$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: RD5Bw8CvaCRyGaE79dndxHPa6X2wV40oLpz+7aqwfrY= Subject key identifier: 68:33:11:A5:D4:93:A3:31:0D:01:26:30:B5:50:B3:61:6E:08:96:4B Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0254 Signing time: Sun 19 May 2024 03:54:59 +0000 Manifest this update: Sun 19 May 2024 03:54:58 +0000 Manifest next update: Sun 26 May 2024 03:54:58 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: HqdJG3o3CaB2/fcYJlvpoocxT9YKqn0bTGUNBYTtBmQ=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: S0sgKzZSH+tCX2ZVQJWzIwtSoCtZlCF8ccMPhzdD0gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: May 19 03:54:58 2024 GMT Not After : May 26 03:54:58 2024 GMT Subject: CN=66497813-fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:3a:db:b8:0f:4c:3d:39:40:4a:33:92:0a: 14:ae:15:3c:58:d0:e3:cd:3c:a8:15:1d:94:a2:28: de:cc:9b:ac:e7:97:e2:c1:fa:4e:83:92:ed:bf:59: ea:9d:65:60:c0:71:71:40:b8:0e:dc:a5:d2:fc:3a: 5b:78:48:5c:60:ec:b0:90:50:eb:d5:6a:18:bf:3e: e4:5c:d6:b7:da:7c:ec:17:fa:75:27:a4:b8:66:aa: 42:70:39:a0:00:70:03:dc:66:48:3f:dd:cd:81:61: 05:1d:f2:96:cf:12:89:41:e6:20:2f:a8:0c:f1:73: 19:ca:7d:00:03:37:16:18:7b:16:a3:8f:cf:a3:9f: b3:26:b0:af:96:db:3b:f8:10:70:a9:59:67:86:f9: a5:d4:66:b4:7f:a0:e1:c6:ac:93:97:e3:98:6a:f0: 02:98:7d:3a:f2:6f:55:20:e7:39:37:2e:76:b8:87: c9:10:2c:6a:2a:6f:6e:7f:6a:34:b2:c0:53:c1:19: f4:08:00:eb:11:28:db:84:cb:00:ca:7c:3d:e4:10: 1d:a6:62:32:cc:d1:d2:4e:92:ac:bb:9e:7a:c6:0e: 85:24:a4:ae:d1:4d:44:f8:11:7e:3f:1d:60:f4:b2: e8:de:69:01:7a:f7:59:59:a1:4b:8f:d4:e5:99:1d: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:11:A5:D4:93:A3:31:0D:01:26:30:B5:50:B3:61:6E:08:96:4B X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:db:c0:c7:a0:e4:4b:b3:bc:1f:52:c7:e5:62:f5:3a:50:4c: da:74:c9:8b:39:bb:df:c3:d4:56:7b:82:5f:bc:f1:b6:00:1f: 54:58:83:b1:4e:ca:59:c8:96:ca:60:da:37:9f:7d:a2:24:e6: cd:38:10:98:0a:37:aa:77:ba:94:d1:3a:60:3a:50:dd:f8:6d: da:be:0a:8c:45:30:03:d5:b4:ce:20:46:43:ba:0b:c6:e7:6e: b3:2e:33:c6:3e:c8:de:92:ae:86:96:dc:b6:0a:9f:f9:44:74: 46:b4:7a:87:ba:e0:b9:f1:f5:fc:6e:b6:45:e1:50:0d:a3:45: 23:eb:6d:2b:f0:49:62:a6:a1:a7:51:af:a9:cd:2a:65:3c:6e: 15:f0:9a:8e:c1:28:ad:0a:da:8c:aa:6e:80:f8:d1:f8:26:73: 6f:73:2c:ea:ae:1c:82:46:15:c9:3b:13:a2:f5:0f:ec:2c:55: 04:df:44:ce:5b:4c:86:4a:02:02:f3:bc:f5:87:1b:3d:b4:26: a5:d8:f3:77:42:b5:5a:b9:4e:27:b8:c5:a8:57:77:ce:4f:96: 1b:be:ea:a9:f0:2b:14:63:58:04:13:f9:ca:c9:ad:a3:20:5a: 29:cf:f5:d7:95:cd:c5:07:b3:25:f5:08:80:e2:3b:33:12:cd: 13:90:98:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjQwNTE5MDM1NDU4WhcNMjQwNTI2MDM1NDU4WjAYMRYwFAYD VQQDEw02NjQ5NzgxMy1mYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83k627gPTD05QEozkgoUrhU8WNDjzTyoFR2UoijezJus55fiwfpOg5Ltv1nq nWVgwHFxQLgO3KXS/DpbeEhcYOywkFDr1WoYvz7kXNa32nzsF/p1J6S4ZqpCcDmg AHAD3GZIP93NgWEFHfKWzxKJQeYgL6gM8XMZyn0AAzcWGHsWo4/Po5+zJrCvlts7 +BBwqVlnhvml1Ga0f6DhxqyTl+OYavACmH068m9VIOc5Ny52uIfJECxqKm9uf2o0 ssBTwRn0CADrESjbhMsAynw95BAdpmIyzNHSTpKsu556xg6FJKSu0U1E+BF+Px1g 9LLo3mkBevdZWaFLj9TlmR0POwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgzEaXU k6MxDQEmMLVQs2FuCJZLMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+28DHoORLs7wfUsflYvU6UEzadMmLObvfw9RWe4JfvPG2AB9UWIOx TspZyJbKYNo3n32iJObNOBCYCjeqd7qU0TpgOlDd+G3avgqMRTAD1bTOIEZDugvG 526zLjPGPsjekq6Glty2Cp/5RHRGtHqHuuC58fX8brZF4VANo0Uj620r8ElipqGn Ua+pzSplPG4V8JqOwSitCtqMqm6A+NH4JnNvcyzqrhyCRhXJOxOi9Q/sLFUE30TO W0yGSgIC87z1hxs9tCal2PN3QrVauU4nuMWoV3fOT5Ybvuqp8CsUY1gEE/nKya2j IFopz/XXlc3FB7Ml9QiA4jszEs0TkJg3 -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org