$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: dNvp1GmJaLmDq+fJNPW21x720KwhARAF4LBfQVTTTtI= Subject key identifier: 05:B8:04:B4:9C:8C:46:B9:80:C9:DA:65:2B:6D:4E:ED:20:7E:FA:B1 Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 0F60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 0F48 Signing time: Sat 18 May 2024 18:12:15 +0000 Manifest this update: Sat 18 May 2024 18:12:14 +0000 Manifest next update: Sat 25 May 2024 18:12:14 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: M393FoEZizreyV0zo8zK6yP74Q7lsigFkwe4GHlvBh0=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: +WbgMiOydZaN1Ot/PF68zy9NORaLx5JjU1S1DCl6sIU=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: bbZvUB3rKE3TY3pN9/PZStir6c2eC/1aobFTaCcyREs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: May 18 18:12:14 2024 GMT Not After : May 25 18:12:14 2024 GMT Subject: CN=6648ef7f-9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:b4:47:a6:2d:ba:3e:4c:7a:d5:47:d1:15: b5:ce:68:eb:d3:2f:cb:c1:42:97:22:fc:d6:e4:e5: 78:2c:c8:d9:fa:94:d3:69:4b:9a:c6:f8:d9:67:89: 87:2d:51:99:dd:bf:8d:4f:17:06:47:80:40:2d:db: 0c:aa:46:33:1a:a2:40:8f:59:a4:84:f6:34:bf:34: 53:e6:aa:b4:9e:53:52:15:1e:cc:ae:e8:be:b1:27: be:4f:17:f2:79:59:80:e1:3b:cd:fe:09:46:a4:3c: a1:30:55:6b:08:49:c9:d1:c3:87:37:d0:ac:ea:57: 4b:a6:19:76:21:21:94:b8:97:9b:24:ae:56:9b:7f: c0:ab:f4:e1:14:f8:79:1b:7c:75:fe:89:69:ca:d0: 1f:fa:78:1d:8f:a4:5b:cb:12:d9:67:91:72:be:d8: 0f:12:72:52:f6:52:ef:0d:e5:2a:8b:85:59:5b:ae: 69:8b:8e:8c:27:6f:f6:e6:bc:c1:c3:e3:d0:1c:48: 8a:3c:43:d9:e9:44:0c:57:57:99:3f:20:04:46:43: 8a:bb:33:10:5e:48:0c:6c:21:d6:19:b4:f1:1e:8c: 3a:4b:87:32:28:81:db:a5:9b:e4:fe:60:91:d2:38: 24:57:a3:de:58:74:f3:74:a5:1d:e3:52:cc:8c:4a: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B8:04:B4:9C:8C:46:B9:80:C9:DA:65:2B:6D:4E:ED:20:7E:FA:B1 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:00:3e:63:63:dc:22:81:ec:5a:dc:3c:8a:7b:ad:49:8d:80: dd:c2:2a:6e:21:fe:a4:f6:f1:66:99:8b:6e:46:a8:8e:fe:21: 6f:92:51:e6:ef:84:53:db:ac:6f:94:c9:e1:2a:cc:48:1d:92: 79:99:c0:a5:7e:ca:28:ff:16:c9:7c:99:27:40:6b:80:83:55: bc:11:d5:ed:92:22:ca:5e:7a:ac:27:8a:57:97:03:59:5d:80: 14:34:f3:a8:4e:28:29:30:5b:35:34:2c:65:de:cd:5f:e8:97: 8e:67:b5:8c:24:97:c2:42:df:fc:04:f8:32:ef:cb:a4:8b:a6: 07:cd:ea:dd:01:3b:ba:1c:cd:d0:7a:77:90:93:68:7b:15:ff: e4:b2:5d:f7:af:8f:cf:16:cd:f7:2f:e3:f2:f0:56:32:9a:5c: 65:18:4c:7d:cb:df:dd:a4:4c:6b:55:e6:e3:3c:1d:0f:46:2b: c2:a9:8b:ec:48:be:e5:a1:c3:d2:c7:6d:a1:00:47:3e:d2:dd: ff:ce:7c:0b:32:fc:2a:b2:88:08:e9:e0:ea:dd:3c:9e:15:be: c6:05:5a:05:61:f0:00:87:21:58:40:85:60:a1:05:e1:e1:dc: b1:1f:bd:06:ab:0b:7c:79:f7:72:33:8e:bf:fc:5b:67:89:0a: 7d:54:3c:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjQwNTE4MTgxMjE0WhcNMjQwNTI1MTgxMjE0WjAYMRYwFAYD VQQDEw02NjQ4ZWY3Zi05ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj+0R6Ytuj5MetVH0RW1zmjr0y/LwUKXIvzW5OV4LMjZ+pTTaUuaxvjZZ4mH LVGZ3b+NTxcGR4BALdsMqkYzGqJAj1mkhPY0vzRT5qq0nlNSFR7Mrui+sSe+Txfy eVmA4TvN/glGpDyhMFVrCEnJ0cOHN9Cs6ldLphl2ISGUuJebJK5Wm3/Aq/ThFPh5 G3x1/olpytAf+ngdj6RbyxLZZ5FyvtgPEnJS9lLvDeUqi4VZW65pi46MJ2/25rzB w+PQHEiKPEPZ6UQMV1eZPyAERkOKuzMQXkgMbCHWGbTxHow6S4cyKIHbpZvk/mCR 0jgkV6PeWHTzdKUd41LMjEphFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW4BLSc jEa5gMnaZSttTu0gfvqxMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7AD5jY9wigexa3DyKe61JjYDdwipuIf6k9vFmmYtuRqiO/iFvklHm 74RT26xvlMnhKsxIHZJ5mcClfsoo/xbJfJknQGuAg1W8EdXtkiLKXnqsJ4pXlwNZ XYAUNPOoTigpMFs1NCxl3s1f6JeOZ7WMJJfCQt/8BPgy78uki6YHzerdATu6HM3Q eneQk2h7Ff/ksl33r4/PFs33L+Py8FYymlxlGEx9y9/dpExrVebjPB0PRivCqYvs SL7locPSx22hAEc+0t3/znwLMvwqsogI6eDq3TyeFb7GBVoFYfAAhyFYQIVgoQXh 4dyxH70Gqwt8efdyM46//FtniQp9VDzb -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org