$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: VOr2XItc5fp3na49xB2ZxlcR1seqgkkE9kII/R3eV7I= Subject key identifier: 25:64:4E:28:81:4F:CE:EC:9C:18:37:D8:39:B9:63:93:43:8B:04:DE Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 0522 Signing time: Fri 22 Nov 2024 23:11:49 +0000 Manifest this update: Fri 22 Nov 2024 23:11:49 +0000 Manifest next update: Fri 29 Nov 2024 23:11:49 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: 4/pgsqHZz9Aqgb6PeFvC+1ibbIrk0W5+ddzVSd3iztI=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: Nov 22 23:11:49 2024 GMT Not After : Nov 29 23:11:49 2024 GMT Subject: CN=67410fb5-b354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:1c:92:de:f2:93:ff:ba:20:78:1f:3c:c4: dc:4d:a9:60:c4:48:25:6a:9a:f0:de:8a:fc:8e:da: 46:49:da:f1:00:9b:03:69:69:a7:55:98:8a:85:36: 16:18:d0:90:53:6f:91:07:a3:68:56:d7:38:87:8f: 64:b5:7b:28:79:f9:38:ae:ce:02:18:79:30:fe:bf: db:6e:2c:b3:af:da:91:7d:d8:3b:3f:1b:35:d5:06: a5:3c:68:63:d4:b8:45:b1:66:f7:29:9c:82:ac:ef: 79:36:40:49:35:ec:a5:86:a9:d4:f9:52:f9:e4:d7: 95:91:2d:8b:ad:f8:3a:57:a8:04:29:0d:68:35:94: 3d:d2:ec:40:f0:08:6e:f0:a4:97:e4:09:b3:d4:ed: 65:6a:10:f0:3c:6b:5b:61:b8:5a:9f:1c:ee:12:8f: c0:e4:6a:04:a8:ff:f4:ad:5f:c4:06:09:f1:b3:8e: 8d:76:d4:c3:b1:7e:af:a5:da:e8:3f:07:3b:2b:2b: df:0a:91:4f:c5:08:76:2c:e8:8b:8c:d3:16:ba:2e: f3:ed:b5:ac:aa:fd:d7:90:04:2e:fb:5d:9f:62:4b: 71:46:2d:c1:73:bf:cb:dc:ee:64:47:f9:2f:63:cf: c9:19:3c:db:ce:d4:b1:7d:a4:60:bc:9d:26:ef:04: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:64:4E:28:81:4F:CE:EC:9C:18:37:D8:39:B9:63:93:43:8B:04:DE X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:50:d2:ee:a5:7f:9c:ca:d0:97:37:a9:97:ec:33:6b:ae:28: 87:02:b3:30:17:4f:46:eb:05:d6:73:b8:aa:a9:ef:78:05:07: 15:db:ef:37:b8:17:5b:c7:bf:c7:ef:c8:94:f4:4a:c7:41:2c: db:f0:69:e8:cc:cc:4f:3a:39:ea:67:06:96:04:49:14:cc:3d: 21:38:0a:c3:f0:9b:fd:0f:8b:1a:0f:99:fd:37:b5:ff:57:2f: c3:5b:93:42:45:01:2b:69:11:bc:e8:73:a6:92:fc:36:e2:a7: 11:a9:3f:45:00:a4:9c:6d:04:9e:72:d7:97:b5:c3:ea:8e:b0: 71:2d:ab:bc:73:52:c7:cf:84:43:f7:79:70:e8:57:29:f1:b7: 33:74:52:52:2f:7f:b1:1b:40:f4:e1:14:78:f6:c8:e2:6a:76: 67:93:d1:a7:c9:5a:d8:e9:15:a6:1e:89:18:15:ba:b7:bf:da: c6:a7:a3:e0:d9:52:85:a6:10:fc:22:77:2b:70:39:de:02:7d: 33:14:d7:6d:2b:d0:f5:00:22:af:84:ee:60:ea:58:15:63:23: e4:ac:01:15:7e:fa:8e:61:37:88:d3:53:0b:8c:52:fe:bb:6c: 5b:b1:1b:b3:66:d0:a8:b1:53:22:1d:23:d5:f2:ec:95:8a:36: d1:ce:fc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjQxMTIyMjMxMTQ5WhcNMjQxMTI5MjMxMTQ5WjAYMRYwFAYD VQQDEw02NzQxMGZiNS1iMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb8ckt7yk/+6IHgfPMTcTalgxEglaprw3or8jtpGSdrxAJsDaWmnVZiKhTYW GNCQU2+RB6NoVtc4h49ktXsoefk4rs4CGHkw/r/bbiyzr9qRfdg7Pxs11QalPGhj 1LhFsWb3KZyCrO95NkBJNeylhqnU+VL55NeVkS2Lrfg6V6gEKQ1oNZQ90uxA8Ahu 8KSX5Amz1O1lahDwPGtbYbhanxzuEo/A5GoEqP/0rV/EBgnxs46NdtTDsX6vpdro Pwc7KyvfCpFPxQh2LOiLjNMWui7z7bWsqv3XkAQu+12fYktxRi3Bc7/L3O5kR/kv Y8/JGTzbztSxfaRgvJ0m7wRBJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVkTiiB T87snBg32Dm5Y5NDiwTeMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYUNLupX+cytCXN6mX7DNrriiHArMwF09G6wXWc7iqqe94BQcV2+83 uBdbx7/H78iU9ErHQSzb8GnozMxPOjnqZwaWBEkUzD0hOArD8Jv9D4saD5n9N7X/ Vy/DW5NCRQEraRG86HOmkvw24qcRqT9FAKScbQSecteXtcPqjrBxLau8c1LHz4RD 93lw6Fcp8bczdFJSL3+xG0D04RR49sjianZnk9GnyVrY6RWmHokYFbq3v9rGp6Pg 2VKFphD8IncrcDneAn0zFNdtK9D1ACKvhO5g6lgVYyPkrAEVfvqOYTeI01MLjFL+ u2xbsRuzZtCosVMiHSPV8uyVijbRzvwo -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org