$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: 3Tn0tDvf8VuretXjAmmTKm0Ze2JHgHw9Tge6zmxc/AQ= Subject key identifier: 8F:C6:EF:74:1F:F8:0B:2E:87:56:82:BB:86:67:28:F4:71:13:F0:F9 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 20BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 20B5 Signing time: Sat 18 May 2024 16:16:09 +0000 Manifest this update: Sat 18 May 2024 16:16:08 +0000 Manifest next update: Sat 25 May 2024 16:16:08 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: /goMrloFamf1moNaQ6NxQYMaqAWEDntSc7IfVNN72QI=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: L9gCg+OrTuiqw6ExvZDK6OLjojljMO3J6dRtRl48yx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8383 (0x20bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: May 18 16:16:08 2024 GMT Not After : May 25 16:16:08 2024 GMT Subject: CN=6648d448-ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:5b:b1:89:52:d7:fe:c9:92:7c:03:11:c2: 92:76:b4:22:c7:b8:4d:4f:ef:48:6e:aa:cc:66:30: 4b:88:fe:6e:d2:96:53:77:1d:b1:41:41:08:66:0b: 78:6e:e4:d4:ae:17:3d:71:67:05:b2:60:dc:9d:c1: 01:16:b5:f9:63:41:f0:40:29:6e:83:94:5d:cf:ef: 6b:f2:38:86:6d:fa:8d:a9:52:62:44:57:88:13:79: 46:69:13:0d:bc:31:b8:5b:a1:84:e5:fd:42:22:4f: 50:3f:5f:07:13:9d:57:10:15:a6:8d:28:78:b1:89: cb:ea:8d:c8:91:1a:c5:a8:2d:98:87:1c:63:2f:c4: 41:cb:fb:37:36:f9:97:33:3e:b3:68:10:33:6d:a0: c4:ac:38:da:35:d8:eb:1e:4b:39:55:ae:c6:40:02: 35:9a:be:fa:ed:0f:63:38:ad:b6:2f:c8:0b:4f:29: a4:76:37:d0:87:f1:84:48:84:8b:4c:62:57:ea:5d: 8d:60:5f:cf:8b:3f:3c:73:ca:58:85:f5:14:15:ff: 25:da:8a:b6:33:c3:4b:fc:04:36:f5:53:9e:c2:aa: 0e:a9:7c:f5:78:9e:6c:71:b7:ef:8f:5c:f9:53:70: 63:20:9e:e3:87:8b:77:13:d0:31:c7:33:1b:c2:e9: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:EF:74:1F:F8:0B:2E:87:56:82:BB:86:67:28:F4:71:13:F0:F9 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:56:4d:1b:79:70:34:72:5d:f8:07:b0:5e:53:d6:d6:19: 85:0b:d4:41:c4:57:2b:f3:ac:60:26:70:ac:d5:e0:b5:3f:76: 6d:51:c5:5b:24:f8:4c:42:2a:e6:d5:be:99:7b:fd:18:b0:84: bd:d3:a2:63:e9:ca:09:60:6d:7d:7e:59:7f:57:42:e6:64:1f: b0:7b:52:ac:a4:2d:26:c1:ce:c1:f1:49:83:6d:83:05:14:bb: b9:36:75:c2:6a:89:dc:2b:d1:a8:9d:60:cc:20:b0:ca:f6:57: 27:31:9a:71:60:ac:41:7f:8e:73:41:0d:be:67:ae:45:ad:55: ef:89:f0:b1:27:39:a5:d4:6b:e2:28:94:19:f0:94:61:ac:0d: bb:f8:7b:4f:92:5a:7f:9b:30:3b:13:7a:83:dd:4a:fe:1c:83: c7:46:3b:f8:8a:38:f7:4a:97:3c:2a:70:8f:b0:53:88:c5:1a: df:a2:e4:28:99:25:97:b0:19:98:63:45:85:73:85:11:ea:a7: 18:52:da:80:01:37:e0:c1:53:5f:66:8c:f1:27:d4:41:16:76: 50:74:4e:c3:0f:56:fd:47:e9:08:08:81:ff:1f:5c:8f:18:5f: 59:3e:a6:ce:1f:fa:04:e9:4c:ea:a0:8a:12:5e:c0:f2:85:6a: d2:1b:97:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjQwNTE4MTYxNjA4WhcNMjQwNTI1MTYxNjA4WjAYMRYwFAYD VQQDEw02NjQ4ZDQ0OC1mZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmM9bsYlS1/7JknwDEcKSdrQix7hNT+9IbqrMZjBLiP5u0pZTdx2xQUEIZgt4 buTUrhc9cWcFsmDcncEBFrX5Y0HwQClug5Rdz+9r8jiGbfqNqVJiRFeIE3lGaRMN vDG4W6GE5f1CIk9QP18HE51XEBWmjSh4sYnL6o3IkRrFqC2YhxxjL8RBy/s3NvmX Mz6zaBAzbaDErDjaNdjrHks5Va7GQAI1mr767Q9jOK22L8gLTymkdjfQh/GESISL TGJX6l2NYF/Piz88c8pYhfUUFf8l2oq2M8NL/AQ29VOewqoOqXz1eJ5scbfvj1z5 U3BjIJ7jh4t3E9AxxzMbwulzIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/G73Qf +Asuh1aCu4ZnKPRxE/D5MB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjIVZNG3lwNHJd+AewXlPW1hmFC9RBxFcr86xgJnCs1eC1P3ZtUcVb JPhMQirm1b6Ze/0YsIS906Jj6coJYG19fll/V0LmZB+we1KspC0mwc7B8UmDbYMF FLu5NnXCaoncK9GonWDMILDK9lcnMZpxYKxBf45zQQ2+Z65FrVXvifCxJzml1Gvi KJQZ8JRhrA27+HtPklp/mzA7E3qD3Ur+HIPHRjv4ijj3Spc8KnCPsFOIxRrfouQo mSWXsBmYY0WFc4UR6qcYUtqAATfgwVNfZozxJ9RBFnZQdE7DD1b9R+kICIH/H1yP GF9ZPqbOH/oE6UzqoIoSXsDyhWrSG5d1 -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org