$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: gWcvaz4LLwrhjHAQITw8AuM7FosUe151MMFBjrR1Uls= Subject key identifier: F8:9C:BE:19:B9:8E:55:49:0A:F0:5C:74:51:85:CC:64:4F:A7:4A:4E Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 0FF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 0FED Signing time: Sat 18 May 2024 18:01:32 +0000 Manifest this update: Sat 18 May 2024 18:01:31 +0000 Manifest next update: Sat 25 May 2024 18:01:31 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: 8Pe2Mw2nBasxgm3NeB0YSnU3uEuW5ndCAFOEkuZ4ZWA=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: p5WI048j+aa2euJphDqE0g93ye/98v4Qw+eHTYJi4ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4084 (0xff4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: May 18 18:01:31 2024 GMT Not After : May 25 18:01:31 2024 GMT Subject: CN=6648ecfc-16e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:09:45:0f:d8:1d:62:ab:f6:c1:ac:28:ef: 57:e3:38:a6:4b:42:3f:73:e0:10:4d:5b:2f:dd:01: 57:f1:6d:7a:b4:5b:f0:3a:40:fc:a4:a0:dc:90:f2: 95:34:1c:d8:34:56:50:42:f8:ea:c7:57:ab:d2:10: 4d:2f:21:8f:eb:c8:aa:06:d2:41:ce:30:c2:6e:44: f2:c3:be:9b:5e:ec:b9:b0:1a:74:eb:ba:08:00:fa: af:e9:3a:af:8f:14:7f:2f:6b:8a:f8:5a:4c:62:d3: 88:fb:46:2f:32:d7:92:d7:bd:0a:d9:43:ac:f7:4e: 85:cb:c1:df:b0:a2:6d:ec:14:85:6b:0c:29:2b:f4: d1:fd:27:3c:0d:32:38:f5:40:f5:a5:7a:54:16:f4: a1:61:b3:2a:93:87:3f:f1:9a:4e:ea:a8:98:48:71: 8f:22:7f:6a:c6:d6:47:64:2a:eb:a5:14:98:16:5b: c8:20:b6:43:eb:ad:fc:e2:2a:21:7a:f7:66:25:7e: b7:8f:1d:96:7b:9f:0a:42:d6:fc:23:2f:05:c6:5a: a3:b7:bc:ac:60:00:44:0c:7b:51:65:17:31:a9:5d: 8d:67:8f:cb:d9:1b:d1:80:c5:ed:fd:01:4c:76:72: 43:70:38:3e:6e:bf:3d:1b:cf:2b:3f:f1:e7:2c:6c: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:BE:19:B9:8E:55:49:0A:F0:5C:74:51:85:CC:64:4F:A7:4A:4E X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:38:5f:fb:e1:52:38:b8:f7:bc:f6:51:1f:60:c6:b0:3b:3f: 73:9d:cc:27:5a:33:20:a7:63:3b:0d:5e:8a:3e:70:ff:ff:4c: 69:32:51:d0:c1:40:47:f5:e3:24:3a:27:e2:c7:42:b8:c1:92: 1b:88:3f:76:64:36:5a:22:ac:3d:03:ab:54:06:f1:69:22:80: 02:6f:e0:21:eb:34:93:4c:14:63:58:46:d2:26:a8:b3:0d:1c: cd:b1:66:32:79:ed:10:4f:d6:bf:bf:6d:e8:fb:a7:8b:cd:9b: ef:4b:42:cc:2b:6a:ca:1a:f9:04:68:b4:36:9a:cd:82:03:89: ca:fb:2e:92:7e:33:a1:e0:35:97:b3:62:b6:aa:e0:34:5e:bd: 74:39:7f:a1:a6:f2:5e:d0:5a:8f:28:3e:a6:7e:81:74:99:c9: d7:a1:4f:9f:b9:89:07:63:81:d4:c9:b8:69:f1:55:10:78:b0: c9:87:e2:bd:43:b1:ba:d8:1a:3a:f9:49:51:95:f5:fa:ed:22: 4e:98:c7:2b:20:a5:a9:84:76:2a:9c:fd:f3:69:22:27:e0:bb: d8:6f:9b:30:9b:3a:85:98:ae:5a:6c:b6:35:26:0d:18:0e:a7: 60:53:dd:d6:c0:bf:db:bb:60:2f:32:d7:5a:50:5f:f7:b0:c3: 9e:f3:e5:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjQwNTE4MTgwMTMxWhcNMjQwNTI1MTgwMTMxWjAYMRYwFAYD VQQDEw02NjQ4ZWNmYy0xNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUoJRQ/YHWKr9sGsKO9X4zimS0I/c+AQTVsv3QFX8W16tFvwOkD8pKDckPKV NBzYNFZQQvjqx1er0hBNLyGP68iqBtJBzjDCbkTyw76bXuy5sBp067oIAPqv6Tqv jxR/L2uK+FpMYtOI+0YvMteS170K2UOs906Fy8HfsKJt7BSFawwpK/TR/Sc8DTI4 9UD1pXpUFvShYbMqk4c/8ZpO6qiYSHGPIn9qxtZHZCrrpRSYFlvIILZD66384ioh evdmJX63jx2We58KQtb8Iy8Fxlqjt7ysYABEDHtRZRcxqV2NZ4/L2RvRgMXt/QFM dnJDcDg+br89G88rP/HnLGympQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPicvhm5 jlVJCvBcdFGFzGRPp0pOMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpOF/74VI4uPe89lEfYMawOz9zncwnWjMgp2M7DV6KPnD//0xpMlHQ wUBH9eMkOifix0K4wZIbiD92ZDZaIqw9A6tUBvFpIoACb+Ah6zSTTBRjWEbSJqiz DRzNsWYyee0QT9a/v23o+6eLzZvvS0LMK2rKGvkEaLQ2ms2CA4nK+y6SfjOh4DWX s2K2quA0Xr10OX+hpvJe0FqPKD6mfoF0mcnXoU+fuYkHY4HUybhp8VUQeLDJh+K9 Q7G62Bo6+UlRlfX67SJOmMcrIKWphHYqnP3zaSIn4LvYb5swmzqFmK5abLY1Jg0Y DqdgU93WwL/bu2AvMtdaUF/3sMOe8+VM -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org