$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: N7+bjgxuzlPvblkDV3FeXkJtHfKhzZj/8cG7wPPrnsw= Subject key identifier: 47:C8:10:AC:CA:55:9C:02:15:8C:3C:02:2B:DF:BE:44:3B:63:14:DE Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 52 Signing time: Sun 19 May 2024 07:55:29 +0000 Manifest this update: Sun 19 May 2024 07:55:29 +0000 Manifest next update: Sun 26 May 2024 07:55:29 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: D7NxKNz0soUG0DZ8Y+v1EfureYnZ4nJ2o4wz2O9fAhQ=) 2: FAA67378020211EFB3B6BB0CC4F9AE02.roa (hash: gMHUF5KkG8WzNCDqGykysNKLveU/mzXdaFPhJUxfK3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: May 19 07:55:29 2024 GMT Not After : May 26 07:55:29 2024 GMT Subject: CN=6649b071-f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:be:36:49:4c:66:6b:85:57:27:c6:0f:fb: db:8f:f7:f5:92:7d:87:a5:0d:8a:09:af:18:f4:2e: e8:22:81:40:58:3c:1e:00:9c:e7:b8:0d:a8:7a:c0: a0:a7:dc:42:18:74:6b:8a:39:4f:6c:1d:43:ee:eb: 9a:7b:f0:38:04:b2:de:06:c7:36:43:d5:08:7c:17: 14:69:2b:25:e4:a9:56:58:b9:b7:47:39:52:ed:c8: db:ed:4c:4e:8b:f6:df:59:6a:4d:26:3a:84:c3:11: df:3e:61:07:90:40:0f:9a:2d:b3:fd:d9:f6:d1:22: 9c:a7:a7:aa:2c:2a:c8:a0:85:95:ec:00:e5:31:ef: d5:7c:61:24:b5:96:66:dc:c5:89:17:bf:07:46:fb: 7a:69:7e:57:1b:f7:ea:96:a2:e8:06:e7:f1:a5:68: 99:6f:a8:32:bc:37:28:bf:d0:7c:bf:af:06:c1:a7: b7:0b:38:a3:d0:da:f2:3f:6a:61:08:f2:8c:28:ae: cc:92:d7:59:b5:6e:c4:61:84:f2:55:18:11:76:fe: e8:5a:2c:60:89:80:a3:83:f1:d2:44:52:f3:a9:39: fe:4a:0e:64:36:9b:74:2b:46:c5:f1:4f:c8:d5:d7: f1:41:8b:0e:6b:77:e8:0a:fc:a4:bd:af:f0:bf:2e: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C8:10:AC:CA:55:9C:02:15:8C:3C:02:2B:DF:BE:44:3B:63:14:DE X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:83:b7:50:8c:e2:65:ed:a8:27:a9:3b:64:68:d3:e3:f6:c3: 6a:99:b3:48:41:56:51:a3:40:d2:46:50:9e:ae:41:d5:cc:17: 24:dd:65:7c:4b:90:01:72:10:17:7d:69:8b:33:84:e5:9d:f2: db:9b:57:be:50:a8:2c:ef:5b:9b:48:a1:17:05:a3:e4:cd:8f: 24:0b:b9:19:5b:28:ea:a0:50:19:5b:1e:90:69:17:c0:f1:d9: 38:e8:7f:ec:8f:ec:cf:51:08:52:48:3a:df:55:12:32:02:87: 87:45:66:0f:db:21:14:b0:af:31:06:9a:bf:b8:f6:9c:f1:3c: 28:d7:56:d5:6b:62:e3:c6:3f:f8:33:a5:0e:5e:ce:ab:6c:7a: 9d:c8:40:39:56:f6:dc:96:ba:6e:e0:a5:a1:9a:cf:8e:16:85: 29:6d:09:ad:ac:59:b3:46:84:c6:4d:47:7f:34:7a:27:b4:35: aa:83:75:bc:bb:1c:fa:66:d4:5d:f6:c3:58:8f:b4:22:f9:5f: fc:ec:6d:01:57:d3:01:01:f9:a3:f8:ec:2c:e3:9e:9e:05:33: 7f:83:45:60:29:6c:4b:b8:e8:62:25:df:d1:17:df:db:b4:95: fd:dd:8b:6a:b5:41:b8:86:07:2e:a3:70:99:04:e6:7f:9b:d0: 8a:1a:e7:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0VCRDExMC8GA1UEBRMoQkU5MUYyMUM3QTBCQzA2NDM3RjNEQjVCMjE0MjA4Qzg3 NzRFRUJDRDAeFw0yNDA1MTkwNzU1MjlaFw0yNDA1MjYwNzU1MjlaMBgxFjAUBgNV BAMTDTY2NDliMDcxLWYyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsFr42SUxma4VXJ8YP+9uP9/WSfYelDYoJrxj0LugigUBYPB4AnOe4Dah6wKCn 3EIYdGuKOU9sHUPu65p78DgEst4GxzZD1Qh8FxRpKyXkqVZYubdHOVLtyNvtTE6L 9t9Zak0mOoTDEd8+YQeQQA+aLbP92fbRIpynp6osKsighZXsAOUx79V8YSS1lmbc xYkXvwdG+3ppflcb9+qWougG5/GlaJlvqDK8Nyi/0Hy/rwbBp7cLOKPQ2vI/amEI 8oworsyS11m1bsRhhPJVGBF2/uhaLGCJgKOD8dJEUvOpOf5KDmQ2m3QrRsXxT8jV 1/FBiw5rd+gK/KS9r/C/Lip3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR8gQrMpV nAIVjDwCK9++RDtjFN4wHwYDVR0jBBgwFoAUvpHyHHoLwGQ389tbIUIIyHdO680w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRUJEL0NDRDgxNDI4OTlD MTExRUU5QTFGREUxRkM0RjlBRTAyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnBIeUhIb0x3R1EzODl0YklVSUl5SGRPNjgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RUJEL0NDRDgxNDI4OTlDMTExRUU5QTFGREUxRkM0RjlBRTAyL3ZwSHlISG9Md0dR Mzg5dGJJVUlJeUhkTzY4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGDt1CM4mXtqCepO2Ro0+P2w2qZs0hBVlGjQNJGUJ6uQdXMFyTdZXxL kAFyEBd9aYszhOWd8tubV75QqCzvW5tIoRcFo+TNjyQLuRlbKOqgUBlbHpBpF8Dx 2Tjof+yP7M9RCFJIOt9VEjICh4dFZg/bIRSwrzEGmr+49pzxPCjXVtVrYuPGP/gz pQ5ezqtsep3IQDlW9tyWum7gpaGaz44WhSltCa2sWbNGhMZNR380eie0NaqDdby7 HPpm1F32w1iPtCL5X/zsbQFX0wEB+aP47Czjnp4FM3+DRWApbEu46GIl39EX39u0 lf3di2q1QbiGBy6jcJkE5n+b0Ioa5zc= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org