$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: B8dnmagboyrWNJxg3QAU/kcXV/M/+9sNYSQq8Rf2KZM= Subject key identifier: BE:9E:87:25:E5:03:82:FE:B5:3E:52:2E:99:4C:05:8E:E7:0D:55:0F Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0CA0 Signing time: Fri 22 Nov 2024 18:05:53 +0000 Manifest this update: Fri 22 Nov 2024 18:05:53 +0000 Manifest next update: Fri 29 Nov 2024 18:05:53 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: TJGerAP2nVheL+zkYEAgEQbR+MdNDP31mk7wmv4axYY=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 50X2YknGPNQ7f3oYcKge6hlv5pd3PV5tqtttq6Hz8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Nov 22 18:05:53 2024 GMT Not After : Nov 29 18:05:53 2024 GMT Subject: CN=6740c801-dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:19:a3:a9:73:7a:b2:f9:a1:14:c9:2f:59: f8:09:d6:47:e7:60:a9:25:c7:d7:c2:5a:64:28:4d: 57:b2:8c:ff:f2:11:d8:7e:03:38:2e:46:32:a5:bc: 94:6f:02:cb:d7:fa:e1:47:f4:52:f7:79:94:e6:ca: 74:54:9d:d0:41:d3:b4:a5:9f:62:62:8f:3e:91:74: 3d:28:34:93:06:80:c8:6e:d9:61:7f:4a:2c:8f:06: 57:26:a3:f1:6e:c4:e9:2d:d0:ed:0d:ea:52:b7:59: 12:af:4d:d2:1b:4e:d0:34:b9:2c:ee:98:29:72:6a: 8c:ab:c7:cd:4f:08:cd:0b:4e:a7:c9:05:91:3b:05: bc:d1:40:25:e6:b8:b9:62:38:f8:72:fd:d8:c3:4b: a1:6a:40:1d:cc:a4:bb:57:b7:e7:68:31:3e:9d:be: 72:10:8d:a0:8b:42:35:6c:7e:7a:32:5b:d6:ba:d0: 0c:e0:44:b0:ac:b2:96:60:c1:e7:66:ac:ab:35:d2: e3:e2:f4:07:e2:ac:4d:f7:17:a7:0a:53:d6:8f:54: 08:9d:2d:ff:24:8d:ad:70:63:dd:d8:c3:65:95:0c: 3e:5f:f8:d3:c6:0a:26:de:c5:07:66:d5:b2:9c:e1: 4b:2b:a0:79:bb:c4:cb:fa:ad:d7:b9:38:2d:fd:d8: 5e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:87:25:E5:03:82:FE:B5:3E:52:2E:99:4C:05:8E:E7:0D:55:0F X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:29:62:d4:82:52:d6:5d:d6:52:f2:e7:6a:54:05:cb:10:ea: 7e:ac:c9:7a:db:92:2e:64:81:7e:8c:92:b3:11:26:da:2d:4e: fe:d8:de:7e:24:8f:c5:d4:ac:8e:8c:f3:da:dd:1d:15:01:ed: e8:c7:64:44:1b:5e:cc:70:ca:32:d0:09:af:f9:0a:3d:11:ea: 17:6a:23:20:24:2d:8a:19:8d:42:19:3e:9b:e5:b2:42:32:4a: 6a:96:cd:35:0d:e9:2f:cb:11:d8:62:e3:30:bc:26:98:01:15: 6d:1a:4c:18:5b:3d:ad:db:a7:74:36:d3:21:08:85:97:92:bd: 47:06:4f:dd:03:2c:7b:58:d0:3a:6a:80:7f:f6:cd:1e:01:40: 23:e7:0e:e5:1f:57:40:8e:22:d0:21:a6:a3:0c:a1:78:9b:12: 17:0f:22:6d:bd:6a:32:fd:e0:0b:ff:99:db:77:e9:f8:a6:2c: a4:46:f0:8a:ab:20:67:66:3b:52:0a:6e:76:4e:0d:24:ea:35: 1f:ca:40:43:a3:62:39:d8:bd:f8:be:8b:6e:ff:c5:74:f4:af: e8:44:80:8a:8d:41:39:43:f9:2e:ed:ad:f7:ae:06:71:48:2a: e9:ee:7b:81:65:d5:7d:0a:2b:bf:86:5c:f2:4b:ff:bd:97:b1: 90:01:4d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjQxMTIyMTgwNTUzWhcNMjQxMTI5MTgwNTUzWjAYMRYwFAYD VQQDEw02NzQwYzgwMS1kYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1IZo6lzerL5oRTJL1n4CdZH52CpJcfXwlpkKE1Xsoz/8hHYfgM4LkYypbyU bwLL1/rhR/RS93mU5sp0VJ3QQdO0pZ9iYo8+kXQ9KDSTBoDIbtlhf0osjwZXJqPx bsTpLdDtDepSt1kSr03SG07QNLks7pgpcmqMq8fNTwjNC06nyQWROwW80UAl5ri5 Yjj4cv3Yw0uhakAdzKS7V7fnaDE+nb5yEI2gi0I1bH56MlvWutAM4ESwrLKWYMHn ZqyrNdLj4vQH4qxN9xenClPWj1QInS3/JI2tcGPd2MNllQw+X/jTxgom3sUHZtWy nOFLK6B5u8TL+q3XuTgt/dhe7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6ehyXl A4L+tT5SLplMBY7nDVUPMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKWLUglLWXdZS8udqVAXLEOp+rMl625IuZIF+jJKzESbaLU7+2N5+ JI/F1KyOjPPa3R0VAe3ox2REG17McMoy0Amv+Qo9EeoXaiMgJC2KGY1CGT6b5bJC Mkpqls01DekvyxHYYuMwvCaYARVtGkwYWz2t26d0NtMhCIWXkr1HBk/dAyx7WNA6 aoB/9s0eAUAj5w7lH1dAjiLQIaajDKF4mxIXDyJtvWoy/eAL/5nbd+n4piykRvCK qyBnZjtSCm52Tg0k6jUfykBDo2I52L34votu/8V09K/oRICKjUE5Q/ku7a33rgZx SCrp7nuBZdV9Ciu/hlzyS/+9l7GQAU0M -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org