$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft File: VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json) Hash identifier: tuEJEcid9pGR8Y7iYSpQ70SsinH18RzXfyAoZdWAFvw= Subject key identifier: C2:D7:01:08:4A:B0:A9:FA:11:15:1D:32:FF:74:B4:1F:FF:93:91:CA Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27 Certificate issuer: /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft Manifest number: 24 Signing time: Sun 15 Sep 2024 10:16:01 +0000 Manifest this update: Sun 15 Sep 2024 10:16:00 +0000 Manifest next update: Sun 22 Sep 2024 10:16:00 +0000 Files and hashes: 1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: sMpXI1WraEC2QhIMP7Idxips8U2AYySCDRkiqYOu3T8=) 2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: Nou717qOczurdCcpUzy1PTlPyGqsvyRnk5UeNOA/5Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227 Validity Not Before: Sep 15 10:16:00 2024 GMT Not After : Sep 22 10:16:00 2024 GMT Subject: CN=66e6b3e1-25fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:98:d1:ae:e0:90:eb:f3:a2:2e:66:18:e6: e2:f5:d0:95:be:39:75:5c:25:64:05:32:36:cc:72: 68:28:e3:2c:ec:c7:f0:69:be:7c:78:fb:b5:62:2b: 86:42:c2:ff:b1:ee:9e:f4:53:9a:3a:77:e4:bf:0b: 80:d4:d6:9a:00:96:01:6c:8d:98:38:d4:b3:e6:b4: de:a6:1f:11:b2:d0:07:67:d9:5c:dc:c0:d0:3d:02: 21:0b:51:14:e0:6d:75:8b:fd:93:20:c0:02:4f:31: 81:71:87:54:55:a2:51:ec:12:54:f0:5e:d3:33:e8: 4d:dc:d2:75:dc:6a:55:62:4f:d3:5f:39:58:bb:ed: 51:a5:78:e2:37:33:10:22:c6:50:05:be:15:8f:af: 33:25:df:79:2e:85:db:c7:2f:4d:9b:68:1b:8f:79: db:ae:04:70:97:79:1e:a8:f9:a7:f7:10:20:0d:85: bf:3b:84:eb:8f:ba:41:40:b5:fe:8d:93:17:f4:3c: fa:37:7f:ab:9e:5c:bf:a4:b0:04:b0:d4:0c:2e:e0: 97:ca:5e:bf:0b:bb:14:06:e2:d5:db:c4:d2:45:9c: 72:6c:bb:16:31:f8:fd:4a:ea:dc:39:d8:e0:f7:de: 7f:79:56:7f:a9:5b:37:a0:8c:31:54:0b:f9:c6:33: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D7:01:08:4A:B0:A9:FA:11:15:1D:32:FF:74:B4:1F:FF:93:91:CA X509v3 Authority Key Identifier: keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:5a:36:53:7f:8a:f1:6e:50:2d:7b:2d:28:c5:b9:0c:29: 35:c9:b7:bc:c9:05:57:5d:7e:cf:81:bd:e8:3b:4a:d7:1b:64: 5f:e6:98:d9:9f:0a:3c:67:90:4e:b9:f9:72:bd:30:d8:2e:52: 37:48:0d:22:52:bc:12:d9:21:ee:a4:77:fc:54:25:a2:ef:29: 76:0f:bd:d9:1b:44:ea:9e:69:c8:2f:ba:50:e4:60:80:3b:17: 9c:19:28:e2:fb:1e:46:21:19:8a:c3:4c:65:e6:c7:65:d4:94: b2:d6:c9:d7:fc:d3:1c:97:ac:eb:ec:b9:1e:da:9d:fa:11:30: fd:a9:1a:02:ba:46:bb:3e:10:08:3a:8c:ac:9b:64:03:2a:b4: af:20:c7:3b:f1:46:23:2f:77:b7:df:fa:fe:ca:cd:ea:a0:59: 8d:b6:a6:32:37:7e:9e:c8:85:cc:51:8b:a7:84:f2:a6:95:9e: f2:27:05:5f:52:bf:b8:20:ca:92:c6:3d:62:22:84:a7:ce:a4: 1a:38:33:da:40:a3:e7:a1:44:10:aa:d5:e7:bf:13:65:ea:14: 9f:33:df:12:7b:2f:2f:84:cc:a4:53:96:78:cf:c5:45:40:fe: b7:e9:48:2e:a1:4f:80:f5:d5:f1:50:76:c9:08:0e:97:f6:ae: e0:9b:f5:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDE2NzExMC8GA1UEBRMoNTVBMzZERjI0ODRCQjQ2NUFDMzMwMTlDMDcwQjM5Mjc0 NTI0MDIyNzAeFw0yNDA5MTUxMDE2MDBaFw0yNDA5MjIxMDE2MDBaMBgxFjAUBgNV BAMTDTY2ZTZiM2UxLTI1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY0pjRruCQ6/OiLmYY5uL10JW+OXVcJWQFMjbMcmgo4yzsx/Bpvnx4+7ViK4ZC wv+x7p70U5o6d+S/C4DU1poAlgFsjZg41LPmtN6mHxGy0Adn2VzcwNA9AiELURTg bXWL/ZMgwAJPMYFxh1RVolHsElTwXtMz6E3c0nXcalViT9NfOVi77VGleOI3MxAi xlAFvhWPrzMl33kuhdvHL02baBuPeduuBHCXeR6o+af3ECANhb87hOuPukFAtf6N kxf0PPo3f6ueXL+ksASw1Awu4JfKXr8LuxQG4tXbxNJFnHJsuxYx+P1K6tw52OD3 3n95Vn+pWzegjDFUC/nGM4JBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwtcBCEqw qfoRFR0y/3S0H/+TkcowHwYDVR0jBBgwFoAUVaNt8khLtGWsMwGcBws5J0UkAicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MTY3L0I0MjI2N0Y0M0U4 RTExRUY5N0E4NTU3REM0RjlBRTAyL1ZhTnQ4a2hMdEdXc013R2NCd3M1SjBVa0Fp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmFOdDhraEx0R1dzTXdHY0J3czVKMFVrQWljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MTY3L0I0MjI2N0Y0M0U4RTExRUY5N0E4NTU3REM0RjlBRTAyL1ZhTnQ4a2hMdEdX c013R2NCd3M1SjBVa0FpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgVWjZTf4rxblAtey0oxbkMKTXJt7zJBVddfs+Bveg7StcbZF/mmNmf CjxnkE65+XK9MNguUjdIDSJSvBLZIe6kd/xUJaLvKXYPvdkbROqeacgvulDkYIA7 F5wZKOL7HkYhGYrDTGXmx2XUlLLWydf80xyXrOvsuR7anfoRMP2pGgK6Rrs+EAg6 jKybZAMqtK8gxzvxRiMvd7ff+v7KzeqgWY22pjI3fp7IhcxRi6eE8qaVnvInBV9S v7ggypLGPWIihKfOpBo4M9pAo+ehRBCq1ee/E2XqFJ8z3xJ7Ly+EzKRTlnjPxUVA /rfpSC6hT4D11fFQdskIDpf2ruCb9Xc= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:41 2024 by rpki-client on console-fra.rpki-client.org