$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: 2QG/De2j9o0hv5i1MBH2y7RLga+biErwCh7xehTZMd8= Subject key identifier: 1B:88:46:DD:6D:3C:4C:7F:88:93:B0:B5:26:F0:93:D4:D6:DF:14:35 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0165 Signing time: Thu 21 Nov 2024 02:54:16 +0000 Manifest this update: Thu 21 Nov 2024 02:54:16 +0000 Manifest next update: Thu 28 Nov 2024 02:54:16 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: oQqRMpbDr6ViXaQels1gmnHcus90hhFAstpkuWEDrXQ=) 2: 020607A2498711EFBB260663C4F9AE02.roa (hash: nvNzzZq+Ecqxgr++TobaSpU0AIRI4UzjKN1i1sjHamI=) 3: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: 6hgdKa35Z/wgme43twsAUwJcx1mczDKYn29trz55Beo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Nov 21 02:54:16 2024 GMT Not After : Nov 28 02:54:16 2024 GMT Subject: CN=673ea0d8-82c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:91:78:2e:47:bf:71:ed:a8:bb:3c:c4:5e: af:00:07:2b:23:91:4a:74:6d:7d:90:ae:4c:b3:4d: 3e:17:09:21:b4:cd:dd:44:84:16:7d:a1:cb:9f:88: 2b:92:37:59:61:b2:ef:5b:e4:f2:1d:24:f7:df:12: 2e:b6:e8:d2:58:1e:b9:19:fe:03:61:7f:4f:13:b8: 03:bd:28:ac:48:8f:01:05:70:de:78:96:1f:1c:6e: 8b:41:3b:dc:cc:e7:a6:e8:63:fa:d3:59:de:84:48: 43:9f:2d:10:9e:01:ea:c0:c6:df:1a:91:7d:d4:38: 5d:a6:32:1d:61:84:b9:c4:84:04:68:38:f1:68:37: d3:40:cf:5a:94:1a:65:be:ab:32:f4:16:c1:56:ff: 74:bf:4c:27:cb:40:96:f5:d1:0d:71:1d:b5:49:ae: 27:fd:cd:64:7d:20:6e:db:0d:ad:7c:23:b0:1d:77: 54:9f:10:39:73:39:e2:6c:36:27:b1:18:1a:77:01: 2f:cc:fd:56:83:68:eb:91:ab:77:03:bf:0a:02:90: 75:26:64:f5:46:69:a0:be:21:9e:a7:d8:6c:76:f6: 00:f2:ad:3c:eb:d0:22:a7:62:b9:8c:bd:c8:c2:68: 34:3b:12:4b:37:5a:0d:8b:02:49:6f:5d:8e:95:c4: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:88:46:DD:6D:3C:4C:7F:88:93:B0:B5:26:F0:93:D4:D6:DF:14:35 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:73:f5:52:df:66:7d:44:89:0c:32:21:e0:4d:2f:af:61: 08:79:6c:a5:a7:b0:23:8b:c3:c9:ff:22:2d:14:e5:20:f0:77: 8c:43:40:c2:d9:87:be:59:d2:75:d4:3a:2c:09:d6:00:10:7f: 48:00:8b:ee:64:ac:2c:3f:f5:db:80:2b:5c:3d:4b:2e:8f:f4: c7:12:2d:75:c8:25:a2:ee:33:8d:25:0f:98:ff:f8:e6:e8:5b: b9:79:8b:8c:0b:2d:f5:55:dd:75:2d:a2:e1:2e:10:03:8c:42: df:ca:fd:81:8c:bf:5a:cc:09:60:55:39:cb:82:0b:40:ea:f0: 8a:6a:70:7d:02:86:20:e8:23:ce:8a:79:35:d0:e1:10:db:a6: cd:bc:c4:20:31:ed:09:3f:05:1c:5e:45:5d:46:b6:b6:ea:ad: 7d:c1:56:79:6d:08:69:99:79:f4:fb:93:8a:48:b1:9d:c5:a5: b9:32:47:27:a6:d6:20:15:fb:cc:f9:4b:a4:b7:12:2e:54:ef: 82:9a:4d:08:db:28:ed:e8:c8:8e:01:23:f8:7f:b2:b2:ea:e6: e5:5b:68:e4:d1:8f:36:e3:42:66:f1:43:54:a3:e9:c3:7d:ea: 1b:17:7d:66:e3:5e:4f:9c:63:5e:33:63:71:cb:dd:7b:38:89: 3a:da:0e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjQxMTIxMDI1NDE2WhcNMjQxMTI4MDI1NDE2WjAYMRYwFAYD VQQDEw02NzNlYTBkOC04MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WiReC5Hv3HtqLs8xF6vAAcrI5FKdG19kK5Ms00+FwkhtM3dRIQWfaHLn4gr kjdZYbLvW+TyHST33xIutujSWB65Gf4DYX9PE7gDvSisSI8BBXDeeJYfHG6LQTvc zOem6GP601nehEhDny0QngHqwMbfGpF91DhdpjIdYYS5xIQEaDjxaDfTQM9alBpl vqsy9BbBVv90v0wny0CW9dENcR21Sa4n/c1kfSBu2w2tfCOwHXdUnxA5cznibDYn sRgadwEvzP1Wg2jrkat3A78KApB1JmT1RmmgviGep9hsdvYA8q0869Aip2K5jL3I wmg0OxJLN1oNiwJJb12OlcQQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuIRt1t PEx/iJOwtSbwk9TW3xQ1MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA64nP1Ut9mfUSJDDIh4E0vr2EIeWylp7Aji8PJ/yItFOUg8HeMQ0DC 2Ye+WdJ11DosCdYAEH9IAIvuZKwsP/XbgCtcPUsuj/THEi11yCWi7jONJQ+Y//jm 6Fu5eYuMCy31Vd11LaLhLhADjELfyv2BjL9azAlgVTnLggtA6vCKanB9AoYg6CPO ink10OEQ26bNvMQgMe0JPwUcXkVdRra26q19wVZ5bQhpmXn0+5OKSLGdxaW5Mkcn ptYgFfvM+UuktxIuVO+Cmk0I2yjt6MiOASP4f7Ky6ublW2jk0Y8240Jm8UNUo+nD feobF31m415PnGNeM2Nxy917OIk62g7x -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org