$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: K3PcBkEzCCcJWj9EDyHjVeld8YGKMmYGPaS7Dbn54C0= Subject key identifier: 11:0B:22:EE:65:03:65:AC:C8:19:71:48:39:3F:87:AD:5E:8D:F2:26 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 01EF Signing time: Sat 23 Nov 2024 02:16:32 +0000 Manifest this update: Sat 23 Nov 2024 02:16:32 +0000 Manifest next update: Sat 30 Nov 2024 02:16:32 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: 2C5fini+pH7CGMr24lTeZeUD97UpZYTfOuaB4DtB/4o=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Nov 23 02:16:32 2024 GMT Not After : Nov 30 02:16:32 2024 GMT Subject: CN=67413b00-7fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:00:fd:f1:d8:e1:58:50:ce:7d:97:d9:ab: de:04:f1:89:a5:3d:04:54:78:b5:bc:4a:42:55:81: 62:68:52:4e:3a:ef:3f:8f:b5:34:62:c6:34:f4:40: 38:94:a0:63:f8:d5:57:f1:d6:99:0c:b8:5f:47:73: 94:3c:91:12:33:39:22:0f:c6:07:b5:d5:13:ba:75: 3c:f8:a7:fe:47:d9:c7:3a:d0:ab:17:44:c8:64:1e: 56:aa:33:ec:4e:11:54:e9:5f:01:ff:98:85:48:63: 94:9b:a6:36:c1:5a:18:67:7f:c6:5e:cd:6b:91:07: 5b:c6:cc:7d:28:01:8c:b1:58:eb:07:e6:a6:42:fc: 01:08:4a:0b:cc:de:30:a8:c3:b9:3e:8d:f1:a0:ac: 66:87:fb:6b:6d:fe:86:36:f0:d2:bc:29:fc:5c:0f: 95:b8:f8:fc:97:cc:46:77:3e:77:14:9c:40:58:47: e3:e1:0a:9b:ed:74:26:94:0c:b1:1d:ba:3c:40:c1: 9f:aa:53:4b:5c:bf:f8:fd:41:4e:4e:92:1a:3d:e5: e4:2d:d7:15:c7:fc:65:f0:ea:bd:a9:40:6d:8a:1c: f3:95:a0:7c:1c:f1:00:3f:f3:e0:d2:7a:59:70:c9: ad:f6:a7:98:bb:99:b1:b0:2c:80:07:49:dc:07:d4: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:22:EE:65:03:65:AC:C8:19:71:48:39:3F:87:AD:5E:8D:F2:26 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:5c:f3:61:a3:05:47:61:1e:a1:04:73:91:51:aa:7c:fb:61: d6:23:ea:f4:0b:c6:5f:8c:03:b1:ab:85:77:ea:d2:a9:ce:ae: a9:79:3b:55:85:77:a1:7a:d0:50:20:09:09:97:3a:22:64:d2: 43:e1:f9:f8:cc:4c:35:3e:7d:85:bb:57:61:bb:4f:18:51:c1: 0f:eb:d1:1c:00:b5:ba:ae:4b:61:a4:25:e8:27:07:75:a1:06: 56:4d:f3:b7:a5:24:89:5c:3d:d2:17:64:41:7e:d0:67:e1:e8: aa:83:37:7e:d3:3d:5a:5b:33:aa:55:61:b7:60:c5:6e:e7:aa: 95:8c:27:09:3d:96:a2:29:a5:54:46:08:bb:c5:a1:9a:4a:78: e2:e2:4d:d3:06:fc:4b:1d:99:28:08:50:fb:16:07:ce:8d:f5: c9:a3:6c:36:1a:30:85:aa:3a:b9:b1:dd:23:7f:36:de:33:10: 80:af:d9:7a:d3:36:93:08:24:c7:9c:d8:ec:3e:ae:3b:d1:75: a3:2e:ff:a9:e7:66:58:3f:97:da:e9:d0:b1:55:5d:2e:7a:f3: 18:4e:5b:6c:7d:b1:91:40:95:7c:46:10:ba:0d:71:c4:93:97: 51:ee:ae:90:9f:08:49:8d:b2:4c:5e:87:33:00:f2:2b:d6:80: 48:9b:f3:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjQxMTIzMDIxNjMyWhcNMjQxMTMwMDIxNjMyWjAYMRYwFAYD VQQDEw02NzQxM2IwMC03ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzsA/fHY4VhQzn2X2aveBPGJpT0EVHi1vEpCVYFiaFJOOu8/j7U0YsY09EA4 lKBj+NVX8daZDLhfR3OUPJESMzkiD8YHtdUTunU8+Kf+R9nHOtCrF0TIZB5WqjPs ThFU6V8B/5iFSGOUm6Y2wVoYZ3/GXs1rkQdbxsx9KAGMsVjrB+amQvwBCEoLzN4w qMO5Po3xoKxmh/trbf6GNvDSvCn8XA+VuPj8l8xGdz53FJxAWEfj4Qqb7XQmlAyx Hbo8QMGfqlNLXL/4/UFOTpIaPeXkLdcVx/xl8Oq9qUBtihzzlaB8HPEAP/Pg0npZ cMmt9qeYu5mxsCyAB0ncB9QJLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBELIu5l A2WsyBlxSDk/h61ejfImMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWXPNhowVHYR6hBHORUap8+2HWI+r0C8ZfjAOxq4V36tKpzq6peTtV hXehetBQIAkJlzoiZNJD4fn4zEw1Pn2Fu1dhu08YUcEP69EcALW6rkthpCXoJwd1 oQZWTfO3pSSJXD3SF2RBftBn4eiqgzd+0z1aWzOqVWG3YMVu56qVjCcJPZaiKaVU Rgi7xaGaSnji4k3TBvxLHZkoCFD7FgfOjfXJo2w2GjCFqjq5sd0jfzbeMxCAr9l6 0zaTCCTHnNjsPq470XWjLv+p52ZYP5fa6dCxVV0uevMYTltsfbGRQJV8RhC6DXHE k5dR7q6QnwhJjbJMXoczAPIr1oBIm/Mf -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org