$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: Qo3AAWZRpgDNamrKMfQFWZdaOJLDKCgX4KbsSA3thRA= Subject key identifier: 52:FA:15:C5:AB:F7:EE:22:45:78:A4:6F:E9:55:67:9A:05:35:F0:DB Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0BC7 Signing time: Fri 22 Nov 2024 18:33:50 +0000 Manifest this update: Fri 22 Nov 2024 18:33:50 +0000 Manifest next update: Fri 29 Nov 2024 18:33:50 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: JwgotMhbrdU0C9PRCIzrnJWsYYyavoB47KmjeAS2wTU=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Nov 22 18:33:50 2024 GMT Not After : Nov 29 18:33:50 2024 GMT Subject: CN=6740ce8e-b512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:8d:47:21:91:11:f2:0a:50:76:24:13:1d: 2a:98:58:2a:a0:55:f5:db:8b:f0:f6:27:ae:de:04: 02:88:5a:f8:45:80:79:52:d0:f9:01:cb:6b:21:3f: 9a:b1:80:e1:41:33:85:99:3b:c5:03:d2:16:2c:e4: 78:8d:2e:33:0c:60:d5:d3:d0:b6:7e:6b:f6:28:dc: 4a:55:d1:1f:ce:b1:66:b7:b1:b2:8f:81:62:0f:50: e4:0c:c5:58:88:35:98:e2:30:dc:01:4d:94:3d:25: 62:2e:20:8b:d9:f6:51:d2:c1:be:76:6d:03:dc:c9: 67:99:9c:ef:ca:7c:b2:b3:b4:2b:2c:f4:99:d9:5c: 60:b3:9e:37:65:8c:9b:40:5a:9a:4f:f3:5c:c0:5a: fb:d4:e0:f9:ac:84:40:27:1d:6d:9d:da:98:1c:2b: 98:a5:98:f5:9d:91:05:80:c9:c5:90:96:7a:57:69: 48:1d:9a:99:5b:ee:f0:3e:61:41:5a:cb:7c:c7:8d: 86:a7:4c:c9:a0:b7:43:00:b1:77:47:b5:ef:ce:09: ff:98:d5:22:44:56:86:63:20:a7:90:4a:db:46:d2: 28:43:f6:9b:f6:e7:25:db:e6:ee:8c:9b:18:5f:49: 96:63:9f:c3:3b:c1:15:25:93:79:e9:c2:4e:10:8a: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:15:C5:AB:F7:EE:22:45:78:A4:6F:E9:55:67:9A:05:35:F0:DB X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:79:2a:e6:2f:df:eb:26:6c:19:30:86:9b:47:f9:1b:8a:8d: 13:c6:1e:51:55:3c:0e:8d:af:10:94:c6:5d:d3:a6:6c:7b:87: 4e:f7:13:55:75:e1:bb:c7:4b:33:3a:f3:0a:a3:08:0a:95:63: 9a:8c:8d:36:a2:70:fa:e5:04:eb:06:47:82:fc:17:ee:d2:82: f5:31:45:5a:9a:f7:de:7d:ae:7b:76:81:7d:46:82:86:52:ab: 03:12:40:86:96:2e:08:91:32:50:04:cd:e5:9a:b2:bd:03:ba: a8:3c:7c:c4:5f:fb:41:f6:5d:85:88:b8:c4:24:80:25:fd:89: 16:8a:d6:21:ed:61:ce:33:57:c8:72:09:45:95:dd:f5:1d:0e: 2c:9d:83:47:21:2d:b6:44:d3:4e:d0:a0:d4:27:f4:58:6d:cc: c0:e3:1b:e6:bf:a2:8e:b5:e8:7f:0c:09:f5:6c:2b:66:8e:fb: bf:f8:23:8a:de:95:49:ad:65:b0:29:d8:5a:70:d7:81:1c:0f: 2f:2e:5e:e7:f7:b4:e0:0b:98:a2:78:37:2a:61:9c:1a:89:5e: d7:b9:be:72:e8:eb:0c:ef:cd:11:a0:41:3e:76:7c:6c:8a:d8: 41:05:b6:6f:f1:3b:75:2c:9a:d1:5e:b0:ed:f5:21:cb:43:4a: da:3b:f6:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjQxMTIyMTgzMzUwWhcNMjQxMTI5MTgzMzUwWjAYMRYwFAYD VQQDEw02NzQwY2U4ZS1iNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw6NRyGREfIKUHYkEx0qmFgqoFX124vw9ieu3gQCiFr4RYB5UtD5ActrIT+a sYDhQTOFmTvFA9IWLOR4jS4zDGDV09C2fmv2KNxKVdEfzrFmt7Gyj4FiD1DkDMVY iDWY4jDcAU2UPSViLiCL2fZR0sG+dm0D3MlnmZzvynyys7QrLPSZ2Vxgs543ZYyb QFqaT/NcwFr71OD5rIRAJx1tndqYHCuYpZj1nZEFgMnFkJZ6V2lIHZqZW+7wPmFB Wst8x42Gp0zJoLdDALF3R7Xvzgn/mNUiRFaGYyCnkErbRtIoQ/ab9ucl2+bujJsY X0mWY5/DO8EVJZN56cJOEIqvlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL6FcWr 9+4iRXikb+lVZ5oFNfDbMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8eSrmL9/rJmwZMIabR/kbio0Txh5RVTwOja8QlMZd06Zse4dO9xNV deG7x0szOvMKowgKlWOajI02onD65QTrBkeC/Bfu0oL1MUVamvfefa57doF9RoKG UqsDEkCGli4IkTJQBM3lmrK9A7qoPHzEX/tB9l2FiLjEJIAl/YkWitYh7WHOM1fI cglFld31HQ4snYNHIS22RNNO0KDUJ/RYbczA4xvmv6KOteh/DAn1bCtmjvu/+COK 3pVJrWWwKdhacNeBHA8vLl7n97TgC5iieDcqYZwaiV7Xub5y6OsM780RoEE+dnxs ithBBbZv8Tt1LJrRXrDt9SHLQ0raO/Z5 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org