$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft File: Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json) Hash identifier: VyDiCdIyBaN9ErzvPl6z8THdxjN9RA+vd4P7MexhQRA= Subject key identifier: A5:F1:E8:27:30:6C:C9:65:F8:48:6E:B9:F2:35:89:8C:A5:59:27:E9 Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D Certificate issuer: /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft Manifest number: 20 Signing time: Wed 05 Feb 2025 06:20:18 +0000 Manifest this update: Wed 05 Feb 2025 06:20:17 +0000 Manifest next update: Wed 12 Feb 2025 06:20:17 +0000 Files and hashes: 1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: 2GfsBVTe99SZOdOzvqHEwQAx6NEnxyml6VBT1j70Ag0=) 2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CC02 Validity Not Before: Feb 5 06:20:17 2025 GMT Not After : Feb 12 06:20:17 2025 GMT Subject: CN=67a30321-59db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:96:af:6f:e7:0d:b9:f7:2b:32:b6:0a:6c: 30:63:a1:70:3a:6c:45:ae:f0:0b:d7:94:3f:96:26: 77:44:03:ef:3a:ed:20:e6:0b:e0:0f:b1:cb:eb:bf: 2b:76:18:11:8d:9e:bc:84:fe:cc:81:92:ff:f3:cf: 53:ff:75:fa:47:8a:ed:c4:cd:bc:ea:e6:23:9f:25: 3b:13:ab:7a:c1:33:29:c3:9c:a0:45:5e:37:54:ee: a2:20:46:e5:ba:98:9b:e2:2a:52:50:77:87:a6:95: 3f:e7:c5:f7:ed:0d:89:7b:9a:91:78:67:51:3f:49: db:e9:18:95:11:c8:92:dc:2f:14:c5:b1:01:cb:dd: 85:79:d1:86:6e:ba:2c:6f:b4:22:a9:63:a0:be:26: 89:e1:0c:b2:a6:05:05:0e:a6:92:a1:c8:fa:b2:5a: 33:1d:59:85:b8:6b:ce:94:91:a0:7e:fc:b7:e6:07: f4:6a:81:5b:18:84:e7:d3:a9:06:4e:b1:87:fa:b2: 7d:a1:b0:eb:d3:a2:4b:e8:bb:36:27:aa:7d:be:67: da:77:9a:e8:d7:cb:d3:5c:67:6c:13:ed:20:45:43: 6c:0c:cd:f6:92:03:d8:2c:48:62:eb:f1:a1:78:b8: 56:05:6f:a3:63:77:84:2f:1d:43:fe:87:3e:61:fd: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:E8:27:30:6C:C9:65:F8:48:6E:B9:F2:35:89:8C:A5:59:27:E9 X509v3 Authority Key Identifier: keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c4:b4:b2:6a:cc:08:e5:b0:68:e8:9e:88:5b:63:85:85:62: 79:8d:6b:43:93:97:6f:7d:a5:e1:34:fa:82:4b:0b:8d:81:83: ad:06:db:71:3d:5e:f6:ef:43:e9:0b:fc:e5:d2:7d:fd:35:ab: e4:da:33:2b:10:d8:23:ee:e5:b1:5d:3e:8a:75:b0:44:fc:b4: 59:82:ad:6f:40:5c:84:fc:d5:ec:f6:b3:b9:08:7d:87:39:c7: d6:cc:b0:d8:2a:76:6b:6f:a5:23:bf:e5:33:3d:2d:0f:54:17: 8a:45:90:d0:90:5d:65:df:21:c8:ea:6d:52:8c:b1:58:e2:9c: 44:80:e0:40:36:ce:ce:33:2e:eb:4d:01:26:7e:27:c3:db:99: eb:aa:3e:51:72:a1:56:cf:5c:aa:92:1b:c4:14:72:a9:2f:25: ff:c8:d2:2e:4e:aa:95:e7:c6:5d:e8:06:1e:6f:9f:3e:f2:16: 91:64:c1:9c:bb:ab:fb:e6:55:3f:dd:b1:60:03:29:d8:39:56: f8:0f:06:30:7a:85:23:1b:a8:4d:91:08:8b:52:e3:74:91:c9: 6b:6f:ac:56:56:2d:6f:8b:9d:45:4c:90:f2:30:b3:9c:ed:3a: 20:4f:3b:45:40:3a:86:80:69:87:6b:14:5c:92:e7:d3:48:59: a3:01:95:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0MwMjExMC8GA1UEBRMoNTcyRkJGMUFDNEQyRjg0OUUyRjVCQjgwNzY3NEYwMUJF QkYxNzI5RDAeFw0yNTAyMDUwNjIwMTdaFw0yNTAyMTIwNjIwMTdaMBgxFjAUBgNV BAMTDTY3YTMwMzIxLTU5ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2KJavb+cNufcrMrYKbDBjoXA6bEWu8AvXlD+WJndEA+867SDmC+APscvrvyt2 GBGNnryE/syBkv/zz1P/dfpHiu3Ezbzq5iOfJTsTq3rBMynDnKBFXjdU7qIgRuW6 mJviKlJQd4emlT/nxfftDYl7mpF4Z1E/SdvpGJURyJLcLxTFsQHL3YV50YZuuixv tCKpY6C+JonhDLKmBQUOppKhyPqyWjMdWYW4a86UkaB+/LfmB/RqgVsYhOfTqQZO sYf6sn2hsOvTokvouzYnqn2+Z9p3mujXy9NcZ2wT7SBFQ2wMzfaSA9gsSGLr8aF4 uFYFb6Njd4QvHUP+hz5h/Y2/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpfHoJzBs yWX4SG658jWJjKVZJ+kwHwYDVR0jBBgwFoAUVy+/GsTS+Eni9buAdnTwG+vxcp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDQzAyLzcwRTM4N0RDQjg2 QjExRUY5QTZBNTA1OEM0RjlBRTAyL1Z5LV9Hc1RTLUVuaTlidUFkblR3Ry12eGNw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnktX0dzVFMtRW5pOWJ1QWRuVHdHLXZ4Y3AwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD QzAyLzcwRTM4N0RDQjg2QjExRUY5QTZBNTA1OEM0RjlBRTAyL1Z5LV9Hc1RTLUVu aTlidUFkblR3Ry12eGNwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3EtLJqzAjlsGjonohbY4WFYnmNa0OTl299peE0+oJLC42Bg60G23E9 XvbvQ+kL/OXSff01q+TaMysQ2CPu5bFdPop1sET8tFmCrW9AXIT81ez2s7kIfYc5 x9bMsNgqdmtvpSO/5TM9LQ9UF4pFkNCQXWXfIcjqbVKMsVjinESA4EA2zs4zLutN ASZ+J8PbmeuqPlFyoVbPXKqSG8QUcqkvJf/I0i5OqpXnxl3oBh5vnz7yFpFkwZy7 q/vmVT/dsWADKdg5VvgPBjB6hSMbqE2RCItS43SRyWtvrFZWLW+LnUVMkPIws5zt OiBPO0VAOoaAaYdrFFyS59NIWaMBlXE= -----END CERTIFICATE-----Generated at Thu Feb 6 04:48:17 2025 by rpki-client