$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: fGD+3OZPRx/27333ybfExMZB3KfoK6fZcbGOhHe/zgo= Subject key identifier: 59:2B:AD:19:C2:EB:C9:D5:45:FD:AE:F2:61:15:73:F2:4D:3B:F7:36 Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0AA5 Signing time: Fri 22 Nov 2024 19:15:55 +0000 Manifest this update: Fri 22 Nov 2024 19:15:54 +0000 Manifest next update: Fri 29 Nov 2024 19:15:54 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: Z3H3m9YNSvZkiQQMdzPJ01R2H/jWOkk0CauGm9qI2gw=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: uo0CqqDq1LW4OE16oHJh3v7l3D+UDenz/raY8uxIHFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: Nov 22 19:15:54 2024 GMT Not After : Nov 29 19:15:54 2024 GMT Subject: CN=6740d86b-f777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:bc:42:55:8d:14:5d:a8:3a:a9:63:e2:32: 59:0e:3f:0d:00:35:7d:27:67:83:b8:17:f7:9d:a7: 06:4f:e3:60:9f:95:63:7a:bb:53:ce:d8:4b:ad:f5: 6b:dd:fb:46:a7:2d:b2:3c:9a:d6:6b:ad:fd:59:c3: d7:b1:6b:31:ed:b0:77:d4:2c:ed:73:e2:a3:ef:42: fe:ed:a6:fc:15:7a:5c:d4:6b:3f:6f:3a:4e:36:52: 5f:92:5b:33:39:1c:8c:6f:0a:5f:94:02:be:59:8a: 7c:b8:a7:13:70:e8:3c:3b:de:95:2b:3a:9c:a3:83: 8e:35:50:de:0d:67:bf:d2:b8:5f:cd:f5:a4:ff:cf: 71:9c:b1:a3:87:29:1b:03:95:db:36:8d:f0:02:9b: 7b:88:7c:59:ff:f3:67:a8:00:ed:bd:45:1a:19:8a: 29:69:fb:ac:5b:ca:ac:e3:6e:d4:86:d1:0c:78:73: ea:7f:68:ee:fa:47:fc:06:c9:2c:13:2c:fd:27:90: be:fb:f2:83:d7:11:05:f3:8a:cb:74:81:1b:d1:67: 90:8e:c2:14:9c:98:ea:db:d9:32:36:b7:d6:b4:ba: 3c:3f:b8:b5:f3:09:7d:44:0f:8b:cb:e5:9f:c5:eb: 01:a1:58:ee:e4:cb:1a:0f:a0:11:99:4e:69:e6:4f: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:AD:19:C2:EB:C9:D5:45:FD:AE:F2:61:15:73:F2:4D:3B:F7:36 X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:58:35:50:4e:07:c1:f8:66:6d:c0:a3:5e:79:ea:9b:b4:a2: 8f:de:fb:c7:83:0f:d2:ab:7b:46:aa:f0:26:a1:c5:f6:f3:c5: bd:c9:c2:48:5c:06:f0:2d:c9:3d:61:9b:3b:a4:1a:23:13:21: 4d:82:ed:a9:ef:9e:ce:07:30:21:fe:0c:c3:f0:96:ab:0c:4e: a0:ad:f3:ad:03:0b:14:32:cd:ae:eb:1b:0d:81:29:70:86:55: 2e:32:cb:67:60:1a:28:55:d8:27:8d:15:65:4d:21:4f:85:e4: 72:e3:7f:28:aa:f4:3c:2a:ba:bd:4e:4e:e6:13:32:b1:31:53: 58:cc:1b:fe:ad:d5:4f:a1:c6:88:10:e3:2f:ed:94:c6:7a:29: 0f:d9:f6:11:65:2d:6e:14:5f:4a:25:3a:c8:1e:8c:29:26:ca: 82:78:51:a0:8e:eb:b8:a5:c9:7a:41:2c:cd:13:fa:16:e8:d7: 3e:9b:56:91:cb:cd:09:dd:d0:28:cf:58:02:3d:c4:70:ff:98: 33:9a:da:67:a5:5f:6b:c4:9d:78:2e:0a:55:cf:44:a4:5e:48: 4f:3e:0d:65:ac:6a:a8:55:ac:ac:a2:13:55:e0:10:0c:c7:cc: d7:77:69:fe:55:0d:d3:ba:8a:41:a5:84:a1:51:3f:0b:f2:78: bb:cf:c7:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjQxMTIyMTkxNTU0WhcNMjQxMTI5MTkxNTU0WjAYMRYwFAYD VQQDEw02NzQwZDg2Yi1mNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQm8QlWNFF2oOqlj4jJZDj8NADV9J2eDuBf3nacGT+Ngn5VjertTzthLrfVr 3ftGpy2yPJrWa639WcPXsWsx7bB31Cztc+Kj70L+7ab8FXpc1Gs/bzpONlJfklsz ORyMbwpflAK+WYp8uKcTcOg8O96VKzqco4OONVDeDWe/0rhfzfWk/89xnLGjhykb A5XbNo3wApt7iHxZ//NnqADtvUUaGYopafusW8qs427UhtEMeHPqf2ju+kf8Bsks Eyz9J5C++/KD1xEF84rLdIEb0WeQjsIUnJjq29kyNrfWtLo8P7i18wl9RA+Ly+Wf xesBoVju5MsaD6ARmU5p5k99qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkrrRnC 68nVRf2u8mEVc/JNO/c2MB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWDVQTgfB+GZtwKNeeeqbtKKP3vvHgw/Sq3tGqvAmocX288W9ycJI XAbwLck9YZs7pBojEyFNgu2p757OBzAh/gzD8JarDE6grfOtAwsUMs2u6xsNgSlw hlUuMstnYBooVdgnjRVlTSFPheRy438oqvQ8Krq9Tk7mEzKxMVNYzBv+rdVPocaI EOMv7ZTGeikP2fYRZS1uFF9KJTrIHowpJsqCeFGgjuu4pcl6QSzNE/oW6Nc+m1aR y80J3dAoz1gCPcRw/5gzmtpnpV9rxJ14LgpVz0SkXkhPPg1lrGqoVaysohNV4BAM x8zXd2n+VQ3TuopBpYShUT8L8ni7z8fT -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org