$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json) Hash identifier: U70whulDeCAr99pXi/mpI3sDRrArUGRAgCfaOd1Ymrc= Subject key identifier: AD:63:D2:65:46:F1:78:62:2C:0A:C3:61:FE:FE:B5:0D:E9:FC:16:69 Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Certificate serial: 290E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft Manifest number: 28FB Signing time: Sun 02 Jun 2024 16:00:47 +0000 Manifest this update: Sun 02 Jun 2024 16:00:47 +0000 Manifest next update: Sun 09 Jun 2024 16:00:47 +0000 Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: h2ZYlYz3aN3vXKCBdfeRFQ3KZUKU1NWUrYG3pTZlVtQ=) 2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: 7Yf4VE2coY+3d+ZqwZVw446e/DnJW+FG0JbcHMiRayM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10510 (0x290e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Validity Not Before: Jun 2 16:00:47 2024 GMT Not After : Jun 9 16:00:47 2024 GMT Subject: CN=665c972f-dd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:47:ac:ac:3d:6d:4c:d0:b6:d1:f9:32:0e: 15:2e:ec:e3:11:81:b7:f0:37:7e:82:29:d0:b6:69: 62:90:de:a2:e2:b7:1b:83:06:df:ac:4a:0f:03:42: f6:b5:65:72:84:6f:c1:69:67:ec:3f:1c:53:7e:85: a7:6a:22:73:5a:5e:e0:b9:82:c6:fa:0e:54:46:ec: 81:08:9e:fb:fe:0e:6f:d1:9a:bb:1b:b0:e8:eb:1c: 49:f7:b2:d3:98:9a:cb:27:9b:74:29:5a:b1:79:f6: b6:d5:09:a8:61:fd:c9:5c:bb:21:fe:bd:72:ca:25: f7:5b:e9:df:a3:18:16:1f:a7:c8:00:f4:e4:fe:45: a0:1e:b9:ad:bb:68:b3:b3:56:5b:4a:e7:37:ff:c0: 21:2d:8f:b5:5f:bf:c6:82:74:e6:fb:26:2e:63:2a: 6a:6d:9d:7e:4a:fb:ca:41:9a:c6:69:61:e7:3a:b6: 32:80:34:97:f2:ac:53:d5:b2:4b:ff:48:72:61:10: 57:51:42:c7:4a:d6:22:33:df:60:50:3c:40:ac:20: f3:2f:86:55:d3:77:43:55:16:0e:17:69:51:00:16: 45:c3:72:e3:d2:9e:df:70:76:02:bd:88:e1:db:87: c8:5d:03:34:33:84:c5:5f:6d:9b:8c:2b:37:54:b9: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:D2:65:46:F1:78:62:2C:0A:C3:61:FE:FE:B5:0D:E9:FC:16:69 X509v3 Authority Key Identifier: keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1c:f6:44:dc:51:66:11:67:c3:0a:32:68:b4:2f:52:5c:cf: aa:50:21:53:a2:8b:a8:de:ad:e6:3c:d0:fe:40:23:ef:13:ce: 65:26:b9:9d:26:ab:1c:2d:1e:8a:6e:4d:57:24:48:b7:dc:d0: 07:e4:a7:ee:32:ba:23:aa:e5:fa:f7:7a:75:ed:1b:a1:07:e6: 05:f1:8c:92:65:1c:76:1c:8d:15:10:6f:61:b6:e9:52:e0:a7: ff:60:ee:29:89:a1:4a:13:8d:25:3c:d4:7e:b5:00:98:f6:b7: 95:74:ae:e8:37:24:39:59:cc:43:6c:6a:6e:6a:98:3a:ed:7f: 9d:31:7a:8d:8a:5e:06:c2:fb:59:21:44:52:79:8b:29:b8:07: 81:9d:59:74:93:7b:05:b8:93:21:61:a8:fa:2a:4e:55:c4:6b: 1f:5b:f8:3f:22:78:ca:83:f6:3f:dd:25:f5:c5:58:82:66:f6: 9c:49:6b:bf:61:a5:e9:f7:17:dd:1e:54:51:f0:0c:55:35:db: 98:7b:b7:c7:27:9b:39:1b:72:15:f9:8b:4b:90:53:a0:ea:d7: 22:cf:05:56:2e:9b:36:50:39:55:38:0e:01:bb:44:7a:a4:58: 32:af:99:cd:8e:02:91:fb:22:f9:b8:02:ff:71:0f:1b:07:ba: 13:f0:b4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMTkxMTAvBgNVBAUTKEJFOTg1NEI5ODQ5OTM2NjQzRTBENDAxNUEzQjM3QjVF NDQ4NEFENUEwHhcNMjQwNjAyMTYwMDQ3WhcNMjQwNjA5MTYwMDQ3WjAYMRYwFAYD VQQDEw02NjVjOTcyZi1kZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgFHrKw9bUzQttH5Mg4VLuzjEYG38Dd+ginQtmlikN6i4rcbgwbfrEoPA0L2 tWVyhG/BaWfsPxxTfoWnaiJzWl7guYLG+g5URuyBCJ77/g5v0Zq7G7Do6xxJ97LT mJrLJ5t0KVqxefa21QmoYf3JXLsh/r1yyiX3W+nfoxgWH6fIAPTk/kWgHrmtu2iz s1ZbSuc3/8AhLY+1X7/GgnTm+yYuYypqbZ1+SvvKQZrGaWHnOrYygDSX8qxT1bJL /0hyYRBXUULHStYiM99gUDxArCDzL4ZV03dDVRYOF2lRABZFw3Lj0p7fcHYCvYjh 24fIXQM0M4TFX22bjCs3VLnERQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1j0mVG 8XhiLArDYf7+tQ3p/BZpMB8GA1UdIwQYMBaAFL6YVLmEmTZkPg1AFaOze15EhK1a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QxOS80MEVEODAyMDQy OUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5tUS1EVUFWbzdON1hrU0Vy Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwaFV1WVNaTm1RLURVQVZvN043WGtTRXJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QxOS80MEVEODAyMDQyOUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5t US1EVUFWbzdON1hrU0VyVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATHPZE3FFmEWfDCjJotC9SXM+qUCFToouo3q3mPND+QCPvE85lJrmd JqscLR6Kbk1XJEi33NAH5KfuMrojquX693p17RuhB+YF8YySZRx2HI0VEG9htulS 4Kf/YO4piaFKE40lPNR+tQCY9reVdK7oNyQ5WcxDbGpuapg67X+dMXqNil4GwvtZ IURSeYspuAeBnVl0k3sFuJMhYaj6Kk5VxGsfW/g/InjKg/Y/3SX1xViCZvacSWu/ YaXp9xfdHlRR8AxVNduYe7fHJ5s5G3IV+YtLkFOg6tcizwVWLps2UDlVOA4Bu0R6 pFgyr5nNjgKR+yL5uAL/cQ8bB7oT8LR+ -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:14 2024 by rpki-client on console-ams.rpki-client.org