$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: daCev+gxiQaWzOK2ETS5Rwz/mMxXq++X51HzgyIPRGQ= Subject key identifier: 3E:57:D8:BF:82:8C:E0:14:F8:88:BD:79:BE:29:90:B1:83:7E:67:FB Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 0535 Signing time: Sun 19 May 2024 00:56:37 +0000 Manifest this update: Sun 19 May 2024 00:56:37 +0000 Manifest next update: Sun 26 May 2024 00:56:37 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: C+wOtW9x6lhkalChq5Nnx8//68DI/WC1izMjm4cHExs=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: bQAmYqTjRe9JLVgK8wMkzMq+Ly7pZ7AfpT/mrwVghd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: May 19 00:56:37 2024 GMT Not After : May 26 00:56:37 2024 GMT Subject: CN=66494e45-2c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:c2:8e:a9:ff:8e:3d:bb:d7:b7:39:45:c9: bd:4b:48:94:f7:f8:61:45:a8:b4:b6:02:13:99:20: bb:b4:4e:46:93:0c:f3:86:b7:9a:a3:9b:1e:e9:b1: 1d:ed:0c:c7:7e:85:7c:1d:9f:f6:51:48:c3:f5:24: 89:e3:10:1f:37:db:83:47:0c:24:79:40:ba:41:93: c6:30:98:ca:03:80:b2:cb:dc:ea:62:e8:47:97:fe: ab:3e:ab:06:0f:95:1e:a1:0c:cc:8e:2b:bb:a3:6a: 25:56:7d:09:3d:e9:28:dd:5f:10:4b:08:d9:02:65: 92:03:f0:b0:f7:00:e0:2b:a2:31:b4:68:7d:52:af: e0:e8:53:04:c7:b5:ac:47:fc:14:ae:ed:e1:e4:34: 9f:f5:8d:6b:ca:3e:68:81:e7:b9:1b:d5:cf:03:de: 45:06:a4:0b:8d:85:3e:af:22:69:ad:af:f6:ec:8e: 09:ba:3b:76:e8:91:2d:e5:ab:1f:67:3a:91:f9:cc: 3d:21:e6:36:ed:90:0b:6f:99:67:ae:fa:3a:f5:d1: f5:5d:6c:09:ee:b7:55:61:66:51:f0:dc:0f:7b:4c: 50:3d:75:31:90:37:97:6c:bc:b7:ef:37:b6:c3:96: 82:26:aa:86:4b:63:9d:cd:63:49:e5:b1:b9:a5:ca: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:D8:BF:82:8C:E0:14:F8:88:BD:79:BE:29:90:B1:83:7E:67:FB X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4f:9b:f6:ce:73:05:2b:fe:b8:a4:0f:b7:96:fa:07:c5:c4: d2:60:f4:ff:ac:49:3f:2a:a0:f7:5e:07:7e:7b:cd:2a:9c:07: b2:55:df:54:9a:34:77:1a:b6:cd:42:51:37:c2:c3:90:a6:4d: 32:5c:3b:42:49:23:37:a1:17:be:b4:12:48:4b:d8:20:0b:7a: e6:1a:77:25:9c:3e:83:fe:b1:e7:07:bf:d8:16:26:39:a5:2f: f4:f6:36:99:0c:c9:75:30:d0:90:7c:c2:bb:79:de:5e:5e:4e: 52:bf:bf:97:e6:9d:1a:9f:fb:fb:9f:86:0e:bc:04:05:46:56: 9c:11:a0:3e:e0:fd:f5:a9:5e:1a:73:bf:af:fa:3b:e8:2b:c3: 67:17:1f:48:f9:79:70:e3:4f:12:3e:b2:1d:43:a7:83:26:c1: 32:2f:a9:d9:d5:34:47:1a:64:30:62:89:0c:ab:32:33:59:67: bd:18:9b:59:5f:cd:2a:33:78:aa:39:ac:57:73:b8:85:af:7b: c2:df:78:f2:41:a5:77:02:06:0e:45:c1:97:ef:b6:0a:29:97: ea:35:de:d3:7b:45:e3:ea:7a:e8:ff:ca:f9:17:b1:e8:3b:e3: 47:61:d8:05:7e:aa:8c:90:49:34:3d:72:53:33:2e:06:d7:0a: cb:c9:02:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjQwNTE5MDA1NjM3WhcNMjQwNTI2MDA1NjM3WjAYMRYwFAYD VQQDEw02NjQ5NGU0NS0yYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVjCjqn/jj2717c5Rcm9S0iU9/hhRai0tgITmSC7tE5Gkwzzhreao5se6bEd 7QzHfoV8HZ/2UUjD9SSJ4xAfN9uDRwwkeUC6QZPGMJjKA4Cyy9zqYuhHl/6rPqsG D5UeoQzMjiu7o2olVn0JPeko3V8QSwjZAmWSA/Cw9wDgK6IxtGh9Uq/g6FMEx7Ws R/wUru3h5DSf9Y1ryj5ogee5G9XPA95FBqQLjYU+ryJpra/27I4Jujt26JEt5asf ZzqR+cw9IeY27ZALb5lnrvo69dH1XWwJ7rdVYWZR8NwPe0xQPXUxkDeXbLy37ze2 w5aCJqqGS2OdzWNJ5bG5pcrS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5X2L+C jOAU+Ii9eb4pkLGDfmf7MB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiT5v2znMFK/64pA+3lvoHxcTSYPT/rEk/KqD3Xgd+e80qnAeyVd9U mjR3GrbNQlE3wsOQpk0yXDtCSSM3oRe+tBJIS9ggC3rmGnclnD6D/rHnB7/YFiY5 pS/09jaZDMl1MNCQfMK7ed5eXk5Sv7+X5p0an/v7n4YOvAQFRlacEaA+4P31qV4a c7+v+jvoK8NnFx9I+Xlw408SPrIdQ6eDJsEyL6nZ1TRHGmQwYokMqzIzWWe9GJtZ X80qM3iqOaxXc7iFr3vC33jyQaV3AgYORcGX77YKKZfqNd7Te0Xj6nro/8r5F7Ho O+NHYdgFfqqMkEk0PXJTMy4G1wrLyQIj -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org