$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: 90GkQ1tspAuyZqNg+fec+jvpfl75opkRwBN4DVvaU0k= Subject key identifier: C8:BA:7E:75:B0:21:F9:5B:5E:18:56:08:0E:94:C6:A6:EE:61:39:88 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: 2F Signing time: Sun 15 Sep 2024 10:07:53 +0000 Manifest this update: Sun 15 Sep 2024 10:07:53 +0000 Manifest next update: Sun 22 Sep 2024 10:07:53 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: Rh90r7OUBWRYEqM6QLa4s+GICzyTs9kJu0juwcPeFHA=) 2: 27D9C99632C611EFA04EE118C4F9AE02.roa (hash: x/2d3a4iuMVyEl0CLBETXRLfdHnzlHoY8qTBJbPRcVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Sep 15 10:07:53 2024 GMT Not After : Sep 22 10:07:53 2024 GMT Subject: CN=66e6b1f9-0aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:75:6d:67:1e:f6:a4:f1:1e:77:f8:10:e9:87: dd:52:e7:3b:41:bb:39:31:5c:9d:d9:e6:b8:64:3e: 06:27:7e:96:dc:5d:a0:8b:de:6e:ef:fd:84:48:1b: 63:d3:51:b0:e3:fd:2f:5f:42:a8:c2:11:ad:df:a6: 84:09:58:b9:97:27:7a:e2:4f:83:b9:6b:13:29:35: 99:e2:fa:c0:e4:66:12:a5:28:8d:38:a3:82:c1:9e: 09:c6:55:ec:c7:7f:40:6d:c8:53:ea:3f:c5:17:77: 1e:f8:8a:67:6e:26:47:4b:16:b9:11:a6:90:94:42: fb:ea:2c:50:69:89:10:24:f4:09:ad:28:bc:76:fe: bb:12:93:c5:d3:2f:e5:ee:60:ef:fd:c4:73:81:c8: 2c:35:30:79:1d:7e:c3:2c:3c:86:7b:69:08:4d:45: 9c:7a:dd:1f:fe:f1:53:66:bf:af:e0:c5:a6:80:30: a0:cb:bd:ae:ef:85:1f:0f:74:cc:21:10:6e:0f:69: 3c:ed:5c:73:8b:83:61:d9:d8:6d:8c:da:21:11:cc: 77:a7:d2:d7:10:c9:9e:8f:e2:10:ce:86:7d:d8:3f: b9:0d:86:12:09:52:24:f0:04:f7:fb:75:06:91:f9: cd:0b:92:33:51:cf:a0:f7:4c:ec:8f:f6:b5:24:36: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BA:7E:75:B0:21:F9:5B:5E:18:56:08:0E:94:C6:A6:EE:61:39:88 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:50:da:7c:6d:6a:53:5c:30:e5:03:63:b6:37:71:f9:d0:1d: 0d:5a:4d:58:4c:9f:9b:84:ac:3d:b5:7b:10:d8:02:7c:8c:16: 61:36:42:c9:b1:0e:1b:16:42:bb:08:07:08:0e:18:b8:19:83: b3:24:c9:ef:54:39:77:75:7b:a7:b0:0f:21:b6:10:5b:09:e7: 6a:81:03:1b:bc:d6:c7:25:58:8f:e1:a5:e9:ba:ef:00:61:54: 50:15:23:dd:fc:c2:90:f5:8a:fc:10:26:52:25:4a:94:f4:ca: a1:b8:d9:57:6e:26:bc:55:cc:e2:cd:dd:c8:0e:f9:2a:23:d0: 78:d6:a2:48:df:94:7a:f1:b4:64:3d:b6:93:b5:c5:87:f6:d5: 0f:93:ee:60:c5:4f:f9:7f:4e:9b:cc:2f:c8:18:03:a8:bb:40: 25:d7:6e:a6:ac:a8:55:f1:4c:6d:44:04:b8:81:e3:9d:f1:cc: 3d:52:1f:a6:b8:43:17:60:44:95:80:3b:bb:e3:f7:ba:21:c2: ab:c0:0b:ff:d6:fd:79:e9:ef:1c:c4:90:42:0b:ff:5b:ce:94: 6a:3c:98:09:a6:90:31:40:01:5b:63:52:48:f4:a2:73:37:94: 3d:10:ef:cf:74:42:36:c0:3b:cc:af:77:6b:cf:cc:15:84:22: 25:a1:b7:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzAwMzExMC8GA1UEBRMoNTU5QkVGQ0YzNDk4Njk3M0QzQkU0NTkzNTE2MTc4RTRD M0FDRTI4QjAeFw0yNDA5MTUxMDA3NTNaFw0yNDA5MjIxMDA3NTNaMBgxFjAUBgNV BAMTDTY2ZTZiMWY5LTBhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmdW1nHvak8R53+BDph91S5ztBuzkxXJ3Z5rhkPgYnfpbcXaCL3m7v/YRIG2PT UbDj/S9fQqjCEa3fpoQJWLmXJ3riT4O5axMpNZni+sDkZhKlKI04o4LBngnGVezH f0BtyFPqP8UXdx74imduJkdLFrkRppCUQvvqLFBpiRAk9AmtKLx2/rsSk8XTL+Xu YO/9xHOByCw1MHkdfsMsPIZ7aQhNRZx63R/+8VNmv6/gxaaAMKDLva7vhR8PdMwh EG4PaTztXHOLg2HZ2G2M2iERzHen0tcQyZ6P4hDOhn3YP7kNhhIJUiTwBPf7dQaR +c0LkjNRz6D3TOyP9rUkNozHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyLp+dbAh +VteGFYIDpTGpu5hOYgwHwYDVR0jBBgwFoAUVZvvzzSYaXPTvkWTUWF45MOs4osw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MDAzLzJGOTNGNUNDMzJC QjExRUZBODNENjEyRkM0RjlBRTAyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlp2dnp6U1lhWFBUdmtXVFVXRjQ1TU9zNG9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 MDAzLzJGOTNGNUNDMzJCQjExRUZBODNENjEyRkM0RjlBRTAyL1ZadnZ6elNZYVhQ VHZrV1RVV0Y0NU1PczRvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMpQ2nxtalNcMOUDY7Y3cfnQHQ1aTVhMn5uErD21exDYAnyMFmE2Qsmx DhsWQrsIBwgOGLgZg7Mkye9UOXd1e6ewDyG2EFsJ52qBAxu81sclWI/hpem67wBh VFAVI938wpD1ivwQJlIlSpT0yqG42VduJrxVzOLN3cgO+Soj0HjWokjflHrxtGQ9 tpO1xYf21Q+T7mDFT/l/TpvML8gYA6i7QCXXbqasqFXxTG1EBLiB453xzD1SH6a4 QxdgRJWAO7vj97ohwqvAC//W/Xnp7xzEkEIL/1vOlGo8mAmmkDFAAVtjUkj0onM3 lD0Q7890QjbAO8yvd2vPzBWEIiWht2U= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:34 2024 by rpki-client on console-ams.rpki-client.org