$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: 86jijEtw/Z0BMVIB2w7pqsx2LW3KzrQs1AIJkHswgec= Subject key identifier: 60:86:1A:BF:08:61:A6:4F:16:62:57:39:0C:6E:5E:71:4A:EB:24:7E Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 40 Signing time: Sun 19 May 2024 08:09:00 +0000 Manifest this update: Sun 19 May 2024 08:09:00 +0000 Manifest next update: Sun 26 May 2024 08:09:00 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: 4j84BASgwqNjnVvZhgVLeovyt8Cv19BkxtfUclu+6ys=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: a3YB0azE3UpbBmCho636O391auKGjyd+jEVLSbWX2yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: May 19 08:09:00 2024 GMT Not After : May 26 08:09:00 2024 GMT Subject: CN=6649b39c-7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:2a:98:00:7d:b5:b8:bf:da:a2:32:0e:51: 8a:2d:de:9f:22:18:51:6e:ff:56:bd:ab:16:31:7e: 6e:f5:7a:5a:06:df:0a:8f:72:40:9b:c4:68:c1:3e: 81:2d:0f:e2:7c:e4:3f:eb:7d:a3:e1:83:01:88:c0: 71:ab:e8:bd:6c:52:b9:9b:32:c3:db:14:1f:27:7f: e3:8a:c0:00:12:ef:84:dc:47:3a:e6:9e:04:c0:4e: 4c:5c:b1:8f:ff:94:76:c5:f5:fb:57:c2:d8:15:86: 56:76:90:b8:7b:a9:58:96:b0:a5:92:62:6e:bf:f6: 25:8f:4e:ca:21:04:76:8c:a0:c1:bc:3d:11:3d:31: c1:8e:32:b6:94:fe:d3:38:28:45:fb:d9:a7:82:ec: 94:c5:7f:59:cc:c1:83:73:69:85:46:de:ca:db:69: 79:94:59:7c:91:be:48:38:00:4d:5e:c6:3b:60:ba: db:cc:b4:a7:1e:1d:cf:07:6d:7b:04:0d:1f:a3:06: 66:3e:93:72:ed:89:a1:1e:48:9a:02:b0:11:cb:46: 55:29:3d:16:da:1f:ab:88:1c:cf:11:3e:5c:62:e7: 22:2b:13:93:dd:0d:0a:77:c2:8b:70:58:02:47:8e: c8:91:46:4c:ee:67:6f:38:74:5e:b6:f9:29:5c:7b: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:1A:BF:08:61:A6:4F:16:62:57:39:0C:6E:5E:71:4A:EB:24:7E X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4d:7a:3e:de:f6:7a:4c:d6:07:e3:38:29:b4:0e:ce:70:61: 2b:48:bf:1c:fc:1e:66:b8:f0:3b:32:a0:0d:25:43:8a:da:93: 32:9f:07:19:5c:79:0b:2f:05:f7:c1:ea:d4:3a:52:ad:f9:90: 52:8e:58:c0:59:f8:00:37:90:0c:1b:fa:c4:7b:64:73:e1:46: d3:32:ef:2e:ba:61:6d:79:21:07:56:5b:5e:46:af:87:13:f6: 1a:fe:31:12:74:e9:74:6d:d6:e1:85:e4:c3:da:68:45:b7:61: bd:fb:93:80:ea:be:0a:85:8f:18:cb:ee:70:2b:34:02:52:1a: ac:7d:e1:b7:0e:35:1e:e8:1c:d0:e4:85:88:6d:c3:d4:cd:55: 4f:92:06:44:b0:44:35:4a:84:03:0e:b8:b2:8f:91:92:01:59: 21:36:11:09:93:1f:09:d6:e8:54:d9:49:7b:a1:f4:3e:60:7a: f6:8b:b1:bd:33:cc:8e:ff:ad:ce:de:82:99:9d:65:fa:db:c2: 1a:8b:5f:a9:39:b0:c8:14:39:21:98:47:65:47:63:cf:b6:25: 70:bf:32:ff:fa:9b:40:e5:a1:a4:bc:4f:2c:55:bf:88:6a:d2: 80:4f:dc:df:f2:ae:09:c0:2e:fb:70:4f:12:c5:5f:e0:dd:b8: 5f:35:95:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkRERDExMC8GA1UEBRMoQkMxNzg4MkJGQzRBODYzMEExQkJGNkFGMDY1MThCOTBC QTREMTY4QTAeFw0yNDA1MTkwODA5MDBaFw0yNDA1MjYwODA5MDBaMBgxFjAUBgNV BAMTDTY2NDliMzljLTdkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo5iqYAH21uL/aojIOUYot3p8iGFFu/1a9qxYxfm71eloG3wqPckCbxGjBPoEt D+J85D/rfaPhgwGIwHGr6L1sUrmbMsPbFB8nf+OKwAAS74TcRzrmngTATkxcsY// lHbF9ftXwtgVhlZ2kLh7qViWsKWSYm6/9iWPTsohBHaMoMG8PRE9McGOMraU/tM4 KEX72aeC7JTFf1nMwYNzaYVG3srbaXmUWXyRvkg4AE1exjtgutvMtKceHc8HbXsE DR+jBmY+k3LtiaEeSJoCsBHLRlUpPRbaH6uIHM8RPlxi5yIrE5PdDQp3wotwWAJH jsiRRkzuZ284dF62+Slce5ajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYIYavwhh pk8WYlc5DG5ecUrrJH4wHwYDVR0jBBgwFoAUvBeIK/xKhjChu/avBlGLkLpNFoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGREREL0VDREVBMUY2QjVC NDExRUVCN0U3MEM0Q0M0RjlBRTAyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkJlSUtfeEtoakNodV9hdkJsR0xrTHBORm9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG REREL0VDREVBMUY2QjVCNDExRUVCN0U3MEM0Q0M0RjlBRTAyL3ZCZUlLX3hLaGpD aHVfYXZCbEdMa0xwTkZvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxNej7e9npM1gfjOCm0Ds5wYStIvxz8Hma48DsyoA0lQ4rakzKfBxlc eQsvBffB6tQ6Uq35kFKOWMBZ+AA3kAwb+sR7ZHPhRtMy7y66YW15IQdWW15Gr4cT 9hr+MRJ06XRt1uGF5MPaaEW3Yb37k4DqvgqFjxjL7nArNAJSGqx94bcONR7oHNDk hYhtw9TNVU+SBkSwRDVKhAMOuLKPkZIBWSE2EQmTHwnW6FTZSXuh9D5gevaLsb0z zI7/rc7egpmdZfrbwhqLX6k5sMgUOSGYR2VHY8+2JXC/Mv/6m0DloaS8TyxVv4hq 0oBP3N/yrgnALvtwTxLFX+DduF81lUs= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org