$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft File: vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json) Hash identifier: 6O+Xw4WPVP3FD3I+IU+lT+jCDurzXNfYInlZOB0sCiI= Subject key identifier: BC:96:67:AF:F4:90:82:4B:26:A5:A8:76:0C:74:69:92:E6:B6:E4:87 Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 Certificate issuer: /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft Manifest number: 4A Signing time: Thu 21 Nov 2024 05:22:15 +0000 Manifest this update: Thu 21 Nov 2024 05:22:15 +0000 Manifest next update: Thu 28 Nov 2024 05:22:15 +0000 Files and hashes: 1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: VbLVnIquSi9BTciHIoVOscpOm+Wbr7WLFoLUPjD6R9U=) 2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: 4S6LysWP6aXNqohWmOPlianyKt6L8nm45R0gNLc/r00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Validity Not Before: Nov 21 05:22:15 2024 GMT Not After : Nov 28 05:22:15 2024 GMT Subject: CN=673ec387-f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:77:a9:74:0a:0a:91:39:2c:37:48:e3:22: 6d:66:54:1a:92:6e:19:0f:88:7c:c8:a8:41:c5:c5: 87:ed:64:64:bf:c5:df:17:cc:c8:dd:5d:7b:88:05: 69:4c:16:b0:d5:fc:93:96:ee:bf:d7:9a:44:0a:40: 81:2c:be:9d:27:b0:77:99:f3:55:b5:92:9b:86:42: 85:2d:9a:1f:e3:3e:22:1d:07:c1:d9:d4:9f:a2:e6: 38:1e:5a:68:b6:96:32:c1:96:01:55:d2:c7:e4:ce: 88:3b:d2:d2:30:11:4d:ff:14:16:73:0f:e2:48:69: 5e:5c:6d:0f:be:98:7e:8e:17:6b:44:d1:d5:05:e8: 42:ad:4d:c1:ec:d8:4b:f6:93:38:26:28:94:da:2b: 70:6c:a9:83:e5:98:1b:fc:a6:e2:af:a1:06:c6:7e: 2c:e8:af:89:a0:7d:45:52:01:ea:70:59:eb:88:b8: 55:7e:e3:6f:8b:47:e2:b7:81:29:ac:37:83:a4:a6: 85:44:00:11:b3:bc:39:1d:32:e4:0c:35:1e:f9:1a: 87:92:fa:36:1c:62:75:67:74:b7:49:98:59:53:e6: 67:9e:0e:f0:e5:7e:2e:cf:93:c8:c4:8b:34:d1:2b: 0f:13:5e:a8:04:bc:39:e4:61:d2:c7:26:0d:72:88: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:67:AF:F4:90:82:4B:26:A5:A8:76:0C:74:69:92:E6:B6:E4:87 X509v3 Authority Key Identifier: keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:32:a5:86:ff:f4:51:c9:26:95:ae:03:a8:60:bc:4a:59: 2b:fe:8b:d7:07:27:4f:4d:09:1e:34:8f:c7:73:47:7d:ff:15: 78:12:fd:22:38:d7:58:b0:5d:75:4f:5c:40:8b:83:d1:4c:0e: 35:0b:f7:19:58:6c:fb:0d:8b:2b:9a:fe:18:a7:ab:36:9d:d1: b5:ca:a0:57:8b:2d:22:bf:6e:30:92:9b:27:85:71:62:1e:47: 5f:25:fd:08:4a:15:97:75:35:62:d5:cf:83:55:13:78:6c:96: 32:2e:db:10:d4:e8:22:40:68:b7:c6:97:39:00:4b:99:27:14: ee:a1:8e:43:1a:93:0f:e5:62:67:96:f0:2d:b5:a5:ce:64:6f: 2a:d4:3e:37:f2:70:97:ca:fa:86:09:f1:a3:73:7d:98:14:62: 3a:3d:83:34:48:56:55:1d:69:55:cc:ef:bf:d4:12:89:c4:49: 00:5b:33:42:39:b9:f3:a0:9c:fa:de:b7:01:f6:9e:21:23:ee: 56:f8:de:81:aa:7d:0d:ed:81:4b:c5:38:c9:5a:e0:7b:d8:a8: 0c:ad:be:43:2d:9e:1a:f2:2c:3f:2d:87:a8:bc:69:28:c2:03: 8a:3a:da:5d:99:e1:84:c5:90:c3:c1:b4:97:f9:4a:95:02:65: fe:07:3a:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI0MDExMC8GA1UEBRMoQkMwNTkzQzQ3REFDRjZDN0E3N0E0MUUwN0RFQjlBMDYx NjMxQTQ4NDAeFw0yNDExMjEwNTIyMTVaFw0yNDExMjgwNTIyMTVaMBgxFjAUBgNV BAMTDTY3M2VjMzg3LWY2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/HepdAoKkTksN0jjIm1mVBqSbhkPiHzIqEHFxYftZGS/xd8XzMjdXXuIBWlM FrDV/JOW7r/XmkQKQIEsvp0nsHeZ81W1kpuGQoUtmh/jPiIdB8HZ1J+i5jgeWmi2 ljLBlgFV0sfkzog70tIwEU3/FBZzD+JIaV5cbQ++mH6OF2tE0dUF6EKtTcHs2Ev2 kzgmKJTaK3BsqYPlmBv8puKvoQbGfizor4mgfUVSAepwWeuIuFV+42+LR+K3gSms N4OkpoVEABGzvDkdMuQMNR75GoeS+jYcYnVndLdJmFlT5meeDvDlfi7Pk8jEizTR Kw8TXqgEvDnkYdLHJg1yiEp/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvJZnr/SQ gksmpah2DHRpkua25IcwHwYDVR0jBBgwFoAUvAWTxH2s9senekHgfeuaBhYxpIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjQwLzI4NDBDOEE2MzhF MDExRUY5NEI4NEQ3RkM0RjlBRTAyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkFXVHhIMnM5c2VuZWtIZ2ZldWFCaFl4cElRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjQwLzI4NDBDOEE2MzhFMDExRUY5NEI4NEQ3RkM0RjlBRTAyL3ZBV1R4SDJzOXNl bmVrSGdmZXVhQmhZeHBJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVzMqWG//RRySaVrgOoYLxKWSv+i9cHJ09NCR40j8dzR33/FXgS/SI4 11iwXXVPXECLg9FMDjUL9xlYbPsNiyua/hinqzad0bXKoFeLLSK/bjCSmyeFcWIe R18l/QhKFZd1NWLVz4NVE3hsljIu2xDU6CJAaLfGlzkAS5knFO6hjkMakw/lYmeW 8C21pc5kbyrUPjfycJfK+oYJ8aNzfZgUYjo9gzRIVlUdaVXM77/UEonESQBbM0I5 ufOgnPretwH2niEj7lb43oGqfQ3tgUvFOMla4HvYqAytvkMtnhryLD8th6i8aSjC A4o62l2Z4YTFkMPBtJf5SpUCZf4HOmg= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org