$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: nL26x/+UWwvVmv4oMHEktDFIXEOaeF3INQefGashOLc= Subject key identifier: CF:05:26:64:6D:3E:96:32:98:39:26:46:EF:1C:C8:30:1A:B9:A0:28 Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 03BB Signing time: Sat 23 Nov 2024 00:15:37 +0000 Manifest this update: Sat 23 Nov 2024 00:15:36 +0000 Manifest next update: Sat 30 Nov 2024 00:15:36 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: oneQzF2zYs2aJx4TiV3uWpaiDbBSeFXVzbeFnUWXNlw=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: yhiI91XkzwkhnhaYNH6zI3a1DeYpIdZabbgvsl7RlxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Nov 23 00:15:36 2024 GMT Not After : Nov 30 00:15:36 2024 GMT Subject: CN=67411ea9-4605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:c9:34:cf:f4:fa:aa:0b:30:d0:a0:6e:51: b9:e7:99:f1:09:f1:1e:3b:a8:04:56:f9:27:5e:91: f8:4d:49:a2:f3:48:ee:1f:24:87:9a:7c:6d:0d:7c: 4b:19:9c:81:73:3b:54:fd:d0:20:48:c5:49:4b:ee: aa:98:49:3b:4b:5a:bf:39:b7:da:86:b9:cf:d1:9f: 08:c0:c1:9c:75:23:b9:36:1e:a0:5e:13:57:21:65: 92:45:6f:e0:5d:e9:80:b2:db:bc:f1:3e:c7:19:e4: bb:60:ff:db:9d:68:10:3f:be:dd:a8:99:8c:81:b5: 2a:27:1a:46:65:4b:a1:8a:c8:50:86:7e:5f:32:64: a4:54:a2:97:74:1e:23:02:b3:49:b2:51:85:de:40: 7a:64:18:ac:75:b0:66:d1:be:7c:d4:1a:da:d8:d9: d6:d5:37:81:05:01:ef:9b:3b:dc:03:8b:5e:96:55: 12:c4:bb:c1:fa:ad:4a:df:e4:52:cb:d1:45:6a:5f: d3:f2:f7:8b:44:a6:67:22:c9:9d:65:96:3b:f5:fa: 5c:e4:32:03:d5:39:3d:3d:9a:8b:3a:87:fe:08:bd: 90:af:28:72:ec:4c:f9:4c:4c:3f:4f:70:29:cd:33: 6f:12:d8:65:0e:ac:78:fe:e5:61:78:17:82:8a:5b: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:26:64:6D:3E:96:32:98:39:26:46:EF:1C:C8:30:1A:B9:A0:28 X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:66:0c:8a:33:e4:b3:cd:ae:44:f5:c1:19:c7:c8:a9:21:17: 43:94:fd:63:33:af:01:a6:1a:0b:e9:e4:89:cb:8c:d6:2b:47: 7b:c9:fa:46:20:6e:3d:42:9c:f4:71:2b:3f:d0:31:e5:bd:30: a8:39:f3:cf:47:d3:29:d7:2d:de:26:9d:c4:05:39:6d:38:99: 40:e8:6e:e2:6a:49:4c:5f:bb:c1:d5:49:62:ee:46:6b:4e:6a: 37:88:3e:dc:88:64:b0:ae:d7:f7:1a:e9:85:09:53:46:ea:5a: ce:63:52:4a:48:87:bb:bd:33:b4:76:7f:d9:9b:bf:78:a2:a6: 91:7d:09:cc:f6:df:6c:88:3e:c4:73:93:f7:db:f8:86:4f:86: 68:0a:4e:a1:f9:d0:74:d7:23:fa:ae:d7:c8:3b:42:c3:06:77: 39:8a:97:18:62:a8:84:97:12:8c:41:46:a3:cc:9e:bd:5f:06: d9:75:95:bb:f9:d6:bb:b5:61:ea:c6:e9:3c:0d:c1:10:c3:b3: bd:e1:b8:fb:aa:69:72:b5:a0:23:3a:fa:76:39:8e:bb:d1:33: a3:1d:59:36:fa:1d:99:bb:b3:62:3a:10:da:10:78:19:6d:a2: ac:33:10:76:c1:91:59:c3:a3:76:95:55:ac:c0:fb:ac:18:00: d1:b9:97:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjQxMTIzMDAxNTM2WhcNMjQxMTMwMDAxNTM2WjAYMRYwFAYD VQQDEw02NzQxMWVhOS00NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaXJNM/0+qoLMNCgblG555nxCfEeO6gEVvknXpH4TUmi80juHySHmnxtDXxL GZyBcztU/dAgSMVJS+6qmEk7S1q/ObfahrnP0Z8IwMGcdSO5Nh6gXhNXIWWSRW/g XemAstu88T7HGeS7YP/bnWgQP77dqJmMgbUqJxpGZUuhishQhn5fMmSkVKKXdB4j ArNJslGF3kB6ZBisdbBm0b581Bra2NnW1TeBBQHvmzvcA4tellUSxLvB+q1K3+RS y9FFal/T8veLRKZnIsmdZZY79fpc5DID1Tk9PZqLOof+CL2Qryhy7Ez5TEw/T3Ap zTNvEthlDqx4/uVheBeCiluACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8FJmRt PpYymDkmRu8cyDAauaAoMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoZgyKM+Szza5E9cEZx8ipIRdDlP1jM68BphoL6eSJy4zWK0d7yfpG IG49Qpz0cSs/0DHlvTCoOfPPR9Mp1y3eJp3EBTltOJlA6G7iaklMX7vB1Uli7kZr Tmo3iD7ciGSwrtf3GumFCVNG6lrOY1JKSIe7vTO0dn/Zm794oqaRfQnM9t9siD7E c5P32/iGT4ZoCk6h+dB01yP6rtfIO0LDBnc5ipcYYqiElxKMQUajzJ69XwbZdZW7 +da7tWHqxuk8DcEQw7O94bj7qmlytaAjOvp2OY670TOjHVk2+h2Zu7NiOhDaEHgZ baKsMxB2wZFZw6N2lVWswPusGADRuZe9 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org