$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft File: vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json) Hash identifier: 7kHSfUeUwVQFicS6ZoTd2HFWG9imhIcozPNvICRZPGo= Subject key identifier: 3F:30:65:1F:F4:B5:91:92:2C:1E:5B:9A:4C:52:7A:A4:D8:70:48:4C Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 Certificate issuer: /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft Manifest number: 2D Signing time: Sun 19 May 2024 08:25:36 +0000 Manifest this update: Sun 19 May 2024 08:25:36 +0000 Manifest next update: Sun 26 May 2024 08:25:36 +0000 Files and hashes: 1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: bBAIZFiE1j19IQZeyar9Hg+bA3ZBrvtneMibiln9e8A=) 2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: DVWQ8pjie4PgUnM+EU2BlSGqAJ0vFyGEnz0Xvb4kBgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Validity Not Before: May 19 08:25:36 2024 GMT Not After : May 26 08:25:36 2024 GMT Subject: CN=6649b780-793c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:58:10:47:7b:da:71:d2:97:7e:9e:e6:c5: ad:b0:db:38:3a:35:78:2b:88:eb:4e:c6:f8:a3:b2: 72:99:41:f2:be:3a:6f:0b:5e:f3:c6:c2:35:dd:b7: 7d:64:ae:41:53:1f:e2:17:7d:1d:fa:00:8c:2d:4a: a4:2e:4b:88:e3:d6:b3:4a:11:9a:1a:64:d2:07:d7: 4a:0f:6c:94:be:b2:3d:af:7d:37:57:72:21:c6:85: bb:7c:0f:82:60:57:28:20:f1:d1:df:bf:51:b1:19: bc:b7:db:d5:a7:0c:5b:ca:ce:29:64:3b:a1:67:83: 49:ba:9f:b1:14:c1:2e:ff:dd:a5:3d:a6:3a:6e:6d: 73:31:d6:e5:14:13:0d:1b:ce:30:2c:91:a5:6a:86: e8:dc:93:3e:af:55:d6:93:4f:4f:59:e2:fd:19:3e: 1a:a9:3b:85:0e:01:23:f4:91:14:fd:f4:47:d9:13: 82:a8:59:08:2c:0f:48:07:b4:c9:87:29:4d:c0:3c: 0c:16:c8:60:4e:d1:ac:86:d5:40:5f:85:17:7b:6b: c2:8d:a3:3e:b1:24:30:81:ec:2a:32:a3:60:32:cc: f1:dc:47:c2:1f:ea:d7:19:24:80:b2:75:dd:88:e5: d1:6f:de:00:ab:22:15:20:b8:dd:92:17:a1:e8:88: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:65:1F:F4:B5:91:92:2C:1E:5B:9A:4C:52:7A:A4:D8:70:48:4C X509v3 Authority Key Identifier: keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9a:8a:e2:06:c5:96:5d:db:5f:4c:49:68:dd:32:c6:38:ba: f8:98:59:04:cb:9c:b3:da:53:c5:a9:c6:69:85:e2:ef:07:10: b0:c0:69:90:3d:fd:a0:ab:88:06:89:0e:28:c6:a1:a3:9a:c0: 21:0f:dc:24:37:c7:ec:c5:cb:df:5c:8d:64:6b:be:22:e1:26: 29:56:11:80:1d:55:01:28:26:59:da:4c:7a:cb:92:da:ee:a9: 28:58:28:99:c8:48:8f:ba:1c:10:7a:ee:a1:3d:6b:00:d2:e7: 57:09:08:8a:00:65:98:17:ca:d3:09:cd:70:4f:2a:f0:74:81: 4e:99:a0:7c:c3:48:ba:a5:c2:af:dc:80:b1:05:07:d1:66:d0: 7a:a2:b9:59:bf:05:8a:71:65:97:d0:37:a4:65:02:40:a9:e2: ae:1d:96:86:c6:20:81:28:e2:63:00:fc:b2:0a:17:7e:b8:9e: d1:7e:42:70:43:5c:25:b3:c4:53:46:75:d1:d9:68:e8:32:4c: 18:71:ed:1c:09:7b:f0:45:50:a6:c0:4e:75:4c:f6:3a:6e:9a: e9:76:61:05:6d:e9:b1:18:54:d1:b0:58:20:7d:8c:95:51:d4: a0:e8:ea:95:56:a5:4c:93:1a:97:e7:ef:58:37:33:7c:d4:82: 87:d0:9d:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OUI2RjExMC8GA1UEBRMoQkQ2QkE0NUZGMDI3NkMyQzYwNEEwMzNCMDdDREE0RTRD MERGMTVENzAeFw0yNDA1MTkwODI1MzZaFw0yNDA1MjYwODI1MzZaMBgxFjAUBgNV BAMTDTY2NDliNzgwLTc5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkklgQR3vacdKXfp7mxa2w2zg6NXgriOtOxvijsnKZQfK+Om8LXvPGwjXdt31k rkFTH+IXfR36AIwtSqQuS4jj1rNKEZoaZNIH10oPbJS+sj2vfTdXciHGhbt8D4Jg Vygg8dHfv1GxGby329WnDFvKzilkO6Fng0m6n7EUwS7/3aU9pjpubXMx1uUUEw0b zjAskaVqhujckz6vVdaTT09Z4v0ZPhqpO4UOASP0kRT99EfZE4KoWQgsD0gHtMmH KU3APAwWyGBO0ayG1UBfhRd7a8KNoz6xJDCB7Coyo2AyzPHcR8If6tcZJICydd2I 5dFv3gCrIhUguN2SF6HoiAJVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPzBlH/S1 kZIsHluaTFJ6pNhwSEwwHwYDVR0jBBgwFoAUvWukX/AnbCxgSgM7B82k5MDfFdcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5QjZGLzM0OEFBOTA4RDA5 QzExRUU4MEFCOEQ3RUM0RjlBRTAyL3ZXdWtYX0FuYkN4Z1NnTTdCODJrNU1EZkZk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdld1a1hfQW5iQ3hnU2dNN0I4Mms1TURmRmRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 QjZGLzM0OEFBOTA4RDA5QzExRUU4MEFCOEQ3RUM0RjlBRTAyL3ZXdWtYX0FuYkN4 Z1NnTTdCODJrNU1EZkZkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuaiuIGxZZd219MSWjdMsY4uviYWQTLnLPaU8WpxmmF4u8HELDAaZA9 /aCriAaJDijGoaOawCEP3CQ3x+zFy99cjWRrviLhJilWEYAdVQEoJlnaTHrLktru qShYKJnISI+6HBB67qE9awDS51cJCIoAZZgXytMJzXBPKvB0gU6ZoHzDSLqlwq/c gLEFB9Fm0HqiuVm/BYpxZZfQN6RlAkCp4q4dlobGIIEo4mMA/LIKF364ntF+QnBD XCWzxFNGddHZaOgyTBhx7RwJe/BFUKbATnVM9jpumul2YQVt6bEYVNGwWCB9jJVR 1KDo6pVWpUyTGpfn71g3M3zUgofQnXc= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org