$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: EDG+dbjB70yCXWiJtrB1rrQM4Nn599/KLZO7eY1Yb+Q= Subject key identifier: 8C:0B:1F:40:F6:6A:C1:86:E7:88:31:91:34:29:E9:A0:CD:D4:58:2E Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 01A4 Signing time: Sat 23 Nov 2024 01:50:47 +0000 Manifest this update: Sat 23 Nov 2024 01:50:46 +0000 Manifest next update: Sat 30 Nov 2024 01:50:46 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: 199y5x69bwjSBE6+cIGtrCyFdNeQT5Kml2gHZ5V1Nac=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: Nov 23 01:50:46 2024 GMT Not After : Nov 30 01:50:46 2024 GMT Subject: CN=674134f7-c8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:a4:d4:8e:2d:4a:e0:67:ab:40:3d:59:f3: 7d:6c:c8:24:fe:9f:06:d4:f8:93:3b:9f:a8:d2:e9: ed:75:5e:8a:c9:5e:6d:96:8e:a2:3f:6e:64:a9:0f: cd:62:97:53:a5:4e:92:00:b5:0d:00:b9:bc:fa:43: 33:6c:5f:31:7e:3c:21:49:90:ad:43:37:91:77:70: 2f:4c:33:b8:61:bc:54:57:be:b5:6d:32:e0:af:e8: a6:78:0f:a7:44:09:57:0a:bd:ef:d0:ca:83:87:38: 54:c0:ba:88:f3:87:8e:ce:c0:96:a5:4e:5e:e6:29: 65:29:9f:fa:ac:ac:50:9e:89:b8:f6:e2:ce:82:d5: ac:ee:7e:de:84:67:95:e4:7c:7c:02:d3:87:af:2a: d6:03:f2:9d:74:cd:49:1b:89:ab:6d:4a:cd:96:b2: 75:cb:4b:30:16:20:c7:67:cb:a8:a2:25:dc:51:f5: 6a:20:72:cf:b3:4c:49:aa:b1:1b:e7:b9:e3:56:93: 3c:02:c3:fa:80:3c:80:19:2b:d2:22:60:18:bc:cd: 61:a5:70:9d:af:2e:22:fa:f4:db:23:1f:49:2a:fa: 16:17:17:74:74:11:47:36:54:a8:4e:9a:a8:42:f1: 36:03:cb:f3:7f:97:c0:c4:da:d1:38:e7:7f:50:a1: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0B:1F:40:F6:6A:C1:86:E7:88:31:91:34:29:E9:A0:CD:D4:58:2E X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:86:17:5f:97:93:07:0c:96:73:82:04:44:d5:3f:27:7b:d3: e5:d0:43:7b:f4:3d:d0:52:94:3a:16:27:f8:e2:c2:e3:ff:35: 85:62:97:84:68:41:dd:df:b6:a8:45:6e:70:75:46:f4:6a:b6: dc:f0:e1:e2:5f:4a:fa:74:04:be:69:ef:50:68:41:14:a6:d9: 15:d0:dd:a1:91:28:25:34:b8:f1:61:2a:7d:a0:c5:af:91:c8: 72:a1:4a:2f:df:af:5c:4a:71:b6:3e:ca:2b:a6:5b:1b:06:b2: 88:a8:3f:a5:89:12:71:2a:91:72:8b:8b:45:9e:22:e2:21:50: 13:17:d8:c9:bc:a9:28:72:ff:84:96:bd:07:21:2b:36:54:4d: c1:d3:1f:eb:76:a8:e8:c3:4d:f4:cf:80:09:02:f6:23:e1:5e: 53:0b:6a:81:14:12:c3:e0:a9:41:07:06:3a:69:06:63:12:2b: 7e:27:1c:bb:d2:6c:71:ac:e2:c8:00:d1:f7:dd:96:6b:c4:4c: b3:cb:d3:34:c0:36:5e:a5:ba:20:5f:90:e1:ba:69:81:0b:56: 42:53:d4:f0:66:1a:c5:5f:da:31:da:79:b1:30:37:e0:df:47: 3e:f9:ac:29:88:a7:43:44:ad:65:13:60:4d:38:1d:b6:8c:2e: 8a:f3:d0:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjQxMTIzMDE1MDQ2WhcNMjQxMTMwMDE1MDQ2WjAYMRYwFAYD VQQDEw02NzQxMzRmNy1jOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGuk1I4tSuBnq0A9WfN9bMgk/p8G1PiTO5+o0untdV6KyV5tlo6iP25kqQ/N YpdTpU6SALUNALm8+kMzbF8xfjwhSZCtQzeRd3AvTDO4YbxUV761bTLgr+imeA+n RAlXCr3v0MqDhzhUwLqI84eOzsCWpU5e5illKZ/6rKxQnom49uLOgtWs7n7ehGeV 5Hx8AtOHryrWA/KddM1JG4mrbUrNlrJ1y0swFiDHZ8uooiXcUfVqIHLPs0xJqrEb 57njVpM8AsP6gDyAGSvSImAYvM1hpXCdry4i+vTbIx9JKvoWFxd0dBFHNlSoTpqo QvE2A8vzf5fAxNrROOd/UKGY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwLH0D2 asGG54gxkTQp6aDN1FguMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBhhdfl5MHDJZzggRE1T8ne9Pl0EN79D3QUpQ6Fif44sLj/zWFYpeE aEHd37aoRW5wdUb0arbc8OHiX0r6dAS+ae9QaEEUptkV0N2hkSglNLjxYSp9oMWv kchyoUov369cSnG2PsorplsbBrKIqD+liRJxKpFyi4tFniLiIVATF9jJvKkocv+E lr0HISs2VE3B0x/rdqjow030z4AJAvYj4V5TC2qBFBLD4KlBBwY6aQZjEit+Jxy7 0mxxrOLIANH33ZZrxEyzy9M0wDZepbogX5DhummBC1ZCU9TwZhrFX9ox2nmxMDfg 30c++awpiKdDRK1lE2BNOB22jC6K89Cl -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org