$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: ypJsb3wIYBDnu4cQ+R59o6lZhU9GRPpvkhBwxft7/qU= Subject key identifier: 3D:B7:6B:9B:3F:E2:B8:F8:48:7E:0C:B5:F4:05:D8:14:5D:6C:AF:08 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 11F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 11C3 Signing time: Wed 20 Nov 2024 17:10:14 +0000 Manifest this update: Wed 20 Nov 2024 17:10:13 +0000 Manifest next update: Wed 27 Nov 2024 17:10:13 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: 6Pkpq6URiMcQGasRxuWjw3tagM+5uzgz4+8GFChXFc0=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: idPv6x/QADhZ/UKyaBsX5e2LFcTraLnSbZhm1viIkJg=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: SC47Pi3yfxTaNCfUsGMbFo8YiOdSrdqvKNeM9rkjgN8=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: WUKkOVjUPJeB8A93G+CWAsXxkjWP1idr48nPvgJFAq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4596 (0x11f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Nov 20 17:10:13 2024 GMT Not After : Nov 27 17:10:13 2024 GMT Subject: CN=673e17f6-f5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:18:54:42:36:74:4a:b5:8d:67:f7:22:39: d6:37:61:38:7e:a0:54:63:0a:6f:ae:9a:da:47:4c: 7d:1b:3c:f8:be:96:0d:60:6a:2c:53:82:09:93:6d: 73:05:26:4e:e3:9f:cd:c9:50:29:e4:0b:d8:ca:b7: a8:ab:e1:2a:f7:74:31:44:54:a1:cf:e9:6c:3e:16: 45:0e:0a:86:c7:19:27:8d:6b:92:02:ca:ae:97:4c: ad:7d:21:ee:5a:80:1f:13:4f:67:72:6a:5e:2d:6c: 53:d7:2d:48:4e:80:08:ec:b8:bb:50:8d:3e:95:4c: f4:4a:c3:88:2d:c1:b9:ec:c9:0f:62:66:3d:4d:3d: 1a:53:11:6e:e3:3e:89:8b:fe:39:f0:60:1f:5f:1e: f9:ae:29:15:70:5d:18:5a:76:60:c1:a6:af:97:bb: 1a:a7:db:44:59:15:15:47:42:69:73:08:33:81:f0: e1:e4:c8:4f:10:01:a2:c8:da:df:b6:a9:16:c5:e7: fc:72:28:6b:82:83:a4:58:a3:7a:ac:a6:68:8a:c0: 14:21:fe:c9:c0:f6:23:9a:36:e8:62:bd:ef:cf:cc: 23:e3:ab:47:31:44:9e:11:04:14:0e:35:29:eb:9d: 6b:6f:16:f7:2f:4b:d8:d2:4f:87:9d:84:8c:6d:9b: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B7:6B:9B:3F:E2:B8:F8:48:7E:0C:B5:F4:05:D8:14:5D:6C:AF:08 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:b2:18:13:54:a1:2e:64:e0:ff:f4:b7:77:ff:09:f3:69: d1:e2:61:d1:71:2c:97:fe:40:0f:1c:66:f0:63:c5:ba:f1:88: 56:b7:ce:e7:46:99:1b:9e:c7:f1:a4:90:bd:4b:c4:7e:83:b8: bf:97:30:d6:e8:7b:cc:df:52:19:e1:27:cb:c6:36:df:fa:17: 1d:16:66:2e:e0:51:3a:64:75:00:89:d4:ed:4b:f9:d5:15:91: fa:89:91:cb:f8:b4:99:1c:69:5b:cb:44:9b:61:aa:29:8e:31: ba:50:4f:31:f7:17:bb:ab:4c:38:dc:41:35:01:8a:b9:a4:e4: 35:47:c2:68:05:ba:23:f0:92:76:82:1a:45:a6:ce:91:8d:85: 35:18:f7:6d:3b:45:fa:87:ef:fc:23:0e:d6:a2:9c:69:94:f9: 26:c1:79:b4:cb:49:ad:a4:5f:e2:b0:ce:3f:24:9f:6f:ba:be: 53:ac:2e:2e:79:5d:56:5a:c2:80:08:34:00:03:28:31:30:97: f8:0d:04:38:74:bd:d2:46:e4:e5:88:96:e2:29:54:c9:e3:54: 54:26:5e:7c:da:e4:d7:1c:5d:07:99:94:5e:ba:0c:c3:9c:01: 4f:1e:df:95:bd:d1:76:f1:9d:6b:db:d2:eb:64:e9:a1:70:53: 47:d7:0c:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjQxMTIwMTcxMDEzWhcNMjQxMTI3MTcxMDEzWjAYMRYwFAYD VQQDEw02NzNlMTdmNi1mNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IAYVEI2dEq1jWf3IjnWN2E4fqBUYwpvrpraR0x9Gzz4vpYNYGosU4IJk21z BSZO45/NyVAp5AvYyreoq+Eq93QxRFShz+lsPhZFDgqGxxknjWuSAsqul0ytfSHu WoAfE09ncmpeLWxT1y1IToAI7Li7UI0+lUz0SsOILcG57MkPYmY9TT0aUxFu4z6J i/458GAfXx75rikVcF0YWnZgwaavl7sap9tEWRUVR0JpcwgzgfDh5MhPEAGiyNrf tqkWxef8cihrgoOkWKN6rKZoisAUIf7JwPYjmjboYr3vz8wj46tHMUSeEQQUDjUp 651rbxb3L0vY0k+HnYSMbZsgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD23a5s/ 4rj4SH4MtfQF2BRdbK8IMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjYLIYE1ShLmTg//S3d/8J82nR4mHRcSyX/kAPHGbwY8W68YhWt87n RpkbnsfxpJC9S8R+g7i/lzDW6HvM31IZ4SfLxjbf+hcdFmYu4FE6ZHUAidTtS/nV FZH6iZHL+LSZHGlby0SbYaopjjG6UE8x9xe7q0w43EE1AYq5pOQ1R8JoBboj8JJ2 ghpFps6RjYU1GPdtO0X6h+/8Iw7WopxplPkmwXm0y0mtpF/isM4/JJ9vur5TrC4u eV1WWsKACDQAAygxMJf4DQQ4dL3SRuTliJbiKVTJ41RUJl582uTXHF0HmZReugzD nAFPHt+VvdF28Z1r29LrZOmhcFNH1wzz -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:57 2024 by rpki-client on console-fra.rpki-client.org