$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft File: VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json) Hash identifier: qLivXoeusK2FqoLvHft4G1BPK/5CqwAM1aTHecyxSCU= Subject key identifier: 7D:C2:4D:CB:CD:98:35:12:53:BD:91:A6:07:C1:61:B8:4A:7D:F7:2A Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E Certificate issuer: /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft Manifest number: 04DC Signing time: Sun 19 May 2024 01:18:01 +0000 Manifest this update: Sun 19 May 2024 01:17:59 +0000 Manifest next update: Sun 26 May 2024 01:17:59 +0000 Files and hashes: 1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: /Sbu+A25QKCdI7khiIDrN1UxaG1LLI1EM9Dkf4sCm18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E Validity Not Before: May 19 01:17:59 2024 GMT Not After : May 26 01:17:59 2024 GMT Subject: CN=66495348-38c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:24:84:ca:04:ad:a3:50:52:d9:0a:20:c9:35: a4:1c:dc:d2:48:1a:d6:de:f2:3b:19:6a:6f:b4:33: d3:27:02:13:63:fc:94:15:93:fb:d8:71:68:c0:db: 30:36:18:47:c2:ea:f7:61:ef:f2:11:54:a1:5b:db: 6f:01:68:dd:06:c0:b6:54:40:70:05:c4:0d:82:2f: ab:c9:bd:93:76:52:b5:4b:05:4c:8f:09:a6:90:da: bc:9f:db:e8:d4:de:bf:6d:6d:c0:d1:54:cd:c1:c5: 6c:43:41:4a:9e:eb:d8:ce:16:bd:fd:02:18:26:1d: 72:d8:ef:d5:20:c0:32:e8:e1:fb:8d:c8:7e:6b:1e: 98:c0:99:55:89:a4:0c:be:56:e6:ee:7f:34:52:a0: 1e:1f:cf:ff:7f:3e:5f:74:80:05:43:2b:3d:ca:32: c6:8f:5d:21:3c:ac:2f:79:e1:9f:95:a8:93:62:9e: 8c:3d:4a:99:ba:b2:83:01:ab:64:98:a6:cf:1c:69: af:31:a5:4e:88:a6:ec:ba:8d:82:99:ae:17:45:3f: 95:01:eb:f7:b1:03:93:30:d1:be:99:55:4a:8e:eb: f5:44:46:eb:29:12:d7:06:2a:a3:a7:66:e1:16:47: 7b:8c:b6:2f:32:4b:ec:a3:8f:1e:17:79:01:05:73: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:4D:CB:CD:98:35:12:53:BD:91:A6:07:C1:61:B8:4A:7D:F7:2A X509v3 Authority Key Identifier: keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:50:5c:c7:c9:40:f2:35:cf:b3:7b:6a:46:a9:e1:e5:36:4e: af:fb:5f:c4:8d:42:6a:eb:b3:82:e7:a2:06:0a:c2:e7:68:17: 4d:32:ff:17:a5:2e:91:ce:d6:fb:1d:4d:8e:f1:ad:45:08:2d: f8:ae:78:7b:38:36:a4:2f:f2:33:1a:20:47:48:b6:04:8e:7e: d8:81:02:c9:fa:0f:b8:05:bd:93:02:d7:ef:7d:e3:65:85:60: 88:b9:55:5e:4d:25:b4:71:70:04:77:60:d1:0e:45:42:ff:4e: 82:74:4d:4b:b4:82:1b:40:97:a0:f2:5e:d3:98:b7:d8:f8:9a: 64:0a:6d:42:d2:43:09:37:06:e9:65:9d:70:b6:8c:14:6e:d8: ba:f5:95:3e:b9:61:2a:dc:fa:75:20:b8:2c:33:e8:c8:be:4a: f0:a6:8c:e3:be:64:58:80:d6:cf:8d:d8:c0:3c:ef:7e:f5:e3: 03:c5:7b:42:30:94:bd:11:00:cf:5a:ab:0c:d5:51:0c:8b:b6: 3f:f3:d2:fa:70:19:21:d6:d4:b8:ce:4c:2c:ae:8f:13:61:a1: f8:16:c4:0b:41:6a:3a:54:8e:8d:81:99:0e:f0:25:7a:ee:a9: b9:13:e1:24:cd:ce:ae:c0:a0:4e:95:99:08:a8:27:9f:fb:c3: 70:93:ed:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4NzgxMTAvBgNVBAUTKDU1RjJFOURCMjgzQ0I0NTlFMjY2NjhGOTIyNEYyNkIz QTJBNDQ2NEUwHhcNMjQwNTE5MDExNzU5WhcNMjQwNTI2MDExNzU5WjAYMRYwFAYD VQQDEw02NjQ5NTM0OC0zOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+SSEygSto1BS2QogyTWkHNzSSBrW3vI7GWpvtDPTJwITY/yUFZP72HFowNsw NhhHwur3Ye/yEVShW9tvAWjdBsC2VEBwBcQNgi+ryb2TdlK1SwVMjwmmkNq8n9vo 1N6/bW3A0VTNwcVsQ0FKnuvYzha9/QIYJh1y2O/VIMAy6OH7jch+ax6YwJlViaQM vlbm7n80UqAeH8//fz5fdIAFQys9yjLGj10hPKwveeGflaiTYp6MPUqZurKDAatk mKbPHGmvMaVOiKbsuo2Cma4XRT+VAev3sQOTMNG+mVVKjuv1REbrKRLXBiqjp2bh Fkd7jLYvMkvso48eF3kBBXO1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3CTcvN mDUSU72RpgfBYbhKffcqMB8GA1UdIwQYMBaAFFXy6dsoPLRZ4mZo+SJPJrOipEZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg3OC9CRUQ4MzY2NkNE MTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRGbmlabWo1SWs4bXM2S2tS azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTHAyeWc4dEZuaVptajVJazhtczZLa1JrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg3OC9CRUQ4MzY2NkNEMTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRG bmlabWo1SWs4bXM2S2tSazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPUFzHyUDyNc+ze2pGqeHlNk6v+1/EjUJq67OC56IGCsLnaBdNMv8X pS6Rztb7HU2O8a1FCC34rnh7ODakL/IzGiBHSLYEjn7YgQLJ+g+4Bb2TAtfvfeNl hWCIuVVeTSW0cXAEd2DRDkVC/06CdE1LtIIbQJeg8l7TmLfY+JpkCm1C0kMJNwbp ZZ1wtowUbti69ZU+uWEq3Pp1ILgsM+jIvkrwpozjvmRYgNbPjdjAPO9+9eMDxXtC MJS9EQDPWqsM1VEMi7Y/89L6cBkh1tS4zkwsro8TYaH4FsQLQWo6VI6NgZkO8CV6 7qm5E+Ekzc6uwKBOlZkIqCef+8Nwk+17 -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org