$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: vxw3750J0nOM7GVX1KNx4uWgL24qYEBU2hTGAMXA7V4= Subject key identifier: B9:25:C1:03:1D:93:CA:4D:F3:1A:54:87:01:0D:AD:A5:4B:97:14:0E Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0A7C Signing time: Sat 18 May 2024 20:16:07 +0000 Manifest this update: Sat 18 May 2024 20:16:06 +0000 Manifest next update: Sat 25 May 2024 20:16:06 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: 1bNrh+Ys0Pz68mDtrlJ7a2C+sUjwd/PRE4pFeJd2NVU=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: nhMpD/JXznSkQ+02PS+rxM+C+Qbm8oAFaFIebB2YN8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: May 18 20:16:06 2024 GMT Not After : May 25 20:16:06 2024 GMT Subject: CN=66490c87-2c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a3:b3:7f:38:d6:69:e3:2b:50:eb:ab:d3:fd: f7:4a:aa:f6:ba:e0:82:ce:49:79:33:f8:78:7e:79: 14:26:6c:ea:ea:e7:ca:4a:7d:00:9a:ec:23:a8:49: ef:0e:59:57:8b:91:67:0b:43:14:5a:76:2b:58:8b: 56:b4:01:9c:33:f9:e6:e9:8b:e3:6b:28:ea:a9:d1: e0:c0:d3:a8:c5:4a:c1:b0:93:c4:66:47:19:f5:00: 4b:2f:8b:d1:46:49:ba:dd:fe:00:ec:13:3e:61:f7: 4b:77:a9:67:5f:64:92:77:ab:18:28:d7:c8:4a:cc: 63:89:c4:35:97:c8:8b:e6:eb:4b:94:10:43:17:5c: fe:74:d7:db:36:3c:53:f3:b6:3e:f6:9d:87:d9:14: 2e:a4:b7:bb:78:a0:94:95:f6:8c:37:3b:61:9e:14: 96:68:04:36:ec:0c:4a:a0:36:94:1a:7c:f0:7a:1e: 00:0f:38:48:70:4b:d2:81:38:0d:38:d5:4c:16:04: cf:f8:68:40:82:bb:23:d1:60:d0:2d:05:f5:0f:4d: ff:7e:13:3b:82:1e:3c:08:a1:ae:63:20:6a:72:a7: 2c:85:f0:ec:3b:44:88:1e:06:41:28:92:16:6e:98: ff:05:b7:0d:6f:c3:6d:22:52:d5:60:66:14:34:aa: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:25:C1:03:1D:93:CA:4D:F3:1A:54:87:01:0D:AD:A5:4B:97:14:0E X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e0:3a:b2:53:42:cf:dc:de:e4:43:81:47:32:68:88:23:ae: 8f:aa:d2:7e:c6:f1:e9:77:89:00:50:c0:6d:62:b6:f2:df:fe: 20:2e:6c:7e:e8:b2:43:9d:ad:08:23:8c:ae:bc:59:76:bf:4d: 37:ef:15:4b:5f:a0:22:89:ac:d9:d5:54:32:04:e4:e6:f6:65: ab:c3:48:2c:4f:eb:21:6b:9a:93:c5:b2:f6:62:60:24:99:30: 85:9a:c3:bd:f3:5e:4f:21:9e:21:2d:62:e8:8d:38:6a:80:e5: e2:1e:6c:1c:80:17:7c:5d:af:3e:e7:b5:24:21:fe:2e:e1:41: 9e:c5:90:14:3e:98:11:5c:b1:62:cd:24:00:2d:30:8a:91:a7: 41:31:83:96:e0:3b:47:b0:d5:f6:0b:98:ec:db:77:9e:2d:fc: de:6b:3d:fd:69:e3:25:78:ac:c6:f6:23:32:d1:c8:f0:50:8b: bb:7f:9c:50:fe:46:3e:b6:78:37:c0:a8:90:ff:82:fc:7f:63: ab:e9:71:6f:81:eb:7d:2c:c1:c5:1e:1c:76:99:06:09:66:65: f4:4b:49:f4:75:b4:8c:66:93:93:1f:5e:4e:48:12:38:e9:31: 2e:c1:33:b1:76:37:85:bf:a8:83:20:b8:cd:3c:88:99:23:bc: 8b:ec:4f:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjQwNTE4MjAxNjA2WhcNMjQwNTI1MjAxNjA2WjAYMRYwFAYD VQQDEw02NjQ5MGM4Ny0yYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86OzfzjWaeMrUOur0/33Sqr2uuCCzkl5M/h4fnkUJmzq6ufKSn0AmuwjqEnv DllXi5FnC0MUWnYrWItWtAGcM/nm6YvjayjqqdHgwNOoxUrBsJPEZkcZ9QBLL4vR Rkm63f4A7BM+YfdLd6lnX2SSd6sYKNfISsxjicQ1l8iL5utLlBBDF1z+dNfbNjxT 87Y+9p2H2RQupLe7eKCUlfaMNzthnhSWaAQ27AxKoDaUGnzweh4ADzhIcEvSgTgN ONVMFgTP+GhAgrsj0WDQLQX1D03/fhM7gh48CKGuYyBqcqcshfDsO0SIHgZBKJIW bpj/BbcNb8NtIlLVYGYUNKqr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLklwQMd k8pN8xpUhwENraVLlxQOMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX4DqyU0LP3N7kQ4FHMmiII66PqtJ+xvHpd4kAUMBtYrby3/4gLmx+ 6LJDna0II4yuvFl2v0037xVLX6AiiazZ1VQyBOTm9mWrw0gsT+sha5qTxbL2YmAk mTCFmsO9815PIZ4hLWLojThqgOXiHmwcgBd8Xa8+57UkIf4u4UGexZAUPpgRXLFi zSQALTCKkadBMYOW4DtHsNX2C5js23eeLfzeaz39aeMleKzG9iMy0cjwUIu7f5xQ /kY+tng3wKiQ/4L8f2Or6XFvget9LMHFHhx2mQYJZmX0S0n0dbSMZpOTH15OSBI4 6TEuwTOxdjeFv6iDILjNPIiZI7yL7E+J -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org