$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: B+VHCVi0rah4iSnbjgW5UIPuO+QE3bH4KbsmR9lXTKI= Subject key identifier: CB:A9:AF:BB:B0:FB:F5:51:32:67:55:9B:38:C8:50:58:78:39:52:F0 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 062E Signing time: Fri 22 Nov 2024 22:04:37 +0000 Manifest this update: Fri 22 Nov 2024 22:04:37 +0000 Manifest next update: Fri 29 Nov 2024 22:04:37 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: 3YH3Y4K4X6LJkBT+Se+2XzV4Fq6vJOPqFBoC9msP4OM=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: fklFDPJioLWiBQO5Ca7OiFTXJaQA8xm4ZECWPmSGBc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Nov 22 22:04:37 2024 GMT Not After : Nov 29 22:04:37 2024 GMT Subject: CN=6740fff5-1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:99:08:ad:c4:5f:5f:fc:ca:2c:9d:46:7c: ff:66:76:7d:8d:fb:43:ab:ce:c4:5b:34:29:04:af: c9:fa:1d:6e:9d:57:5b:0a:eb:34:59:02:d5:b5:ff: 91:4e:82:7b:ec:e6:3a:ce:fd:1d:11:15:e6:c7:37: ad:92:b4:79:33:1e:0f:0e:e7:5f:22:b8:d3:c5:fa: b6:66:ca:84:3c:c1:b0:b5:b9:5c:c4:15:4c:f4:85: 69:d6:5e:86:23:96:59:25:25:15:a9:ad:03:7a:a7: 32:c1:3d:8e:aa:ea:65:83:f7:c2:ea:52:67:62:6b: 98:af:0c:7a:69:90:f6:e0:24:56:fa:85:32:f2:09: b8:2a:5f:0a:30:0b:f9:9e:12:93:45:f0:b2:3c:92: 13:01:fd:b9:f1:eb:64:27:eb:29:61:9f:bd:af:80: 18:32:dc:c2:6a:da:5e:b0:aa:47:03:67:e1:5c:7a: 99:21:9f:77:32:f8:49:1c:18:46:bd:ab:ec:70:8a: d0:32:5a:43:bb:97:c4:86:de:6e:17:d4:68:60:9f: 42:43:64:3a:35:bc:11:58:ad:8d:51:cc:e5:63:e9: 2d:f7:18:41:da:cf:73:d9:10:67:33:81:e6:b4:be: a3:2f:ca:64:d3:c8:d2:63:50:c8:c3:b6:7f:15:5d: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A9:AF:BB:B0:FB:F5:51:32:67:55:9B:38:C8:50:58:78:39:52:F0 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ed:74:f1:85:70:60:11:c4:22:10:89:cd:11:76:ce:9d:52: 79:f2:e5:3f:7e:a4:00:ad:69:30:8e:5c:b6:28:00:66:7a:ab: a7:86:04:2c:8c:e6:ab:33:2e:83:5a:24:9c:e4:46:40:5d:90: 6a:52:35:a6:09:85:5c:c5:54:83:26:91:1e:63:4a:15:07:28: 3f:79:fe:4c:8f:de:fe:d8:44:e0:c9:cf:ba:cf:64:f5:2c:0e: 5d:be:58:c2:08:99:9f:4d:5a:f8:d6:38:2a:82:57:3c:ce:70: f5:39:b4:67:51:a3:1e:f9:df:bc:11:b2:07:1e:8f:bd:43:7f: fc:83:27:56:8c:e7:f0:48:03:39:bd:33:0b:f7:8f:8a:55:7a: 88:97:59:ab:3a:1f:73:ae:61:0d:fe:4d:85:63:83:bf:6a:b7: b9:c5:f0:e9:06:93:e1:82:07:f0:02:b1:8e:e4:37:16:da:6b: 7d:7a:a3:59:7c:48:e1:e8:07:4d:bc:0b:e2:d9:29:5d:15:fc: 74:e4:89:1e:52:e5:15:ae:0d:1f:3b:6e:c0:15:76:e3:3e:51: cc:44:d1:86:6b:b4:32:75:4c:c2:ed:98:7e:1e:06:a8:47:cc: 72:a8:ba:6a:f8:92:41:41:7f:d7:23:81:9c:47:9a:d2:61:f8: 8a:ea:b3:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjQxMTIyMjIwNDM3WhcNMjQxMTI5MjIwNDM3WjAYMRYwFAYD VQQDEw02NzQwZmZmNS0xMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUWZCK3EX1/8yiydRnz/ZnZ9jftDq87EWzQpBK/J+h1unVdbCus0WQLVtf+R ToJ77OY6zv0dERXmxzetkrR5Mx4PDudfIrjTxfq2ZsqEPMGwtblcxBVM9IVp1l6G I5ZZJSUVqa0DeqcywT2Oquplg/fC6lJnYmuYrwx6aZD24CRW+oUy8gm4Kl8KMAv5 nhKTRfCyPJITAf258etkJ+spYZ+9r4AYMtzCatpesKpHA2fhXHqZIZ93MvhJHBhG vavscIrQMlpDu5fEht5uF9RoYJ9CQ2Q6NbwRWK2NUczlY+kt9xhB2s9z2RBnM4Hm tL6jL8pk08jSY1DIw7Z/FV0d5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMupr7uw +/VRMmdVmzjIUFh4OVLwMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN7XTxhXBgEcQiEInNEXbOnVJ58uU/fqQArWkwjly2KABmequnhgQs jOarMy6DWiSc5EZAXZBqUjWmCYVcxVSDJpEeY0oVByg/ef5Mj97+2ETgyc+6z2T1 LA5dvljCCJmfTVr41jgqglc8znD1ObRnUaMe+d+8EbIHHo+9Q3/8gydWjOfwSAM5 vTML94+KVXqIl1mrOh9zrmEN/k2FY4O/are5xfDpBpPhggfwArGO5DcW2mt9eqNZ fEjh6AdNvAvi2SldFfx05IkeUuUVrg0fO27AFXbjPlHMRNGGa7QydUzC7Zh+Hgao R8xyqLpq+JJBQX/XI4GcR5rSYfiK6rN0 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org