$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: z88IGjuVznujFCaSQeiKXOKvIYrcf5TOEBMTSnmdeMU= Subject key identifier: 25:3C:9E:CB:17:83:82:3E:F6:82:F0:DF:AD:F6:E1:82:79:97:0E:DD Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0B9A Signing time: Sat 18 May 2024 19:14:11 +0000 Manifest this update: Sat 18 May 2024 19:14:11 +0000 Manifest next update: Sat 25 May 2024 19:14:11 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: XXkpyqKK2Ka1IAPaq/iKUFN/HwOqSfMARe7rzggj22Q=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +B4wRbVeWeDezTIkkroNJ7PsGuvGeraooCbcmlsSOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: May 18 19:14:11 2024 GMT Not After : May 25 19:14:11 2024 GMT Subject: CN=6648fe03-8492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:f0:83:e7:39:cd:71:28:e4:4b:5b:2c:18: 83:9d:7a:b6:c2:cc:51:f9:22:7a:c1:cf:e4:aa:b3: 70:5f:a6:8e:fe:05:ec:a0:c0:6a:f8:62:75:68:84: 72:fb:d7:73:6c:f4:08:e2:b9:0c:b7:5e:31:66:79: 7a:5f:c9:41:89:66:31:5e:9c:bf:ff:78:ec:b4:c9: 6f:b8:80:ed:83:80:df:12:11:12:5f:a2:c3:b2:9d: 27:bf:0e:1f:12:4c:84:6e:3c:86:bb:0d:9e:3d:85: dd:08:2d:77:7b:bd:fb:d8:ad:77:ca:d9:d2:00:6c: 69:2c:88:4b:7e:74:1c:8c:93:91:97:98:ae:b3:6f: 3a:7a:23:69:94:cd:07:60:36:aa:4b:f6:02:74:a9: a3:f1:0b:43:30:65:10:73:ba:3f:21:e5:4e:80:8e: 6f:65:a8:f5:e6:e4:39:94:1c:0b:be:11:54:10:cb: 6b:a7:c6:6f:0f:52:e4:22:2a:34:b1:56:9c:f2:af: 9b:98:6a:65:01:d0:19:70:f6:3c:1c:c3:1d:d5:24: 15:85:1d:5d:e0:4a:a5:7f:09:9b:be:7f:dc:06:d4: 2d:09:8b:5e:6a:92:9a:ac:dd:b2:3a:fc:e5:ed:3b: 68:88:62:eb:55:00:31:3e:33:fb:0f:c6:d4:35:9e: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:9E:CB:17:83:82:3E:F6:82:F0:DF:AD:F6:E1:82:79:97:0E:DD X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9b:5d:cb:21:d5:d5:cb:eb:64:90:a6:1e:bb:2b:be:c0:01: e4:e3:42:b9:c0:2d:0c:c8:9d:12:de:67:bb:25:2b:8e:93:60: 1f:93:64:ec:bd:44:ef:a1:17:0e:de:b9:33:f8:33:ae:38:cc: f3:f3:64:7b:0d:20:99:aa:28:e7:e7:34:55:87:38:bf:2f:9e: c2:08:a3:cb:c8:a8:a1:47:59:a8:a4:86:e5:2f:ca:9c:99:00: c0:a1:3c:8d:9e:50:f9:a5:65:e9:72:09:e9:c2:8d:bb:ea:6a: 98:fa:41:d6:bf:89:80:e4:9b:61:40:be:25:76:96:eb:b0:db: 0e:40:cb:d3:83:29:60:08:04:a4:7e:04:01:1d:39:86:c0:05: 9b:d1:30:57:62:54:ab:00:7b:a7:21:18:54:8a:35:72:19:9a: 2a:de:42:b3:a4:51:53:02:ec:20:ee:72:b3:e4:f6:c2:ce:d5: 49:1b:59:44:d4:59:0a:ff:a5:a1:07:88:c3:26:e2:5b:7e:19: e3:ee:a5:ea:e2:44:0a:d8:3e:8a:44:54:54:51:c4:bb:55:76: ca:b2:bd:cf:45:18:81:29:bc:8d:e9:a3:ef:cd:ab:30:67:55: 54:3d:8d:ce:e1:a7:6e:43:d8:c3:8b:2f:bb:1c:02:22:64:c0: f4:f0:9a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjQwNTE4MTkxNDExWhcNMjQwNTI1MTkxNDExWjAYMRYwFAYD VQQDEw02NjQ4ZmUwMy04NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1fwg+c5zXEo5EtbLBiDnXq2wsxR+SJ6wc/kqrNwX6aO/gXsoMBq+GJ1aIRy +9dzbPQI4rkMt14xZnl6X8lBiWYxXpy//3jstMlvuIDtg4DfEhESX6LDsp0nvw4f EkyEbjyGuw2ePYXdCC13e7372K13ytnSAGxpLIhLfnQcjJORl5ius286eiNplM0H YDaqS/YCdKmj8QtDMGUQc7o/IeVOgI5vZaj15uQ5lBwLvhFUEMtrp8ZvD1LkIio0 sVac8q+bmGplAdAZcPY8HMMd1SQVhR1d4Eqlfwmbvn/cBtQtCYteapKarN2yOvzl 7TtoiGLrVQAxPjP7D8bUNZ6iYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU8nssX g4I+9oLw36324YJ5lw7dMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOm13LIdXVy+tkkKYeuyu+wAHk40K5wC0MyJ0S3me7JSuOk2Afk2Ts vUTvoRcO3rkz+DOuOMzz82R7DSCZqijn5zRVhzi/L57CCKPLyKihR1mopIblL8qc mQDAoTyNnlD5pWXpcgnpwo276mqY+kHWv4mA5JthQL4ldpbrsNsOQMvTgylgCASk fgQBHTmGwAWb0TBXYlSrAHunIRhUijVyGZoq3kKzpFFTAuwg7nKz5PbCztVJG1lE 1FkK/6WhB4jDJuJbfhnj7qXq4kQK2D6KRFRUUcS7VXbKsr3PRRiBKbyN6aPvzasw Z1VUPY3O4aduQ9jDiy+7HAIiZMD08JoC -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org