$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: Hx+uxh0ZIJZIPrKsEjYOBTHdZsHFB/4J6H9AMTWmMIY= Subject key identifier: BD:73:95:2D:08:1E:EA:43:BC:1B:57:64:93:7B:1C:01:96:08:2B:67 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0119 Signing time: Sun 19 May 2024 05:18:54 +0000 Manifest this update: Sun 19 May 2024 05:18:53 +0000 Manifest next update: Sun 26 May 2024 05:18:53 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: eQPfjwADAz/jtAQud940r5rdaXu7mjK78vioj3onQUw=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: TmtzZb9Ahn1mD8EfJHV6WD2K5Zur9oNLfrRAGYvQ+Pg=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: 2TLfJvxE/gpFV9gQ4u0MTMuVJgoGjSm8WYNCLQeCuTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: May 19 05:18:53 2024 GMT Not After : May 26 05:18:53 2024 GMT Subject: CN=66498bbe-3118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:25:d4:52:cf:4c:1a:34:70:d0:bb:e1:4f: 44:4e:60:53:7b:96:02:3c:ab:a0:a5:78:16:5e:24: 7b:f9:78:18:66:a0:5c:19:3c:f6:31:9f:68:ad:88: 5c:52:6f:3e:c2:65:53:76:d6:83:42:2c:2e:83:68: a7:6a:85:b8:6a:ca:4a:f8:10:77:2b:2a:00:c8:71: cc:57:39:ad:f6:d6:d5:d7:64:46:e7:fe:21:8f:37: 92:0e:49:c2:97:d3:89:de:06:87:2c:1c:e9:f3:03: d3:eb:d5:bd:5e:40:8c:18:c1:ea:de:18:65:8f:a4: d6:c8:8e:6e:e0:25:99:e5:28:12:36:11:f1:a8:76: db:fb:cf:e6:43:cb:ac:2e:ae:bb:a8:b8:bc:cb:20: 32:65:36:b3:62:99:51:61:60:36:f7:45:b0:d7:5c: c3:d2:68:03:ed:23:b9:2d:42:77:5e:27:ea:97:ef: 5c:2a:17:ef:ff:09:6b:70:7d:ed:13:b9:97:ad:c3: 3d:b5:7f:ee:02:75:43:80:ed:ca:8d:19:1d:a4:32: 0b:a0:6f:01:d1:70:7b:f3:c8:de:64:27:db:ae:a5: 70:1c:fd:eb:3a:48:9b:18:81:46:2e:8d:a7:14:1d: a9:8d:d2:64:d0:f7:93:0d:f2:20:1c:61:0e:58:b2: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:95:2D:08:1E:EA:43:BC:1B:57:64:93:7B:1C:01:96:08:2B:67 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2f:b0:b3:48:70:67:9b:90:b6:f1:fc:b1:9e:72:cd:f9:f6: 61:6e:64:b8:38:4e:bb:ce:f9:01:b5:5e:57:17:f1:ba:bd:8f: d6:93:78:63:0e:fa:3c:29:61:9f:1e:f3:e5:1c:fb:63:80:d6: 19:22:44:bc:0c:d9:d2:57:2f:b2:b7:e9:6c:23:64:83:dd:73: e4:bb:f3:14:e3:87:37:11:94:4f:03:1e:06:2a:03:11:66:4a: 17:6e:99:e9:bd:64:4e:d6:fd:56:b3:03:36:a1:25:72:d4:ad: 78:3e:4a:9e:ef:17:58:04:d3:e5:ff:a5:7e:0f:f1:54:f1:a9: 57:5b:65:a7:c8:56:64:e9:66:50:61:c7:2f:91:bb:1c:b6:f7: a8:97:fa:5a:fc:00:15:d8:a4:2c:82:0a:bd:3c:3f:f7:1e:e7: 68:77:5b:71:58:2b:78:80:55:54:45:aa:a7:95:6a:9f:4a:bf: 24:22:1c:58:fc:87:1f:81:59:eb:d7:82:b7:e2:26:21:02:b1: a0:4f:06:36:a8:61:db:0e:93:03:45:85:b0:83:8d:b6:fe:63: b6:cf:c2:f7:cb:ab:e6:b0:9f:cc:21:d2:d2:2c:63:71:e5:ff: ca:e9:e0:e7:5d:ad:4b:9e:af:51:00:d8:92:f6:cc:7a:5c:67: 14:41:c4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjQwNTE5MDUxODUzWhcNMjQwNTI2MDUxODUzWjAYMRYwFAYD VQQDEw02NjQ5OGJiZS0zMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+wl1FLPTBo0cNC74U9ETmBTe5YCPKugpXgWXiR7+XgYZqBcGTz2MZ9orYhc Um8+wmVTdtaDQiwug2inaoW4aspK+BB3KyoAyHHMVzmt9tbV12RG5/4hjzeSDknC l9OJ3gaHLBzp8wPT69W9XkCMGMHq3hhlj6TWyI5u4CWZ5SgSNhHxqHbb+8/mQ8us Lq67qLi8yyAyZTazYplRYWA290Ww11zD0mgD7SO5LUJ3Xifql+9cKhfv/wlrcH3t E7mXrcM9tX/uAnVDgO3KjRkdpDILoG8B0XB788jeZCfbrqVwHP3rOkibGIFGLo2n FB2pjdJk0PeTDfIgHGEOWLIMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1zlS0I HupDvBtXZJN7HAGWCCtnMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxL7CzSHBnm5C28fyxnnLN+fZhbmS4OE67zvkBtV5XF/G6vY/Wk3hj Dvo8KWGfHvPlHPtjgNYZIkS8DNnSVy+yt+lsI2SD3XPku/MU44c3EZRPAx4GKgMR ZkoXbpnpvWRO1v1WswM2oSVy1K14Pkqe7xdYBNPl/6V+D/FU8alXW2WnyFZk6WZQ Yccvkbsctveol/pa/AAV2KQsggq9PD/3Hudod1txWCt4gFVURaqnlWqfSr8kIhxY /IcfgVnr14K34iYhArGgTwY2qGHbDpMDRYWwg422/mO2z8L3y6vmsJ/MIdLSLGNx 5f/K6eDnXa1Lnq9RANiS9sx6XGcUQcQo -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org