$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: snvd9pzOuAfhWU+eyW5knuw+TjTdWcZfYU3vICBtdzs= Subject key identifier: CA:B5:69:B2:A2:19:5F:A6:9D:A0:C4:B3:C9:A7:4A:B7:5A:9D:75:1F Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: F4 Signing time: Sat 23 Nov 2024 03:38:53 +0000 Manifest this update: Sat 23 Nov 2024 03:38:52 +0000 Manifest next update: Sat 30 Nov 2024 03:38:52 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: KQ8uUmFZ/Doj1G7DIeUBuGIx925V/ZkZkcAylr7NUz8=) 2: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Nov 23 03:38:52 2024 GMT Not After : Nov 30 03:38:52 2024 GMT Subject: CN=67414e4c-b575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:36:b4:33:6b:55:b7:b1:2f:c7:ab:f9:bc: 3e:83:62:73:8b:17:dd:d9:5e:dd:74:da:1a:83:bf: 61:73:ba:32:0c:6a:78:ce:33:e0:eb:9f:09:c4:0a: 89:81:ec:5b:64:ac:71:b9:61:12:14:d3:20:04:52: 2d:49:44:1d:5b:49:75:fc:2e:7e:8d:12:bf:8c:ef: 59:f1:dd:08:78:2d:b5:22:f1:3e:d0:bd:f5:2c:03: e4:59:81:ab:cc:54:f8:79:dc:37:b0:4b:a2:ba:71: cf:99:7a:03:f2:3b:7d:40:9e:77:1b:44:9a:b1:52: 89:f8:c3:7c:bd:eb:a1:3c:d9:bd:2e:b9:9c:b0:77: eb:e3:50:69:8f:18:ed:08:e4:9b:21:3b:c3:a0:75: 89:e3:bd:4d:9c:a9:f4:03:59:56:4d:56:fd:0d:2a: b0:4d:4b:73:65:7d:0f:57:32:d6:50:85:0f:df:5a: 9d:ee:95:db:19:f5:58:24:08:c2:a2:80:4c:df:b6: 3d:da:cc:46:ed:65:24:6c:55:be:7a:cf:8d:d7:6d: d6:6c:f4:6a:9f:fa:4b:58:c7:38:39:d0:d7:79:67: f3:06:ce:97:d1:77:63:bb:b0:d8:f1:c8:65:d0:3a: 02:0e:32:1f:e3:a5:54:cf:e3:f9:46:be:a5:2b:40: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B5:69:B2:A2:19:5F:A6:9D:A0:C4:B3:C9:A7:4A:B7:5A:9D:75:1F X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:5a:17:f4:2e:f7:76:1d:1b:28:95:27:9d:5d:d0:e2:67: b4:95:19:5b:69:19:26:ea:27:64:0c:a9:ff:19:cd:40:d5:0d: 50:4f:99:fa:47:8a:ef:ec:69:88:b1:b8:ce:96:cc:9b:c2:59: ea:8b:8e:eb:4c:12:a9:1e:0b:d1:a2:db:4f:8f:93:17:60:a6: 85:c6:c6:a5:3c:47:0b:bc:2f:8f:24:f5:31:e5:cc:90:87:ac: e9:77:91:e2:ec:59:fa:b0:34:c6:ac:68:d3:ce:2b:f7:45:c1: 21:f4:ed:81:17:27:61:1b:78:e5:fc:99:89:bc:bf:14:25:b3: 00:84:7e:c6:bb:4b:13:18:87:f9:8f:1c:fe:68:4d:5d:13:b8: 08:4e:cf:b7:2a:c8:7e:86:ba:f6:94:0b:17:84:de:c0:65:e9: a6:17:96:4e:c4:b2:56:e2:52:88:0b:b1:d7:f2:b0:eb:2c:e8: e1:02:2e:5f:21:cc:84:43:e8:1f:ff:84:0e:17:13:6f:32:08: 09:92:d6:f5:db:a8:6a:10:a9:6a:2e:07:49:16:37:c7:16:99: e1:2e:9f:7a:16:b1:49:24:c8:43:6b:2e:ba:cf:52:12:d4:fe: a5:a5:a7:05:bd:27:0e:5c:73:be:8a:b4:4f:56:77:6e:14:57: 9f:f1:1a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjQxMTIzMDMzODUyWhcNMjQxMTMwMDMzODUyWjAYMRYwFAYD VQQDEw02NzQxNGU0Yy1iNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveA2tDNrVbexL8er+bw+g2Jzixfd2V7ddNoag79hc7oyDGp4zjPg658JxAqJ gexbZKxxuWESFNMgBFItSUQdW0l1/C5+jRK/jO9Z8d0IeC21IvE+0L31LAPkWYGr zFT4edw3sEuiunHPmXoD8jt9QJ53G0SasVKJ+MN8veuhPNm9LrmcsHfr41Bpjxjt COSbITvDoHWJ471NnKn0A1lWTVb9DSqwTUtzZX0PVzLWUIUP31qd7pXbGfVYJAjC ooBM37Y92sxG7WUkbFW+es+N123WbPRqn/pLWMc4OdDXeWfzBs6X0Xdju7DY8chl 0DoCDjIf46VUz+P5Rr6lK0DKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq1abKi GV+mnaDEs8mnSrdanXUfMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7F1oX9C73dh0bKJUnnV3Q4me0lRlbaRkm6idkDKn/Gc1A1Q1QT5n6 R4rv7GmIsbjOlsybwlnqi47rTBKpHgvRottPj5MXYKaFxsalPEcLvC+PJPUx5cyQ h6zpd5Hi7Fn6sDTGrGjTziv3RcEh9O2BFydhG3jl/JmJvL8UJbMAhH7Gu0sTGIf5 jxz+aE1dE7gITs+3Ksh+hrr2lAsXhN7AZemmF5ZOxLJW4lKIC7HX8rDrLOjhAi5f IcyEQ+gf/4QOFxNvMggJktb126hqEKlqLgdJFjfHFpnhLp96FrFJJMhDay66z1IS 1P6lpacFvScOXHO+irRPVnduFFef8Rrg -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org