$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: PI86D7iVT0Alqi1L+CDnBHRWJVHWYLj1uVRtmuueoS4= Subject key identifier: 2E:18:B5:89:4B:B7:8E:0B:56:8E:2B:07:79:60:0A:E4:A2:69:B9:1D Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1D73 Signing time: Sat 18 May 2024 16:28:50 +0000 Manifest this update: Sat 18 May 2024 16:28:50 +0000 Manifest next update: Sat 25 May 2024 16:28:50 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: WI7loJ4855jPeGZ8lMiqVmsDsNeOR7jLlWYo1E78t9E=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: L+Key5WXbk33yKNJ4IIZFpwnG90x0iDCVMA3sY/Pk7U=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: MmSqe3imWBouzwZvgvdU9hz0f4KvR/QUes8agKxlUEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7575 (0x1d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: May 18 16:28:50 2024 GMT Not After : May 25 16:28:50 2024 GMT Subject: CN=6648d742-fb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:34:e7:8b:31:e4:9d:a7:87:93:29:5f:0c: 4b:1c:4b:9e:c0:60:b5:31:93:1c:07:ba:77:c5:2a: 6b:eb:4f:fc:d7:25:c3:f3:3a:21:03:4f:e9:cb:a0: 4f:8c:20:4d:49:67:6c:7d:7d:93:d5:00:d7:ab:77: e7:92:01:37:36:a5:35:ed:38:8c:75:ee:58:38:c6: a5:db:74:b0:f5:70:27:f8:08:09:25:7b:f8:90:20: bb:a2:88:05:b2:3e:89:28:c2:6a:f7:58:72:23:fe: a2:72:8d:b0:14:1a:0c:8e:dc:ba:8c:3d:bf:b7:68: e7:72:0b:07:36:4d:73:30:99:98:e6:49:5a:38:c7: 2e:9e:95:9b:3b:40:27:35:29:f3:63:cd:f8:4c:a8: d8:c2:2c:55:6c:2c:cf:7f:e3:91:0b:8c:26:30:f0: ec:25:0d:e7:70:25:d3:52:9a:32:c6:2e:6e:e6:28: 9e:34:fe:6f:bf:b1:fa:50:87:fc:48:1d:d3:4a:23: a5:83:c2:63:fd:e1:31:c4:37:21:45:7e:65:a6:e4: 78:5c:6e:2f:f5:e7:b8:b1:c0:3a:f7:c4:05:ff:f7: 06:90:df:0d:92:51:a9:5a:f1:c5:8a:cc:6e:f0:99: 11:51:60:ba:f7:8c:d9:98:d5:80:6d:9a:83:9d:fd: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:18:B5:89:4B:B7:8E:0B:56:8E:2B:07:79:60:0A:E4:A2:69:B9:1D X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ff:a2:3b:46:e5:29:90:29:7d:36:b5:a6:e1:50:58:c3:62: 72:63:98:ba:a1:fa:95:b8:cc:90:47:38:15:c0:cc:d7:a7:e1: 3e:98:ab:94:5c:a5:8a:5e:e8:36:4f:40:f7:71:37:3f:02:53: 71:c0:0e:c1:d7:85:c1:70:22:07:b9:dd:09:81:48:f8:dd:17: d5:47:ca:7d:11:18:ac:f3:a7:a0:78:ee:65:fa:43:38:5c:96: ae:73:b8:4c:0c:21:cd:65:88:d7:12:57:20:61:27:de:9a:92: bd:18:6e:aa:d3:7e:36:f3:17:93:dd:a6:f0:db:ac:bb:36:1f: f3:9d:6a:de:b8:b7:a0:04:1a:1e:04:29:9c:0e:cc:35:ab:36: 96:e7:9d:67:85:14:87:0d:c1:24:8a:a4:a4:d0:f9:07:e5:ef: 4b:aa:f2:a9:46:09:41:9a:63:76:74:d4:65:1e:6d:6a:13:1b: dd:c4:66:49:7f:50:50:5f:a3:8c:cd:4c:34:f2:39:64:18:04: 96:60:a3:c9:16:26:71:ee:6f:d1:f0:f3:9b:d6:88:36:95:72: 56:7f:24:73:1f:b1:1d:8f:21:f1:70:3a:2d:a0:23:7f:2f:ef: 99:b2:47:bb:c9:8b:cf:0b:df:82:4f:d9:09:4f:86:63:e0:69: cd:2c:fe:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjQwNTE4MTYyODUwWhcNMjQwNTI1MTYyODUwWjAYMRYwFAYD VQQDEw02NjQ4ZDc0Mi1mYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviQ054sx5J2nh5MpXwxLHEuewGC1MZMcB7p3xSpr60/81yXD8zohA0/py6BP jCBNSWdsfX2T1QDXq3fnkgE3NqU17TiMde5YOMal23Sw9XAn+AgJJXv4kCC7oogF sj6JKMJq91hyI/6ico2wFBoMjty6jD2/t2jncgsHNk1zMJmY5klaOMcunpWbO0An NSnzY834TKjYwixVbCzPf+ORC4wmMPDsJQ3ncCXTUpoyxi5u5iieNP5vv7H6UIf8 SB3TSiOlg8Jj/eExxDchRX5lpuR4XG4v9ee4scA698QF//cGkN8NklGpWvHFisxu 8JkRUWC694zZmNWAbZqDnf2NqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4YtYlL t44LVo4rB3lgCuSiabkdMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/6I7RuUpkCl9NrWm4VBYw2JyY5i6ofqVuMyQRzgVwMzXp+E+mKuU XKWKXug2T0D3cTc/AlNxwA7B14XBcCIHud0JgUj43RfVR8p9ERis86egeO5l+kM4 XJauc7hMDCHNZYjXElcgYSfempK9GG6q03428xeT3abw26y7Nh/znWreuLegBBoe BCmcDsw1qzaW551nhRSHDcEkiqSk0PkH5e9LqvKpRglBmmN2dNRlHm1qExvdxGZJ f1BQX6OMzUw08jlkGASWYKPJFiZx7m/R8POb1og2lXJWfyRzH7EdjyHxcDotoCN/ L++Zske7yYvPC9+CT9kJT4Zj4GnNLP4R -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org