$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: +egmbXuZFW0pMeAZD3zQwurLJS8eamlbcEstabaVsJE= Subject key identifier: B9:E2:36:7B:6E:26:BD:30:F5:29:D8:FE:48:62:74:21:2B:F2:F6:FD Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 24 Signing time: Sun 19 May 2024 08:31:22 +0000 Manifest this update: Sun 19 May 2024 08:31:21 +0000 Manifest next update: Sun 26 May 2024 08:31:21 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: ejJuPUJ6gwnLgl5bsvIcRqaNIBpVFoEv4TaqGv98/p0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: May 19 08:31:21 2024 GMT Not After : May 26 08:31:21 2024 GMT Subject: CN=6649b8da-b37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:c4:d5:3d:1c:af:b8:d9:dd:43:84:0d:a3: a1:3f:89:86:d1:55:62:fa:95:4d:d0:71:36:a7:ce: a8:3b:cf:2f:a4:13:7a:ad:14:08:b7:cd:cf:6c:de: 37:54:2b:65:98:4f:d1:38:51:f9:e1:12:c1:94:58: f8:09:5f:f3:44:45:f5:6c:7f:23:81:db:7c:3a:3e: 7b:27:96:2d:3f:74:1e:70:ef:1c:b0:9c:08:71:a3: b2:87:46:8b:d1:70:06:03:07:a3:e7:ef:b3:a0:38: 56:65:01:0f:c4:a8:48:6e:26:c8:02:cd:55:50:6a: f4:e0:33:ac:c8:bb:8e:91:30:58:f2:0c:bf:94:2a: d4:a4:7c:eb:5e:34:de:c0:85:d7:09:c8:a9:38:df: 27:ac:98:e2:8b:3d:bc:a4:7b:99:59:27:1a:ac:54: 7a:67:13:0d:91:4c:0e:c8:8b:02:11:38:92:f6:a8: 0f:2b:2d:85:b9:02:6d:82:cb:94:1d:3f:38:98:1b: 71:1f:0b:04:f7:c9:2a:4e:0e:cd:ec:db:ff:e4:d9: 64:56:cf:4f:71:46:6e:97:b3:ba:42:e5:08:e3:9b: 5a:2c:1d:a0:8e:a6:6a:e6:0d:3a:e8:f1:12:4a:06: 81:7f:ad:da:1e:d6:ad:43:1e:9e:87:ab:a1:67:dc: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:36:7B:6E:26:BD:30:F5:29:D8:FE:48:62:74:21:2B:F2:F6:FD X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d1:3d:f0:83:09:4a:a5:d6:45:66:5f:36:36:ff:d9:62:58: b9:a7:6c:06:c4:ac:e6:5c:7f:ae:b9:84:c6:08:de:cf:4c:43: 31:60:60:88:0a:b2:79:44:60:c1:fb:ec:bf:ba:46:b9:b5:96: 6f:40:f6:f6:cd:c2:e7:a5:83:81:f2:b9:3b:c3:2d:83:e5:a4: 97:c8:4c:26:d2:c7:92:6c:9b:9e:c0:70:32:08:00:ef:ec:9d: a9:b4:8c:c0:fe:82:66:8f:30:d5:f7:3a:51:5d:4d:cb:ab:03: 89:48:1c:ca:76:7a:b5:bb:22:da:bb:96:d6:d7:3f:0e:23:9c: 1a:4e:86:91:31:e9:70:fe:86:01:8e:73:c7:b9:6d:84:3f:6e: 5a:ad:4b:fa:ac:61:6f:41:76:75:88:a7:75:2d:89:9c:eb:4d: 99:aa:fe:b4:ab:73:05:42:a1:2d:49:19:53:02:8b:50:05:4d: 5a:80:1b:fa:04:1d:9c:e4:9f:53:9d:7f:2a:62:20:2d:ec:7d: 2e:d9:51:aa:b4:73:d0:28:b3:ad:af:dc:bc:c6:a0:e5:62:67: 1c:01:d3:fe:84:5c:9a:10:6a:eb:21:65:9d:87:80:23:03:60: c2:38:29:71:97:33:92:b9:92:4d:05:3b:4b:2e:7a:a4:f3:2b: 91:fd:4a:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REFDMDExMC8GA1UEBRMoNTRCOTY2QUQ4QjU3MzE2NDE2NTI5NTA3RjVCQ0E5QzAw RTExODFCOTAeFw0yNDA1MTkwODMxMjFaFw0yNDA1MjYwODMxMjFaMBgxFjAUBgNV BAMTDTY2NDliOGRhLWIzN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC87sTVPRyvuNndQ4QNo6E/iYbRVWL6lU3QcTanzqg7zy+kE3qtFAi3zc9s3jdU K2WYT9E4UfnhEsGUWPgJX/NERfVsfyOB23w6Pnsnli0/dB5w7xywnAhxo7KHRovR cAYDB6Pn77OgOFZlAQ/EqEhuJsgCzVVQavTgM6zIu46RMFjyDL+UKtSkfOteNN7A hdcJyKk43yesmOKLPbyke5lZJxqsVHpnEw2RTA7IiwIROJL2qA8rLYW5Am2Cy5Qd PziYG3EfCwT3ySpODs3s2//k2WRWz09xRm6Xs7pC5Qjjm1osHaCOpmrmDTro8RJK BoF/rdoe1q1DHp6Hq6Fn3Lq7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUueI2e24m vTD1Kdj+SGJ0ISvy9v0wHwYDVR0jBBgwFoAUVLlmrYtXMWQWUpUH9bypwA4Rgbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQUMwL0U3NjNBQThBREU4 ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkxsbXJZdFhNV1FXVXBVSDlieXB3QTRSZ2JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QUMwL0U3NjNBQThBREU4ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdR V1VwVUg5Ynlwd0E0Umdiay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPRPfCDCUql1kVmXzY2/9liWLmnbAbErOZcf665hMYI3s9MQzFgYIgK snlEYMH77L+6Rrm1lm9A9vbNwuelg4HyuTvDLYPlpJfITCbSx5Jsm57AcDIIAO/s nam0jMD+gmaPMNX3OlFdTcurA4lIHMp2erW7Itq7ltbXPw4jnBpOhpEx6XD+hgGO c8e5bYQ/blqtS/qsYW9BdnWIp3UtiZzrTZmq/rSrcwVCoS1JGVMCi1AFTVqAG/oE HZzkn1OdfypiIC3sfS7ZUaq0c9Aos62v3LzGoOViZxwB0/6EXJoQaushZZ2HgCMD YMI4KXGXM5K5kk0FO0sueqTzK5H9SoY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org