$ rpki-client -vvf rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft File: Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft (raw, json) Hash identifier: Npno9LmKwvgHmgTxH7P3Rts2CaIJwJoBmMTve+fOA8U= Subject key identifier: 71:E6:3D:6B:59:8F:69:4B:4B:7B:A4:03:7B:28:69:C1:13:19:BB:5D Authority key identifier: 56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3 Certificate issuer: /CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft Manifest number: 021C Signing time: Sun 19 May 2024 04:06:06 +0000 Manifest this update: Sun 19 May 2024 04:06:06 +0000 Manifest next update: Sun 26 May 2024 04:06:06 +0000 Files and hashes: 1: Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl (hash: roXsQEOF99oHoqWHx25MQQ3Xkxq18/lB61InNIgYkds=) 2: 81E511E445B811EEB0B9BB7BC4F9AE02.roa (hash: jjH5sZ3Ctj3WmLUjBcO0ypznS7Y9+1azo6ogUph4aac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3 Validity Not Before: May 19 04:06:06 2024 GMT Not After : May 26 04:06:06 2024 GMT Subject: CN=66497aae-d733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:23:93:8d:a3:4c:b7:7c:3a:d4:2e:66:93: 87:c7:20:49:64:64:55:9b:f5:35:7f:42:0d:64:a5: ee:8b:5e:e7:23:d7:c5:74:ca:5f:94:88:3a:2b:d4: 3d:bd:d3:1d:da:63:56:9d:95:58:56:b7:2c:07:c1: a0:88:03:27:06:02:ff:f8:f5:70:6b:74:40:f9:a9: 61:b1:34:c7:34:a7:15:bc:61:0f:cc:55:39:83:cd: 81:29:38:f1:67:b0:39:c0:4b:4b:4f:be:82:75:1a: 67:d9:83:9a:4f:6e:e1:c3:2c:4c:b4:db:35:dd:bd: d8:fc:d5:38:00:3e:b8:0a:72:ed:f5:f2:9e:7e:7b: ae:df:b6:b4:dd:52:d0:89:59:8e:6b:8d:d0:5a:0c: ea:bb:17:4f:64:64:96:6c:85:81:77:83:ad:9d:a9: 04:41:a1:43:26:c9:a6:78:e6:92:c6:4f:f1:52:ce: 80:22:5e:9f:58:f4:02:28:80:fb:b5:64:11:99:d8: dc:1c:4e:19:68:df:28:03:b6:04:0e:89:01:6c:42: d6:6c:a8:5d:04:6f:ce:b7:b5:96:cc:22:31:a4:92: bf:1b:cb:5d:cc:95:3f:47:83:2b:aa:f5:a2:39:3d: a2:eb:8c:bf:23:cc:5f:b4:a2:bf:e2:77:e4:d6:3e: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E6:3D:6B:59:8F:69:4B:4B:7B:A4:03:7B:28:69:C1:13:19:BB:5D X509v3 Authority Key Identifier: keyid:56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:43:95:b8:9c:c4:c5:3b:1c:bd:49:b6:be:ab:e5:92:14:3f: 67:85:74:0f:8c:a4:f8:3a:a2:22:45:2f:b7:28:8e:3d:50:60: 6e:2d:03:9a:75:b6:cf:b5:98:a2:54:d5:da:99:e3:fc:34:30: 33:c8:1f:eb:69:1b:09:5e:db:f2:27:6d:75:30:dd:3e:50:6d: dd:ef:b4:ce:49:23:fe:c0:c3:52:81:b7:d1:08:66:f7:f8:01: f5:a8:16:fb:a1:e4:35:96:fd:12:f3:87:64:4a:7a:1f:a4:22: f2:35:f9:d7:74:d9:e9:da:2c:52:fe:93:8d:10:0e:9e:ed:09: 06:de:25:3f:4f:05:9c:03:99:6e:a1:cc:53:2e:9c:b9:74:05: 8d:34:fe:83:40:01:9d:cf:d7:10:99:53:f7:66:7e:db:b8:17: a4:f5:5f:53:79:56:61:6e:20:a8:26:f3:cb:c1:b7:68:16:11: 90:cd:68:b1:77:50:1c:8b:dc:d9:36:48:7e:d6:f6:b5:f0:18: ed:34:f9:94:8e:01:5b:7e:6b:d1:89:82:c3:e1:15:5b:77:58: 6d:f5:23:80:35:1b:a5:48:62:f4:ff:09:23:d0:0c:fd:08:42: 3b:0f:78:1f:20:0b:54:91:ca:ef:b2:5c:18:06:fb:da:8c:b2: e5:9f:68:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc2RTQxMTAvBgNVBAUTKDU2OTlBNkY1MkY5MDA1NzM4MkNERTk2Rjc2NTI2RjdG Q0EwMTkzQTMwHhcNMjQwNTE5MDQwNjA2WhcNMjQwNTI2MDQwNjA2WjAYMRYwFAYD VQQDEw02NjQ5N2FhZS1kNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJwjk42jTLd8OtQuZpOHxyBJZGRVm/U1f0INZKXui17nI9fFdMpflIg6K9Q9 vdMd2mNWnZVYVrcsB8GgiAMnBgL/+PVwa3RA+alhsTTHNKcVvGEPzFU5g82BKTjx Z7A5wEtLT76CdRpn2YOaT27hwyxMtNs13b3Y/NU4AD64CnLt9fKefnuu37a03VLQ iVmOa43QWgzquxdPZGSWbIWBd4OtnakEQaFDJsmmeOaSxk/xUs6AIl6fWPQCKID7 tWQRmdjcHE4ZaN8oA7YEDokBbELWbKhdBG/Ot7WWzCIxpJK/G8tdzJU/R4MrqvWi OT2i64y/I8xftKK/4nfk1j4+7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHmPWtZ j2lLS3ukA3soacETGbtdMB8GA1UdIwQYMBaAFFaZpvUvkAVzgs3pb3ZSb3/KAZOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZFNC80NzQyODg3MEU5 RjAxMUVDQTgzNThBODRDNEY5QUUwMi9WcG1tOVMtUUJYT0N6ZWx2ZGxKdmY4b0Jr Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZwbW05Uy1RQlhPQ3plbHZkbEp2ZjhvQms2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzZFNC80NzQyODg3MEU5RjAxMUVDQTgzNThBODRDNEY5QUUwMi9WcG1tOVMtUUJY T0N6ZWx2ZGxKdmY4b0JrNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQ5W4nMTFOxy9Sba+q+WSFD9nhXQPjKT4OqIiRS+3KI49UGBuLQOa dbbPtZiiVNXameP8NDAzyB/raRsJXtvyJ211MN0+UG3d77TOSSP+wMNSgbfRCGb3 +AH1qBb7oeQ1lv0S84dkSnofpCLyNfnXdNnp2ixS/pONEA6e7QkG3iU/TwWcA5lu ocxTLpy5dAWNNP6DQAGdz9cQmVP3Zn7buBek9V9TeVZhbiCoJvPLwbdoFhGQzWix d1Aci9zZNkh+1va18BjtNPmUjgFbfmvRiYLD4RVbd1ht9SOANRulSGL0/wkj0Az9 CEI7D3gfIAtUkcrvslwYBvvajLLln2iy -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org