$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json) Hash identifier: UQO1/dgdDkAAGfyKmnfl3OuD87U01EH92FzKA9F8QvI= Subject key identifier: C1:65:BC:8A:55:38:D1:3B:B8:F8:E3:D3:DB:AE:3F:58:1A:57:E9:CB Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft Manifest number: 0EA9 Signing time: Sat 18 May 2024 19:15:33 +0000 Manifest this update: Sat 18 May 2024 19:15:32 +0000 Manifest next update: Sat 25 May 2024 19:15:32 +0000 Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: ANDz+H1cksFMGIWAVWedLP9vn6AzXajESKpnhgHVJKI=) 2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: cGTSuKtJhnByKGYRvNLBXJ9CqrEGrqfMcD431+h8vUg=) 3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: FTimyw/5VCeKevG6KYvQHGRaEHwwVHJJgIXnVyCHGyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Validity Not Before: May 18 19:15:32 2024 GMT Not After : May 25 19:15:32 2024 GMT Subject: CN=6648fe54-bc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:61:bb:7b:aa:fd:92:e5:dd:6b:5b:60:c2: 95:81:5c:98:1d:30:b8:bb:9b:26:a5:70:20:0d:31: 22:f5:6b:66:2b:16:17:6e:6b:5e:16:1d:36:4a:73: 79:ee:51:44:b7:e8:e8:d2:a4:0f:10:4b:93:b6:59: 28:e5:a6:35:26:39:13:2d:c9:4e:36:53:09:d0:e7: 9a:05:35:7f:6d:d2:11:d1:e2:4d:14:7d:87:75:a8: cf:62:ba:8c:cc:13:6b:17:e7:d1:65:d5:98:97:31: 6e:3f:71:e2:2b:89:79:cd:ba:b4:d8:47:6a:d4:22: 41:f2:ce:cf:ff:5b:7a:a4:da:59:44:4b:b5:36:c2: b5:a1:d9:5c:29:5c:aa:cb:a5:c3:e4:9b:4d:30:24: d5:d0:9d:74:5b:5d:60:d4:de:16:84:78:9e:6f:ba: 76:9b:86:6f:0f:ef:09:4c:77:28:fd:76:64:b7:22: 06:fc:e1:89:ea:cb:d6:39:1e:56:dc:b1:b8:e9:07: 19:fe:65:fa:02:db:ce:e7:89:9c:c0:ab:be:b6:42: c8:6f:d4:6b:dc:d6:40:cd:b1:a2:e6:cf:7d:ab:83: c7:6f:ab:72:53:0f:aa:f4:0c:4b:45:c3:59:d4:b2: 22:4b:00:92:cf:5b:b6:e4:ba:e6:21:77:62:9f:d2: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:65:BC:8A:55:38:D1:3B:B8:F8:E3:D3:DB:AE:3F:58:1A:57:E9:CB X509v3 Authority Key Identifier: keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:97:2b:82:1b:8c:bd:e3:34:78:49:e8:c0:88:b5:0e:4a:57: d9:26:ff:d2:d7:49:41:df:17:4f:74:37:7d:68:4c:45:28:f6: 12:cb:88:38:bc:1f:ed:3a:d7:83:b4:6d:20:71:b7:54:ee:13: 6a:3b:35:a0:8d:23:a8:da:90:2d:9e:86:2c:af:77:45:b4:b0: 7a:4f:0e:0e:d0:87:65:7a:59:e4:2f:72:2d:2c:8d:8e:13:92: f8:85:50:97:58:d5:0f:02:ce:62:77:dc:05:71:7d:81:8c:49: af:38:bc:c8:55:9d:f9:1d:b5:67:dd:f3:ca:e7:3a:4a:a2:04: a5:6c:e4:d2:99:c6:ff:b6:0d:78:8c:58:b4:c8:13:55:db:9e: fc:aa:c2:f5:c7:2f:c5:6e:b1:dc:21:25:ec:6c:a2:c8:e2:2e: 50:bd:cd:54:83:75:40:9f:04:66:54:d1:76:ec:9d:5b:17:2e: a9:92:2f:3b:08:8f:9a:94:56:b5:46:64:66:c9:e6:db:7b:fc: 25:94:55:76:a9:86:87:78:16:42:d5:e4:eb:44:3d:ca:66:9f: ba:63:7d:61:62:c6:b5:e0:b7:00:4e:38:54:b3:da:91:09:4a: a3:2a:22:ef:c7:6c:31:60:83:75:41:20:2d:aa:d8:e7:8c:86: 0c:aa:b3:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC REIyRkVGQjQwHhcNMjQwNTE4MTkxNTMyWhcNMjQwNTI1MTkxNTMyWjAYMRYwFAYD VQQDEw02NjQ4ZmU1NC1iYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Jthu3uq/ZLl3WtbYMKVgVyYHTC4u5smpXAgDTEi9WtmKxYXbmteFh02SnN5 7lFEt+jo0qQPEEuTtlko5aY1JjkTLclONlMJ0OeaBTV/bdIR0eJNFH2HdajPYrqM zBNrF+fRZdWYlzFuP3HiK4l5zbq02Edq1CJB8s7P/1t6pNpZREu1NsK1odlcKVyq y6XD5JtNMCTV0J10W11g1N4WhHieb7p2m4ZvD+8JTHco/XZktyIG/OGJ6svWOR5W 3LG46QcZ/mX6AtvO54mcwKu+tkLIb9Rr3NZAzbGi5s99q4PHb6tyUw+q9AxLRcNZ 1LIiSwCSz1u25LrmIXdin9L5xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFlvIpV ONE7uPjj09uuP1gaV+nLMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv RTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5lyuCG4y94zR4SejAiLUOSlfZJv/S10lB3xdPdDd9aExFKPYSy4g4 vB/tOteDtG0gcbdU7hNqOzWgjSOo2pAtnoYsr3dFtLB6Tw4O0IdlelnkL3ItLI2O E5L4hVCXWNUPAs5id9wFcX2BjEmvOLzIVZ35HbVn3fPK5zpKogSlbOTSmcb/tg14 jFi0yBNV2578qsL1xy/FbrHcISXsbKLI4i5Qvc1Ug3VAnwRmVNF27J1bFy6pki87 CI+alFa1RmRmyebbe/wllFV2qYaHeBZC1eTrRD3KZp+6Y31hYsa14LcATjhUs9qR CUqjKiLvx2wxYIN1QSAtqtjnjIYMqrNj -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org