$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: K2OFrsqG+82FOTbgTVWjZuaw+6nvFIXAIQ9hNYJXAw0= Subject key identifier: 85:23:E1:C1:3B:16:3B:D4:27:0B:60:6F:82:D7:F1:20:4D:0E:8F:B7 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0742 Signing time: Sat 18 May 2024 22:25:09 +0000 Manifest this update: Sat 18 May 2024 22:25:09 +0000 Manifest next update: Sat 25 May 2024 22:25:09 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: afrOrQh01vIdqBsKaJKgFGIjWyK64+lKG2qk7lvaeVA=) 2: 95AB61ACD9F011EEA022FB2BC4F9AE02.roa (hash: 2XK2gHiB9xHwqld/142RUCqAedFgBRScVkBGi+1yG6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: May 18 22:25:09 2024 GMT Not After : May 25 22:25:09 2024 GMT Subject: CN=66492ac5-421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:4b:87:02:18:c3:cb:c9:b1:19:30:5c:77: ae:d5:dd:06:81:61:34:8c:56:74:fb:6c:c5:2e:48: 0a:4f:6b:e9:30:f5:25:78:3f:84:ac:d7:24:6a:77: 3a:6c:64:9b:d2:1f:06:64:29:d1:68:f6:23:51:90: 70:7d:d9:9a:d8:b5:75:2a:b9:11:65:f9:7c:57:1f: b5:99:23:b6:06:cc:25:ad:bb:0c:2f:fd:a9:82:5b: e9:c1:ee:8b:1d:fd:3f:bd:87:10:21:ee:74:b0:00: 0a:5f:92:4b:3c:b5:db:5c:74:04:5c:b7:9b:f5:c8: f3:79:bf:f9:4c:02:12:b5:dd:f9:d4:71:13:db:ce: 5e:e5:2e:54:15:90:88:71:a7:87:b0:80:81:16:ef: 0f:91:6d:b3:df:ee:0d:25:fd:e0:3f:f3:e8:ea:6b: 01:3f:5f:71:1f:48:6f:fe:2a:76:08:c8:90:00:41: 8a:01:9a:01:ff:37:c6:f2:3d:9a:6d:d5:38:6d:55: 75:ff:28:aa:58:56:7a:58:ad:a7:d3:30:e9:55:c7: 07:ac:2b:b9:ff:3e:d9:3c:53:07:2b:fa:2b:97:e9: 0e:6a:fa:4c:fe:03:a8:03:2e:d3:a3:e8:d1:a4:21: d0:ba:14:72:39:61:34:d5:02:3e:80:82:06:01:c9: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:E1:C1:3B:16:3B:D4:27:0B:60:6F:82:D7:F1:20:4D:0E:8F:B7 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f2:66:ee:73:b5:e1:73:da:4d:0c:e9:a2:cc:62:b8:0f:ef: ef:b0:04:89:ea:4a:da:de:b0:7e:06:f2:0a:ad:f3:c5:03:c9: 28:27:c9:4f:7c:3a:bc:a6:0d:1b:e1:6f:08:7c:49:93:0f:c7: 8f:05:66:ac:c2:0f:ea:cb:3d:12:5a:8f:b8:ba:93:2b:6d:ec: 61:f5:80:2d:eb:a8:6f:9b:5d:76:fd:d3:6f:50:d9:60:5c:f6: 43:77:32:71:57:2d:c7:92:b8:1c:80:2c:1e:22:3e:38:5a:47: 6d:a2:6f:c8:cc:76:c9:51:3e:84:75:c3:52:eb:7b:e0:0b:d7: 95:a9:ef:0f:ab:21:8c:79:85:13:e3:c5:53:5e:31:49:37:af: 4b:8c:df:c4:10:4a:f5:05:7b:2d:01:43:7e:86:92:3d:69:26: c8:ee:95:5d:78:86:0e:68:3f:4d:3c:82:19:38:80:55:77:bb: 11:88:4e:15:9a:1c:6f:60:cd:3a:83:90:3e:54:3f:5e:b0:1b: 4b:70:91:a3:a7:be:dc:ef:6f:73:1f:a2:68:06:2e:d3:be:ec: 26:d6:92:b7:b2:42:5a:02:30:4e:e1:1f:56:27:dc:79:de:7b: cc:8f:04:46:8f:e7:a9:c8:3b:f6:d4:9f:08:e1:3b:f1:bc:57: 44:40:ce:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjQwNTE4MjIyNTA5WhcNMjQwNTI1MjIyNTA5WjAYMRYwFAYD VQQDEw02NjQ5MmFjNS00MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx9LhwIYw8vJsRkwXHeu1d0GgWE0jFZ0+2zFLkgKT2vpMPUleD+ErNckanc6 bGSb0h8GZCnRaPYjUZBwfdma2LV1KrkRZfl8Vx+1mSO2BswlrbsML/2pglvpwe6L Hf0/vYcQIe50sAAKX5JLPLXbXHQEXLeb9cjzeb/5TAIStd351HET285e5S5UFZCI caeHsICBFu8PkW2z3+4NJf3gP/Po6msBP19xH0hv/ip2CMiQAEGKAZoB/zfG8j2a bdU4bVV1/yiqWFZ6WK2n0zDpVccHrCu5/z7ZPFMHK/orl+kOavpM/gOoAy7To+jR pCHQuhRyOWE01QI+gIIGAckOrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUj4cE7 FjvUJwtgb4LX8SBNDo+3MB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw8mbuc7Xhc9pNDOmizGK4D+/vsASJ6kra3rB+BvIKrfPFA8koJ8lP fDq8pg0b4W8IfEmTD8ePBWaswg/qyz0SWo+4upMrbexh9YAt66hvm112/dNvUNlg XPZDdzJxVy3HkrgcgCweIj44Wkdtom/IzHbJUT6EdcNS63vgC9eVqe8PqyGMeYUT 48VTXjFJN69LjN/EEEr1BXstAUN+hpI9aSbI7pVdeIYOaD9NPIIZOIBVd7sRiE4V mhxvYM06g5A+VD9esBtLcJGjp77c729zH6JoBi7Tvuwm1pK3skJaAjBO4R9WJ9x5 3nvMjwRGj+epyDv21J8I4TvxvFdEQM6C -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org