$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: 2gUZGqlT1FbevU5xHOQm7vEuPgoVZoqEzihIjzJ3Qys= Subject key identifier: 0A:CB:96:32:B8:0E:37:9A:11:EB:56:F5:1B:5C:54:AA:C2:28:25:53 Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 0432 Signing time: Wed 29 May 2024 02:19:54 +0000 Manifest this update: Wed 29 May 2024 02:19:54 +0000 Manifest next update: Wed 05 Jun 2024 02:19:54 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: AQwBobzX/p/3yZ+26aBE/x7KpR8REPp5DRPNbv1QaHw=) 2: 9CC8124414FB11EC89900016C4F9AE02.roa (hash: L9ByBSMnmm41va02qVJXM+dBik+O13VTmuGx9vauK90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: May 29 02:19:54 2024 GMT Not After : Jun 5 02:19:54 2024 GMT Subject: CN=665690ca-1472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:5d:63:b1:6d:5e:b9:44:c4:7e:9c:13:2f: 26:0a:f7:f3:c0:6c:63:d8:f4:dc:4f:e4:0b:b8:f8: a1:fb:ba:fb:f8:f3:f3:4b:ba:76:ce:e2:83:20:78: 41:97:8e:ef:2c:81:c4:bd:c7:cd:12:89:10:d3:c9: 93:36:88:b6:d7:d1:57:f8:52:84:9c:a6:ab:f2:13: 48:e1:c8:83:f0:fb:d3:46:46:13:e4:56:71:d7:b3: 5a:ce:7a:c6:a9:ea:aa:09:13:c9:fb:de:47:a7:46: 80:65:bd:67:84:1c:78:d5:2b:16:88:74:e0:f4:ac: fc:f2:43:df:e3:16:92:57:23:f3:4a:82:c1:8e:83: 77:d0:e7:a4:e6:75:6d:87:da:ef:ed:e1:fb:34:2f: 6c:84:b5:c8:86:3e:74:45:a5:fb:57:b0:ce:02:ec: 1f:08:27:73:0c:fa:31:59:b8:1a:d2:7a:ff:76:02: 01:d9:c4:5a:fd:e6:44:6f:4f:ab:2c:32:1a:43:ee: a8:01:12:5f:7c:08:c6:ac:67:6e:49:30:82:46:12: 11:57:83:34:24:6a:d6:a2:86:b0:e1:3f:a0:6f:f3: bb:ce:74:27:25:8e:29:4d:0f:b3:61:4d:00:b1:85: cb:ba:21:e9:d6:9a:66:fd:33:3e:ab:a4:da:a1:18: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:96:32:B8:0E:37:9A:11:EB:56:F5:1B:5C:54:AA:C2:28:25:53 X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3f:f9:c6:d7:a7:28:70:2f:ca:73:fe:c0:96:5b:e2:83:5c: 21:7f:51:7a:cd:e5:87:fc:0e:88:37:b0:eb:4c:72:75:cf:8d: 4d:9e:75:a3:b2:b2:27:78:ad:bc:26:8c:1a:f1:a0:e9:bb:11: c0:a4:e8:d7:fc:86:47:56:92:67:ee:dc:aa:7d:30:d2:23:b3: 7f:ea:29:84:33:98:cc:e9:e2:23:70:50:02:95:84:13:08:f5: 04:d0:78:0f:2c:8f:c4:42:99:48:6d:a0:e9:c5:20:c7:e1:60: 59:29:17:9e:6e:50:f8:16:9d:b0:73:e2:36:bc:9a:c3:48:87: d7:23:cc:75:2b:d0:4d:75:6d:4b:52:ed:d8:e3:ea:75:ee:a6: 8b:00:a5:0d:b8:49:eb:f0:74:9f:d5:66:ca:5c:69:1f:e5:76: 89:95:2b:46:3b:6f:30:4c:b4:24:99:0b:60:d9:71:eb:76:e5: f4:40:22:bf:2b:35:4e:8f:c1:94:50:27:f2:27:fb:37:ec:d3: ce:06:cb:85:e0:c8:7a:0c:66:43:61:98:02:db:49:49:1b:52: 0d:c0:fc:58:64:ef:66:56:e7:e1:1f:4d:6f:5a:3e:22:40:62: 0e:f6:bf:49:ce:be:fb:e2:89:27:d1:54:f9:77:e5:8e:e3:4b: 63:94:9c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjQwNTI5MDIxOTU0WhcNMjQwNjA1MDIxOTU0WjAYMRYwFAYD VQQDEw02NjU2OTBjYS0xNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq1dY7FtXrlExH6cEy8mCvfzwGxj2PTcT+QLuPih+7r7+PPzS7p2zuKDIHhB l47vLIHEvcfNEokQ08mTNoi219FX+FKEnKar8hNI4ciD8PvTRkYT5FZx17NaznrG qeqqCRPJ+95Hp0aAZb1nhBx41SsWiHTg9Kz88kPf4xaSVyPzSoLBjoN30Oek5nVt h9rv7eH7NC9shLXIhj50RaX7V7DOAuwfCCdzDPoxWbga0nr/dgIB2cRa/eZEb0+r LDIaQ+6oARJffAjGrGduSTCCRhIRV4M0JGrWooaw4T+gb/O7znQnJY4pTQ+zYU0A sYXLuiHp1ppm/TM+q6TaoRiTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArLljK4 DjeaEetW9RtcVKrCKCVTMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6P/nG16cocC/Kc/7Allvig1whf1F6zeWH/A6IN7DrTHJ1z41NnnWj srIneK28Jowa8aDpuxHApOjX/IZHVpJn7tyqfTDSI7N/6imEM5jM6eIjcFAClYQT CPUE0HgPLI/EQplIbaDpxSDH4WBZKReeblD4Fp2wc+I2vJrDSIfXI8x1K9BNdW1L Uu3Y4+p17qaLAKUNuEnr8HSf1WbKXGkf5XaJlStGO28wTLQkmQtg2XHrduX0QCK/ KzVOj8GUUCfyJ/s37NPOBsuF4Mh6DGZDYZgC20lJG1INwPxYZO9mVufhH01vWj4i QGIO9r9Jzr774okn0VT5d+WO40tjlJxl -----END CERTIFICATE-----Generated at Wed May 29 06:12:13 2024 by rpki-client on console-ams.rpki-client.org