$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: 6JIir4qayAwVgDwFfZUeWcZKPKuGZ9uBI4k+nxQRfuI= Subject key identifier: E9:35:36:C9:E4:17:C4:4C:8F:C2:EB:3A:1A:D1:C4:2A:EC:CA:3E:A1 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0ADE Signing time: Fri 22 Nov 2024 19:07:24 +0000 Manifest this update: Fri 22 Nov 2024 19:07:24 +0000 Manifest next update: Fri 29 Nov 2024 19:07:24 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: qt8s7ognUD0yLJb2TQ4C6rWfyvPLuFDCoy4aLZz7Seg=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: srLpp+xocz4bwmTO830ebrOgQWtT6RHMkR4y8UuRo2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Nov 22 19:07:24 2024 GMT Not After : Nov 29 19:07:24 2024 GMT Subject: CN=6740d66c-76e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:f4:d0:f1:6f:28:9b:fa:c2:9d:6a:a8:87: a7:93:f4:d0:4e:ce:f3:7a:29:dc:35:62:6d:37:36: 50:c6:2a:e1:de:6a:3a:49:ae:89:72:d4:79:5e:7d: 9b:71:df:97:ee:08:11:21:cc:ec:f3:b4:8f:16:aa: d7:1d:f5:11:32:f0:14:81:bf:69:12:60:21:a5:a0: fd:3d:4e:e4:81:ab:bc:69:31:45:ac:86:06:e0:cd: d5:6e:cc:15:82:96:df:48:a7:0f:96:93:47:1a:bd: 7f:3a:e2:62:3d:a0:cb:df:a5:ec:8a:dd:3a:67:8c: 1b:a5:00:59:52:a6:88:9e:c3:9e:ac:66:2b:0a:77: 86:f7:93:7e:81:43:06:48:ce:ff:83:fb:32:7c:2b: 95:23:cb:88:f4:ce:54:71:e9:ff:2a:49:34:1d:87: 62:07:53:00:7d:dd:37:0a:aa:1a:03:b6:8e:2d:3a: 6b:5e:81:a1:d4:9b:dd:83:f4:35:fc:1f:a1:e1:b4: 70:55:e8:41:7f:d6:f5:40:e9:5d:d6:71:58:43:74: 4d:6e:15:c4:83:d1:dc:aa:5a:17:8a:3c:50:49:7a: c8:2e:6b:7e:3e:c1:77:3e:60:a9:63:ca:32:fb:13: 97:de:4c:ca:b4:86:5c:fa:5e:5d:7c:87:55:6f:be: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:36:C9:E4:17:C4:4C:8F:C2:EB:3A:1A:D1:C4:2A:EC:CA:3E:A1 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b7:f8:c5:de:83:9a:1f:e1:2a:46:e7:15:d3:21:c6:fb:39: db:c2:15:c0:c2:3f:53:38:ed:14:1c:91:74:9e:9b:8b:a1:7e: 3f:37:11:5e:d1:cd:60:be:d1:81:58:cc:d4:fe:99:fe:6b:57: 5e:80:30:d1:8f:57:d9:06:64:03:68:11:f9:5e:19:34:a8:26: d7:bb:21:ed:cc:ee:36:8c:1c:0d:09:d0:c3:32:80:eb:6e:6c: bb:41:db:c1:5d:3f:87:c1:36:95:7b:10:c9:7a:ef:a7:8a:56: e8:e4:e4:c4:4a:60:30:91:39:c0:63:c8:12:44:ec:f6:a7:3c: 16:16:80:c9:28:bb:06:90:3f:98:da:33:b1:3b:4f:ae:5f:bf: 57:89:a2:01:b9:cb:0b:ac:79:e6:13:de:54:68:2e:ba:e1:ab: 9d:92:61:5f:76:69:12:11:f7:50:f7:52:8e:2d:09:dc:db:c1: fe:0f:23:d0:35:c5:d4:63:b5:dc:20:ae:ca:95:21:1c:e0:1e: 68:b0:c6:f9:cf:2d:19:fa:49:4c:51:c2:06:dc:ee:1b:89:9a: ca:ec:0f:66:46:02:f6:f1:7f:9f:dd:32:e4:cc:5a:62:f5:05: e5:f9:3b:56:5d:9d:ec:a3:a0:d0:d9:8b:bb:62:e3:5d:c7:8b: 5b:23:10:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjQxMTIyMTkwNzI0WhcNMjQxMTI5MTkwNzI0WjAYMRYwFAYD VQQDEw02NzQwZDY2Yy03NmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MH00PFvKJv6wp1qqIenk/TQTs7zeincNWJtNzZQxirh3mo6Sa6JctR5Xn2b cd+X7ggRIczs87SPFqrXHfURMvAUgb9pEmAhpaD9PU7kgau8aTFFrIYG4M3VbswV gpbfSKcPlpNHGr1/OuJiPaDL36Xsit06Z4wbpQBZUqaInsOerGYrCneG95N+gUMG SM7/g/syfCuVI8uI9M5Ucen/Kkk0HYdiB1MAfd03CqoaA7aOLTprXoGh1Jvdg/Q1 /B+h4bRwVehBf9b1QOld1nFYQ3RNbhXEg9HcqloXijxQSXrILmt+PsF3PmCpY8oy +xOX3kzKtIZc+l5dfIdVb75cbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk1Nsnk F8RMj8LrOhrRxCrsyj6hMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+t/jF3oOaH+EqRucV0yHG+znbwhXAwj9TOO0UHJF0npuLoX4/NxFe 0c1gvtGBWMzU/pn+a1degDDRj1fZBmQDaBH5Xhk0qCbXuyHtzO42jBwNCdDDMoDr bmy7QdvBXT+HwTaVexDJeu+nilbo5OTESmAwkTnAY8gSROz2pzwWFoDJKLsGkD+Y 2jOxO0+uX79XiaIBucsLrHnmE95UaC664audkmFfdmkSEfdQ91KOLQnc28H+DyPQ NcXUY7XcIK7KlSEc4B5osMb5zy0Z+klMUcIG3O4biZrK7A9mRgL28X+f3TLkzFpi 9QXl+TtWXZ3so6DQ2Yu7YuNdx4tbIxD3 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org