$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: mk2KCx7es0AhGVs3LoTbiuuDVJd9OTolOkPlKRmfEXw= Subject key identifier: 49:5D:E1:49:34:B2:BF:A9:55:E6:4A:3C:7D:6E:AA:96:98:32:05:62 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 070D Signing time: Wed 20 Nov 2024 21:35:50 +0000 Manifest this update: Wed 20 Nov 2024 21:35:50 +0000 Manifest next update: Wed 27 Nov 2024 21:35:50 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: ABakpt6yIXOmaIDK1s013iFlSPc23yHzexmwVz3j3XM=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: j3Mdp3VdpFJP8qi33NyGvoVivwkHNNacPK2sV9tj6Kg=) 3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: AQgiwzW9jceFccX6zBisJvL/Ao6lPHGS3Rx++rG7HtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Nov 20 21:35:50 2024 GMT Not After : Nov 27 21:35:50 2024 GMT Subject: CN=673e5636-1d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:bb:d4:62:1e:a1:50:a7:c3:a4:6c:91:60: 0a:08:c4:f7:c1:39:f9:c0:41:1a:93:56:64:68:06: cb:a9:0b:dd:a7:81:0a:7a:f4:a8:27:dd:c6:42:40: 41:da:99:74:89:6c:0b:df:b7:aa:3b:cb:9a:98:9a: 3f:3a:b5:5d:d2:15:91:34:68:f7:9c:59:bf:d0:21: ee:1b:0f:04:b0:0f:4b:82:70:85:d8:91:21:21:6f: 5f:07:91:10:83:e2:c8:62:d5:db:35:9e:1f:02:a7: 5e:98:03:0d:35:95:f4:78:d0:18:15:dd:3f:57:08: c9:97:3d:0e:27:b8:f9:5a:6c:79:ce:6d:49:4f:4c: 5e:f2:be:a9:15:2f:06:cf:9c:4f:b1:ee:47:a4:06: 3c:0e:4e:b0:18:70:b2:47:ff:44:fe:e0:b9:ef:93: bb:9d:b9:39:48:88:5f:f3:45:9e:65:81:2a:a2:23: 33:59:19:5a:60:93:4b:73:3b:2b:67:a2:c7:e5:91: 4b:40:2e:5f:e6:7c:66:19:b3:c7:f1:3f:6d:bb:ba: 6d:ea:54:1f:e2:55:76:c9:b5:15:02:b5:7e:d4:bc: 82:11:a8:3d:4d:64:fd:77:0c:26:d7:18:cd:79:2e: 91:a8:ec:1c:9d:f2:1f:f1:df:dd:77:77:c1:c5:77: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:E1:49:34:B2:BF:A9:55:E6:4A:3C:7D:6E:AA:96:98:32:05:62 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:82:54:29:82:52:d2:81:bb:ad:d1:4e:9a:8c:e4:57:79:82: 72:a0:45:ae:99:04:bb:ab:83:4a:d4:8b:e1:2d:8a:e4:8c:09: 3d:f4:10:25:d9:68:62:f7:82:f5:18:2b:39:79:11:b1:ea:90: 90:ea:53:7b:32:c6:9b:3b:c7:05:7c:7d:58:fc:49:7b:cb:dc: 69:83:69:2d:1b:81:ac:97:0f:53:c9:2e:8b:b5:8c:85:f0:d8: 11:5c:8b:e1:3b:0b:b4:ff:1b:4e:fa:5a:36:4f:62:03:d0:27: 98:b2:f1:7f:6d:57:60:e2:ca:cb:66:17:fb:b2:ea:fc:0e:f9: 16:34:c2:6f:18:54:8e:fc:14:91:fc:82:74:14:2e:c2:3f:1d: b6:20:46:ad:a3:0a:0b:f9:88:30:f6:2b:17:8e:bb:93:0c:b8: 1b:d7:6e:16:9c:9a:a4:64:a9:06:bc:d4:dd:e3:18:6a:dd:f5: 50:aa:62:32:f7:73:38:73:7f:58:c2:2c:5e:94:03:92:37:02: 65:bb:f8:8d:42:d7:c4:7f:23:44:af:83:7d:98:46:40:3e:80: bc:06:0d:9e:eb:af:1a:a1:92:4f:7a:54:03:49:ae:17:be:d9: 50:a0:cc:0a:44:0d:32:f6:ac:89:65:52:34:03:00:ad:7a:3e: fc:af:d7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjQxMTIwMjEzNTUwWhcNMjQxMTI3MjEzNTUwWjAYMRYwFAYD VQQDEw02NzNlNTYzNi0xZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FK71GIeoVCnw6RskWAKCMT3wTn5wEEak1ZkaAbLqQvdp4EKevSoJ93GQkBB 2pl0iWwL37eqO8uamJo/OrVd0hWRNGj3nFm/0CHuGw8EsA9LgnCF2JEhIW9fB5EQ g+LIYtXbNZ4fAqdemAMNNZX0eNAYFd0/VwjJlz0OJ7j5Wmx5zm1JT0xe8r6pFS8G z5xPse5HpAY8Dk6wGHCyR/9E/uC575O7nbk5SIhf80WeZYEqoiMzWRlaYJNLczsr Z6LH5ZFLQC5f5nxmGbPH8T9tu7pt6lQf4lV2ybUVArV+1LyCEag9TWT9dwwm1xjN eS6RqOwcnfIf8d/dd3fBxXf0ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEld4Uk0 sr+pVeZKPH1uqpaYMgViMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkglQpglLSgbut0U6ajORXeYJyoEWumQS7q4NK1IvhLYrkjAk99BAl 2Whi94L1GCs5eRGx6pCQ6lN7MsabO8cFfH1Y/El7y9xpg2ktG4Gslw9TyS6LtYyF 8NgRXIvhOwu0/xtO+lo2T2ID0CeYsvF/bVdg4srLZhf7sur8DvkWNMJvGFSO/BSR /IJ0FC7CPx22IEatowoL+Ygw9isXjruTDLgb124WnJqkZKkGvNTd4xhq3fVQqmIy 93M4c39YwixelAOSNwJlu/iNQtfEfyNEr4N9mEZAPoC8Bg2e668aoZJPelQDSa4X vtlQoMwKRA0y9qyJZVI0AwCtej78r9c2 -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:46 2024 by rpki-client on console-ams.rpki-client.org