$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json) Hash identifier: xJhRAoA2rKF+3E4GJEAdEUujj3fiZxpCwgJ6Xmdf7WE= Subject key identifier: 11:D9:D2:22:46:A4:18:87:09:EE:8B:4A:17:95:48:50:41:24:8C:0B Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft Manifest number: 0525 Signing time: Sun 19 May 2024 01:04:32 +0000 Manifest this update: Sun 19 May 2024 01:04:32 +0000 Manifest next update: Sun 26 May 2024 01:04:32 +0000 Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: TIwzdFNHSgwCjmJYuOQPf6MQBr5MflQ0e/oglyq5NF8=) 2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: j3fOTU+ZyDH2gWmIOUvIDKynWCWvx/O+tM8FAKYOeY4=) 3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: P6xYLGWZasAZ0O0GYyx/cUS1pnfp7Nbv28TT3E9ue6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Validity Not Before: May 19 01:04:32 2024 GMT Not After : May 26 01:04:32 2024 GMT Subject: CN=66495020-d030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:cc:a4:71:d2:ac:e6:d4:25:63:0d:63:bd: eb:5b:6f:8a:8c:51:26:ea:e6:47:e1:ca:c5:81:0e: 86:2c:2a:52:58:52:05:07:2c:ca:24:23:d9:a6:83: f6:d9:08:eb:30:fe:4e:c1:41:ce:a0:c5:b5:a4:95: de:94:0a:f3:bb:63:8d:f0:5e:41:9c:4b:80:7b:62: 42:5d:5b:d4:22:ef:73:e6:aa:ea:e6:9d:6c:9a:16: 0c:96:45:c7:a2:3a:53:eb:f9:c4:42:b1:01:00:9e: d5:3c:3a:e5:39:93:3f:f2:c5:ea:38:d5:04:f9:8b: 9d:74:2b:40:6a:15:84:95:87:64:ea:e8:dc:dd:37: f7:04:c1:1f:a6:4e:a2:2c:2d:5a:d0:7d:be:91:1a: 10:d5:31:13:48:12:cc:ae:b3:d9:2b:cd:f1:41:fa: 58:8f:c0:34:eb:f7:a0:2b:82:36:5e:52:aa:0b:f2: bf:1c:85:1a:4e:89:1f:e0:0e:f0:78:fe:a7:d1:f5: d1:de:cc:fe:ea:74:d9:70:9b:fc:7f:ad:53:14:eb: 0d:91:40:6c:f9:ad:1f:3c:5b:e5:b9:d0:eb:72:b3: 4a:7a:f0:8e:09:db:6e:32:17:9f:43:ba:e2:10:c8: a1:15:d6:c6:d5:4c:5a:4b:f8:01:5f:60:92:40:15: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:D2:22:46:A4:18:87:09:EE:8B:4A:17:95:48:50:41:24:8C:0B X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4f:dc:9c:fb:4a:71:a5:f3:9f:cb:ed:49:73:32:a7:53:b0: d4:27:84:54:d7:fb:d7:f6:2a:a4:de:ac:c0:bd:c2:2b:0a:29: c8:c1:24:aa:65:a6:b1:47:a4:a5:44:ae:91:41:70:6d:28:5a: 3a:d4:ab:0a:a5:11:a7:8d:fa:37:2c:b6:91:5e:7f:84:52:29: 29:b0:66:66:5e:3f:05:e1:8f:e4:2c:72:25:d6:45:4e:b9:cf: 27:09:66:5a:fd:4a:80:8c:dc:59:6d:8e:6c:ac:74:c8:e8:22: 5e:cb:b6:80:3d:e3:ad:6a:96:8d:ba:53:23:05:3f:86:c7:fd: 17:71:87:ef:04:22:b4:9d:ce:d7:be:cc:26:f8:07:98:10:24: 2d:ab:17:7d:41:c2:0b:94:9b:b3:4b:bb:3c:03:23:16:04:03: ae:d2:6b:15:84:b4:ce:1d:02:fe:69:49:13:73:24:75:c0:1b: 32:c4:7a:c6:69:0b:28:9f:f7:c5:58:6a:6a:0e:2c:94:ca:da: 54:a9:4b:73:ef:53:48:88:0f:da:34:23:78:80:e3:9a:94:c9: 28:f3:7e:1e:aa:cc:cb:97:63:20:d0:b8:12:d6:c5:f1:1b:87: 74:4c:a7:41:5c:8d:b4:64:87:f8:48:a4:ba:6c:78:28:0e:26: 54:4a:be:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjQwNTE5MDEwNDMyWhcNMjQwNTI2MDEwNDMyWjAYMRYwFAYD VQQDEw02NjQ5NTAyMC1kMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYPMpHHSrObUJWMNY73rW2+KjFEm6uZH4crFgQ6GLCpSWFIFByzKJCPZpoP2 2QjrMP5OwUHOoMW1pJXelArzu2ON8F5BnEuAe2JCXVvUIu9z5qrq5p1smhYMlkXH ojpT6/nEQrEBAJ7VPDrlOZM/8sXqONUE+YuddCtAahWElYdk6ujc3Tf3BMEfpk6i LC1a0H2+kRoQ1TETSBLMrrPZK83xQfpYj8A06/egK4I2XlKqC/K/HIUaTokf4A7w eP6n0fXR3sz+6nTZcJv8f61TFOsNkUBs+a0fPFvludDrcrNKevCOCdtuMhefQ7ri EMihFdbG1UxaS/gBX2CSQBXobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHZ0iJG pBiHCe6LSheVSFBBJIwLMB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4 bnViVVdya0pEWWpWMnZOXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzT9yc+0pxpfOfy+1JczKnU7DUJ4RU1/vX9iqk3qzAvcIrCinIwSSq ZaaxR6SlRK6RQXBtKFo61KsKpRGnjfo3LLaRXn+EUikpsGZmXj8F4Y/kLHIl1kVO uc8nCWZa/UqAjNxZbY5srHTI6CJey7aAPeOtapaNulMjBT+Gx/0XcYfvBCK0nc7X vswm+AeYECQtqxd9QcILlJuzS7s8AyMWBAOu0msVhLTOHQL+aUkTcyR1wBsyxHrG aQson/fFWGpqDiyUytpUqUtz71NIiA/aNCN4gOOalMko834eqszLl2Mg0LgS1sXx G4d0TKdBXI20ZIf4SKS6bHgoDiZUSr6G -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org