= Subject key identifier: 9E:CD:BD:27:7A:92:56:C9:DF:28:D6:B5:A2:8E:52:47:4F:8E:C1:BC Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 0324 Signing time: Mon 25 Nov 2024 00:34:39 +0000 Manifest this update: Mon 25 Nov 2024 00:34:39 +0000 Manifest next update: Mon 02 Dec 2024 00:34:39 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: Dyp/mcycwZ4zYQqF1A5lYT+tTsiHfdzy3imHRBPupQ0=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: qKwz8+c14WwjhtgoTFmPkHWwGU6d8jz1rJYBjBuoSfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Nov 25 00:34:39 2024 GMT Not After : Dec 2 00:34:39 2024 GMT Subject: CN=6743c61f-3fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:c8:bd:02:ed:1b:b8:b9:d3:cf:8c:c9:a7: a2:cb:3b:cd:2f:b5:18:72:fb:d3:b4:cd:a7:be:03: f0:f2:f7:86:1a:fb:e1:08:ee:79:a4:cb:0e:13:25: 07:54:ae:95:5a:e3:91:b0:81:1d:91:7d:27:56:81: 70:a3:0a:cb:0f:68:2a:ab:19:15:74:92:63:38:94: 8e:2c:3d:df:27:22:77:29:72:ad:1f:61:3b:b7:49: 35:21:51:81:66:fd:95:69:80:77:d9:af:5d:7a:07: c6:76:f5:09:05:16:91:e2:60:a3:83:83:7f:a5:f8: 38:6b:d8:33:46:9c:68:f4:a9:d3:ba:d7:ca:fd:d5: 60:2c:0b:5e:a5:13:2d:49:b0:69:d0:44:8d:7f:b7: fb:15:87:7a:01:5c:1f:26:87:e0:00:c0:ee:9f:b6: c0:1d:cf:fe:01:b8:3f:ca:0f:c0:fe:a6:b2:62:4b: f5:e2:b0:e3:33:72:b4:53:7f:9d:67:21:ea:ef:00: 60:f8:7b:2b:c2:1d:82:0d:90:1c:c3:83:09:39:71: dc:19:b0:e4:8e:a0:7f:48:a8:01:48:ce:aa:62:7b: 7a:32:c6:f4:92:06:50:cc:45:c2:5c:9e:42:08:85: ef:a4:c7:ea:5f:1a:d5:74:43:ed:2c:68:f1:d1:2a: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CD:BD:27:7A:92:56:C9:DF:28:D6:B5:A2:8E:52:47:4F:8E:C1:BC X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e6:93:c0:27:ed:0e:51:d6:db:04:17:66:99:76:48:8b:43: bf:da:ec:e2:76:7f:39:a3:bb:a4:d7:89:d7:ff:e6:48:63:92: 8b:9d:32:1d:22:71:74:e7:1e:91:27:04:db:cc:ba:1d:4a:10: 9e:70:0e:15:eb:df:13:be:8d:00:31:64:b8:b8:2b:18:91:26: 6c:34:cf:21:4d:51:43:cd:3c:70:54:09:28:07:8d:87:27:2e: 0a:cd:4e:fc:3d:3b:f6:e0:75:04:2f:5d:63:04:b1:f5:66:61: 8e:d2:ce:59:aa:38:9b:ec:89:e9:86:5c:32:2f:25:e2:5a:ef: 55:c1:39:12:70:9f:a3:f8:ed:01:74:54:9e:0c:91:f5:38:1f: da:b8:40:7d:57:ae:d6:9d:a3:75:43:81:fa:96:5f:fb:a6:63: 96:a7:7f:17:f4:12:27:2b:79:4d:75:b5:0e:ad:38:95:89:65: 5e:b7:eb:12:0b:e0:7d:e5:90:bd:27:f5:51:68:0b:c6:a8:3b: 3e:3e:68:02:be:6a:00:53:83:fb:6e:d9:a6:50:78:06:8e:29: 48:74:d3:cf:bc:60:08:42:b2:5e:1b:f1:eb:72:da:71:b5:2c: fd:81:c0:7c:40:6d:94:b7:ef:13:9a:a2:3d:b7:8c:ca:17:d1: 3c:89:52:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjQxMTI1MDAzNDM5WhcNMjQxMjAyMDAzNDM5WjAYMRYwFAYD VQQDEw02NzQzYzYxZi0zZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4G/IvQLtG7i508+MyaeiyzvNL7UYcvvTtM2nvgPw8veGGvvhCO55pMsOEyUH VK6VWuORsIEdkX0nVoFwowrLD2gqqxkVdJJjOJSOLD3fJyJ3KXKtH2E7t0k1IVGB Zv2VaYB32a9degfGdvUJBRaR4mCjg4N/pfg4a9gzRpxo9KnTutfK/dVgLAtepRMt SbBp0ESNf7f7FYd6AVwfJofgAMDun7bAHc/+Abg/yg/A/qayYkv14rDjM3K0U3+d ZyHq7wBg+Hsrwh2CDZAcw4MJOXHcGbDkjqB/SKgBSM6qYnt6Msb0kgZQzEXCXJ5C CIXvpMfqXxrVdEPtLGjx0Sow8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7NvSd6 klbJ3yjWtaKOUkdPjsG8MB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz5pPAJ+0OUdbbBBdmmXZIi0O/2uzidn85o7uk14nX/+ZIY5KLnTId InF05x6RJwTbzLodShCecA4V698Tvo0AMWS4uCsYkSZsNM8hTVFDzTxwVAkoB42H Jy4KzU78PTv24HUEL11jBLH1ZmGO0s5Zqjib7InphlwyLyXiWu9VwTkScJ+j+O0B dFSeDJH1OB/auEB9V67WnaN1Q4H6ll/7pmOWp38X9BInK3lNdbUOrTiViWVet+sS C+B95ZC9J/VRaAvGqDs+PmgCvmoAU4P7btmmUHgGjilIdNPPvGAIQrJeG/Hrctpx tSz9gcB8QG2Ut+8TmqI9t4zKF9E8iVIT -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:25 2024 by rpki-client on console-fra.rpki-client.org