$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json) Hash identifier: n4p4N4e9yKSNiL1rQnPzbeCHiu9+zMwApP3adah/NZ8= Subject key identifier: A7:29:DD:47:84:89:6D:BC:0A:C3:AF:03:24:9F:E5:CD:9A:9D:0B:03 Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft Manifest number: 03B3 Signing time: Mon 25 Nov 2024 00:10:09 +0000 Manifest this update: Mon 25 Nov 2024 00:10:08 +0000 Manifest next update: Mon 02 Dec 2024 00:10:08 +0000 Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: u8TZxBTzY6f1vC9KDrNRKlL0hGTkYxbMfwoxVr4K5M4=) 2: 616435103F3E11EE81024074C4F9AE02.roa (hash: rIjstnLA7oqlzAIte1weUL9/6bXimc7BXsGDyH6RUSM=) 3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: sMkmA3v1p4jx5f3ipHrRmT8JP1JXJsSi8TF2vkWAUxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E Validity Not Before: Nov 25 00:10:08 2024 GMT Not After : Dec 2 00:10:08 2024 GMT Subject: CN=6743c061-7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:21:25:b8:d1:86:09:5d:ea:06:fe:ec:7e:1b: 8d:9d:c3:33:b2:da:fe:90:80:71:03:25:00:3b:82: ea:a0:dd:0b:04:8c:35:41:94:d3:0a:4a:cf:2d:e5: 9a:1a:3f:3d:3b:05:72:84:36:ed:43:a6:50:43:ae: 1f:97:1f:f2:22:67:f8:8e:42:90:e2:1f:43:ca:f2: ce:a6:fc:13:85:9e:3c:f3:fd:93:05:28:d7:14:2d: d1:d0:ca:ae:9a:3c:5e:2e:4b:59:b9:ac:b2:12:d7: a9:5d:8d:d5:6f:72:e8:6c:be:ad:e7:44:5c:d5:77: 99:c5:04:ab:bf:62:1f:ce:aa:9b:32:1a:cb:55:17: cd:5f:63:ef:b8:f1:5f:89:b1:eb:ae:eb:02:ff:68: 69:f9:81:94:15:79:3d:a2:4f:57:5d:76:80:c1:1e: 18:7e:94:52:f6:9c:b6:bf:16:dd:0c:04:ad:75:ec: 53:56:fd:7a:f2:3a:49:4a:0b:10:d9:69:69:3d:50: 74:a7:c7:61:17:7c:e5:26:85:8e:6d:0d:d2:80:70: 22:e3:fc:f7:84:97:45:69:7f:d7:09:8d:00:ec:9b: 33:04:99:1d:c7:f0:6a:fa:4d:54:70:90:a4:0c:35: 72:33:73:1b:5b:10:29:90:5f:7b:e1:29:64:b4:f4: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:DD:47:84:89:6D:BC:0A:C3:AF:03:24:9F:E5:CD:9A:9D:0B:03 X509v3 Authority Key Identifier: keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:d0:4a:03:ae:37:a3:4e:7b:89:3c:63:0a:c9:56:98:e5:e7: 25:f6:72:e7:7a:4f:a3:af:b3:bc:d7:07:5f:9f:45:14:0f:d0: c4:2f:2a:76:7e:cf:bc:a5:10:e5:eb:f6:06:54:e5:d8:21:a1: ab:c4:6c:f7:e6:b5:04:4d:11:f8:15:80:72:6c:ca:fc:bd:58: bb:bd:80:72:ea:9b:a3:3f:9a:71:b3:c4:75:db:07:e1:2f:fb: d4:76:88:c5:7a:9f:73:c4:f7:03:03:24:11:aa:ef:88:88:84: b4:2e:46:e1:3e:d0:c5:aa:7e:cf:f1:f4:0f:b6:bc:b1:f9:ad: 1e:5f:50:54:3c:7c:4f:c4:b5:3d:3f:9b:91:c0:87:c6:7c:80: fc:b9:2a:1e:c6:bf:ed:04:5a:3d:4f:be:83:ef:49:2b:bb:1f: bf:a6:96:6f:92:a0:d8:67:1f:f4:be:a7:24:6a:6c:14:5a:d0: f1:84:4d:41:c3:50:96:5f:17:5f:80:42:47:0e:c3:6e:b4:f4: 42:1f:f8:e7:4c:61:f6:da:33:f1:57:31:94:e8:14:a8:b7:80: be:0d:b0:fd:ec:d3:c7:ca:92:08:f4:a4:61:4b:56:c6:bc:45: 04:98:a2:47:a2:e2:36:af:64:02:7d:ce:44:4a:ec:97:f5:16: 0f:58:f7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2 NjkzNDZBMEUwHhcNMjQxMTI1MDAxMDA4WhcNMjQxMjAyMDAxMDA4WjAYMRYwFAYD VQQDEw02NzQzYzA2MS03NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SEluNGGCV3qBv7sfhuNncMzstr+kIBxAyUAO4LqoN0LBIw1QZTTCkrPLeWa Gj89OwVyhDbtQ6ZQQ64flx/yImf4jkKQ4h9DyvLOpvwThZ488/2TBSjXFC3R0Mqu mjxeLktZuayyEtepXY3Vb3LobL6t50Rc1XeZxQSrv2IfzqqbMhrLVRfNX2PvuPFf ibHrrusC/2hp+YGUFXk9ok9XXXaAwR4YfpRS9py2vxbdDAStdexTVv168jpJSgsQ 2WlpPVB0p8dhF3zlJoWObQ3SgHAi4/z3hJdFaX/XCY0A7JszBJkdx/Bq+k1UcJCk DDVyM3MbWxApkF974SlktPRscwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcp3UeE iW28CsOvAySf5c2anQsDMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3 QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN0EoDrjejTnuJPGMKyVaY5ecl9nLnek+jr7O81wdfn0UUD9DELyp2 fs+8pRDl6/YGVOXYIaGrxGz35rUETRH4FYBybMr8vVi7vYBy6pujP5pxs8R12wfh L/vUdojFep9zxPcDAyQRqu+IiIS0LkbhPtDFqn7P8fQPtryx+a0eX1BUPHxPxLU9 P5uRwIfGfID8uSoexr/tBFo9T76D70krux+/ppZvkqDYZx/0vqckamwUWtDxhE1B w1CWXxdfgEJHDsNutPRCH/jnTGH22jPxVzGU6BSot4C+DbD97NPHypII9KRhS1bG vEUEmKJHouI2r2QCfc5ESuyX9RYPWPe0 -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:36 2024 by rpki-client on console-ams.rpki-client.org