$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: nAzfk9HT4AIvAPTBRs73uvLzPp+CJHi8KkM14QRigMI= Subject key identifier: DD:A2:99:F9:53:B8:A9:27:3E:A6:54:22:28:76:45:BA:16:3E:37:F7 Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: 73 Signing time: Thu 21 Nov 2024 04:55:16 +0000 Manifest this update: Thu 21 Nov 2024 04:55:15 +0000 Manifest next update: Thu 28 Nov 2024 04:55:15 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: dh+dzlVGupe1aP+32iH/XG1VzGvgihj+lHFFYPjXJZ4=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: gx9z09oQ5hTA8YH4iSWgc7528eikGurKJ+1nJAQYPAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Nov 21 04:55:15 2024 GMT Not After : Nov 28 04:55:15 2024 GMT Subject: CN=673ebd34-75a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:cb:c5:96:72:9f:82:8c:4f:13:fc:07:b4: be:63:76:b1:67:22:e2:67:b8:e5:b7:10:dd:26:e8: 4c:41:e7:0a:fb:35:52:38:d5:3c:59:c3:84:f7:41: 78:da:17:54:72:38:0e:e3:80:af:ce:9d:90:c4:90: ce:19:bf:cd:a0:d0:b8:20:9d:59:ed:67:76:9c:1d: b4:b3:b8:8c:11:67:11:98:1a:cb:ff:3d:79:35:81: 54:f4:12:a6:cd:c4:ab:aa:65:7c:1d:af:67:98:ba: ba:d4:54:63:98:28:c4:1c:2c:47:be:ba:11:12:61: be:00:af:36:7e:92:91:2e:43:aa:8c:1f:cf:d0:6c: 38:7f:af:1f:e1:d1:47:d4:e6:5e:ec:67:be:de:c0: 8f:41:d0:db:49:4c:5d:fc:3e:4a:f3:8b:7d:d4:91: 64:db:e1:6a:12:6c:45:74:e3:fa:7e:c2:c8:33:e5: 41:df:1c:f5:2a:99:c9:2e:31:c3:ce:77:3d:05:4a: b7:21:d4:df:0b:b0:bf:5e:f7:00:d6:87:f6:58:da: 17:1d:82:95:e9:66:35:ba:c4:ea:e6:c9:5e:80:a0: 05:b1:dc:11:c6:c0:18:03:d4:23:37:bf:00:4b:e7: 12:9c:00:25:b7:6b:db:1d:f8:43:3b:7e:94:c3:e6: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A2:99:F9:53:B8:A9:27:3E:A6:54:22:28:76:45:BA:16:3E:37:F7 X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a9:6f:03:65:02:3c:af:94:f9:58:06:33:ab:2d:39:41:4e: 99:df:2a:1d:f0:78:76:f6:2f:ab:36:51:08:a1:ec:b2:3f:23: 6b:eb:f8:1a:c6:eb:26:dc:72:86:13:06:85:7d:46:9e:01:c7: 62:47:c2:3d:cb:f6:ff:42:72:24:0f:8b:c7:14:d1:57:2c:6b: 6e:98:5f:dd:73:a1:b8:ed:b0:5b:a7:bb:9a:bc:bf:2e:4e:2f: ac:49:8a:b2:7c:8c:1f:1d:46:38:14:d8:40:89:cf:58:9d:a9: 7b:41:15:63:ce:b1:9f:34:3d:a3:8d:10:c3:e0:a1:a1:f9:ab: ac:03:fa:9e:ce:17:cd:a2:15:ba:3d:d7:f9:3f:1f:00:7a:21: 5f:aa:8d:76:50:c1:15:bb:8e:4a:a3:2f:f2:51:cb:58:d7:55: e7:d9:93:ac:82:e6:68:84:28:d2:bb:d6:1c:b6:ab:21:83:f5: 1f:ec:80:97:75:f5:d8:f1:7a:6f:8a:e5:a9:67:e7:7d:81:f5: c0:32:06:23:b9:86:08:40:fe:c9:19:b3:c4:1e:26:f9:11:20: fe:83:95:4e:7e:f7:b0:18:22:3e:1d:f6:5d:48:05:74:88:2f: 8a:dd:31:0c:aa:86:d3:81:31:4a:47:32:33:58:c4:49:9b:75: 5e:aa:a8:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTQ2OTExMC8GA1UEBRMoQkVDMjgyNDg2RjM3RTMxNkYxN0I1MjBCNDU1Mjg3QkMz MDdGODlFODAeFw0yNDExMjEwNDU1MTVaFw0yNDExMjgwNDU1MTVaMBgxFjAUBgNV BAMTDTY3M2ViZDM0LTc1YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4cMvFlnKfgoxPE/wHtL5jdrFnIuJnuOW3EN0m6ExB5wr7NVI41TxZw4T3QXja F1RyOA7jgK/OnZDEkM4Zv82g0LggnVntZ3acHbSzuIwRZxGYGsv/PXk1gVT0EqbN xKuqZXwdr2eYurrUVGOYKMQcLEe+uhESYb4ArzZ+kpEuQ6qMH8/QbDh/rx/h0UfU 5l7sZ77ewI9B0NtJTF38Pkrzi33UkWTb4WoSbEV04/p+wsgz5UHfHPUqmckuMcPO dz0FSrch1N8LsL9e9wDWh/ZY2hcdgpXpZjW6xOrmyV6AoAWx3BHGwBgD1CM3vwBL 5xKcACW3a9sd+EM7fpTD5kk1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3aKZ+VO4 qSc+plQiKHZFuhY+N/cwHwYDVR0jBBgwFoAUvsKCSG834xbxe1ILRVKHvDB/iegw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNDY5L0Y1ODQzOEZFRjdF MzExRUVCOUExMjkxQUM0RjlBRTAyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2ll Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnNLQ1NHODM0eGJ4ZTFJTFJWS0h2REJfaWVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NDY5L0Y1ODQzOEZFRjdFMzExRUVCOUExMjkxQUM0RjlBRTAyL3ZzS0NTRzgzNHhi eGUxSUxSVktIdkRCX2llZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSpbwNlAjyvlPlYBjOrLTlBTpnfKh3weHb2L6s2UQih7LI/I2vr+BrG 6ybccoYTBoV9Rp4Bx2JHwj3L9v9CciQPi8cU0Vcsa26YX91zobjtsFunu5q8vy5O L6xJirJ8jB8dRjgU2ECJz1idqXtBFWPOsZ80PaONEMPgoaH5q6wD+p7OF82iFbo9 1/k/HwB6IV+qjXZQwRW7jkqjL/JRy1jXVefZk6yC5miEKNK71hy2qyGD9R/sgJd1 9djxem+K5aln532B9cAyBiO5hghA/skZs8QeJvkRIP6DlU5+97AYIj4d9l1IBXSI L4rdMQyqhtOBMUpHMjNYxEmbdV6qqDo= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:19 2024 by rpki-client on console-fra.rpki-client.org