$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: 3MPye77JTHkvbbPilOTXqE5Cby4qhBLIKhIa76m1ybw= Subject key identifier: 40:7B:B0:38:AA:C3:03:DE:9A:6F:C0:07:75:63:14:37:03:80:0A:65 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0BA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0BA3 Signing time: Thu 30 May 2024 19:37:47 +0000 Manifest this update: Thu 30 May 2024 19:37:46 +0000 Manifest next update: Thu 06 Jun 2024 19:37:46 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: eH8Ts4mNPKk+2cJ5/1Ds2DgLdFiOLdyEclkrTI6tVFM=) 2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: KBPr0IvTbp4qH1T5XkMfOBWY0xCJEQF1q6Fm1wPX+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: May 30 19:37:46 2024 GMT Not After : Jun 6 19:37:46 2024 GMT Subject: CN=6658d58a-b5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:58:f4:dd:50:93:ef:5f:20:6c:6f:4d:dd: bc:a3:6b:09:2e:4a:d2:2f:b0:cb:4b:65:15:bf:a0: cd:08:f6:c9:d1:fd:5d:e5:bd:55:d6:08:5b:ab:ea: d9:cf:77:25:4f:73:74:04:22:c7:16:ea:db:a3:78: 96:95:48:67:48:74:36:7f:de:84:48:29:0a:c8:39: 70:13:31:e0:7c:72:51:30:77:d8:5a:7c:0c:08:44: 0e:70:d3:62:f3:69:35:7f:1f:e6:b9:b9:76:4f:c2: f8:9b:d1:4e:06:88:78:2a:a1:0e:08:04:80:05:13: 7d:ce:6e:c0:55:48:0a:ee:da:47:97:59:8e:b5:ea: 14:07:64:b2:52:40:75:ff:cd:94:ec:a0:37:5b:03: 69:d7:82:af:1c:d6:4a:1a:fa:0c:62:de:2f:4f:5c: 04:9a:04:3d:f8:b2:30:99:68:a0:b0:7d:ed:cc:fa: 46:6c:6a:a8:1d:b8:7c:a6:2e:af:33:43:3c:38:d5: c9:0f:73:34:86:c2:0b:68:98:28:c5:76:da:5d:81: 59:dd:6e:59:09:a0:59:c8:2f:5a:c8:db:06:54:41: 71:6f:3a:a5:2d:19:c3:24:e6:84:47:42:df:77:03: da:c7:4a:ef:a2:9f:a5:26:98:e7:61:ec:0e:1a:60: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:B0:38:AA:C3:03:DE:9A:6F:C0:07:75:63:14:37:03:80:0A:65 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:25:3d:58:0c:21:b2:b2:7f:d7:b6:83:1f:09:15:2f:b0: d7:34:8d:b9:99:3b:41:18:85:7d:74:02:b6:79:80:50:23:6a: 47:db:be:93:83:9b:89:44:ca:b4:d3:02:7e:ec:b5:02:4c:c0: da:1e:4e:74:06:31:19:48:5d:3a:f4:51:b4:8d:f9:71:55:84: 6a:38:f5:e1:b9:df:cd:62:f3:b4:03:6f:3d:9d:75:9a:45:45: 7d:ed:17:a7:6f:a4:e2:96:5a:2c:47:f5:62:80:ae:fe:0a:94: 9b:d1:f4:eb:1b:22:7b:ae:7d:fd:87:25:51:c3:cd:8c:00:ad: fc:eb:57:63:54:7a:01:e4:aa:14:ff:11:33:13:ca:06:ca:7d: 1f:7c:3f:79:2a:a5:3f:4b:50:01:b9:47:d0:ef:ac:37:75:df: bb:97:d1:47:6d:ed:f3:9b:56:66:3a:b2:b4:c5:ae:82:15:6a: 21:9d:9b:6d:9b:18:85:74:77:c5:2d:a6:49:16:51:83:70:62: 1b:7b:e2:d9:b1:08:c8:3f:3c:c5:eb:12:f2:af:47:21:72:69: 58:b5:21:6e:4b:74:a2:91:74:09:ce:ef:23:ff:da:48:92:71: cf:01:cf:3a:e2:e6:18:e3:fd:96:89:34:f5:ba:78:dc:b8:e6: 26:e3:c2:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjQwNTMwMTkzNzQ2WhcNMjQwNjA2MTkzNzQ2WjAYMRYwFAYD VQQDEw02NjU4ZDU4YS1iNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgxY9N1Qk+9fIGxvTd28o2sJLkrSL7DLS2UVv6DNCPbJ0f1d5b1V1ghbq+rZ z3clT3N0BCLHFurbo3iWlUhnSHQ2f96ESCkKyDlwEzHgfHJRMHfYWnwMCEQOcNNi 82k1fx/mubl2T8L4m9FOBoh4KqEOCASABRN9zm7AVUgK7tpHl1mOteoUB2SyUkB1 /82U7KA3WwNp14KvHNZKGvoMYt4vT1wEmgQ9+LIwmWigsH3tzPpGbGqoHbh8pi6v M0M8ONXJD3M0hsILaJgoxXbaXYFZ3W5ZCaBZyC9ayNsGVEFxbzqlLRnDJOaER0Lf dwPax0rvop+lJpjnYewOGmBwkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB7sDiq wwPemm/AB3VjFDcDgAplMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzCU9WAwhsrJ/17aDHwkVL7DXNI25mTtBGIV9dAK2eYBQI2pH276T g5uJRMq00wJ+7LUCTMDaHk50BjEZSF069FG0jflxVYRqOPXhud/NYvO0A289nXWa RUV97Renb6TillosR/VigK7+CpSb0fTrGyJ7rn39hyVRw82MAK3861djVHoB5KoU /xEzE8oGyn0ffD95KqU/S1ABuUfQ76w3dd+7l9FHbe3zm1ZmOrK0xa6CFWohnZtt mxiFdHfFLaZJFlGDcGIbe+LZsQjIPzzF6xLyr0chcmlYtSFuS3SikXQJzu8j/9pI knHPAc864uYY4/2WiTT1unjcuOYm48Lk -----END CERTIFICATE-----Generated at Thu May 30 20:35:31 2024 by rpki-client on console-fra.rpki-client.org