$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: AXIdF6b/+aGlwGxNgH2VHlYhjDYpb7P3UApS4FvCnqg= Subject key identifier: A8:8D:6F:3F:21:47:99:10:1B:00:A7:41:73:24:EE:5C:E8:1C:53:9B Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 3405 Signing time: Sat 18 May 2024 15:09:10 +0000 Manifest this update: Sat 18 May 2024 15:09:09 +0000 Manifest next update: Sat 25 May 2024 15:09:09 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: YbwF7opBM7WBbDi4I7z2MpBOIK+yZwrj2quC9QNqo+0=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: Rhnw6RJ6YIg0TkgswbAebLFktOS8eu4QvXzHJoAKQ4o=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: MDoU/JuIBzWyeNV1mWU+1cfbqy0SljZrseShx5ONDms=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: D7Yw1fFSNsmhzYYizrIWcgke3vd7oTvuVsShL3GgxW8=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: oHHg7bVGlcuVHigapoywJfWF7AaNUZbxOeF71G2cdao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13361 (0x3431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: May 18 15:09:09 2024 GMT Not After : May 25 15:09:09 2024 GMT Subject: CN=6648c495-5ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:54:53:e5:6b:43:a2:00:70:b3:69:51:43: 9e:2d:5d:a8:69:dd:21:bb:79:b5:40:f4:f2:b1:e4: 61:05:36:65:f4:3f:19:63:98:bf:4f:9d:88:64:18: b5:4a:5f:53:a5:cc:f7:40:34:1b:53:84:9a:c6:fa: 48:a7:48:34:15:c9:79:8d:11:2b:f8:57:eb:f1:e7: 81:e7:07:2b:a3:40:28:23:87:f1:5a:ca:9f:3b:ad: 8c:67:d2:0d:1c:23:38:38:65:0e:ab:40:66:4f:3b: c5:5f:ca:6d:d9:b0:8f:a7:38:9e:85:12:65:53:3c: 91:bc:42:cb:96:ab:f9:e6:fb:f1:95:73:06:f5:34: f5:d6:f2:0f:74:cb:d9:99:cc:de:f1:5d:24:55:c7: 8a:cf:f2:0c:81:38:52:e4:df:75:69:34:bd:48:d5: 25:11:5e:d9:8a:79:34:a2:f6:71:ba:c1:ed:80:f5: 5b:39:16:5a:66:ca:60:32:ee:04:05:8c:ff:cd:e6: 79:c9:c5:62:eb:0e:27:36:6a:c2:c3:62:f4:2b:53: 41:64:1a:e3:91:64:b9:9f:67:e5:32:69:d9:2e:5d: 04:13:3b:00:35:99:b1:c8:d8:9b:ae:4d:c8:14:c9: b9:e4:e8:a4:a3:fb:3a:8a:2e:ff:5e:e2:6a:e6:88: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8D:6F:3F:21:47:99:10:1B:00:A7:41:73:24:EE:5C:E8:1C:53:9B X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7d:2d:fd:32:48:83:b3:e7:d8:bc:9c:bd:b5:ca:24:4e:11: 1a:7b:d5:b8:0b:25:c8:8c:5f:5c:3a:be:d5:10:0e:9c:57:0c: 42:f0:94:b9:71:69:ad:af:1c:f9:69:b7:19:45:b5:1c:f4:b8: 26:c8:11:0b:27:e8:1c:55:ed:9f:c2:be:80:92:5a:7c:08:62: f8:5f:6e:0a:e2:18:84:eb:9e:48:0a:15:ba:83:f7:f8:90:b8: db:00:c8:5c:b4:68:8c:3d:a9:4e:e8:6b:9f:da:5a:02:26:17: 97:1a:70:fb:c9:74:4e:d9:2c:4c:14:90:7d:93:1a:5a:fa:af: f0:06:46:96:1f:c0:f8:e5:29:39:6d:e4:3b:a1:c9:44:37:d1: ed:b7:e2:0e:10:d8:af:d5:67:df:ec:d7:b4:79:35:8f:7a:46: 02:e0:85:08:00:1d:47:94:2b:bf:1d:01:29:76:be:a9:46:12: 8c:89:27:b1:2c:15:ab:7b:ed:64:23:01:82:a1:9a:e5:20:12: af:52:90:4d:d0:fc:91:91:0d:05:d7:e4:03:a7:d6:bc:c7:3a: 68:e7:ed:c0:0b:5c:8a:8f:16:18:09:20:ae:28:c0:ee:6f:e0: af:2e:c8:37:93:ed:82:ce:9b:36:29:09:13:a9:e1:7b:c8:14: b1:b8:da:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjQwNTE4MTUwOTA5WhcNMjQwNTI1MTUwOTA5WjAYMRYwFAYD VQQDEw02NjQ4YzQ5NS01ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnipUU+VrQ6IAcLNpUUOeLV2oad0hu3m1QPTyseRhBTZl9D8ZY5i/T52IZBi1 Sl9Tpcz3QDQbU4SaxvpIp0g0Fcl5jREr+Ffr8eeB5wcro0AoI4fxWsqfO62MZ9IN HCM4OGUOq0BmTzvFX8pt2bCPpziehRJlUzyRvELLlqv55vvxlXMG9TT11vIPdMvZ mcze8V0kVceKz/IMgThS5N91aTS9SNUlEV7Zink0ovZxusHtgPVbORZaZspgMu4E BYz/zeZ5ycVi6w4nNmrCw2L0K1NBZBrjkWS5n2flMmnZLl0EEzsANZmxyNibrk3I FMm55Oiko/s6ii7/XuJq5oiv+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiNbz8h R5kQGwCnQXMk7lzoHFObMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfS39MkiDs+fYvJy9tcokThEae9W4CyXIjF9cOr7VEA6cVwxC8JS5 cWmtrxz5abcZRbUc9LgmyBELJ+gcVe2fwr6Aklp8CGL4X24K4hiE655IChW6g/f4 kLjbAMhctGiMPalO6Guf2loCJheXGnD7yXRO2SxMFJB9kxpa+q/wBkaWH8D45Sk5 beQ7oclEN9Htt+IOENiv1Wff7Ne0eTWPekYC4IUIAB1HlCu/HQEpdr6pRhKMiSex LBWre+1kIwGCoZrlIBKvUpBN0PyRkQ0F1+QDp9a8xzpo5+3AC1yKjxYYCSCuKMDu b+CvLsg3k+2Czps2KQkTqeF7yBSxuNp2 -----END CERTIFICATE-----Generated at Sat May 18 16:19:51 2024 by rpki-client on console-fra.rpki-client.org