$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: R3TS5y6K67NH+CRfWuN2Fq7Tenr6IM82Y+MCRIr8zVU= Subject key identifier: C8:44:19:80:F7:46:DA:BF:28:3B:27:F2:20:5A:4F:EC:DC:43:3C:9C Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: B4 Signing time: Sat 23 Nov 2024 04:08:41 +0000 Manifest this update: Sat 23 Nov 2024 04:08:40 +0000 Manifest next update: Sat 30 Nov 2024 04:08:40 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: FQaH2iylbfFYUR00xfukDh/0lUEYbrdU8Kt2DxB9iTM=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: A0JmkTbfmj2AedjF+vTmvNCI/B0QxfMJLjaS/tfti1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Nov 23 04:08:40 2024 GMT Not After : Nov 30 04:08:40 2024 GMT Subject: CN=67415549-07e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:a9:46:b9:03:01:f6:89:32:5c:97:fb:b7: 37:02:ec:c4:2e:86:aa:3e:b3:63:ec:2b:a6:e0:10: ee:cf:a4:4e:a4:c8:dc:0f:95:12:6d:5e:0f:76:dd: 05:92:4b:f4:78:a8:63:11:39:8f:87:b9:3e:f7:f0: b6:d3:43:fe:06:29:d7:70:12:5d:39:6b:8b:ae:a6: b6:90:78:ed:47:9e:c7:fd:80:5d:af:2a:84:32:3e: c7:5f:cf:6d:10:87:8a:f3:21:8e:5f:70:f7:03:a1: 58:6e:0f:31:8a:4d:a7:87:71:cd:f4:41:56:98:1b: 15:52:a9:25:c2:ae:34:51:d8:d7:d1:87:73:ef:c0: 1f:ab:9e:80:9a:44:15:d5:29:6e:58:68:90:2f:8b: b0:cb:93:ea:58:a9:94:f6:f2:36:e1:da:a6:e0:b9: 8d:48:03:78:01:45:14:06:bf:14:bd:a9:93:b7:3a: ba:b1:21:7f:74:0f:09:98:5e:54:4f:87:83:ae:32: b9:61:8d:ab:af:f5:9b:1b:81:6d:ea:bc:7c:5d:de: 78:29:b1:80:7e:33:8a:b4:aa:81:2a:fb:b4:8f:8b: 86:ff:4f:92:5f:78:9b:39:bd:2f:b2:d9:c4:b7:f0: 44:72:79:03:6b:c4:d2:29:1d:69:51:c9:3a:e8:bf: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:44:19:80:F7:46:DA:BF:28:3B:27:F2:20:5A:4F:EC:DC:43:3C:9C X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f6:2e:46:9b:1e:6b:60:14:b5:fb:c1:cb:2e:a9:f6:fc:19: 85:46:3a:61:69:16:07:05:3d:91:55:c6:4e:5e:e2:02:6e:9b: e1:0a:86:23:8e:1a:5f:03:c4:cc:c5:2e:22:8a:60:30:8b:81: f9:f7:11:37:60:60:1a:1d:3c:c3:f8:70:39:63:71:99:3d:cb: 6b:56:e1:83:72:a9:51:99:44:34:41:e0:57:4b:42:53:93:ff: 3b:7b:5b:42:b5:56:7c:80:52:29:42:95:d7:cd:bc:ea:83:c9: 6f:67:8d:51:b0:2e:e3:92:9c:cd:16:c9:c5:73:5c:e5:80:8a: 04:6a:78:66:a7:01:db:68:7c:c7:01:e1:93:96:94:64:5e:c3: c9:1a:3b:2d:aa:1b:7c:6e:86:87:c7:60:b9:f6:4c:af:2c:0e: fa:dc:ad:5f:37:b4:af:7e:30:0d:b2:ca:bc:fd:aa:14:f9:70: 6e:84:8b:5f:5e:95:4a:e1:3b:7e:5a:c3:09:1a:c2:12:8b:a1: 61:5d:00:95:81:11:85:9c:46:3e:02:a7:e4:29:5e:9c:bf:2d: ff:97:8c:6d:84:35:db:9f:6f:44:f8:ed:0a:72:cc:9d:db:a0: d7:38:a3:28:0e:ba:9e:0d:61:20:55:7e:90:ad:9b:a1:ad:9d: d3:ef:fd:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjQxMTIzMDQwODQwWhcNMjQxMTMwMDQwODQwWjAYMRYwFAYD VQQDEw02NzQxNTU0OS0wN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybqpRrkDAfaJMlyX+7c3AuzELoaqPrNj7Cum4BDuz6ROpMjcD5USbV4Pdt0F kkv0eKhjETmPh7k+9/C200P+BinXcBJdOWuLrqa2kHjtR57H/YBdryqEMj7HX89t EIeK8yGOX3D3A6FYbg8xik2nh3HN9EFWmBsVUqklwq40UdjX0Ydz78Afq56AmkQV 1SluWGiQL4uwy5PqWKmU9vI24dqm4LmNSAN4AUUUBr8UvamTtzq6sSF/dA8JmF5U T4eDrjK5YY2rr/WbG4Ft6rx8Xd54KbGAfjOKtKqBKvu0j4uG/0+SX3ibOb0vstnE t/BEcnkDa8TSKR1pUck66L+E3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhEGYD3 Rtq/KDsn8iBaT+zcQzycMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA9i5Gmx5rYBS1+8HLLqn2/BmFRjphaRYHBT2RVcZOXuICbpvhCoYj jhpfA8TMxS4iimAwi4H59xE3YGAaHTzD+HA5Y3GZPctrVuGDcqlRmUQ0QeBXS0JT k/87e1tCtVZ8gFIpQpXXzbzqg8lvZ41RsC7jkpzNFsnFc1zlgIoEanhmpwHbaHzH AeGTlpRkXsPJGjstqht8boaHx2C59kyvLA763K1fN7SvfjANssq8/aoU+XBuhItf XpVK4Tt+WsMJGsISi6FhXQCVgRGFnEY+AqfkKV6cvy3/l4xthDXbn29E+O0Kcsyd 26DXOKMoDrqeDWEgVX6QrZuhrZ3T7/0K -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org