$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft File: vBN8J3flHee9Gs6A2Gj9k6HsekM.mft (raw, json) Hash identifier: c0bmevwHqm77KSHGBKqXgvyW0vfmoYakUSIMuTw+vx8= Subject key identifier: 8D:45:F3:AD:3B:C6:C3:FE:69:65:25:2F:FA:13:B2:CE:01:BF:B3:92 Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43 Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft Manifest number: 0272 Signing time: Thu 21 Nov 2024 04:24:19 +0000 Manifest this update: Thu 21 Nov 2024 04:24:19 +0000 Manifest next update: Thu 28 Nov 2024 04:24:19 +0000 Files and hashes: 1: vBN8J3flHee9Gs6A2Gj9k6HsekM.crl (hash: 6CKOahqLuQta7Q2QVX8qoprpR0OPoKlqDhoOkgjGRZM=) 2: 778CCA00A7C011EFBD7BEB2CC4F9AE02.roa (hash: LuEYhqz5AbGN55ZyXp4UptQ1C1/7/ToDJPqDs6dIQco=) 3: 2BAB8262C3E011EEB2428870C4F9AE02.roa (hash: l8LmNf7dw4lpE2t1iEeA/WiUyOVT0TclK1VikhzrofY=) 4: 6895C6749D8D11EF9F951D24C4F9AE02.roa (hash: /EjKOFCI68jV75I4ZYfu3mX8PtwLfDQUOXDo1m5Latg=) 5: ABCD12D8796311EF9BFCD176C4F9AE02.roa (hash: +RKW+/uN9Hi39qxkzWYiutguIiAMAssFq6PeTVoSj88=) 6: 431E858E4A4511EF81E2217FC4F9AE02.roa (hash: UantZ7IQVMnUv9mB5fXQS3+6aNnIGeKGtaAHXJvRAhs=) 7: 423FF06C4A4511EF81E2217FC4F9AE02.roa (hash: p64lN/EUHHqmbgUUqW2L703RRR1IDPfGY6k2MR7AakQ=) 8: CE7D2C2A564811EFB4DC2425C4F9AE02.roa (hash: UkC4+mtP4VnnLgF0yLlhyQWp87RAUcMz/wezKwi+9sE=) 9: C12CCFBC53AF11EF9C14C60FC4F9AE02.roa (hash: BgVoOI9tnTQA0N2W9svDih5HMRSYGKCH/awz9saFK1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43 Validity Not Before: Nov 21 04:24:19 2024 GMT Not After : Nov 28 04:24:19 2024 GMT Subject: CN=673eb5f3-d5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:03:71:10:81:fd:ad:c6:23:40:a4:17:1c: 3a:2f:cc:b2:76:c0:9c:8b:a0:8a:4b:e5:31:11:04: fc:c2:09:8d:bf:fe:cc:80:be:a7:9d:e6:19:a0:f4: cb:a0:a0:95:52:d0:79:22:ee:8b:02:98:79:ec:c1: 60:9a:72:ba:54:c7:13:31:76:7d:aa:be:0b:07:75: 66:95:ff:2e:f2:07:95:4e:94:4f:84:de:8e:b7:3a: ae:d3:99:4e:48:ea:f3:05:9d:f8:24:2e:8c:5b:21: 45:2e:2b:a2:2e:c7:49:b5:52:ff:e3:bc:27:c2:a1: 73:44:43:2c:80:30:82:9e:b9:e2:9c:6b:53:96:64: 17:12:3f:c2:76:5e:42:c4:2a:93:43:2b:75:40:c9: 0c:5b:cd:07:5f:7f:fa:06:81:2a:a4:3c:07:57:7c: 95:f1:09:19:2f:e2:b1:f9:1f:b5:41:97:46:15:d0: 35:83:d2:0a:a7:4e:ac:c6:8f:0f:8e:17:1f:f3:25: e7:d2:90:37:b6:a7:ea:06:e1:c4:ea:48:b3:dd:59: 02:69:ba:a8:15:bc:89:8c:71:db:07:45:e7:f6:96: 01:ec:81:b4:ca:f0:89:98:f6:65:c6:db:2f:a3:d8: d6:19:31:fa:bc:03:54:7a:d5:73:3a:c0:74:34:95: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:F3:AD:3B:C6:C3:FE:69:65:25:2F:FA:13:B2:CE:01:BF:B3:92 