$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: fmRwJqrb2/npBF8NSsbpDt6KIETqp+HW2feG7el78lM= Subject key identifier: 2B:71:F2:38:F9:58:39:BD:E4:AA:4D:3F:65:23:99:29:BC:36:3F:C9 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: 53 Signing time: Mon 25 Nov 2024 05:10:32 +0000 Manifest this update: Mon 25 Nov 2024 05:10:32 +0000 Manifest next update: Mon 02 Dec 2024 05:10:32 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: LhNI0kXE5OM9qzFYcKdKccF1jkhP9H9+YQBBl837tVE=) 2: 27D9C99632C611EFA04EE118C4F9AE02.roa (hash: x/2d3a4iuMVyEl0CLBETXRLfdHnzlHoY8qTBJbPRcVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Nov 25 05:10:32 2024 GMT Not After : Dec 2 05:10:32 2024 GMT Subject: CN=674406c8-f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:15:fe:19:d6:19:0a:c8:35:33:a9:96:a8: 1c:f8:0e:fe:7c:45:7c:0b:f4:ca:ae:27:8e:53:85: c3:78:09:6d:02:84:ba:0b:2f:be:2a:c8:86:92:9d: 03:4a:7c:2c:c0:b3:98:d9:7a:2d:0a:c4:a6:5e:ba: 93:ca:04:48:12:0d:d9:28:eb:16:ac:53:06:a1:d2: 89:57:a4:4f:30:f7:c5:75:3d:fb:10:55:4c:61:39: 9f:c4:65:4d:ff:0e:60:5c:3f:b7:57:59:a0:3a:66: 36:ce:36:72:ac:ec:18:a1:39:76:1a:65:b5:35:16: 5c:0f:c7:98:38:9f:09:83:08:e4:b6:31:c1:e2:a7: 3e:8c:77:ae:db:eb:28:55:fa:77:ab:4b:ac:60:dd: aa:28:ec:e5:3f:55:08:4c:77:e8:f0:53:ae:33:bb: 4a:60:8b:86:89:6b:fb:2b:dd:41:6c:b5:7e:d8:47: b5:57:f0:53:a2:fe:f6:e7:c6:6c:d5:5e:91:3f:66: 08:6f:b4:92:da:83:0b:ad:3b:1f:97:b9:8d:df:4f: ef:0d:de:90:cb:3a:49:86:8f:50:38:10:51:7c:00: 26:60:cc:25:26:a3:d2:9d:21:94:d4:1f:e0:d4:cf: 79:78:9e:8d:64:25:3b:69:a5:5e:4e:f7:8b:1d:b5: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:F2:38:F9:58:39:BD:E4:AA:4D:3F:65:23:99:29:BC:36:3F:C9 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cc:e3:96:6c:60:e2:3f:a9:8a:c7:b1:7a:e0:85:10:f8:eb: 66:79:4a:94:69:e0:10:25:a7:e8:14:f7:bd:e7:c5:cd:56:c9: 5a:8b:73:c8:50:e5:dd:7d:1a:e1:99:d2:80:2c:07:ea:7c:a0: 0c:86:84:d3:a8:a7:cc:35:6d:13:dc:7c:bd:37:68:3b:5c:46: d3:bc:27:17:b6:ac:d6:b5:7b:10:84:92:d3:49:42:ad:a4:6d: 08:74:42:f6:2f:b7:78:58:fb:6a:80:cb:e7:0a:e9:50:d8:45: 8c:22:a5:66:7b:c9:73:11:89:bc:0d:ad:3a:e5:da:06:3b:9b: 60:e2:3a:3d:77:05:fd:c8:25:5c:79:db:a7:cf:1a:29:21:f3: 9f:32:80:df:66:92:42:33:64:09:4c:e3:80:4a:84:a9:02:f4: b9:cf:c9:b9:ab:7e:a7:54:50:ec:5e:d4:52:75:2e:af:2c:7d: 41:63:ab:20:d6:66:7c:c0:02:2e:63:91:33:32:40:20:67:a9: ad:65:e5:d1:f8:ee:12:1c:02:81:58:fc:dd:ba:9d:8e:9e:5a: 91:ca:9c:70:40:72:c5:b7:3b:28:2e:13:f3:4a:02:ef:89:f2: 1d:75:1f:bf:ed:06:ed:f1:cf:a7:76:bc:fc:26:ac:3f:26:c7: b8:78:7d:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzAwMzExMC8GA1UEBRMoNTU5QkVGQ0YzNDk4Njk3M0QzQkU0NTkzNTE2MTc4RTRD M0FDRTI4QjAeFw0yNDExMjUwNTEwMzJaFw0yNDEyMDIwNTEwMzJaMBgxFjAUBgNV BAMTDTY3NDQwNmM4LWY0YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9PhX+GdYZCsg1M6mWqBz4Dv58RXwL9MquJ45ThcN4CW0ChLoLL74qyIaSnQNK fCzAs5jZei0KxKZeupPKBEgSDdko6xasUwah0olXpE8w98V1PfsQVUxhOZ/EZU3/ DmBcP7dXWaA6ZjbONnKs7BihOXYaZbU1FlwPx5g4nwmDCOS2McHipz6Md67b6yhV +nerS6xg3aoo7OU/VQhMd+jwU64zu0pgi4aJa/sr3UFstX7YR7VX8FOi/vbnxmzV XpE/ZghvtJLagwutOx+XuY3fT+8N3pDLOkmGj1A4EFF8ACZgzCUmo9KdIZTUH+DU z3l4no1kJTtppV5O94sdtSxXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK3HyOPlY Ob3kqk0/ZSOZKbw2P8kwHwYDVR0jBBgwFoAUVZvvzzSYaXPTvkWTUWF45MOs4osw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MDAzLzJGOTNGNUNDMzJC QjExRUZBODNENjEyRkM0RjlBRTAyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlp2dnp6U1lhWFBUdmtXVFVXRjQ1TU9zNG9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 MDAzLzJGOTNGNUNDMzJCQjExRUZBODNENjEyRkM0RjlBRTAyL1ZadnZ6elNZYVhQ VHZrV1RVV0Y0NU1PczRvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJzM45ZsYOI/qYrHsXrghRD462Z5SpRp4BAlp+gU973nxc1WyVqLc8hQ 5d19GuGZ0oAsB+p8oAyGhNOop8w1bRPcfL03aDtcRtO8Jxe2rNa1exCEktNJQq2k bQh0QvYvt3hY+2qAy+cK6VDYRYwipWZ7yXMRibwNrTrl2gY7m2DiOj13Bf3IJVx5 26fPGikh858ygN9mkkIzZAlM44BKhKkC9LnPybmrfqdUUOxe1FJ1Lq8sfUFjqyDW ZnzAAi5jkTMyQCBnqa1l5dH47hIcAoFY/N26nY6eWpHKnHBAcsW3OyguE/NKAu+J 8h11H7/tBu3xz6d2vPwmrD8mx7h4fd8= -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:11 2024 by rpki-client on console-ams.rpki-client.org