$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: CMj16lUWhx9ZVDjzzMXMNO+qomY9IRChGCTmRmnid3M= Subject key identifier: A8:8B:FE:6B:54:A1:79:04:58:15:E6:A5:FA:D9:F2:31:3A:1B:BA:0D Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 035C Signing time: Sun 19 May 2024 02:52:54 +0000 Manifest this update: Sun 19 May 2024 02:52:53 +0000 Manifest next update: Sun 26 May 2024 02:52:53 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: A3knl7WfNp7VbFK2iBViZFzqyIU3Cko66Jz9M+rm3eg=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: yhiI91XkzwkhnhaYNH6zI3a1DeYpIdZabbgvsl7RlxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: May 19 02:52:53 2024 GMT Not After : May 26 02:52:53 2024 GMT Subject: CN=66496986-0e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:0c:07:c6:5d:45:39:e8:87:42:84:2d:56: 82:d9:18:48:81:d5:7d:3b:be:5e:94:d0:61:07:5d: ad:0c:8e:4a:5f:42:f7:37:49:47:81:ac:5e:84:71: 41:1d:39:f7:4b:66:7c:06:71:c0:d3:da:08:3e:f6: fb:8f:2d:e0:b8:bb:9c:9b:71:1b:e4:89:30:83:52: 13:78:4d:9c:05:9e:a2:d3:ba:ee:83:ba:fb:8a:f9: b5:29:b3:aa:c4:92:dc:d6:11:dc:f9:37:ee:23:01: 94:c1:46:a9:0c:3f:62:60:72:5f:7e:e4:5a:fa:7e: 82:84:52:be:7f:06:84:fa:36:a5:65:90:9b:b6:35: 3f:99:aa:49:96:ed:d4:04:ab:0d:6d:e2:78:f9:c9: ef:8f:f1:5e:74:3a:d3:75:ae:94:c3:b2:57:6c:7c: fc:fb:f8:5a:58:13:5d:1f:13:b7:b9:b2:20:31:40: b5:34:1f:94:63:c2:94:14:3b:06:bb:08:20:0c:3e: 1d:59:59:d8:ee:e5:84:76:75:3d:0a:e1:b7:10:ed: a5:fd:fa:c9:8a:45:4a:a8:5e:e0:91:c3:a4:c8:76: 17:f8:3d:62:1b:b7:88:d4:f5:fc:c7:26:99:be:c0: 87:05:5c:82:d8:c9:04:d2:20:a4:1b:89:53:74:5d: ea:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:FE:6B:54:A1:79:04:58:15:E6:A5:FA:D9:F2:31:3A:1B:BA:0D X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:29:3d:16:e1:c4:be:99:17:d2:cf:a7:60:6c:5a:35:39:87: 71:4a:bd:8d:26:d3:b4:c4:38:09:f1:13:1f:bd:c7:21:17:4b: 2e:b7:43:3a:36:05:20:08:fa:d9:41:d9:5c:bf:e9:c0:bc:6a: 50:2c:39:fa:0f:ef:20:77:b4:d5:4d:d6:3d:b8:3d:9d:b4:bf: d5:32:36:a3:ca:48:ac:6a:0d:b7:7e:24:e7:f8:78:94:1e:88: eb:76:a6:73:21:de:a7:2d:c1:13:ae:8a:6f:9d:c2:58:f2:df: 66:42:b9:96:b4:3b:0d:4d:ad:37:e0:3b:86:f4:60:d8:aa:06: fb:33:c9:98:5f:dc:47:02:8c:d3:2a:a2:ee:cc:d3:92:2e:e2: 7a:b0:5f:85:25:38:83:66:c0:25:df:48:0e:d2:58:fb:0f:62: 64:75:a8:80:62:02:8e:b1:f6:44:0d:b8:e1:e8:26:45:76:60: f1:d5:11:dd:85:3b:7a:12:5f:b6:56:16:69:ac:64:02:a8:71: f1:48:83:42:e5:f8:02:17:b6:20:0f:18:10:b0:7f:70:b7:14: 7a:da:9f:4c:c7:a5:f1:f9:78:16:1d:97:cf:c2:68:29:a0:49: f2:32:1b:ae:58:4f:36:2f:86:6f:e0:3f:5b:91:89:ca:63:5b: 36:24:b0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjQwNTE5MDI1MjUzWhcNMjQwNTI2MDI1MjUzWjAYMRYwFAYD VQQDEw02NjQ5Njk4Ni0wZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYYMB8ZdRTnoh0KELVaC2RhIgdV9O75elNBhB12tDI5KX0L3N0lHgaxehHFB HTn3S2Z8BnHA09oIPvb7jy3guLucm3Eb5Ikwg1ITeE2cBZ6i07rug7r7ivm1KbOq xJLc1hHc+TfuIwGUwUapDD9iYHJffuRa+n6ChFK+fwaE+jalZZCbtjU/mapJlu3U BKsNbeJ4+cnvj/FedDrTda6Uw7JXbHz8+/haWBNdHxO3ubIgMUC1NB+UY8KUFDsG uwggDD4dWVnY7uWEdnU9CuG3EO2l/frJikVKqF7gkcOkyHYX+D1iG7eI1PX8xyaZ vsCHBVyC2MkE0iCkG4lTdF3qvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiL/mtU oXkEWBXmpfrZ8jE6G7oNMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhKT0W4cS+mRfSz6dgbFo1OYdxSr2NJtO0xDgJ8RMfvcchF0sut0M6 NgUgCPrZQdlcv+nAvGpQLDn6D+8gd7TVTdY9uD2dtL/VMjajykisag23fiTn+HiU HojrdqZzId6nLcETropvncJY8t9mQrmWtDsNTa034DuG9GDYqgb7M8mYX9xHAozT KqLuzNOSLuJ6sF+FJTiDZsAl30gO0lj7D2JkdaiAYgKOsfZEDbjh6CZFdmDx1RHd hTt6El+2VhZprGQCqHHxSINC5fgCF7YgDxgQsH9wtxR62p9Mx6Xx+XgWHZfPwmgp oEnyMhuuWE82L4Zv4D9bkYnKY1s2JLBt -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org