$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: 1X6Gtkbqk1CBR2fmxULIPfwXGLr4vUBIE5Mt936tXTc= Subject key identifier: 23:51:97:53:A8:33:C0:A4:82:68:2D:D0:10:9E:8A:48:56:1C:30:AD Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0B86 Signing time: Fri 22 Nov 2024 18:46:15 +0000 Manifest this update: Fri 22 Nov 2024 18:46:15 +0000 Manifest next update: Fri 29 Nov 2024 18:46:15 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: npD5/uz7XQ4KoUfuYLwcXDAhcjyf8LfodVKUr44bK/k=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 48GF2MfEalOknJ4Un1B+cRQbEEvbnBmSHRBaqdPfw0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Nov 22 18:46:15 2024 GMT Not After : Nov 29 18:46:15 2024 GMT Subject: CN=6740d177-0a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:40:cc:71:12:9d:f3:1b:a0:bc:3f:c8:c1: 22:67:d9:63:e4:ce:23:98:8e:9c:4b:95:33:dd:22: 79:9e:0c:80:10:32:d6:24:fb:e6:d1:3e:c9:db:49: 63:e4:03:2b:b2:8b:d7:0f:da:c5:1b:05:55:cd:64: 80:b9:4d:1b:4d:c6:7c:ce:6f:49:97:f2:1b:b2:8b: 06:8b:05:08:28:bc:7f:3b:15:7f:09:57:4a:ac:08: f1:0b:9b:80:89:74:96:b7:96:26:1f:88:5f:d1:a6: c3:98:f5:12:64:70:b4:ca:d3:9e:d9:36:e1:35:66: 64:9c:ca:8d:3f:f7:b2:b0:76:0d:a2:8d:ec:f8:7e: e2:0a:7e:72:55:d3:ef:5a:f1:3d:d1:39:9b:db:a6: 18:8f:de:f2:24:af:29:6e:eb:c0:f6:ea:5b:70:f3: a6:00:44:4b:d8:a5:43:44:94:ac:b1:e5:40:ee:2a: 7c:c3:2e:c4:79:4e:1e:8a:a1:dd:0d:d3:35:a5:1e: c0:39:4f:af:3e:3c:3d:5f:be:d6:da:43:dc:25:b9: dd:8b:ea:1b:30:53:f2:f4:1a:d6:27:f1:a6:6a:00: d0:c1:81:14:12:32:68:d3:e9:1c:9e:80:07:17:4a: 5a:10:06:98:38:4f:fc:73:9e:0f:88:ad:bb:39:9f: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:51:97:53:A8:33:C0:A4:82:68:2D:D0:10:9E:8A:48:56:1C:30:AD X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:ca:d2:df:c1:af:88:c4:bc:7c:08:d4:bc:ef:ea:38:80:77: c6:9f:45:d4:00:05:b4:0d:b3:3a:1c:88:19:a5:57:26:05:a7: 1e:4c:73:df:79:a4:fa:1f:36:d9:48:92:3e:76:a5:26:a4:78: 13:66:b5:ea:2a:23:1a:fa:b8:ed:7f:e8:0d:b5:5e:54:a0:81: d4:aa:96:0f:37:c8:db:ca:e6:bc:da:74:59:47:74:96:dc:68: 7e:b4:c7:95:79:8d:1a:7c:f8:f9:3a:b9:02:82:d1:31:99:ac: ec:04:aa:fe:ca:31:86:49:b7:bc:16:2a:31:c8:1d:60:67:e3: 70:92:26:95:22:e5:14:75:43:53:a7:f4:d2:35:97:e8:21:62: f3:8f:ee:5c:2c:99:a6:2a:39:cd:bd:2e:53:00:63:66:60:9e: 4a:b1:2b:96:85:b8:f5:5a:5d:95:7e:61:e9:3e:7c:fe:89:09: b1:b9:48:24:76:d2:e3:c5:a8:e9:59:28:bb:90:5c:b1:6d:1b: ef:7a:cf:22:b9:6a:39:b9:27:2f:22:76:fe:51:d8:82:b7:08: 42:27:13:8f:47:92:8d:52:08:5d:18:12:42:7f:2a:98:9a:5c: 7f:88:5a:a6:45:7f:42:ed:e1:62:40:9c:83:d4:dc:7e:1c:1c: 33:b3:f8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjQxMTIyMTg0NjE1WhcNMjQxMTI5MTg0NjE1WjAYMRYwFAYD VQQDEw02NzQwZDE3Ny0wYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv35AzHESnfMboLw/yMEiZ9lj5M4jmI6cS5Uz3SJ5ngyAEDLWJPvm0T7J20lj 5AMrsovXD9rFGwVVzWSAuU0bTcZ8zm9Jl/IbsosGiwUIKLx/OxV/CVdKrAjxC5uA iXSWt5YmH4hf0abDmPUSZHC0ytOe2TbhNWZknMqNP/eysHYNoo3s+H7iCn5yVdPv WvE90Tmb26YYj97yJK8pbuvA9upbcPOmAERL2KVDRJSsseVA7ip8wy7EeU4eiqHd DdM1pR7AOU+vPjw9X77W2kPcJbndi+obMFPy9BrWJ/GmagDQwYEUEjJo0+kcnoAH F0paEAaYOE/8c54PiK27OZ+5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNRl1Oo M8Ckgmgt0BCeikhWHDCtMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMytLfwa+IxLx8CNS87+o4gHfGn0XUAAW0DbM6HIgZpVcmBaceTHPf eaT6HzbZSJI+dqUmpHgTZrXqKiMa+rjtf+gNtV5UoIHUqpYPN8jbyua82nRZR3SW 3Gh+tMeVeY0afPj5OrkCgtExmazsBKr+yjGGSbe8FioxyB1gZ+NwkiaVIuUUdUNT p/TSNZfoIWLzj+5cLJmmKjnNvS5TAGNmYJ5KsSuWhbj1Wl2VfmHpPnz+iQmxuUgk dtLjxajpWSi7kFyxbRvves8iuWo5uScvInb+UdiCtwhCJxOPR5KNUghdGBJCfyqY mlx/iFqmRX9C7eFiQJyD1Nx+HBwzs/hK -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org