$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: 8/UFFL/xhyxZ4rtJ7D+f82CYW/92cDdxZt9hIey/Nrg= Subject key identifier: 64:7A:DD:62:37:28:44:D5:D8:6D:C3:D5:E1:7A:64:5D:67:95:1A:DC Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 05B2 Signing time: Sun 19 May 2024 00:12:06 +0000 Manifest this update: Sun 19 May 2024 00:12:06 +0000 Manifest next update: Sun 26 May 2024 00:12:06 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: Wy1EL29lnKuJs6wOlYlMK5gNPei2ODUBERO56UjAzIg=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: 23Oh4cWBGm0Z2AldwEiu2T2Q7IkwcCFey6ZDLtPGA8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: May 19 00:12:06 2024 GMT Not After : May 26 00:12:06 2024 GMT Subject: CN=664943d6-136f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:a9:62:e4:aa:a8:be:60:a5:60:61:b2:1b: e0:d1:6a:dd:69:2c:91:b2:88:e6:0f:2d:22:08:c0: c5:51:54:57:45:33:67:e3:a0:62:dc:34:cd:3e:b7: f6:f3:f5:35:33:81:f1:c5:32:c2:0a:62:90:f8:85: 95:c0:dd:d2:4e:df:f2:4c:d4:c9:5d:6f:de:8a:8d: 37:a6:89:c1:f5:62:a2:a8:03:8a:0c:78:e1:39:93: d8:e6:41:8b:73:1e:6b:76:86:c1:1f:cb:20:a5:fb: ff:53:00:6e:eb:c7:23:30:ba:c1:2a:a5:3d:fd:0b: 6f:30:44:57:e3:62:65:30:ab:0e:fa:03:39:ee:28: 72:38:9f:0e:40:cf:a0:29:84:4d:5c:cc:ec:3e:9a: 02:7b:99:72:9a:91:93:84:e7:89:0c:ae:32:07:38: 3f:79:72:8e:58:38:29:1c:fc:23:53:25:0f:b4:f5: 8f:4f:f6:df:d1:be:16:0e:8e:21:9a:0b:d8:dd:33: fd:b6:d3:18:3e:cc:5f:36:12:83:99:f4:e3:47:13: bb:ad:81:12:9c:03:42:91:ab:00:2d:73:3c:9a:d9: 05:7f:b5:92:e6:78:e0:16:16:08:e6:b1:27:1c:56: 1e:2a:31:8a:bf:19:04:4a:00:38:1e:4d:71:16:40: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:DD:62:37:28:44:D5:D8:6D:C3:D5:E1:7A:64:5D:67:95:1A:DC X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5e:ef:dc:d3:79:5b:84:c1:e2:4e:f1:5e:c2:9a:ec:97:78: 6c:d5:85:62:dc:6b:44:22:51:d9:8a:a1:9d:64:30:1b:31:c3: 59:85:7b:0e:f5:eb:d1:af:ed:dd:0e:d6:4c:a5:96:1d:c9:95: e9:f4:74:4d:1f:bc:78:60:fd:25:bc:dd:6e:56:28:2f:b7:73: 60:8f:56:d7:8e:bc:09:e5:2b:e0:a2:b3:da:5e:72:a8:b6:9f: b7:ec:8f:94:31:6a:17:ff:9e:93:20:86:a9:dd:3f:00:a9:8a: 41:ed:5f:15:38:c4:28:5c:47:3d:d3:2a:fa:00:80:86:01:df: d8:e2:83:b8:24:eb:9b:b7:fb:35:c1:d3:aa:38:8b:b6:96:1d: 4b:d7:58:dd:61:61:a2:bc:dd:a2:b1:aa:dc:cb:d7:d6:ac:fc: 15:7e:ad:6b:25:9d:cd:d6:46:42:3a:42:b5:33:7e:b3:5d:05: 48:22:31:10:3a:fc:e3:7b:8e:83:59:35:fe:74:92:5b:92:2f: d9:93:cd:0c:70:c1:7a:e6:8a:d8:88:ad:23:29:f0:31:03:55: 2a:95:56:76:c7:85:54:c0:3e:ad:bc:45:10:c0:b6:bf:8d:87: b1:70:86:4d:cf:ee:41:19:af:1d:83:97:e7:4d:55:06:17:83: b6:04:6f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjQwNTE5MDAxMjA2WhcNMjQwNTI2MDAxMjA2WjAYMRYwFAYD VQQDEw02NjQ5NDNkNi0xMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8+pYuSqqL5gpWBhshvg0WrdaSyRsojmDy0iCMDFUVRXRTNn46Bi3DTNPrf2 8/U1M4HxxTLCCmKQ+IWVwN3STt/yTNTJXW/eio03ponB9WKiqAOKDHjhOZPY5kGL cx5rdobBH8sgpfv/UwBu68cjMLrBKqU9/QtvMERX42JlMKsO+gM57ihyOJ8OQM+g KYRNXMzsPpoCe5lympGThOeJDK4yBzg/eXKOWDgpHPwjUyUPtPWPT/bf0b4WDo4h mgvY3TP9ttMYPsxfNhKDmfTjRxO7rYESnANCkasALXM8mtkFf7WS5njgFhYI5rEn HFYeKjGKvxkESgA4Hk1xFkAHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR63WI3 KETV2G3D1eF6ZF1nlRrcMB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUXu/c03lbhMHiTvFewprsl3hs1YVi3GtEIlHZiqGdZDAbMcNZhXsO 9evRr+3dDtZMpZYdyZXp9HRNH7x4YP0lvN1uVigvt3Ngj1bXjrwJ5SvgorPaXnKo tp+37I+UMWoX/56TIIap3T8AqYpB7V8VOMQoXEc90yr6AICGAd/Y4oO4JOubt/s1 wdOqOIu2lh1L11jdYWGivN2isarcy9fWrPwVfq1rJZ3N1kZCOkK1M36zXQVIIjEQ Ovzje46DWTX+dJJbki/Zk80McMF65orYiK0jKfAxA1UqlVZ2x4VUwD6tvEUQwLa/ jYexcIZNz+5BGa8dg5fnTVUGF4O2BG8C -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org