$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: bsFg+jbDoaHWN+Kt3iIODXTqschA3u2KGTiM2FXoUL8= Subject key identifier: 61:3D:47:75:39:32:CF:AE:89:98:FB:A3:5B:B5:06:5A:8A:A9:C3:0D Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 0119 Signing time: Sat 23 Nov 2024 02:59:46 +0000 Manifest this update: Sat 23 Nov 2024 02:59:45 +0000 Manifest next update: Sat 30 Nov 2024 02:59:45 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: yj372H3/bSSsBqQ1DDOpmiOS79yxYaH1CIlTj0sztWI=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: 6nT4G6m4+Q+TudjCN47uVHfhSNYlhZS8cRYj6dtcWvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Nov 23 02:59:45 2024 GMT Not After : Nov 30 02:59:45 2024 GMT Subject: CN=67414521-208b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:c9:6a:bf:fd:00:ac:16:4c:bc:20:b0:72: 4a:f2:47:41:a9:16:e4:5c:ac:49:12:4a:f2:bf:a0: af:2c:1c:31:b2:90:f5:35:78:d9:74:b4:bb:56:46: 60:ec:8a:06:6c:32:09:db:43:8e:de:84:2b:7f:05: c3:e7:af:a2:47:f9:1d:90:9a:ec:3c:65:08:62:46: 6a:01:c3:05:ec:ad:81:5d:27:b8:7b:43:82:28:54: 77:d4:d3:95:13:0f:2d:dd:08:63:18:dc:c8:28:28: d2:6d:83:9f:ad:3f:10:28:24:4b:e7:ff:94:1c:cb: 5f:18:73:fd:e3:c7:14:39:53:a3:90:fd:53:b0:14: 6d:98:c7:21:9d:d0:a3:3a:51:3b:72:4e:a1:b4:f8: 45:01:4e:db:03:dc:ff:a5:61:dd:02:72:c4:fd:85: 60:08:1e:23:08:72:81:1a:f3:c7:c7:67:58:3d:33: d5:c8:27:0b:78:06:50:27:b5:df:fd:49:79:e3:0b: 8e:be:8e:5b:44:08:40:24:2b:3e:6a:bb:ec:8a:9e: b2:8d:2c:ff:53:1d:ee:4d:c5:b1:d5:ea:e1:87:56: 8a:16:b9:f5:b0:4c:3f:cf:11:8b:e7:a0:db:f5:a2: c7:6d:0d:ab:a0:c9:a5:ae:ff:2c:3c:80:12:9b:fc: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:47:75:39:32:CF:AE:89:98:FB:A3:5B:B5:06:5A:8A:A9:C3:0D X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5a:54:ba:7d:0b:1d:fb:f4:7a:21:8c:eb:9c:11:81:62:82: 27:d7:c8:07:b6:5b:96:46:56:03:39:3a:b1:89:ca:21:d8:2b: f3:0a:fa:88:60:65:ae:5b:d2:83:ea:52:6f:31:c0:47:58:ec: 4e:34:60:47:a5:b7:27:e0:c8:c9:5e:7a:6c:b0:0a:e4:1d:c8: 55:68:3d:40:0b:76:84:cf:a5:ee:bd:45:c7:3f:db:f6:49:5e: 64:0f:79:67:8c:eb:6d:54:9e:88:8f:25:a7:f4:f8:50:8c:80: e8:e2:da:9b:52:5d:4b:57:02:41:a5:d6:2c:1c:ae:e8:5b:82: 53:c7:25:be:7b:7e:d0:3d:7d:a9:72:ee:26:f2:f3:75:d9:eb: 1f:79:53:2f:5a:d5:1c:cf:bb:4b:1c:70:49:83:e3:1e:a0:51: a3:73:3d:0e:d6:d2:ca:15:0e:d2:77:84:e5:59:ff:11:df:d2: de:39:d8:e9:55:a5:6c:c3:ba:f3:e5:30:74:04:4b:ec:77:95: 35:55:67:6b:c2:15:26:1c:f3:2a:38:5d:e0:72:bb:88:a3:e4: 2d:a7:cf:80:55:63:da:1e:2a:44:59:9e:e2:31:04:54:41:7a: 89:23:4b:d7:b3:68:1e:9f:a8:ed:f2:25:44:5a:3e:33:b6:32: c8:3c:71:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjQxMTIzMDI1OTQ1WhcNMjQxMTMwMDI1OTQ1WjAYMRYwFAYD VQQDEw02NzQxNDUyMS0yMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpfJar/9AKwWTLwgsHJK8kdBqRbkXKxJEkryv6CvLBwxspD1NXjZdLS7VkZg 7IoGbDIJ20OO3oQrfwXD56+iR/kdkJrsPGUIYkZqAcMF7K2BXSe4e0OCKFR31NOV Ew8t3QhjGNzIKCjSbYOfrT8QKCRL5/+UHMtfGHP948cUOVOjkP1TsBRtmMchndCj OlE7ck6htPhFAU7bA9z/pWHdAnLE/YVgCB4jCHKBGvPHx2dYPTPVyCcLeAZQJ7Xf /Ul54wuOvo5bRAhAJCs+arvsip6yjSz/Ux3uTcWx1erhh1aKFrn1sEw/zxGL56Db 9aLHbQ2roMmlrv8sPIASm/w16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE9R3U5 Ms+uiZj7o1u1BlqKqcMNMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhWlS6fQsd+/R6IYzrnBGBYoIn18gHtluWRlYDOTqxicoh2CvzCvqI YGWuW9KD6lJvMcBHWOxONGBHpbcn4MjJXnpssArkHchVaD1AC3aEz6XuvUXHP9v2 SV5kD3lnjOttVJ6IjyWn9PhQjIDo4tqbUl1LVwJBpdYsHK7oW4JTxyW+e37QPX2p cu4m8vN12esfeVMvWtUcz7tLHHBJg+MeoFGjcz0O1tLKFQ7Sd4TlWf8R39LeOdjp VaVsw7rz5TB0BEvsd5U1VWdrwhUmHPMqOF3gcruIo+Qtp8+AVWPaHipEWZ7iMQRU QXqJI0vXs2gen6jt8iVEWj4ztjLIPHGF -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org