$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: YvpEgWYQJhF1degYYWoL09AJXoGuz0iY/dtDirVILas= Subject key identifier: C7:26:D0:CA:30:01:0C:C6:B5:9E:93:8A:FE:C4:6D:5B:06:12:DC:3B Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 012D Signing time: Sun 19 May 2024 05:02:14 +0000 Manifest this update: Sun 19 May 2024 05:02:14 +0000 Manifest next update: Sun 26 May 2024 05:02:14 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: XvAhFMXGORcPSIJhswKoWTII8HMipeghNdd55AyhcZs=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: YY2Pd0GkguRICvmWSkJWrBzrhj55FV0uDBgHL7OCSIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: May 19 05:02:14 2024 GMT Not After : May 26 05:02:14 2024 GMT Subject: CN=664987d6-bb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:d0:bf:9d:42:00:9d:c3:bf:90:4c:3a:19: 31:9f:f5:1b:45:c1:31:f4:65:3d:35:90:2c:58:52: 87:4e:73:e3:a0:b2:d7:01:d6:ca:c5:97:58:9a:99: c5:66:d6:a0:6a:a5:7a:03:ef:fa:16:3b:50:1d:bd: 5d:67:12:2f:dc:1c:b3:f7:c7:c2:9f:fc:55:60:9e: e1:09:11:37:d5:ef:62:cf:b9:3a:06:8e:a7:e5:34: e2:19:8d:b0:55:ca:97:ed:72:1a:92:bf:fd:91:18: 07:d3:1a:73:92:f8:dc:9e:ac:9b:e2:20:11:52:15: 0d:71:12:5c:ce:0b:2f:a8:c3:9f:33:04:e4:23:c4: 65:72:b9:48:29:26:08:62:ec:71:e8:bf:1b:4e:3e: 10:7a:7a:fc:bc:5f:36:c0:4f:23:28:95:38:09:8c: d3:50:0a:3b:7a:ab:a0:eb:32:f6:5c:bc:b8:53:87: b5:3d:a2:54:35:50:0a:cc:c5:fe:46:28:71:98:89: ab:18:8a:c2:40:d4:c4:94:d7:26:8d:7f:59:51:da: 2a:7d:d6:e5:a5:f0:d4:d3:a7:54:98:a2:6f:a2:a5: 9f:1e:5d:db:ab:46:f8:65:2d:c1:80:39:77:68:09: aa:34:0a:7c:be:bb:db:b2:1e:5f:9a:f4:33:82:8f: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:D0:CA:30:01:0C:C6:B5:9E:93:8A:FE:C4:6D:5B:06:12:DC:3B X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6a:ac:0b:49:23:d9:a7:46:1f:45:79:98:5d:89:3c:24:4d: b9:d8:a3:d9:c4:77:e3:0d:fa:12:55:8a:f8:14:a6:ce:fb:a1: d2:2d:a8:01:34:f3:bf:83:e6:c9:d6:22:e7:73:aa:26:d0:18: f1:ca:fe:97:09:7f:12:e2:1f:b9:cb:17:ac:f4:71:e8:d6:4e: 26:e0:82:80:32:d5:a5:be:3a:62:03:6c:62:3a:52:2e:77:28: 83:49:2b:78:6f:6c:61:fd:3f:e2:27:c4:56:4d:c1:a0:1b:1f: 75:34:0b:46:79:27:65:b1:ab:83:1d:3f:0f:69:d2:df:b1:38: b8:c9:fc:e5:2d:c5:37:fc:ec:83:d1:2a:46:85:91:7e:7d:fe: 4f:a9:29:0e:38:58:46:08:fb:8c:24:a2:56:8b:26:e8:85:36: 36:b3:84:31:08:09:f8:aa:30:10:9d:76:fd:d7:70:ec:2c:24: 82:34:a0:35:60:7c:9b:25:5e:9a:58:43:ed:86:2d:74:0f:58: bb:9a:9b:3c:9b:2d:06:eb:4e:a3:cc:b3:1b:53:aa:33:1d:82: 8d:e4:e2:df:81:80:63:49:ed:d1:87:03:c4:a9:23:18:c7:5d: 14:b9:e5:59:86:ba:ad:f0:f2:5b:b7:8e:3a:1e:63:6f:67:69: 19:0f:d4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjQwNTE5MDUwMjE0WhcNMjQwNTI2MDUwMjE0WjAYMRYwFAYD VQQDEw02NjQ5ODdkNi1iYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjbQv51CAJ3Dv5BMOhkxn/UbRcEx9GU9NZAsWFKHTnPjoLLXAdbKxZdYmpnF ZtagaqV6A+/6FjtQHb1dZxIv3Byz98fCn/xVYJ7hCRE31e9iz7k6Bo6n5TTiGY2w VcqX7XIakr/9kRgH0xpzkvjcnqyb4iARUhUNcRJczgsvqMOfMwTkI8RlcrlIKSYI Yuxx6L8bTj4Qenr8vF82wE8jKJU4CYzTUAo7equg6zL2XLy4U4e1PaJUNVAKzMX+ RihxmImrGIrCQNTElNcmjX9ZUdoqfdblpfDU06dUmKJvoqWfHl3bq0b4ZS3BgDl3 aAmqNAp8vrvbsh5fmvQzgo+o6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcm0Mow AQzGtZ6Tiv7EbVsGEtw7MB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOaqwLSSPZp0YfRXmYXYk8JE252KPZxHfjDfoSVYr4FKbO+6HSLagB NPO/g+bJ1iLnc6om0Bjxyv6XCX8S4h+5yxes9HHo1k4m4IKAMtWlvjpiA2xiOlIu dyiDSSt4b2xh/T/iJ8RWTcGgGx91NAtGeSdlsauDHT8PadLfsTi4yfzlLcU3/OyD 0SpGhZF+ff5PqSkOOFhGCPuMJKJWiybohTY2s4QxCAn4qjAQnXb913DsLCSCNKA1 YHybJV6aWEPthi10D1i7mps8my0G606jzLMbU6ozHYKN5OLfgYBjSe3RhwPEqSMY x10UueVZhrqt8PJbt446HmNvZ2kZD9Tc -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org