$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: 91NHmwSDZjUHOLh4kzNt/CoDSnipuHtqRu2NY+jmtgk= Subject key identifier: 1A:2D:70:BE:59:D6:2E:2D:CB:48:B7:F4:6E:52:45:0F:6E:E9:81:43 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 46 Signing time: Sun 19 May 2024 08:02:08 +0000 Manifest this update: Sun 19 May 2024 08:02:07 +0000 Manifest next update: Sun 26 May 2024 08:02:07 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: jcFRPmFhcIuZXO8mrLm8neGMKC9V4TRslD+IYFK7THs=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: YYeRnwFaSoqXD/Tyyn3gdTiOsY7m0KcWw605LOpvHwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: May 19 08:02:07 2024 GMT Not After : May 26 08:02:07 2024 GMT Subject: CN=6649b200-db67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:55:36:13:f5:a6:aa:25:15:16:c5:5d:a7: 7c:af:82:cc:0b:71:18:79:a9:fd:da:d7:32:9c:05: ca:0e:db:59:67:90:d3:96:04:7b:28:b4:11:57:ea: e9:9d:6b:82:2e:a7:47:13:41:82:d4:54:97:43:23: f9:30:c6:26:29:6a:58:ab:44:a5:75:64:f2:9d:56: b0:40:dc:d7:ec:9e:66:a3:8c:6d:0e:af:a1:0a:0f: c9:39:dc:32:66:42:e0:81:94:12:17:1c:7b:f9:23: a9:12:1d:a9:66:5b:3a:32:c9:41:50:de:11:6f:17: 93:14:2e:05:bf:03:08:de:28:f9:78:14:cc:7d:bc: 0f:6d:0e:e6:ad:64:78:6b:59:a4:de:f7:da:cd:eb: 96:e6:e8:c1:ab:6a:93:c5:4f:03:5c:15:b9:8a:30: 44:61:c2:e9:b2:f7:9e:a5:84:cf:39:fc:65:b3:f0: dd:18:3b:c8:3d:b7:85:2e:d5:25:69:01:4f:c8:a8: db:73:d8:33:3c:fb:bb:78:a7:36:45:27:df:82:30: 4d:4d:17:3a:e3:c8:bf:ec:c9:d6:e4:35:1e:4c:32: 78:30:c0:db:a8:86:40:20:e1:f7:01:91:e4:96:16: 77:c7:63:d6:10:b7:2b:b2:f3:c8:fc:eb:85:5c:14: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:70:BE:59:D6:2E:2D:CB:48:B7:F4:6E:52:45:0F:6E:E9:81:43 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:5a:ed:93:7d:c8:a6:90:75:2d:2c:31:a1:cb:df:3f:cb: 98:bb:f7:76:ce:32:52:87:08:81:5b:eb:29:6f:5d:f3:95:27: c2:98:fe:0d:ef:bc:e4:2f:06:ac:41:ec:f3:11:ea:6c:9e:85: 46:f8:39:28:78:45:73:1a:ee:6f:a7:6e:4e:d6:6a:83:fe:02: d4:93:09:e2:7d:b1:ef:06:77:57:d3:14:fe:48:4e:e4:19:0a: 79:9e:ef:ea:a7:93:41:ac:3d:76:b4:c8:5c:6e:68:a8:32:3e: 36:c6:9b:99:bb:dc:82:f3:b7:14:45:50:45:51:96:da:77:c0: 04:bb:a6:06:19:f1:e6:5f:c3:03:40:68:f3:3d:a6:7c:28:ac: 85:ca:c9:4d:a3:7b:63:b9:ae:6c:e7:f2:72:ab:62:e6:b7:84: 0a:fb:dc:a3:5d:36:58:5a:a3:f8:d6:a3:6c:0f:8b:aa:d4:99: bf:70:0e:2f:28:f9:0f:fd:48:4d:9c:c3:75:c3:95:58:f8:7c: 93:17:46:b5:24:2c:6d:47:a9:7c:9f:fb:c7:45:26:75:24:1a: 2b:69:63:fe:63:34:8b:d3:b1:a3:f0:66:ae:9d:2d:b1:21:11: a5:02:e0:ad:c7:e0:78:bf:a0:83:16:72:29:cc:10:79:f6:61: af:16:0f:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjA4OTExMC8GA1UEBRMoNTQ4QzNDMDBCRTI5MEMxNjczREI2Njk5OTg1MjBENzIz Nzg0NDVDQjAeFw0yNDA1MTkwODAyMDdaFw0yNDA1MjYwODAyMDdaMBgxFjAUBgNV BAMTDTY2NDliMjAwLWRiNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0llU2E/WmqiUVFsVdp3yvgswLcRh5qf3a1zKcBcoO21lnkNOWBHsotBFX6umd a4Iup0cTQYLUVJdDI/kwxiYpalirRKV1ZPKdVrBA3NfsnmajjG0Or6EKD8k53DJm QuCBlBIXHHv5I6kSHalmWzoyyUFQ3hFvF5MULgW/AwjeKPl4FMx9vA9tDuatZHhr WaTe99rN65bm6MGrapPFTwNcFbmKMERhwumy956lhM85/GWz8N0YO8g9t4Uu1SVp AU/IqNtz2DM8+7t4pzZFJ9+CME1NFzrjyL/sydbkNR5MMngwwNuohkAg4fcBkeSW FnfHY9YQtyuy88j864VcFL9tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGi1wvlnW Li3LSLf0blJFD27pgUMwHwYDVR0jBBgwFoAUVIw8AL4pDBZz22aZmFINcjeERcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMDg5LzBGODk2QUZBQUJE RTExRUU5RUYwREYzOEM0RjlBRTAyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkl3OEFMNHBEQlp6MjJhWm1GSU5jamVFUmNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MDg5LzBGODk2QUZBQUJERTExRUU5RUYwREYzOEM0RjlBRTAyL1ZJdzhBTDRwREJa ejIyYVptRklOY2plRVJjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3pWu2TfcimkHUtLDGhy98/y5i793bOMlKHCIFb6ylvXfOVJ8KY/g3v vOQvBqxB7PMR6myehUb4OSh4RXMa7m+nbk7WaoP+AtSTCeJ9se8Gd1fTFP5ITuQZ Cnme7+qnk0GsPXa0yFxuaKgyPjbGm5m73ILztxRFUEVRltp3wAS7pgYZ8eZfwwNA aPM9pnworIXKyU2je2O5rmzn8nKrYua3hAr73KNdNlhao/jWo2wPi6rUmb9wDi8o +Q/9SE2cw3XDlVj4fJMXRrUkLG1HqXyf+8dFJnUkGitpY/5jNIvTsaPwZq6dLbEh EaUC4K3H4Hi/oIMWcinMEHn2Ya8WDzU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org