$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: eHYmm62ommO0w2nbWlOvQv0N0Bqw6Di3I3J2fg9tmBA= Subject key identifier: 9A:BD:EA:75:D3:97:91:B9:8A:F4:95:60:E3:0F:E7:38:06:5B:4F:D3 Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 04C2 Signing time: Sun 19 May 2024 01:32:17 +0000 Manifest this update: Sun 19 May 2024 01:32:17 +0000 Manifest next update: Sun 26 May 2024 01:32:17 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: QC4bO5JeTtvP+Co/+1bz29uk3AbvtImd5eOTNb6APN4=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: May 19 01:32:17 2024 GMT Not After : May 26 01:32:17 2024 GMT Subject: CN=664956a1-066e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:44:3a:ec:d4:ff:db:a3:ec:9d:b7:8a:8d: 80:f8:08:9d:92:18:e4:69:e1:89:7b:e8:cd:c8:a5: da:55:1a:c9:82:3f:af:4c:ae:48:69:25:2f:5e:74: c6:b1:07:65:2a:e3:52:98:3c:1d:25:1e:d5:07:e3: b7:1c:d0:18:e3:c8:5c:e3:e4:bb:14:5b:16:5a:6d: 34:eb:f3:98:ba:fc:c0:e8:1f:5e:1e:3a:61:be:3d: 6c:be:b9:9f:24:58:e4:0d:6b:4c:72:72:48:41:e8: 46:07:ba:c8:71:0c:ca:4a:a8:82:c1:bf:90:74:cb: ee:48:e9:9f:30:7b:78:37:7c:c5:3b:73:8a:09:f2: 85:45:85:c3:2e:dd:f7:bc:e6:d3:ec:03:25:0c:a0: d2:95:65:bc:16:d3:64:f5:77:89:96:fa:4e:75:da: 44:e7:b8:7a:02:39:17:4b:3b:43:29:da:80:0f:3f: 87:e9:92:15:ab:54:98:52:cd:32:85:9a:a8:a3:44: cc:22:86:05:cc:47:b2:8f:e1:55:ad:4b:be:71:a0: 04:3a:a7:85:a8:31:59:42:91:86:38:4c:25:63:57: e7:9b:2c:4c:36:7e:21:51:a3:87:83:dc:de:97:d2: d3:e3:80:d5:b9:90:b8:30:a4:8d:35:17:47:5e:82: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:EA:75:D3:97:91:B9:8A:F4:95:60:E3:0F:E7:38:06:5B:4F:D3 X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9e:86:7f:46:c8:bf:7a:8a:98:c0:1e:45:58:81:b4:59:8d: a4:aa:82:da:9b:70:aa:d1:f8:07:cc:fa:a1:ad:fe:e1:71:46: f7:9b:b6:c6:da:a3:3d:09:a3:61:f7:3f:cb:10:36:cb:4e:f7: 07:1f:86:66:6b:a2:a3:ad:e0:d0:52:b4:b5:4e:6a:09:22:41: b0:bd:4e:fc:94:0c:43:48:9d:97:65:f1:c2:0e:cc:62:1a:f2: 8d:4e:ef:0d:f3:85:19:16:76:74:43:e0:e4:36:45:8f:e9:bd: 46:7e:75:e8:76:e5:38:00:34:3d:29:92:ac:84:da:ac:e0:f3: e4:28:ec:fb:d0:3c:48:40:6e:85:9c:d2:6f:7d:b3:20:3a:53: 25:3f:78:65:02:46:fe:0d:2c:4a:6e:8d:d4:fa:b3:f5:99:ea: e2:6e:43:17:b2:d3:a7:a5:7c:7e:b1:0b:04:ee:fc:63:7e:fb: 90:3f:e0:1b:68:e7:3a:34:46:3c:c3:da:7b:d3:a6:e0:b1:cc: 38:31:ea:37:c1:a4:a6:20:63:98:e6:8f:b4:48:7a:a7:78:8c: 27:b0:f6:15:15:24:37:a7:67:86:e3:df:a7:6e:f8:35:a3:66: a1:37:8f:5b:ee:8a:2c:8a:07:41:be:b3:2d:ef:8a:9c:5d:1c: 19:15:c0:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjQwNTE5MDEzMjE3WhcNMjQwNTI2MDEzMjE3WjAYMRYwFAYD VQQDEw02NjQ5NTZhMS0wNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYNEOuzU/9uj7J23io2A+AidkhjkaeGJe+jNyKXaVRrJgj+vTK5IaSUvXnTG sQdlKuNSmDwdJR7VB+O3HNAY48hc4+S7FFsWWm006/OYuvzA6B9eHjphvj1svrmf JFjkDWtMcnJIQehGB7rIcQzKSqiCwb+QdMvuSOmfMHt4N3zFO3OKCfKFRYXDLt33 vObT7AMlDKDSlWW8FtNk9XeJlvpOddpE57h6AjkXSztDKdqADz+H6ZIVq1SYUs0y hZqoo0TMIoYFzEeyj+FVrUu+caAEOqeFqDFZQpGGOEwlY1fnmyxMNn4hUaOHg9ze l9LT44DVuZC4MKSNNRdHXoJoKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq96nXT l5G5ivSVYOMP5zgGW0/TMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnoZ/Rsi/eoqYwB5FWIG0WY2kqoLam3Cq0fgHzPqhrf7hcUb3m7bG 2qM9CaNh9z/LEDbLTvcHH4Zma6KjreDQUrS1TmoJIkGwvU78lAxDSJ2XZfHCDsxi GvKNTu8N84UZFnZ0Q+DkNkWP6b1GfnXoduU4ADQ9KZKshNqs4PPkKOz70DxIQG6F nNJvfbMgOlMlP3hlAkb+DSxKbo3U+rP1meribkMXstOnpXx+sQsE7vxjfvuQP+Ab aOc6NEY8w9p706bgscw4Meo3waSmIGOY5o+0SHqneIwnsPYVFSQ3p2eG49+nbvg1 o2ahN49b7oosigdBvrMt74qcXRwZFcDK -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org