$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: ivoPQNs9eAol2omn0FRSb88uRBkN/r5ugW1HMD1KCaw= Subject key identifier: F6:AA:87:9A:B7:6C:0B:F3:25:56:58:C0:DB:7D:C6:F6:C8:F6:BD:D9 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: 29 Signing time: Wed 23 Oct 2024 06:20:57 +0000 Manifest this update: Wed 23 Oct 2024 06:20:56 +0000 Manifest next update: Wed 30 Oct 2024 06:20:56 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: rjiNmyl2VvEl1TwRDwkM7XdFcScTp/9/8fGrjhRsA8w=) 2: 7353030A54A011EF9B989C26C4F9AE02.roa (hash: eDIrTrbi/eH1RWw6P5d60i7suEQMP1IIUZB1r0TxlNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Oct 23 06:20:56 2024 GMT Not After : Oct 30 06:20:56 2024 GMT Subject: CN=671895c9-b0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:fc:21:4b:5a:54:8d:b3:25:07:30:b7:29: 0f:4c:f3:5f:87:5d:54:59:74:22:6a:31:5c:69:4a: eb:fc:40:11:92:53:ec:1d:dc:9b:71:f1:87:6c:2a: be:04:58:ac:d9:6e:1a:cd:c8:c2:d4:7c:dd:73:fd: 41:9e:07:de:39:3f:0e:f6:7f:29:3a:f2:d1:b0:97: e4:01:b6:e7:36:19:91:ba:06:24:fc:e4:24:42:41: 13:47:87:38:b5:9a:66:41:92:6e:a5:65:87:c8:3e: 99:a6:03:b7:5a:86:f5:13:b6:83:15:06:11:4f:1f: 0c:5b:42:e1:62:94:85:17:7c:6d:f0:b8:15:44:b4: 7a:06:a5:bd:6a:df:96:da:58:e7:77:d0:c8:4a:23: ff:f4:5a:b4:5e:f6:14:77:84:a8:20:c6:6d:42:91: 52:91:4c:9a:ad:f7:5c:56:60:08:e8:ae:6f:63:50: de:83:3e:e2:72:07:66:ae:04:bb:91:03:e0:2e:2f: 4f:57:d6:9e:d0:ec:62:82:42:e6:3b:bd:a1:12:5c: 72:0b:8e:36:88:94:16:37:97:40:52:a0:2b:21:ff: 12:b2:cd:ec:56:52:86:99:5d:aa:f7:f1:97:d9:66: 01:95:f0:eb:0b:65:63:8b:52:2c:04:a8:58:6c:5e: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AA:87:9A:B7:6C:0B:F3:25:56:58:C0:DB:7D:C6:F6:C8:F6:BD:D9 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3f:c6:64:27:70:80:29:2a:a8:be:ad:02:40:8b:c7:bc:df: 5b:dc:d3:f1:19:4f:81:05:df:3f:e7:3c:de:3d:1e:53:49:09: b2:53:3c:52:88:73:26:c0:9e:87:72:dd:5e:6b:74:c4:84:ee: f5:6c:d5:bf:7c:83:b9:bf:bf:44:47:fc:59:9c:1f:61:42:91: 1c:c1:76:c2:63:7a:d1:45:eb:98:0b:c1:19:02:a2:2d:61:96: c3:13:16:75:8d:e9:e2:f3:1a:09:69:45:a9:cf:0f:f3:70:25: 51:09:64:21:f1:77:a1:d4:1d:ae:e8:f8:55:f5:e0:16:cd:11: e3:53:c7:84:86:73:50:67:7b:68:76:fb:d3:83:58:91:61:d2: c2:62:15:29:e1:03:20:d3:2b:5f:06:53:28:b4:91:a0:95:6e: 6c:06:8c:36:52:81:66:78:62:e0:33:4b:cb:49:d1:24:61:b6: 55:a7:cf:96:b6:9e:ca:45:52:77:71:38:39:0d:d1:68:8b:59: 4e:4a:d0:bb:1a:19:0c:9b:da:97:c7:f5:6e:d3:73:26:ba:c5: fc:33:78:f0:00:02:13:16:3b:09:26:7d:8c:db:b4:a3:f2:ca: 5d:a4:23:ef:67:9f:82:9b:77:85:65:cf:39:35:7d:5a:a7:e0: 49:e3:1f:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0VCOTExMC8GA1UEBRMoQkMwQkY4RjlENzNCN0U4Q0ZDQzhFQTVFOUY0MkQ3QTg1 NTIzM0Q3QzAeFw0yNDEwMjMwNjIwNTZaFw0yNDEwMzAwNjIwNTZaMBgxFjAUBgNV BAMTDTY3MTg5NWM5LWIwYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz+/whS1pUjbMlBzC3KQ9M81+HXVRZdCJqMVxpSuv8QBGSU+wd3Jtx8YdsKr4E WKzZbhrNyMLUfN1z/UGeB945Pw72fyk68tGwl+QBtuc2GZG6BiT85CRCQRNHhzi1 mmZBkm6lZYfIPpmmA7dahvUTtoMVBhFPHwxbQuFilIUXfG3wuBVEtHoGpb1q35ba WOd30MhKI//0WrRe9hR3hKggxm1CkVKRTJqt91xWYAjorm9jUN6DPuJyB2auBLuR A+AuL09X1p7Q7GKCQuY7vaESXHILjjaIlBY3l0BSoCsh/xKyzexWUoaZXar38ZfZ ZgGV8OsLZWOLUiwEqFhsXvvdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9qqHmrds C/MlVljA233G9sj2vdkwHwYDVR0jBBgwFoAUvAv4+dc7foz8yOpen0LXqFUjPXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRUI5L0ZDRDU1QzBBNTQ5 RjExRUY4NkFFNTkyMkM0RjlBRTAyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkF2NC1kYzdmb3o4eU9wZW4wTFhxRlVqUFh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RUI5L0ZDRDU1QzBBNTQ5RjExRUY4NkFFNTkyMkM0RjlBRTAyL3ZBdjQtZGM3Zm96 OHlPcGVuMExYcUZValBYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIg/xmQncIApKqi+rQJAi8e831vc0/EZT4EF3z/nPN49HlNJCbJTPFKI cybAnody3V5rdMSE7vVs1b98g7m/v0RH/FmcH2FCkRzBdsJjetFF65gLwRkCoi1h lsMTFnWN6eLzGglpRanPD/NwJVEJZCHxd6HUHa7o+FX14BbNEeNTx4SGc1Bne2h2 +9ODWJFh0sJiFSnhAyDTK18GUyi0kaCVbmwGjDZSgWZ4YuAzS8tJ0SRhtlWnz5a2 nspFUndxODkN0WiLWU5K0LsaGQyb2pfH9W7Tcya6xfwzePAAAhMWOwkmfYzbtKPy yl2kI+9nn4Kbd4Vlzzk1fVqn4EnjHyM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org