$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json) Hash identifier: y9Myp4JfnInBpMfcDhiR4uiMYMABiNjflLepK+vgSPg= Subject key identifier: 40:6B:B3:87:63:6C:12:37:50:D0:44:D3:F6:ED:29:04:67:ED:AD:E2 Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32 Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232 Certificate serial: 33C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft Manifest number: 33C4 Signing time: Sat 18 May 2024 15:12:37 +0000 Manifest this update: Sat 18 May 2024 15:12:36 +0000 Manifest next update: Sat 25 May 2024 15:12:36 +0000 Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: YMpkczMcw/VLCw2hksLvl80KGLwi65Fk5WmDxUmY+3M=) 2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: yaCBriiI5zyQxnr5ET3LOL/G5ZWuINj+p8yVtWmLWgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13255 (0x33c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232 Validity Not Before: May 18 15:12:36 2024 GMT Not After : May 25 15:12:36 2024 GMT Subject: CN=6648c564-4369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7a:a8:75:db:59:d2:1b:c8:f7:dc:97:03:d8: ef:8d:ad:e3:4d:a2:1f:16:c7:23:a3:27:19:2e:1b: 22:6d:57:d7:df:27:3d:5b:75:7a:38:02:38:92:8f: 36:af:e9:d6:01:95:57:64:aa:23:23:de:23:c4:06: 3f:47:22:36:1b:b2:ac:eb:4d:e0:c4:1d:86:35:89: ac:b0:ad:a5:c9:e8:67:01:24:46:24:33:36:5b:ce: 82:b7:58:80:02:98:15:55:80:c8:44:23:51:bd:26: 09:eb:63:76:60:19:9f:79:a2:91:ab:44:14:58:be: fb:b9:b2:ec:19:7d:0b:4c:bb:f9:32:f7:15:76:0d: d7:2e:af:bc:11:36:f1:e5:cd:1c:f8:47:a5:02:7c: 9e:b3:25:9a:08:5a:3d:37:a7:14:61:5c:d4:2f:7f: c0:45:4c:67:f9:93:97:b2:3c:7d:d0:67:78:bd:9f: e8:85:ad:4c:b9:c4:df:71:88:f4:32:ce:55:c4:5b: 18:70:66:d9:73:88:44:9a:9c:59:ea:9a:7b:fa:f4: 94:c5:f2:1c:fd:0f:27:16:5c:36:52:1b:5b:7e:b7: 62:5a:1f:9d:f6:8c:5d:f0:74:c6:a2:0d:11:f7:91: 32:8b:61:aa:21:e7:59:65:d7:38:46:19:61:31:b0: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:B3:87:63:6C:12:37:50:D0:44:D3:F6:ED:29:04:67:ED:AD:E2 X509v3 Authority Key Identifier: keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ac:3d:6d:be:1e:31:f7:d2:a3:f6:55:cc:29:8d:04:ff:59: 04:2d:ea:7b:7a:95:17:e9:63:27:ea:99:79:4c:1e:fc:31:84: cb:81:13:86:60:71:70:16:ec:5c:7c:b1:af:3b:8d:42:7f:f6: 74:16:67:4a:47:75:16:6c:30:2b:9b:6b:0b:03:78:7e:65:1b: 68:22:c5:25:73:ab:72:78:84:52:ba:1b:15:33:af:96:51:b1: 16:64:e1:46:53:af:b8:8c:01:d8:f9:aa:ec:88:b0:75:a4:5d: dc:43:84:28:38:87:cb:80:68:23:1b:5f:a6:78:58:89:6f:dc: 1a:4e:e1:cf:fe:90:23:a9:94:1f:93:b0:55:1a:2e:46:4c:44: f1:38:5f:d4:ec:c2:87:21:60:88:27:c6:ab:4f:31:95:02:6c: 78:46:b9:13:80:34:70:bc:8d:92:8e:9a:22:f2:79:da:72:17: fa:fe:7b:8e:ce:41:19:bb:18:b8:08:4e:d5:fc:e1:30:59:9a: f0:1a:9d:4b:34:21:51:0b:4f:bc:a0:80:9d:a8:de:c1:e2:01: 39:d1:bc:8e:6b:91:74:92:0d:f3:67:bb:11:de:10:6d:88:0d: b6:39:65:c4:29:a9:14:c2:97:ce:d9:c7:6d:61:08:08:77:18: c6:c6:93:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc1MjIxMTAvBgNVBAUTKDU1NUNFQTM3NDEwQ0QyODZCMzFGMUEwMEFERjYyNTNE NENFMDUyMzIwHhcNMjQwNTE4MTUxMjM2WhcNMjQwNTI1MTUxMjM2WjAYMRYwFAYD VQQDEw02NjQ4YzU2NC00MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+3qoddtZ0hvI99yXA9jvja3jTaIfFscjoycZLhsibVfX3yc9W3V6OAI4ko82 r+nWAZVXZKojI94jxAY/RyI2G7Ks603gxB2GNYmssK2lyehnASRGJDM2W86Ct1iA ApgVVYDIRCNRvSYJ62N2YBmfeaKRq0QUWL77ubLsGX0LTLv5MvcVdg3XLq+8ETbx 5c0c+EelAnyesyWaCFo9N6cUYVzUL3/ARUxn+ZOXsjx90Gd4vZ/oha1MucTfcYj0 Ms5VxFsYcGbZc4hEmpxZ6pp7+vSUxfIc/Q8nFlw2UhtbfrdiWh+d9oxd8HTGog0R 95Eyi2GqIedZZdc4RhlhMbBrkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBrs4dj bBI3UNBE0/btKQRn7a3iMB8GA1UdIwQYMBaAFFVc6jdBDNKGsx8aAK32JT1M4FIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzUyMi8xMERDMTgyODFE OUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBvYXpIeG9BcmZZbFBVemdV akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWenFOMEVNMG9hekh4b0FyZllsUFV6Z1VqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzUyMi8xMERDMTgyODFEOUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBv YXpIeG9BcmZZbFBVemdVakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmrD1tvh4x99Kj9lXMKY0E/1kELep7epUX6WMn6pl5TB78MYTLgROG YHFwFuxcfLGvO41Cf/Z0FmdKR3UWbDArm2sLA3h+ZRtoIsUlc6tyeIRSuhsVM6+W UbEWZOFGU6+4jAHY+arsiLB1pF3cQ4QoOIfLgGgjG1+meFiJb9waTuHP/pAjqZQf k7BVGi5GTETxOF/U7MKHIWCIJ8arTzGVAmx4RrkTgDRwvI2Sjpoi8nnachf6/nuO zkEZuxi4CE7V/OEwWZrwGp1LNCFRC0+8oICdqN7B4gE50byOa5F0kg3zZ7sR3hBt iA22OWXEKakUwpfO2cdtYQgIdxjGxpP+ -----END CERTIFICATE-----Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org