$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: 0s1zfEm6XpCa6fj6o0pyTGdrE/tTJh/b04YYZDT7fCg= Subject key identifier: C9:3B:78:A5:86:B2:49:80:80:CC:A8:CE:DD:1D:3E:03:7D:1F:E7:16 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 265F Signing time: Sat 18 May 2024 15:57:39 +0000 Manifest this update: Sat 18 May 2024 15:57:38 +0000 Manifest next update: Sat 25 May 2024 15:57:38 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: /3d9v2GWwT2OQGHg62A9tXY09/SdqHbN7Ahkqb2XBJs=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: 8T6+GpYGKPvpCT1aXj07WluTUhSqQG41Ny31YLC+lak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9846 (0x2676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: May 18 15:57:38 2024 GMT Not After : May 25 15:57:38 2024 GMT Subject: CN=6648cff2-d407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:f6:6b:d8:e6:40:c7:bc:e9:96:e0:0a:c2: 07:34:f1:a2:01:66:fb:20:84:f1:7f:6e:ae:78:67: ce:95:7e:be:df:de:5c:97:46:08:33:de:4b:14:e0: 31:ed:85:b4:dd:ea:ef:0c:88:5d:12:56:10:1e:95: d9:ec:b0:f4:ed:9f:98:cc:3f:1d:ea:81:c7:fd:86: c5:a5:56:21:17:d6:99:0c:42:6c:22:f0:9c:19:9d: f5:dc:65:99:50:18:4c:28:de:61:e4:37:da:65:4d: 9a:a4:48:50:b5:b3:de:f4:2c:ec:90:14:b3:38:4d: 3d:77:f0:40:c7:6c:3b:89:79:62:5e:00:ef:80:86: b8:36:35:a2:4b:d4:c9:dc:1a:3b:4a:f4:8b:33:fd: 2e:42:5b:17:cc:bc:aa:a7:0b:bb:93:17:9e:a0:92: 96:6b:9f:12:89:94:c7:e5:31:e7:77:b9:e2:54:6e: 5d:e2:99:0c:8e:68:55:26:e9:41:d3:f7:74:6d:21: 09:e9:05:8b:cc:83:6d:08:88:a3:35:46:a8:35:4a: b1:ab:9a:e1:b2:82:12:72:a5:b3:23:78:4f:f8:1e: 68:83:a3:5a:10:bb:ab:62:cd:0a:64:00:e5:09:38: 7c:3b:b1:ba:ed:91:b8:5d:50:a9:4c:92:94:83:f0: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:78:A5:86:B2:49:80:80:CC:A8:CE:DD:1D:3E:03:7D:1F:E7:16 X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:6d:27:6e:c5:bb:ec:32:3b:2f:82:20:f7:fa:8b:83:9b: 63:63:58:f6:44:de:86:35:24:73:4b:ba:72:21:dd:4a:6c:79: 94:8a:37:5e:3d:60:84:62:32:ff:80:74:29:19:80:bf:c2:4d: d4:33:de:4e:d9:f1:68:1c:25:66:26:80:66:f7:d7:8e:56:84: dc:c5:85:42:0e:59:ac:8b:61:2a:6a:82:42:25:58:73:7a:52: a9:4e:64:df:0c:6a:fa:e4:91:f9:30:73:c3:b7:ef:b6:08:38: c7:23:08:38:2a:e1:3c:00:59:b8:93:9b:10:45:47:57:86:c2: 9a:b8:1e:d2:44:4e:07:4b:c0:dd:10:e3:7c:89:d0:08:d2:ec: 67:47:85:2d:3f:ad:bf:6e:73:ae:17:3f:90:bb:b2:7d:e6:a5: 0f:8e:b2:11:44:5e:93:97:83:3d:cc:a1:d1:e2:a0:f5:eb:d4: ac:ff:08:3a:05:bc:6a:69:1e:8a:bf:dd:73:d9:5d:6f:fc:6f: d5:5b:21:68:35:a8:25:bd:93:65:e9:67:99:0c:06:81:4f:d4: 76:57:ed:99:50:ee:59:a8:45:60:2f:14:95:f5:50:7c:e1:39: 9f:26:71:8f:a2:94:aa:39:5b:c9:38:49:b4:77:a8:a5:6f:f8: 70:46:3d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjQwNTE4MTU1NzM4WhcNMjQwNTI1MTU1NzM4WjAYMRYwFAYD VQQDEw02NjQ4Y2ZmMi1kNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeH2a9jmQMe86ZbgCsIHNPGiAWb7IITxf26ueGfOlX6+395cl0YIM95LFOAx 7YW03ervDIhdElYQHpXZ7LD07Z+YzD8d6oHH/YbFpVYhF9aZDEJsIvCcGZ313GWZ UBhMKN5h5DfaZU2apEhQtbPe9CzskBSzOE09d/BAx2w7iXliXgDvgIa4NjWiS9TJ 3Bo7SvSLM/0uQlsXzLyqpwu7kxeeoJKWa58SiZTH5THnd7niVG5d4pkMjmhVJulB 0/d0bSEJ6QWLzINtCIijNUaoNUqxq5rhsoIScqWzI3hP+B5og6NaELurYs0KZADl CTh8O7G67ZG4XVCpTJKUg/Cu1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMk7eKWG skmAgMyozt0dPgN9H+cWMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWIG0nbsW77DI7L4Ig9/qLg5tjY1j2RN6GNSRzS7pyId1KbHmUijde PWCEYjL/gHQpGYC/wk3UM95O2fFoHCVmJoBm99eOVoTcxYVCDlmsi2EqaoJCJVhz elKpTmTfDGr65JH5MHPDt++2CDjHIwg4KuE8AFm4k5sQRUdXhsKauB7SRE4HS8Dd EON8idAI0uxnR4UtP62/bnOuFz+Qu7J95qUPjrIRRF6Tl4M9zKHR4qD169Ss/wg6 BbxqaR6Kv91z2V1v/G/VWyFoNaglvZNl6WeZDAaBT9R2V+2ZUO5ZqEVgLxSV9VB8 4TmfJnGPopSqOVvJOEm0d6ilb/hwRj12 -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org