$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: GfgqhcTh5Oe5XoazXLpjS50RfMzIGItThF6MLSTtSX0= Subject key identifier: 72:BD:2D:BA:C2:F2:77:BF:8E:CB:C1:9E:02:D5:0F:0E:67:80:2D:18 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 9F Signing time: Sat 23 Nov 2024 04:21:28 +0000 Manifest this update: Sat 23 Nov 2024 04:21:27 +0000 Manifest next update: Sat 30 Nov 2024 04:21:27 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: xVYb78vbzUb1DDq8XXnplz6JFfeXpHUxrHRWJ8kpg68=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: bbMHV8oCUwtDEkC22H+H7bKfD+4ySH6t4g6oHROy/Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Nov 23 04:21:27 2024 GMT Not After : Nov 30 04:21:27 2024 GMT Subject: CN=67415847-45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:0f:e5:95:fb:74:8d:1a:7c:7c:45:18:36: 98:99:e1:c4:cb:6b:30:23:f4:96:5f:71:af:0e:95: 38:35:82:dd:d6:7f:c5:f6:17:cc:81:e8:e0:0d:90: 4c:3a:89:71:d6:3d:d9:0d:9c:eb:91:dd:cd:96:ed: 5d:17:4d:3a:10:35:72:17:2a:b1:cd:08:fe:79:b0: e7:fb:7a:a4:5e:7c:a8:69:88:84:ee:d8:a5:4e:a5: 5f:69:3b:7f:57:c6:e3:c1:33:1f:43:57:95:73:f4: 98:a3:96:d7:75:81:59:a2:13:18:c0:4e:a3:4f:d7: 60:99:07:23:9a:19:4b:84:58:d9:cf:f7:5e:ef:7c: a9:9a:f0:d5:22:ea:38:5e:d3:a1:e2:4b:27:24:22: f2:c8:80:41:a3:ce:7f:7d:93:47:43:e6:e2:10:20: 67:df:c0:96:47:ca:01:65:de:8c:4f:0f:fc:b4:d0: 91:00:91:d4:3b:64:07:ec:73:7c:00:0e:14:82:0b: 9f:84:9f:42:7c:54:0a:26:ec:dd:91:74:3e:79:11: 7a:ec:85:c6:fe:e6:9d:01:db:e0:df:f4:bd:59:9a: da:a6:35:f3:c8:13:d0:3d:63:df:c4:78:b7:02:3f: 72:b6:2d:ed:28:5d:03:ec:bf:ff:cc:23:f7:73:ff: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:2D:BA:C2:F2:77:BF:8E:CB:C1:9E:02:D5:0F:0E:67:80:2D:18 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:63:ea:e3:20:8a:70:75:a9:eb:3e:e2:0e:c7:5d:81:f2:0c: c8:96:d0:02:84:b1:0f:49:c2:44:97:22:8a:1e:08:95:a4:de: 09:92:9c:e5:31:73:4f:97:0e:91:cf:34:a6:81:fa:d2:0c:5f: 60:66:b2:8c:05:8a:19:27:6c:34:9e:b1:fc:0d:be:f9:92:2b: 44:b2:6d:d2:c5:d4:b4:67:2c:9e:70:86:c1:d9:af:93:cd:57: e6:c4:3f:9e:53:ca:3c:26:d9:28:55:aa:10:9e:a5:4f:ec:de: fb:3a:00:49:97:01:76:1d:c7:d9:12:c1:4b:ca:c6:ee:bc:57: 48:27:b5:a1:f2:04:13:71:42:67:eb:ed:67:a6:6e:52:2e:be: 98:f4:e0:70:cf:22:e7:92:80:79:a8:4e:5d:cd:b1:08:f5:44: af:3e:e2:44:23:c0:fd:a8:1d:66:b4:b5:90:2d:a4:13:ce:5a: 7b:ce:ae:ee:41:cc:5e:2b:a7:78:fa:83:2e:9c:e2:4a:ea:f9: cf:af:da:21:00:b1:e0:3c:c8:f8:71:a7:89:14:5c:4a:cb:e8: 64:f4:06:31:a6:96:11:fc:c4:75:fa:70:bb:9b:9b:5e:cc:83: f8:16:0b:0c:c7:4f:db:5e:a9:5d:73:e5:ab:77:63:9a:4f:bb: 99:26:dd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjQxMTIzMDQyMTI3WhcNMjQxMTMwMDQyMTI3WjAYMRYwFAYD VQQDEw02NzQxNTg0Ny00NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPkP5ZX7dI0afHxFGDaYmeHEy2swI/SWX3GvDpU4NYLd1n/F9hfMgejgDZBM Oolx1j3ZDZzrkd3Nlu1dF006EDVyFyqxzQj+ebDn+3qkXnyoaYiE7tilTqVfaTt/ V8bjwTMfQ1eVc/SYo5bXdYFZohMYwE6jT9dgmQcjmhlLhFjZz/de73ypmvDVIuo4 XtOh4ksnJCLyyIBBo85/fZNHQ+biECBn38CWR8oBZd6MTw/8tNCRAJHUO2QH7HN8 AA4UggufhJ9CfFQKJuzdkXQ+eRF67IXG/uadAdvg3/S9WZrapjXzyBPQPWPfxHi3 Aj9yti3tKF0D7L//zCP3c/8ZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK9LbrC 8ne/jsvBngLVDw5ngC0YMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAY+rjIIpwdanrPuIOx12B8gzIltAChLEPScJElyKKHgiVpN4Jkpzl MXNPlw6RzzSmgfrSDF9gZrKMBYoZJ2w0nrH8Db75kitEsm3SxdS0ZyyecIbB2a+T zVfmxD+eU8o8JtkoVaoQnqVP7N77OgBJlwF2HcfZEsFLysbuvFdIJ7Wh8gQTcUJn 6+1npm5SLr6Y9OBwzyLnkoB5qE5dzbEI9USvPuJEI8D9qB1mtLWQLaQTzlp7zq7u QcxeK6d4+oMunOJK6vnPr9ohALHgPMj4caeJFFxKy+hk9AYxppYR/MR1+nC7m5te zIP4FgsMx0/bXqldc+Wrd2OaT7uZJt0v -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org