$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft File: vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json) Hash identifier: DXBL7OHtKV5YrImHBvfWBanABwLzMndIKh42AZrTUbY= Subject key identifier: 38:05:42:BF:2B:A9:34:5A:5D:B6:E7:CE:35:C6:87:A8:D4:A9:5A:DE Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft Manifest number: 0632 Signing time: Sat 18 May 2024 23:44:47 +0000 Manifest this update: Sat 18 May 2024 23:44:47 +0000 Manifest next update: Sat 25 May 2024 23:44:47 +0000 Files and hashes: 1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: lo0uinisD0FNQbwJG/xpFPcYcqZvBV14Exqp5BAiN5c=) 2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: l/yT3xJJh0c0RHxdPceAFJI6VNR0AkyoXJMonrqtI4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Validity Not Before: May 18 23:44:47 2024 GMT Not After : May 25 23:44:47 2024 GMT Subject: CN=66493d6f-f9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:80:9f:25:90:fd:75:8a:46:ec:b4:fd:1e:ec: fc:64:6f:94:75:58:1c:da:f2:e4:bc:45:c9:f8:26: e5:ff:27:32:d8:22:bc:cb:8a:73:09:39:d9:a3:22: 8b:cc:11:ea:09:55:f3:d2:ec:b7:7c:20:03:94:48: 4e:a0:24:e8:40:13:d0:1e:72:12:b7:43:3c:83:7f: 2f:27:35:2e:20:97:07:3b:cd:a8:77:8d:2c:ca:ba: 18:92:18:30:7b:d1:ce:2f:2f:e0:5b:fe:d8:96:65: 68:5e:19:2c:0f:92:47:67:73:59:76:05:0a:21:0c: 25:98:60:2f:dd:63:38:64:c8:e9:17:11:56:26:21: 23:be:fb:f3:56:f2:88:05:8f:16:f3:90:13:1c:a4: 6c:aa:00:e2:72:59:97:9b:c0:04:d2:6e:80:11:8d: 5b:a9:24:af:d2:b1:e1:fc:82:e1:9e:66:cc:75:ea: 64:f5:7a:e7:4e:8b:fc:79:3f:0d:6f:fe:79:d5:82: 91:0f:76:1a:77:2f:49:ff:31:f6:c4:18:8c:33:aa: ab:cc:4f:7c:7f:f5:82:55:9a:03:16:7b:3f:32:d8: 03:68:50:4d:b0:a1:8d:cb:9b:fb:65:d3:d4:b2:0b: bf:00:10:24:3c:61:2a:e3:81:06:27:c4:7d:9d:ca: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:05:42:BF:2B:A9:34:5A:5D:B6:E7:CE:35:C6:87:A8:D4:A9:5A:DE X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ce:2d:df:95:1c:4c:d1:f6:c1:cc:a0:19:dc:c5:c9:d9:17: e9:ba:d5:f4:0d:26:7b:f2:10:aa:2e:50:32:3e:15:34:a2:f7: 23:7b:7b:bc:01:a1:43:6d:3a:b8:40:c1:6e:c5:96:7b:f6:49: ff:7a:c7:69:39:38:ef:3f:b1:ba:09:3a:a4:91:82:4b:12:74: 25:df:5b:28:6e:79:29:b9:bd:d1:72:62:61:b6:5d:af:cd:c7: ba:57:32:90:07:7c:34:89:8a:ad:8b:84:d6:e9:de:96:fe:b5: b6:8e:2c:c8:19:21:c6:c5:10:f5:f9:9e:c2:95:c9:b3:6e:5f: 99:5f:37:72:c1:77:e0:7e:e6:2d:1d:fe:2a:d7:45:bb:f5:65: d1:05:c8:f3:70:c3:7e:50:71:7b:14:6b:99:1b:53:fe:b8:56: 85:fd:20:9b:16:b7:b6:2a:a3:64:dc:5f:7c:ed:5e:d2:5c:53: 0e:bc:55:75:22:eb:41:27:b7:e8:4e:4f:29:68:44:76:fd:ce: 55:07:22:06:4a:8c:94:54:f7:4d:ac:4e:15:eb:6d:9d:cc:a6: 47:6f:7a:8c:ed:7f:5e:d0:48:d3:26:14:4d:42:e2:02:aa:a2: 93:7a:8d:8d:59:67:47:6a:13:9c:41:85:1d:34:5f:cf:79:0b: ba:1a:3e:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjQwNTE4MjM0NDQ3WhcNMjQwNTI1MjM0NDQ3WjAYMRYwFAYD VQQDEw02NjQ5M2Q2Zi1mOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ICfJZD9dYpG7LT9Huz8ZG+UdVgc2vLkvEXJ+Cbl/ycy2CK8y4pzCTnZoyKL zBHqCVXz0uy3fCADlEhOoCToQBPQHnISt0M8g38vJzUuIJcHO82od40syroYkhgw e9HOLy/gW/7YlmVoXhksD5JHZ3NZdgUKIQwlmGAv3WM4ZMjpFxFWJiEjvvvzVvKI BY8W85ATHKRsqgDiclmXm8AE0m6AEY1bqSSv0rHh/ILhnmbMdepk9XrnTov8eT8N b/551YKRD3Yady9J/zH2xBiMM6qrzE98f/WCVZoDFns/MtgDaFBNsKGNy5v7ZdPU sgu/ABAkPGEq44EGJ8R9ncqfYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgFQr8r qTRaXbbnzjXGh6jUqVreMB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ a3lMMUtqN0xYelA5OE9GWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxzi3flRxM0fbBzKAZ3MXJ2RfputX0DSZ78hCqLlAyPhU0ovcje3u8 AaFDbTq4QMFuxZZ79kn/esdpOTjvP7G6CTqkkYJLEnQl31sobnkpub3RcmJhtl2v zce6VzKQB3w0iYqti4TW6d6W/rW2jizIGSHGxRD1+Z7Clcmzbl+ZXzdywXfgfuYt Hf4q10W79WXRBcjzcMN+UHF7FGuZG1P+uFaF/SCbFre2KqNk3F987V7SXFMOvFV1 IutBJ7foTk8paER2/c5VByIGSoyUVPdNrE4V622dzKZHb3qM7X9e0EjTJhRNQuIC qqKTeo2NWWdHahOcQYUdNF/PeQu6Gj4O -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org