$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: dxpzBKz59vHo6AxjxKcLu7Rk+3IOWo9WI709o91NZ1c= Subject key identifier: 74:F7:2C:89:EE:33:CB:73:CB:41:D2:06:BB:FF:8C:C3:91:FA:0C:90 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0FE8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 0FB5 Signing time: Wed 20 Nov 2024 17:26:11 +0000 Manifest this update: Wed 20 Nov 2024 17:26:11 +0000 Manifest next update: Wed 27 Nov 2024 17:26:11 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: +pPCXfs8EY34giJvTgc8cGy5vWAM0ehTc1dchAndi4g=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: 3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=) 6: 6007188446B111E98B793856C4F9AE02.roa (hash: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE=) 7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: +BIl0WRLfLsKpfnz3iZ4Rc3b06FaqG+le22fYJBc22s=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: l97Qx+I5/FSi2nPuMo4C+TzlRFSgb0mZdEVP8fFlEzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: Nov 20 17:26:11 2024 GMT Not After : Nov 27 17:26:11 2024 GMT Subject: CN=673e1bb3-3533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:de:fa:3e:6d:da:66:da:87:97:04:b9:9d: 7c:ac:9f:a5:2e:e4:70:96:76:58:9a:68:e9:52:5c: 87:b1:5b:05:9f:df:0b:9d:94:19:c2:ae:da:e0:a8: 79:69:7d:a1:8d:34:b0:6f:06:d1:6d:20:3b:fa:7c: 2c:da:c5:d3:77:70:4f:8d:95:79:31:c8:d9:78:fb: 37:1f:8d:46:c2:88:7b:dc:f4:dc:07:12:88:fe:90: 0d:a9:b3:dc:78:2b:25:60:b0:21:af:5f:1c:20:c1: 4d:32:29:4c:3e:1b:99:70:f3:fd:4d:fb:a9:67:ec: ed:ce:ce:20:9a:1b:4c:51:0b:8e:2e:aa:42:6c:7c: 5a:22:59:70:45:0f:d4:34:fa:22:cc:99:44:c6:db: a5:14:fa:0f:87:df:da:80:cc:50:7f:7a:60:80:b8: c6:19:07:21:e8:3a:2d:ae:e2:e3:af:03:d1:32:9f: a9:5b:c9:ff:7c:f1:cc:ca:9d:d3:8e:02:6c:66:c4: 3f:c4:a5:e8:e0:ba:6a:6d:bb:38:b9:91:e3:96:65: c4:f5:ec:c4:c0:27:56:93:1e:28:d9:7a:ec:3e:41: cc:49:61:09:7a:4e:25:43:ad:87:84:9b:d9:e8:fc: ed:ca:4b:6f:58:93:f6:1a:63:56:0e:da:15:7b:5b: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:2C:89:EE:33:CB:73:CB:41:D2:06:BB:FF:8C:C3:91:FA:0C:90 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:21:3f:cb:78:e3:53:d0:46:65:30:cc:1c:3a:3a:e7:51:71: 70:3a:d9:36:88:2d:28:e8:cb:09:e1:1b:69:6f:d0:83:27:88: 22:5a:7a:ce:98:91:b8:54:5b:ae:51:f0:47:9c:d6:37:07:31: fe:c7:67:d6:d1:6f:8f:9e:81:b8:92:3e:63:84:5b:c5:77:df: 5d:56:f7:05:25:9e:27:b9:de:da:80:18:fc:ef:a4:ad:2e:cd: b6:08:c5:cd:e8:65:0d:54:20:fc:ca:41:d3:f2:e9:5f:30:8c: 80:f6:6a:10:94:f3:fe:92:ba:40:41:b5:bc:ae:b3:09:97:8e: 16:0b:d2:7e:82:40:cd:72:61:6a:3e:4b:8f:03:c5:93:56:66: a8:ae:9e:7a:d1:da:d6:98:9a:c2:13:57:96:bd:b1:29:18:be: fb:cf:32:6e:09:fe:10:26:e7:11:3a:bd:96:f9:fe:e6:b2:4a: 8f:d9:e6:42:eb:37:98:cf:78:3d:9d:e0:f0:17:9e:e4:30:ae: 7f:4f:09:ab:87:f7:60:54:37:47:cb:1e:7b:fe:6b:a7:b2:6b: fe:2a:ae:de:13:91:15:40:ec:a1:e9:4b:34:54:8c:e8:60:fe: 92:ac:92:5c:83:fc:8b:49:89:bb:e7:6d:62:f5:0a:43:5c:90: ee:e4:95:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQxMTIwMTcyNjExWhcNMjQxMTI3MTcyNjExWjAYMRYwFAYD VQQDEw02NzNlMWJiMy0zNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw3e+j5t2mbah5cEuZ18rJ+lLuRwlnZYmmjpUlyHsVsFn98LnZQZwq7a4Kh5 aX2hjTSwbwbRbSA7+nws2sXTd3BPjZV5McjZePs3H41Gwoh73PTcBxKI/pANqbPc eCslYLAhr18cIMFNMilMPhuZcPP9TfupZ+ztzs4gmhtMUQuOLqpCbHxaIllwRQ/U NPoizJlExtulFPoPh9/agMxQf3pggLjGGQch6DotruLjrwPRMp+pW8n/fPHMyp3T jgJsZsQ/xKXo4Lpqbbs4uZHjlmXE9ezEwCdWkx4o2XrsPkHMSWEJek4lQ62HhJvZ 6PztyktvWJP2GmNWDtoVe1vEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT3LInu M8tzy0HSBrv/jMOR+gyQMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2IT/LeONT0EZlMMwcOjrnUXFwOtk2iC0o6MsJ4Rtpb9CDJ4giWnrO mJG4VFuuUfBHnNY3BzH+x2fW0W+PnoG4kj5jhFvFd99dVvcFJZ4nud7agBj876St Ls22CMXN6GUNVCD8ykHT8ulfMIyA9moQlPP+krpAQbW8rrMJl44WC9J+gkDNcmFq PkuPA8WTVmaorp560drWmJrCE1eWvbEpGL77zzJuCf4QJucROr2W+f7mskqP2eZC 6zeYz3g9neDwF57kMK5/Twmrh/dgVDdHyx57/munsmv+Kq7eE5EVQOyh6Us0VIzo YP6SrJJcg/yLSYm7521i9QpDXJDu5JXA -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:02 2024 by rpki-client on console-fra.rpki-client.org