$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft File: VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json) Hash identifier: nOwIKovnqMA22NhDMhAi34xHbKDzcUt61uiTIfMnEN0= Subject key identifier: A6:28:40:DB:63:33:2C:55:18:26:A4:18:66:0B:E7:07:D2:6E:D1:83 Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 Certificate issuer: /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft Manifest number: 089B Signing time: Thu 30 May 2024 22:00:30 +0000 Manifest this update: Thu 30 May 2024 22:00:30 +0000 Manifest next update: Thu 06 Jun 2024 22:00:30 +0000 Files and hashes: 1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: 53LpavoFbkf2YPcGKGB5nfREdeY/NyOOS4sOFu2DAEc=) 2: 8247E286967711EA81018623C4F9AE02.roa (hash: RuCHBWzDEGb4u8QT2BLmLE3Mq19hnt6+xwynPnruiss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Validity Not Before: May 30 22:00:30 2024 GMT Not After : Jun 6 22:00:30 2024 GMT Subject: CN=6658f6fe-47dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:8d:ab:eb:ef:35:07:d3:8c:1e:21:cb:a9: dc:dd:e6:51:fb:b3:1f:bd:cb:2f:c8:61:2f:7d:0d: 58:07:ab:8f:1b:32:b0:44:f2:3d:eb:1f:5c:68:80: 3e:ca:e3:b8:cb:2f:0a:e5:b0:4a:2a:b4:a3:f9:d6: fb:9c:d8:21:0a:49:e2:c9:05:b7:6f:42:4a:c7:d6: a9:2b:b4:46:d9:c9:5d:2f:92:ef:26:21:40:bc:7b: 61:6f:05:3c:36:ff:e9:17:c5:c5:b1:dc:08:82:b9: 04:31:61:c0:b5:16:3d:60:21:0a:da:2e:36:0b:45: d6:87:40:00:05:08:7a:57:69:15:73:07:06:e6:61: e8:6f:51:0b:d4:2d:0d:f3:9f:79:c6:8d:7f:bd:9e: 38:ba:d1:92:a5:aa:1f:26:5b:e4:84:9b:74:17:dc: 48:45:2d:05:a1:43:24:3b:22:a7:60:ff:0c:02:2c: 52:91:ec:78:49:02:1d:35:50:eb:86:81:c4:96:96: 7d:81:ab:0d:37:99:09:46:f9:d4:85:d0:64:a3:7a: 4b:ea:34:d1:65:0b:d1:16:6a:e3:a2:ad:54:8c:30: 74:13:c9:3a:b6:89:77:ed:50:88:05:79:78:90:35: bd:40:99:9f:f2:e0:f7:0a:e6:54:66:8b:6d:57:64: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:40:DB:63:33:2C:55:18:26:A4:18:66:0B:E7:07:D2:6E:D1:83 X509v3 Authority Key Identifier: keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7d:7c:82:ee:4c:12:db:b5:f1:c6:4c:97:61:3b:a0:0d:2d: b1:18:ea:d4:43:b3:5d:98:ce:cc:af:b8:d5:3b:ab:64:fa:47: ad:bc:8a:72:7f:14:cf:6c:80:91:a8:68:de:72:d7:0d:67:fa: ec:01:67:57:e7:26:da:4b:ee:8d:12:f6:88:12:c2:fe:30:11: 61:b2:2b:78:63:e2:2d:1f:64:76:1a:7e:23:42:11:47:00:d7: 59:43:a9:68:94:1c:c1:72:48:20:64:62:ce:26:eb:ca:4c:54: d5:ca:17:aa:7c:6a:5a:55:01:af:d6:4a:86:01:9b:b4:8b:96: 09:5e:0a:89:3e:91:74:1f:45:84:51:33:37:97:e6:e3:ea:38: 1e:3a:dd:65:a0:f5:d2:c5:9a:32:1a:d7:22:95:50:00:eb:ae: d2:cf:2d:55:02:08:58:1b:56:53:29:5d:7f:82:3a:23:ea:ad: 52:3e:d4:a1:09:6d:7e:45:c9:d8:a9:aa:28:1b:c0:4b:4b:6a: ff:ae:71:24:48:ba:21:b1:63:f2:79:7b:28:03:1e:50:a3:d1: 6e:6e:e6:8e:1a:ca:3f:1f:8f:68:18:2c:77:35:ad:3a:52:2c: 67:6b:7c:e9:fb:f0:d9:fd:07:aa:fa:62:45:fa:52:f1:cf:4c: d8:d4:28:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1 NkJDMEZGMzcwHhcNMjQwNTMwMjIwMDMwWhcNMjQwNjA2MjIwMDMwWjAYMRYwFAYD VQQDEw02NjU4ZjZmZS00N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWyNq+vvNQfTjB4hy6nc3eZR+7MfvcsvyGEvfQ1YB6uPGzKwRPI96x9caIA+ yuO4yy8K5bBKKrSj+db7nNghCkniyQW3b0JKx9apK7RG2cldL5LvJiFAvHthbwU8 Nv/pF8XFsdwIgrkEMWHAtRY9YCEK2i42C0XWh0AABQh6V2kVcwcG5mHob1EL1C0N 8595xo1/vZ44utGSpaofJlvkhJt0F9xIRS0FoUMkOyKnYP8MAixSkex4SQIdNVDr hoHElpZ9gasNN5kJRvnUhdBko3pL6jTRZQvRFmrjoq1UjDB0E8k6tol37VCIBXl4 kDW9QJmf8uD3CuZUZottV2R+OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYoQNtj MyxVGCakGGYL5wfSbtGDMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2 NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkVBRi9ERDYwRDRBNDk2NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpu NlFZcDJGWXVIYmxXdkFfemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbfXyC7kwS27XxxkyXYTugDS2xGOrUQ7NdmM7Mr7jVO6tk+ketvIpy fxTPbICRqGjectcNZ/rsAWdX5ybaS+6NEvaIEsL+MBFhsit4Y+ItH2R2Gn4jQhFH ANdZQ6lolBzBckggZGLOJuvKTFTVyheqfGpaVQGv1kqGAZu0i5YJXgqJPpF0H0WE UTM3l+bj6jgeOt1loPXSxZoyGtcilVAA667Szy1VAghYG1ZTKV1/gjoj6q1SPtSh CW1+RcnYqaooG8BLS2r/rnEkSLohsWPyeXsoAx5Qo9FubuaOGso/H49oGCx3Na06 Uixna3zp+/DZ/Qeq+mJF+lLxz0zY1Cja -----END CERTIFICATE-----Generated at Thu May 30 23:29:05 2024 by rpki-client on console-ams.rpki-client.org