$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: Gk+VfNYPI+nWulCW8VbUpopmjsw8EuY276GqIoN9xS8= Subject key identifier: 61:C1:6E:13:7F:1D:4C:0D:69:8B:53:10:00:E5:64:A2:F4:3E:E3:00 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 20 Signing time: Sat 23 Nov 2024 05:50:47 +0000 Manifest this update: Sat 23 Nov 2024 05:50:47 +0000 Manifest next update: Sat 30 Nov 2024 05:50:47 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: Y3b1OSqKpxbH8e3pnQdKTivDsy04IDnspSyVFsZLHyg=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Nov 23 05:50:47 2024 GMT Not After : Nov 30 05:50:47 2024 GMT Subject: CN=67416d37-4301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:b0:94:ec:e0:1c:c1:3b:55:8e:48:19:81: 5c:7c:9f:0f:8a:9e:39:9e:d6:35:59:db:97:c4:ea: 6b:a4:d2:e9:b4:99:72:e0:95:b9:7c:da:e2:55:81: c4:f3:db:50:46:7a:df:46:6d:e8:3f:8e:9e:e2:df: 59:be:bd:17:dc:5d:65:f4:3c:53:c9:e6:3b:1e:32: cf:56:db:70:2e:b4:7b:ec:db:af:f1:90:d6:0a:1d: e6:25:2b:47:14:b1:01:7e:eb:e5:d3:d5:46:57:2c: 3d:90:75:ff:37:25:4a:79:6c:fb:0c:77:83:6b:56: e6:3a:6f:32:b6:50:0e:96:7e:30:12:84:db:47:c8: f0:13:46:08:2d:d6:02:8e:2b:3d:ec:f6:9d:e9:d3: d0:d1:69:f6:46:a3:1a:1c:b3:db:01:a9:b4:69:a5: ce:f3:fb:11:60:a1:d8:12:14:d3:82:36:5f:03:49: 91:26:ce:58:64:aa:bf:5c:63:b2:8b:79:5c:ad:c0: 76:6b:46:72:aa:b9:f1:d0:08:d0:8d:cf:94:7b:94: b0:09:ff:4f:ca:0e:fb:ff:e5:3c:80:7b:a7:4f:42: 36:42:a4:c6:58:22:a6:89:be:3a:8d:98:0c:6b:20: 7f:df:43:e7:13:73:63:28:87:2c:1f:58:0f:02:52: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:6E:13:7F:1D:4C:0D:69:8B:53:10:00:E5:64:A2:F4:3E:E3:00 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4b:78:76:70:30:e3:ae:a3:36:b8:c6:76:16:98:47:65:bd: cb:f8:29:65:0a:21:b3:96:1d:aa:36:c1:69:46:ab:c4:1e:89: 42:d0:2a:1a:6a:ca:a1:16:43:da:98:f3:02:a5:33:b2:c8:23: 49:c6:27:fb:83:ae:42:c0:7f:cf:d0:1f:c6:60:38:2d:02:b5: c9:f2:f0:1c:1b:74:c0:6f:a5:39:51:5e:3e:39:41:e6:9c:95: 90:3c:5c:f6:ff:ae:d6:38:68:2a:29:06:50:bc:9b:85:18:10: b7:01:1f:ae:71:7f:18:be:28:62:e0:5c:0d:e7:2f:27:4a:49: 64:4b:ab:af:e2:74:aa:8b:9b:1b:fa:7f:2d:16:c0:3c:80:54: e6:ba:d6:5a:63:d5:b8:19:17:75:5a:ba:35:1b:00:77:18:58: 4c:a7:fb:37:52:92:8e:12:65:fb:68:6e:9b:8b:53:36:e8:36: 2a:a7:3d:61:c0:55:c1:bb:81:34:72:9a:9a:3c:39:4d:c4:9a: c6:38:88:52:7c:3b:1e:cd:72:fb:75:52:00:eb:9d:7d:e4:f0: eb:83:8e:30:50:8c:76:02:89:7d:55:9a:d6:b7:e6:3f:57:97: 68:4f:17:2c:2e:d4:d7:e8:4d:44:ef:e6:b7:33:44:84:99:f2: db:3e:8f:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzZGQTExMC8GA1UEBRMoNTUzM0E3QzU3QkY0REIxRTUzOEY5RTc3RTBCNDg2OEI4 RjkwQzU4MjAeFw0yNDExMjMwNTUwNDdaFw0yNDExMzAwNTUwNDdaMBgxFjAUBgNV BAMTDTY3NDE2ZDM3LTQzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSbrCU7OAcwTtVjkgZgVx8nw+Knjme1jVZ25fE6muk0um0mXLglbl82uJVgcTz 21BGet9Gbeg/jp7i31m+vRfcXWX0PFPJ5jseMs9W23AutHvs26/xkNYKHeYlK0cU sQF+6+XT1UZXLD2Qdf83JUp5bPsMd4NrVuY6bzK2UA6WfjAShNtHyPATRggt1gKO Kz3s9p3p09DRafZGoxocs9sBqbRppc7z+xFgodgSFNOCNl8DSZEmzlhkqr9cY7KL eVytwHZrRnKqufHQCNCNz5R7lLAJ/0/KDvv/5TyAe6dPQjZCpMZYIqaJvjqNmAxr IH/fQ+cTc2MohywfWA8CUgxHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYcFuE38d TA1pi1MQAOVkovQ+4wAwHwYDVR0jBBgwFoAUVTOnxXv02x5Tj5534LSGi4+QxYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NkZBLzlDNTJBN0U4ODRD OTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRPbnhYdjAyeDVUajU1MzRMU0dpNC1ReFlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NkZBLzlDNTJBN0U4ODRDOTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1 VGo1NTM0TFNHaTQtUXhZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJLeHZwMOOuoza4xnYWmEdlvcv4KWUKIbOWHao2wWlGq8QeiULQKhpq yqEWQ9qY8wKlM7LII0nGJ/uDrkLAf8/QH8ZgOC0Ctcny8BwbdMBvpTlRXj45Qeac lZA8XPb/rtY4aCopBlC8m4UYELcBH65xfxi+KGLgXA3nLydKSWRLq6/idKqLmxv6 fy0WwDyAVOa61lpj1bgZF3VaujUbAHcYWEyn+zdSko4SZftobpuLUzboNiqnPWHA VcG7gTRympo8OU3EmsY4iFJ8Ox7Ncvt1UgDrnX3k8OuDjjBQjHYCiX1Vmta35j9X l2hPFywu1NfoTUTv5rczRISZ8ts+jyg= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org