$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: bsdtzsiro3D+1TDHRum6Hsz/gwQmWC4Zlmbjkyn71Ew= Subject key identifier: F8:7D:60:AC:4F:FA:E6:E7:46:1C:80:15:D7:F8:7B:0D:28:93:04:77 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0C0B Signing time: Fri 22 Nov 2024 18:17:11 +0000 Manifest this update: Fri 22 Nov 2024 18:17:11 +0000 Manifest next update: Fri 29 Nov 2024 18:17:11 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: Um6vmVXpOtPW2++Y6fVqOTXPR4KjOHjb6kemHWT/2jY=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: lzPPJbLm0fCvj0Ivmx0f1E3fqtXDlgUxOWdfG9K7YJo=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: PZbYQOhl9BOt/yYgDyv+so0CeKcYnz1dWkfLTEsjy0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Nov 22 18:17:11 2024 GMT Not After : Nov 29 18:17:11 2024 GMT Subject: CN=6740caa7-ed75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:a1:55:df:3c:30:66:0d:7c:23:3a:70:58: 0f:34:74:b9:8e:b8:51:46:98:a0:ad:74:5f:fa:59: 6f:7c:61:02:c6:72:ca:9c:82:04:ce:ce:7d:7e:8a: 1e:48:99:09:0a:6b:41:9e:b5:56:4c:42:61:5f:fd: 07:05:2a:19:e6:46:a7:d6:12:d8:a7:da:17:2c:86: 88:64:0e:27:09:88:e7:6b:0b:b4:88:0d:9f:49:28: 5b:d8:2f:41:be:53:8d:4b:cd:6f:10:2c:55:3b:47: 06:ed:d0:20:23:af:c9:63:38:b6:9f:dd:de:03:d2: e6:28:cb:1e:88:9a:98:2c:40:17:d9:31:1d:18:64: e4:e5:04:1d:f3:f5:82:b2:b4:60:3f:a1:b9:1d:69: f2:4d:d9:3a:4f:a6:60:f5:02:71:ad:d3:19:76:4b: 7f:80:b0:48:b7:25:4f:c2:e8:79:6b:5a:7c:f5:bc: e7:67:bb:9e:18:1a:19:a9:cd:bb:55:5e:ae:77:54: e6:5d:d9:e7:14:02:a3:d6:d7:e5:da:27:e9:46:ca: f8:01:e0:b9:79:b9:7a:c0:78:3c:60:ef:c7:c4:1a: 89:e1:1c:24:11:cb:23:8a:ee:6f:8c:e9:6b:1e:57: 20:19:f8:a0:23:d1:f2:8b:30:5a:01:ae:48:97:e6: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:60:AC:4F:FA:E6:E7:46:1C:80:15:D7:F8:7B:0D:28:93:04:77 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:12:1e:95:c2:a2:b1:41:92:ac:be:4e:9d:ec:d6:32:81:72: 4a:e5:8e:02:52:b0:b5:f0:1d:b4:53:8c:4b:3e:17:35:dc:46: 4e:05:4f:51:88:ad:ae:b9:42:b8:5c:95:31:36:6e:6d:1e:80: e0:d4:76:61:11:75:57:d0:ef:09:f0:40:96:db:e2:18:33:d8: 8c:39:d5:df:57:b4:fb:ec:3a:d5:76:30:c2:72:1e:62:19:ae: 39:90:fa:ab:5f:ef:5c:80:dc:c8:29:e9:41:70:2e:0f:15:9a: f0:fa:c1:dc:e3:34:22:17:5d:c9:57:97:7f:ca:63:cb:50:65: e8:f3:15:26:2f:58:05:af:7a:29:78:4c:54:0a:d2:22:7a:76: ff:d7:2d:d2:88:df:d0:f5:cf:1a:aa:a3:cb:c9:b7:e5:40:1e: 1c:6f:ee:ad:15:82:8d:62:25:a2:f8:87:1a:5b:e3:2c:87:fd: 3f:04:4f:1d:6e:6f:c2:3f:1f:58:95:26:97:c0:e7:4f:8f:4b: 3d:78:fc:50:cd:14:3a:15:0b:13:74:ab:37:0e:e9:86:7b:28: 2e:3d:50:0e:27:5b:34:30:ae:61:ce:4d:da:7b:3f:9f:78:d7: 82:bc:59:eb:a1:b7:87:db:37:68:fb:1f:e8:61:e6:d6:9f:e3: 60:04:29:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjQxMTIyMTgxNzExWhcNMjQxMTI5MTgxNzExWjAYMRYwFAYD VQQDEw02NzQwY2FhNy1lZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dWhVd88MGYNfCM6cFgPNHS5jrhRRpigrXRf+llvfGECxnLKnIIEzs59fooe SJkJCmtBnrVWTEJhX/0HBSoZ5kan1hLYp9oXLIaIZA4nCYjnawu0iA2fSShb2C9B vlONS81vECxVO0cG7dAgI6/JYzi2n93eA9LmKMseiJqYLEAX2TEdGGTk5QQd8/WC srRgP6G5HWnyTdk6T6Zg9QJxrdMZdkt/gLBItyVPwuh5a1p89bznZ7ueGBoZqc27 VV6ud1TmXdnnFAKj1tfl2ifpRsr4AeC5ebl6wHg8YO/HxBqJ4RwkEcsjiu5vjOlr HlcgGfigI9HyizBaAa5Il+bWLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh9YKxP +ubnRhyAFdf4ew0okwR3MB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkEh6VwqKxQZKsvk6d7NYygXJK5Y4CUrC18B20U4xLPhc13EZOBU9R iK2uuUK4XJUxNm5tHoDg1HZhEXVX0O8J8ECW2+IYM9iMOdXfV7T77DrVdjDCch5i Ga45kPqrX+9cgNzIKelBcC4PFZrw+sHc4zQiF13JV5d/ymPLUGXo8xUmL1gFr3op eExUCtIienb/1y3SiN/Q9c8aqqPLybflQB4cb+6tFYKNYiWi+IcaW+Msh/0/BE8d bm/CPx9YlSaXwOdPj0s9ePxQzRQ6FQsTdKs3DumGeyguPVAOJ1s0MK5hzk3aez+f eNeCvFnrobeH2zdo+x/oYebWn+NgBCmK -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org