X509v3 Authority Key Identifier: keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:bd:b7:88:7a:b4:48:2c:db:48:ed:e1:f9:56:6c:80:ea: 81:16:a8:d0:e0:4f:2d:29:29:8c:30:10:62:4d:75:d3:8d:a5: f5:bb:be:18:21:07:98:6b:45:39:0c:fb:9e:ce:b6:9a:e7:8f: f1:8a:41:17:eb:84:64:a6:67:5d:d0:5e:7e:c9:1e:5c:97:8b: 9c:94:b6:3e:36:d2:53:e7:69:47:b1:58:81:b8:cb:79:c2:1c: c9:9f:3b:31:07:86:87:f5:d8:2d:ae:a3:20:e4:9f:23:60:b3: a7:d1:2d:70:0a:06:22:06:4b:27:a5:27:c0:62:7e:86:dc:db: e7:23:9c:f7:fd:d0:f5:d9:05:c5:b9:a9:b9:18:e1:25:55:dd: 8e:74:a0:65:8d:a5:c8:32:91:18:a9:6e:a0:93:c4:ee:37:a6: 0d:35:4f:e3:b8:20:f6:23:43:c5:60:b9:bf:ea:17:18:f0:2f: c1:51:68:3e:46:31:ba:b1:80:53:5a:6b:ab:34:30:5c:6f:51: 09:da:77:2a:4b:48:8c:7f:cb:e4:e5:16:14:69:a9:44:94:76: 14:7f:51:c2:1e:21:43:55:2e:33:18:c2:52:17:b4:76:71:3e: 3f:bf:10:df:2f:46:ea:a4:52:96:16:6d:2b:76:7c:8a:0d:3e: 70:e0:d5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZEQTgxMTAvBgNVBAUTKEJDMTM3QzI3NzdFNTFERTdCRDFBQ0U4MEQ4NjhGRDkz QTFFQzdBNDMwHhcNMjQxMTIxMDQyNDE5WhcNMjQxMTI4MDQyNDE5WjAYMRYwFAYD VQQDEw02NzNlYjVmMy1kNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc0DcRCB/a3GI0CkFxw6L8yydsCci6CKS+UxEQT8wgmNv/7MgL6nneYZoPTL oKCVUtB5Iu6LAph57MFgmnK6VMcTMXZ9qr4LB3Vmlf8u8geVTpRPhN6Otzqu05lO SOrzBZ34JC6MWyFFLiuiLsdJtVL/47wnwqFzREMsgDCCnrninGtTlmQXEj/Cdl5C xCqTQyt1QMkMW80HX3/6BoEqpDwHV3yV8QkZL+Kx+R+1QZdGFdA1g9IKp06sxo8P jhcf8yXn0pA3tqfqBuHE6kiz3VkCabqoFbyJjHHbB0Xn9pYB7IG0yvCJmPZlxtsv o9jWGTH6vANUetVzOsB0NJUoFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1F8607 xsP+aWUlL/oTss4Bv7OSMB8GA1UdIwQYMBaAFLwTfCd35R3nvRrOgNho/ZOh7HpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkRBOC83NkVENDRFRTAx RUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhlZTlHczZBMkdqOWs2SHNl a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCTjhKM2ZsSGVlOUdzNkEyR2o5azZIc2VrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkRBOC83NkVENDRFRTAxRUIxMUVEOTlBMzFBMUZDNEY5QUUwMi92Qk44SjNmbEhl ZTlHczZBMkdqOWs2SHNla00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWWr23iHq0SCzbSO3h+VZsgOqBFqjQ4E8tKSmMMBBiTXXTjaX1u74Y IQeYa0U5DPuezraa54/xikEX64Rkpmdd0F5+yR5cl4uclLY+NtJT52lHsViBuMt5 whzJnzsxB4aH9dgtrqMg5J8jYLOn0S1wCgYiBksnpSfAYn6G3NvnI5z3/dD12QXF uam5GOElVd2OdKBljaXIMpEYqW6gk8TuN6YNNU/juCD2I0PFYLm/6hcY8C/BUWg+ RjG6sYBTWmurNDBcb1EJ2ncqS0iMf8vk5RYUaalElHYUf1HCHiFDVS4zGMJSF7R2 cT4/vxDfL0bqpFKWFm0rdnyKDT5w4NVN -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org