$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: 89gNqjcWbX+x8BKmoC8j/qO9cQ9Af+YQDusv0N2Bj8g= Subject key identifier: EC:85:A3:37:9D:83:29:EC:10:2C:AC:EE:60:4D:66:70:2A:39:29:C7 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 023A Signing time: Mon 25 Nov 2024 01:12:23 +0000 Manifest this update: Mon 25 Nov 2024 01:12:22 +0000 Manifest next update: Mon 02 Dec 2024 01:12:22 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: 6VeeokMEPCHfnQNp9hmNllsA+nJA5xXqBDlb/Rif7ow=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Nov 25 01:12:22 2024 GMT Not After : Dec 2 01:12:22 2024 GMT Subject: CN=6743cef7-dfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:f9:7c:b1:04:90:86:94:c9:03:81:2b:c8: 89:8f:56:90:96:c5:c0:c1:c9:dc:e2:c9:0b:37:17: b1:c7:b7:8f:0e:bb:ca:65:e4:3b:d6:a3:d6:2c:23: f6:83:57:8f:4b:9f:a2:c6:be:7d:2f:0f:ba:15:c3: 50:13:32:f3:9c:68:1b:9d:e8:e1:66:0f:31:3b:35: b9:81:de:b1:3a:16:30:5f:04:21:1e:21:43:fc:ee: d1:dc:6b:f0:e0:76:cb:97:0a:0b:54:9d:38:ab:57: fa:91:ae:0b:d4:54:01:18:d3:56:03:aa:27:72:39: 85:72:c6:dd:fa:74:a9:eb:55:99:6d:55:99:99:1c: 37:36:7d:81:7c:f9:17:31:db:fb:82:9c:db:e3:3f: c2:e4:4c:0f:33:7b:ec:bd:4f:60:ad:ba:b4:21:b9: 87:12:2c:e4:a3:fc:38:02:93:45:a7:fa:07:a6:e5: fc:7f:2d:0e:e2:26:d9:77:4b:86:bb:b1:9a:eb:e1: 57:8d:4d:b1:5c:85:39:c5:d4:26:36:b9:64:20:e9: eb:d1:56:a8:e9:92:23:cb:b9:0c:7e:bd:06:79:17: 2d:e0:45:f2:dd:3b:19:4a:94:16:62:b0:68:1b:46: 2c:73:3c:ee:db:5f:9e:b1:e7:71:4c:ee:aa:b1:c8: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:85:A3:37:9D:83:29:EC:10:2C:AC:EE:60:4D:66:70:2A:39:29:C7 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4e:bf:9e:da:ed:e1:98:59:2c:80:5b:5a:75:32:8e:f7:60: 1b:42:b5:98:2a:99:ce:a3:21:89:00:28:bd:ec:13:82:f4:dd: 88:8b:cf:06:9d:ee:58:12:8b:92:65:e7:58:84:65:be:93:cb: 1f:ef:98:70:93:77:95:bc:3f:92:9e:9c:15:69:0d:ef:1e:16: 79:14:4d:d9:e7:1f:1d:9b:af:4d:8a:80:42:d8:ca:f3:80:f2: 8b:a1:27:60:18:ff:c3:e8:98:8a:e0:3e:cb:9e:b2:7c:fb:82: be:df:fd:16:dc:1b:08:08:49:9d:46:24:35:91:87:b4:42:ae: d0:f0:ba:94:13:99:9a:33:03:c9:53:40:7c:68:46:a3:36:7d: ed:13:2a:ba:4b:93:23:d3:bc:ec:7e:ed:86:ea:1e:dc:f0:f2: a3:3a:e4:c7:27:ff:c2:f6:92:11:00:ae:45:29:7a:2f:5d:28: a2:a2:32:d8:31:a3:d6:ce:9d:02:39:8b:bc:eb:d8:c1:fa:78: 68:4e:80:5b:32:61:8b:ce:d6:f5:ba:05:b0:8b:3d:3b:8f:24: 50:17:56:4e:b0:f4:89:50:f7:1c:60:03:88:a4:7c:e6:05:3a: 71:b9:2a:92:71:d2:28:20:67:60:38:ae:55:99:9e:ee:e3:6c: cb:ad:9a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjQxMTI1MDExMjIyWhcNMjQxMjAyMDExMjIyWjAYMRYwFAYD VQQDEw02NzQzY2VmNy1kZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDD5fLEEkIaUyQOBK8iJj1aQlsXAwcnc4skLNxexx7ePDrvKZeQ71qPWLCP2 g1ePS5+ixr59Lw+6FcNQEzLznGgbnejhZg8xOzW5gd6xOhYwXwQhHiFD/O7R3Gvw 4HbLlwoLVJ04q1f6ka4L1FQBGNNWA6oncjmFcsbd+nSp61WZbVWZmRw3Nn2BfPkX Mdv7gpzb4z/C5EwPM3vsvU9grbq0IbmHEizko/w4ApNFp/oHpuX8fy0O4ibZd0uG u7Ga6+FXjU2xXIU5xdQmNrlkIOnr0Vao6ZIjy7kMfr0GeRct4EXy3TsZSpQWYrBo G0Ysczzu21+esedxTO6qscjhIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyFozed gynsECys7mBNZnAqOSnHMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Tr+e2u3hmFksgFtadTKO92AbQrWYKpnOoyGJACi97BOC9N2Ii88G ne5YEouSZedYhGW+k8sf75hwk3eVvD+SnpwVaQ3vHhZ5FE3Z5x8dm69NioBC2Mrz gPKLoSdgGP/D6JiK4D7LnrJ8+4K+3/0W3BsICEmdRiQ1kYe0Qq7Q8LqUE5maMwPJ U0B8aEajNn3tEyq6S5Mj07zsfu2G6h7c8PKjOuTHJ//C9pIRAK5FKXovXSiiojLY MaPWzp0COYu869jB+nhoToBbMmGLztb1ugWwiz07jyRQF1ZOsPSJUPccYAOIpHzm BTpxuSqScdIoIGdgOK5VmZ7u42zLrZo7 -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:27 2024 by rpki-client on console-fra.rpki-client.org