$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft File: vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json) Hash identifier: WWYAtK6VXVyI92GEOssnaZ+DwBx3cb7WWAtNWGqJYVc= Subject key identifier: 9A:02:CC:57:5A:C0:63:ED:BE:95:DA:36:0D:47:75:23:58:B4:3D:F6 Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft Manifest number: 0694 Signing time: Fri 22 Nov 2024 21:49:21 +0000 Manifest this update: Fri 22 Nov 2024 21:49:21 +0000 Manifest next update: Fri 29 Nov 2024 21:49:21 +0000 Files and hashes: 1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: Y2YTb/+u7R0BHhk5yhTuiJAFFh9/X9xcF0boRlN2Zos=) 2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 4qprzCtOPiEKiJUADvZac/O9HxoUboy/SOBdDpVaewg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Validity Not Before: Nov 22 21:49:21 2024 GMT Not After : Nov 29 21:49:21 2024 GMT Subject: CN=6740fc61-53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:44:bc:d3:c6:63:f3:5f:74:85:5d:10:9b: 4f:74:20:3f:0b:48:24:94:57:44:3d:78:1e:86:fa: 76:7e:84:96:4d:c2:4a:51:92:bb:a4:11:a1:42:82: fa:24:d6:a8:b7:66:72:a5:4f:b4:a9:7c:82:78:6e: 94:1e:de:8a:9b:60:f4:13:d7:c0:d8:8c:83:b1:ef: 59:9a:bd:46:6a:f7:80:ff:ac:88:4d:f5:d0:7a:b5: ca:a0:82:f5:f8:73:9b:92:d4:db:39:55:27:a9:2a: b3:a0:ee:9d:e9:49:e7:90:63:e3:04:f7:ee:a1:82: 87:1d:f4:41:78:80:68:04:99:26:d9:0f:f3:2b:a7: cf:52:50:a2:7e:0f:f7:cb:76:39:b7:9c:96:ce:ce: 91:b3:e0:3f:1f:84:24:01:cd:2c:c4:04:99:04:13: a1:9d:9b:49:e1:2d:c0:66:f1:8d:99:9c:98:5d:c5: 40:37:45:1d:b4:90:35:f9:ed:61:1f:da:e9:d5:8b: 7d:2d:db:e8:21:36:c3:d6:c6:7d:2f:eb:c6:b7:63: 79:ef:c8:ff:dd:35:23:0d:ee:e9:c8:72:e7:0a:36: 3d:cf:b6:40:cd:5c:e2:83:4e:c0:d9:3c:9e:7d:dc: 64:33:41:ca:26:50:87:45:48:c1:98:9e:f1:cc:5d: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:CC:57:5A:C0:63:ED:BE:95:DA:36:0D:47:75:23:58:B4:3D:F6 X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:bd:16:6a:ca:bc:93:eb:f6:82:e4:13:04:8a:6b:4c:85:ee: 08:c3:4c:ce:85:1c:b3:a5:42:20:5b:6d:a1:87:52:6b:67:9a: 64:fb:d0:c9:9f:e3:51:5c:d4:77:61:95:6e:e4:ac:fb:0a:f9: f6:f6:ac:03:d7:54:0f:29:e2:6f:d4:e0:58:e6:22:37:c9:89: 4a:8f:c3:90:a0:b8:f1:3f:c8:5c:3e:12:54:2b:87:e0:05:a3: 0c:ed:1f:41:49:f3:50:a3:e6:11:56:da:8d:0d:95:65:66:b8: 5c:c9:74:ab:52:a6:f2:bf:10:45:e0:e6:98:21:22:40:48:97: 71:80:48:34:9a:d6:8a:38:c6:d9:32:b6:a4:68:e2:3c:95:aa: 24:ad:87:55:5c:e1:80:5e:de:70:81:74:2d:40:5f:99:05:11: 88:2b:b9:5e:5a:7a:6f:18:f4:af:48:1a:c5:55:53:6b:ae:ba: e9:60:df:b0:23:fb:77:66:3e:78:f9:7b:ca:b4:53:12:b2:03: ea:b5:24:ec:a3:a5:6b:ee:a7:99:a4:ec:13:9a:cd:23:21:08: 27:c3:ac:36:38:28:e7:de:5c:73:4d:90:61:45:f6:d4:1a:25: 66:3d:54:f6:ac:1f:e1:0f:9c:9e:85:b0:5b:ec:df:09:70:0c: 5a:99:21:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjQxMTIyMjE0OTIxWhcNMjQxMTI5MjE0OTIxWjAYMRYwFAYD VQQDEw02NzQwZmM2MS01M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynpEvNPGY/NfdIVdEJtPdCA/C0gklFdEPXgehvp2foSWTcJKUZK7pBGhQoL6 JNaot2ZypU+0qXyCeG6UHt6Km2D0E9fA2IyDse9Zmr1GaveA/6yITfXQerXKoIL1 +HObktTbOVUnqSqzoO6d6UnnkGPjBPfuoYKHHfRBeIBoBJkm2Q/zK6fPUlCifg/3 y3Y5t5yWzs6Rs+A/H4QkAc0sxASZBBOhnZtJ4S3AZvGNmZyYXcVAN0UdtJA1+e1h H9rp1Yt9LdvoITbD1sZ9L+vGt2N578j/3TUjDe7pyHLnCjY9z7ZAzVzig07A2Tye fdxkM0HKJlCHRUjBmJ7xzF0LHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoCzFda wGPtvpXaNg1HdSNYtD32MB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ a3lMMUtqN0xYelA5OE9GWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEvRZqyryT6/aC5BMEimtMhe4Iw0zOhRyzpUIgW22hh1JrZ5pk+9DJ n+NRXNR3YZVu5Kz7Cvn29qwD11QPKeJv1OBY5iI3yYlKj8OQoLjxP8hcPhJUK4fg BaMM7R9BSfNQo+YRVtqNDZVlZrhcyXSrUqbyvxBF4OaYISJASJdxgEg0mtaKOMbZ MrakaOI8laokrYdVXOGAXt5wgXQtQF+ZBRGIK7leWnpvGPSvSBrFVVNrrrrpYN+w I/t3Zj54+XvKtFMSsgPqtSTso6Vr7qeZpOwTms0jIQgnw6w2OCjn3lxzTZBhRfbU GiVmPVT2rB/hD5yehbBb7N8JcAxamSH5 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org