$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: qCbTRC8XTYemnS+XMoqbP5VbWUnGvjejRGzlC7rJ5+w= Subject key identifier: E5:9B:6C:D7:71:35:5C:6C:0C:A7:A7:7B:CC:BF:C7:F7:B8:1A:BF:25 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 26 Signing time: Sat 23 Nov 2024 05:44:19 +0000 Manifest this update: Sat 23 Nov 2024 05:44:18 +0000 Manifest next update: Sat 30 Nov 2024 05:44:18 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: A+Sl8oOCIE5lb1dmudK1LskIulyxmvEIixUPNxLzu0Y=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: P0ja5yGMmuugrOF5BJ+3udMpfSg7jsGxtmTDuFAzbtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Nov 23 05:44:18 2024 GMT Not After : Nov 30 05:44:18 2024 GMT Subject: CN=67416bb3-c4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:0b:13:ab:28:fa:7d:65:5b:74:f7:ed:ec: 7d:e2:17:20:3d:f9:72:66:21:ef:73:dc:a5:6f:8c: 0f:6a:14:ff:67:47:7b:0b:fb:5c:2b:ff:33:62:a2: bf:9a:3d:a2:78:8d:61:2f:0b:79:06:28:f9:12:4c: 85:73:bb:c1:30:e0:bd:ad:dc:4b:32:2d:8d:bd:ec: 04:ac:63:e9:13:ab:fc:ce:a8:80:8d:3e:4a:03:f9: 1c:9c:11:10:11:72:24:3f:ac:7a:fa:62:71:e7:0f: 43:61:fd:27:74:a5:57:71:de:b4:dc:57:f6:12:9f: b5:a8:2f:f0:3a:00:2c:68:5b:83:01:cf:f3:d1:fb: f5:6d:57:be:03:51:a8:ab:67:8f:dc:1a:51:87:cf: fe:f3:cb:10:b9:80:13:f0:f5:ed:bf:2b:ac:38:11: 1f:a4:3b:e4:f1:2b:90:b5:a0:1e:11:fc:3a:ac:8b: 85:5b:3b:eb:1d:3e:4a:7d:51:93:7b:2f:8b:f1:92: 10:b8:94:c5:1b:5d:a3:9a:38:a5:01:e8:5f:38:02: f3:f9:20:88:3b:0d:bf:24:97:05:95:11:c3:40:82: 7f:29:40:2c:e0:c0:fb:90:fd:48:cd:09:92:85:10: 6c:3b:f6:e5:6a:65:51:53:50:e9:d4:4b:6f:a2:e5: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:6C:D7:71:35:5C:6C:0C:A7:A7:7B:CC:BF:C7:F7:B8:1A:BF:25 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fb:00:92:26:6f:c9:6d:1d:e0:b1:c9:a9:36:99:4b:7b:96: e0:e2:32:05:17:ee:50:4d:c1:db:c6:04:ec:c6:04:c6:9c:08: 12:ed:db:ee:9c:fd:f8:1a:e4:21:b5:17:d6:3b:11:c4:09:1d: a7:40:9b:be:d3:22:92:29:c8:26:9c:da:a0:d1:bb:b4:2e:fd: 33:bb:4c:21:ce:a9:7a:40:76:47:d0:43:32:b0:24:e1:41:d2: 55:42:d5:cb:a8:e6:64:a2:32:f8:06:2b:74:b3:35:8a:39:16: 83:15:88:d2:a3:b6:cc:12:44:ad:d0:06:c5:8a:07:e2:b8:b2: 71:64:a6:0c:10:90:ed:80:47:b9:2e:66:d3:6d:3f:5c:f2:a5: 5b:2e:3e:54:3a:36:05:10:e9:ba:bb:ad:92:1e:e6:45:75:82: e3:b9:84:06:1d:89:67:e1:1c:ce:3c:9f:93:8a:db:f9:c4:03: 04:74:41:01:3a:a2:2e:8c:3c:ec:71:57:c4:74:29:b6:41:2f: 72:26:9f:80:6e:d0:7b:c2:7b:d5:c7:d1:e5:4b:dd:4f:95:93: b4:19:58:af:2c:76:e2:b6:67:4e:75:66:49:e4:ec:6b:30:62: 51:f9:98:b7:bb:0d:20:7e:72:05:9d:08:ea:fe:5c:1a:44:88: 05:5f:49:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0QxNDExMC8GA1UEBRMoQkM0MkMzQkM4NzVDMDY3NkIyOUZEN0FCQzlGODFCNEE5 MUZEOEE4OTAeFw0yNDExMjMwNTQ0MThaFw0yNDExMzAwNTQ0MThaMBgxFjAUBgNV BAMTDTY3NDE2YmIzLWM0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvVAsTqyj6fWVbdPft7H3iFyA9+XJmIe9z3KVvjA9qFP9nR3sL+1wr/zNior+a PaJ4jWEvC3kGKPkSTIVzu8Ew4L2t3EsyLY297ASsY+kTq/zOqICNPkoD+RycERAR ciQ/rHr6YnHnD0Nh/Sd0pVdx3rTcV/YSn7WoL/A6ACxoW4MBz/PR+/VtV74DUair Z4/cGlGHz/7zyxC5gBPw9e2/K6w4ER+kO+TxK5C1oB4R/Dqsi4VbO+sdPkp9UZN7 L4vxkhC4lMUbXaOaOKUB6F84AvP5IIg7Db8klwWVEcNAgn8pQCzgwPuQ/UjNCZKF EGw79uVqZVFTUOnUS2+i5XtnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Zts13E1 XGwMp6d7zL/H97gavyUwHwYDVR0jBBgwFoAUvELDvIdcBnayn9eryfgbSpH9iokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RDE0L0NEQjNCOUFBNzRB RjExRUY5MUE2NjE0NkM0RjlBRTAyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkVMRHZJZGNCbmF5bjllcnlmZ2JTcEg5aW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RDE0L0NEQjNCOUFBNzRBRjExRUY5MUE2NjE0NkM0RjlBRTAyL3ZFTER2SWRjQm5h eW45ZXJ5ZmdiU3BIOWlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFv7AJImb8ltHeCxyak2mUt7luDiMgUX7lBNwdvGBOzGBMacCBLt2+6c /fga5CG1F9Y7EcQJHadAm77TIpIpyCac2qDRu7Qu/TO7TCHOqXpAdkfQQzKwJOFB 0lVC1cuo5mSiMvgGK3SzNYo5FoMViNKjtswSRK3QBsWKB+K4snFkpgwQkO2AR7ku ZtNtP1zypVsuPlQ6NgUQ6bq7rZIe5kV1guO5hAYdiWfhHM48n5OK2/nEAwR0QQE6 oi6MPOxxV8R0KbZBL3Imn4Bu0HvCe9XH0eVL3U+Vk7QZWK8sduK2Z051Zknk7Gsw YlH5mLe7DSB+cgWdCOr+XBpEiAVfSc8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org