$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: DNGCr5or4TdRfpqL4tP1PPFFqjVvKAjStN9X4IPZlOM= Subject key identifier: 04:61:AF:65:3E:B5:9B:3C:B4:FC:7C:13:19:5B:D9:CD:AD:C1:6B:8F Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: 3B Signing time: Thu 21 Nov 2024 05:33:30 +0000 Manifest this update: Thu 21 Nov 2024 05:33:30 +0000 Manifest next update: Thu 28 Nov 2024 05:33:30 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: al+EZNAzRMddAUKJPxc77SUjXye0ihQxN6WRPPAS6qU=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Nov 21 05:33:30 2024 GMT Not After : Nov 28 05:33:30 2024 GMT Subject: CN=673ec62a-a246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:6b:a0:11:ea:38:cf:54:26:53:1c:1f:a1: b3:ae:08:55:41:30:53:d4:ed:2d:76:db:bb:4d:93: 53:fe:6d:08:87:29:0e:34:b5:f0:29:72:17:71:04: e1:e8:f6:d3:1c:01:8d:b8:8e:d5:49:1e:79:0b:d5: b9:8e:98:5b:58:01:d5:5c:20:43:09:05:dc:e4:cb: 4b:1f:d8:4b:82:bc:b0:75:2d:ef:82:a6:e4:c8:68: a8:80:bc:c1:59:e6:f5:d3:6f:cc:9d:00:de:3e:24: 8e:48:4a:0f:47:10:d8:e5:aa:c0:f6:87:09:f7:85: 7b:f1:25:63:78:1b:33:ca:06:71:cc:52:80:fa:fa: 36:f0:10:a1:32:1f:79:eb:43:0d:5a:e7:2b:e7:c8: 20:05:df:24:3a:da:79:bb:f0:47:90:b7:3f:86:57: 23:b4:30:a6:c3:2a:80:de:17:a0:e3:ad:2a:bc:13: b0:7a:d3:77:96:21:a0:d4:e8:a7:62:65:99:86:07: 89:ca:a3:40:94:c2:7d:ee:f6:f5:7c:d3:4a:d4:11: af:45:20:94:b3:97:c8:91:cb:b5:f9:82:a3:69:a6: 74:b8:dc:79:da:40:43:31:9c:04:b6:e8:b2:be:f0: cf:89:70:f4:0f:ea:50:e2:9a:34:fe:0c:de:7c:4b: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:61:AF:65:3E:B5:9B:3C:B4:FC:7C:13:19:5B:D9:CD:AD:C1:6B:8F X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:26:53:d3:ad:0d:a1:eb:31:43:17:71:43:cc:70:13:eb:d1: 90:bd:d1:0c:b7:00:47:32:02:99:65:9a:b0:64:0a:86:84:71: 53:a6:b2:7a:4b:69:82:f6:af:1c:07:33:99:59:70:16:a0:59: 2a:92:50:16:9f:7d:80:08:36:84:c3:d2:6b:44:21:ae:b5:2b: 5c:9c:91:12:46:03:8b:f2:47:d7:54:49:f0:33:7f:0e:34:9f: 30:b7:df:63:d2:d4:96:4a:9d:ba:75:29:cd:0f:4a:3b:04:f9: dc:f9:d2:75:c1:06:b1:cf:aa:2d:4a:ff:52:ad:e4:36:c6:8b: 3a:ec:ca:be:84:2a:1a:c8:89:79:3d:0c:50:ff:af:88:28:2e: 67:60:34:30:32:4c:ee:f0:8f:ba:0b:de:6f:4b:58:13:b3:cf: 08:80:4f:76:d9:4b:73:f9:78:35:e9:b9:1b:5f:50:58:77:06: f7:c0:ec:05:9a:1c:90:e8:51:1b:a5:9b:74:6f:60:ae:0a:6a: 59:6a:0b:d6:1b:02:8b:a4:54:08:90:da:f7:cd:9c:1a:d0:8c: 48:c1:36:31:76:7c:fe:32:ea:b1:14:d1:18:f2:ec:3d:f5:b9: 41:f7:45:55:e7:36:c9:0e:93:0e:9d:f3:8a:3a:24:02:18:0a: e2:95:37:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkNCQjExMC8GA1UEBRMoQkU5MUMwNUUyMThDN0U2NkVBNkY5NEY5RDI0NTc3NzA0 MTkxQkRFMjAeFw0yNDExMjEwNTMzMzBaFw0yNDExMjgwNTMzMzBaMBgxFjAUBgNV BAMTDTY3M2VjNjJhLWEyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxl2ugEeo4z1QmUxwfobOuCFVBMFPU7S1227tNk1P+bQiHKQ40tfApchdxBOHo 9tMcAY24jtVJHnkL1bmOmFtYAdVcIEMJBdzky0sf2EuCvLB1Le+CpuTIaKiAvMFZ 5vXTb8ydAN4+JI5ISg9HENjlqsD2hwn3hXvxJWN4GzPKBnHMUoD6+jbwEKEyH3nr Qw1a5yvnyCAF3yQ62nm78EeQtz+GVyO0MKbDKoDeF6DjrSq8E7B603eWIaDU6Kdi ZZmGB4nKo0CUwn3u9vV800rUEa9FIJSzl8iRy7X5gqNppnS43HnaQEMxnAS26LK+ 8M+JcPQP6lDimjT+DN58S5GbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBGGvZT61 mzy0/HwTGVvZza3Ba48wHwYDVR0jBBgwFoAUvpHAXiGMfmbqb5T50kV3cEGRveIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGQ0JCLzU0RDIzRjQ2NTMw RjExRUY5OUM4OEQwRkM0RjlBRTAyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZl SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnBIQVhpR01mbWJxYjVUNTBrVjNjRUdSdmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Q0JCLzU0RDIzRjQ2NTMwRjExRUY5OUM4OEQwRkM0RjlBRTAyL3ZwSEFYaUdNZm1i cWI1VDUwa1YzY0VHUnZlSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkmU9OtDaHrMUMXcUPMcBPr0ZC90Qy3AEcyApllmrBkCoaEcVOmsnpL aYL2rxwHM5lZcBagWSqSUBaffYAINoTD0mtEIa61K1yckRJGA4vyR9dUSfAzfw40 nzC332PS1JZKnbp1Kc0PSjsE+dz50nXBBrHPqi1K/1Kt5DbGizrsyr6EKhrIiXk9 DFD/r4goLmdgNDAyTO7wj7oL3m9LWBOzzwiAT3bZS3P5eDXpuRtfUFh3BvfA7AWa HJDoURulm3RvYK4KallqC9YbAoukVAiQ2vfNnBrQjEjBNjF2fP4y6rEU0Rjy7D31 uUH3RVXnNskOkw6d84o6JAIYCuKVN0s= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org