$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft File: V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json) Hash identifier: O3O+GPsRPK4DVwihaT3XmUppOeTBZujVW3GERyVaWfU= Subject key identifier: 90:E5:D5:7B:C6:B6:51:A1:9E:07:B8:86:78:13:8D:81:BC:06:30:1E Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 Certificate issuer: /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft Manifest number: 0E39 Signing time: Sat 18 May 2024 18:26:09 +0000 Manifest this update: Sat 18 May 2024 18:26:08 +0000 Manifest next update: Sat 25 May 2024 18:26:08 +0000 Files and hashes: 1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: FBVjrPG2+aMr3iiRQRa6vx3TLEnIULbrnujrQHLtzuI=) 2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 4/YtE2E7cZOvCsQDJx5zxuAVDUTir907xX3hoJmimmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7 Validity Not Before: May 18 18:26:08 2024 GMT Not After : May 25 18:26:08 2024 GMT Subject: CN=6648f2c1-b080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c8:35:37:25:41:d2:f0:38:fc:e3:fa:19:59: 8f:ea:84:f2:a8:cd:af:47:95:d8:1c:60:41:55:fe: c6:95:36:80:56:86:6d:8e:5d:05:df:90:c0:91:a3: d9:d2:8e:ce:22:68:f2:b2:cf:ac:13:2d:5f:43:dd: 20:6c:eb:e0:68:85:61:8b:25:19:09:91:92:f4:64: f2:28:53:36:ac:f9:ee:3e:bc:d9:b0:8c:23:a0:b7: cb:e2:c2:9c:c8:aa:db:2b:fb:2d:7c:5a:78:6d:48: 1a:a4:47:89:be:53:aa:39:79:a0:71:83:f6:b7:92: 73:d6:f1:dd:4f:69:2c:17:5d:79:49:fa:11:02:29: 6b:5e:a5:25:34:59:bc:e4:23:6f:29:61:8b:85:34: f8:ea:c9:16:87:35:2f:19:91:63:90:8a:93:c6:2c: 16:b9:9f:4c:95:ff:16:17:6e:7f:e3:3a:17:9f:70: 9e:81:b1:b9:b9:94:56:84:c0:f6:b7:b1:a0:ad:c5: f5:dc:3e:b7:bd:d0:d5:12:95:9a:9f:cc:2c:1a:77: ff:d6:82:e0:ae:5b:7e:d8:49:f6:2d:5a:ed:56:14: a8:15:45:b8:ad:02:d9:1f:6b:b6:0c:2d:be:77:c4: 41:57:28:37:6a:ec:dd:8b:8e:cc:f4:d5:92:c6:44: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E5:D5:7B:C6:B6:51:A1:9E:07:B8:86:78:13:8D:81:BC:06:30:1E X509v3 Authority Key Identifier: keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:3a:6b:76:a4:95:84:c1:76:34:f9:31:e2:4d:7a:4f:fd:c6: 97:89:cb:3a:21:a2:08:dd:5b:17:ac:b3:aa:e4:74:89:3a:28: 0b:7a:ea:79:82:80:bd:67:af:ce:dd:d0:c4:43:b1:7d:f0:87: 7b:dd:7b:27:a3:67:f8:fe:11:e4:e8:aa:c4:cf:44:4d:38:20: 07:f7:b1:cd:d9:68:e1:08:bb:ad:02:26:53:e8:dc:bd:17:90: 0b:28:7a:e1:54:4a:8b:46:96:01:56:fe:27:ca:2d:73:3d:e4: bc:47:4a:78:ef:f7:66:e3:e1:62:40:58:0b:d6:fb:12:b4:e8: 45:21:24:f7:14:51:7d:09:a9:33:46:81:12:c7:95:31:0a:51: ed:df:d9:91:c0:c4:34:45:8e:12:04:d0:00:dc:ae:90:87:77: 71:ef:12:46:40:60:be:dd:be:69:f6:b8:0c:39:e4:2d:c7:41: d2:ee:93:3f:51:38:3d:55:89:65:76:c3:7d:93:8e:7f:6e:f5: 33:7a:d1:7e:48:c6:70:41:0e:36:d7:84:09:f4:fe:6b:50:80: ab:12:9d:7a:56:23:49:ea:01:14:c7:b2:20:5b:4b:3b:8a:ce: 43:30:47:d3:47:c6:fd:b1:3e:d9:be:12:ab:5f:92:70:3d:e4: 0c:b1:01:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJERjUxMTAvBgNVBAUTKDU3RkI4OTM5NTM4OTY0MEI2ODY5QTVFMjQwNzRCNDJF NDIxRTJCRDcwHhcNMjQwNTE4MTgyNjA4WhcNMjQwNTI1MTgyNjA4WjAYMRYwFAYD VQQDEw02NjQ4ZjJjMS1iMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Mg1NyVB0vA4/OP6GVmP6oTyqM2vR5XYHGBBVf7GlTaAVoZtjl0F35DAkaPZ 0o7OImjyss+sEy1fQ90gbOvgaIVhiyUZCZGS9GTyKFM2rPnuPrzZsIwjoLfL4sKc yKrbK/stfFp4bUgapEeJvlOqOXmgcYP2t5Jz1vHdT2ksF115SfoRAilrXqUlNFm8 5CNvKWGLhTT46skWhzUvGZFjkIqTxiwWuZ9Mlf8WF25/4zoXn3CegbG5uZRWhMD2 t7GgrcX13D63vdDVEpWan8wsGnf/1oLgrlt+2En2LVrtVhSoFUW4rQLZH2u2DC2+ d8RBVyg3auzdi47M9NWSxkTv+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDl1XvG tlGhnge4hngTjYG8BjAeMB8GA1UdIwQYMBaAFFf7iTlTiWQLaGml4kB0tC5CHivX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRGNS84MjA3MkU3QTdD NDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpBdG9hYVhpUUhTMExrSWVL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZfdUpPVk9KWkF0b2FhWGlRSFMwTGtJZUs5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRGNS84MjA3MkU3QTdDNDMxMUU5ODI4NjUxMkNDNEY5QUUwMi9WX3VKT1ZPSlpB dG9hYVhpUUhTMExrSWVLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKOmt2pJWEwXY0+THiTXpP/caXics6IaII3VsXrLOq5HSJOigLeup5 goC9Z6/O3dDEQ7F98Id73Xsno2f4/hHk6KrEz0RNOCAH97HN2WjhCLutAiZT6Ny9 F5ALKHrhVEqLRpYBVv4nyi1zPeS8R0p47/dm4+FiQFgL1vsStOhFIST3FFF9Cakz RoESx5UxClHt39mRwMQ0RY4SBNAA3K6Qh3dx7xJGQGC+3b5p9rgMOeQtx0HS7pM/ UTg9VYlldsN9k45/bvUzetF+SMZwQQ4214QJ9P5rUICrEp16ViNJ6gEUx7IgW0s7 is5DMEfTR8b9sT7ZvhKrX5JwPeQMsQGS -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org