$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json) Hash identifier: khfbWL+bkhlLPDeMujWaRKgW2yiwIzezDCSnOPbEmX0= Subject key identifier: 42:BC:08:C2:2F:6B:A9:06:DF:4B:DC:1F:89:DB:4C:FD:0A:52:F2:AA Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft Manifest number: 020D Signing time: Sun 19 May 2024 04:07:27 +0000 Manifest this update: Sun 19 May 2024 04:07:27 +0000 Manifest next update: Sun 26 May 2024 04:07:27 +0000 Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: IvTXRqjTCn+Z/++kEgUA9QAv1XQOvtG4tNMe5z/FK/A=) 2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: XsI+H2iX+joME12HEVFtFHRSawgtuL/DuDA3GYGWlm0=) 3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: p7DfcJLtfReLVrBGXB4FbSfycVhB9b+HJk7nBadO6Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: May 19 04:07:27 2024 GMT Not After : May 26 04:07:27 2024 GMT Subject: CN=66497aff-c617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:a6:c0:d0:c3:80:0e:cc:60:fe:3a:d8:8d: 8c:a2:67:71:3d:ca:7b:9c:91:5f:1c:2a:04:3a:96: bf:56:ec:24:74:ce:34:88:89:8e:01:3a:07:e9:18: 3e:4c:e0:dc:3a:24:2b:4c:8d:88:95:5e:45:24:2e: 5a:b5:4a:79:d3:ea:50:e7:06:34:0f:2a:9b:79:68: 7d:69:b1:71:6b:ce:4e:00:ab:da:26:71:5f:48:41: 64:0c:95:a7:62:af:58:f7:a1:3e:ee:f1:d3:b6:2e: 46:37:7e:5a:6b:d8:51:f0:33:18:70:23:b5:27:9c: e4:aa:51:53:ae:4b:38:0d:dc:d3:48:a3:b8:36:42: 11:90:90:77:ac:b9:48:4f:ae:f7:09:b3:14:32:e5: 32:4b:0d:69:27:85:f9:5c:d5:57:7d:c5:fa:4c:38: bf:57:25:5d:fe:f6:a9:7b:d8:d3:17:fe:3b:d0:3a: 9d:66:c2:57:e0:3e:15:fb:90:bd:a1:d7:cc:4e:b6: e7:30:12:f8:be:1f:ce:0b:ae:df:83:30:58:43:01: 1f:81:f5:b3:06:93:4a:56:7c:60:b5:7c:f1:d7:ae: 43:c1:b1:34:39:88:80:54:81:86:c8:27:fb:17:2b: 80:8c:39:f4:e3:3e:b2:62:27:d9:f5:11:8d:ca:e7: 84:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:08:C2:2F:6B:A9:06:DF:4B:DC:1F:89:DB:4C:FD:0A:52:F2:AA X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f4:a0:30:c3:45:6c:0c:02:3c:53:6d:bf:17:a1:c6:48:36: 42:96:44:19:62:a1:81:d0:61:99:aa:93:9a:91:bc:da:08:d1: 7a:55:81:ce:40:fb:e5:8e:c9:c7:cc:52:fe:1d:9d:17:b0:ba: db:3c:9e:46:ba:ab:6f:c6:36:20:c8:59:20:c6:10:ac:7d:55: f4:b6:d1:1d:8f:1f:af:41:48:74:7d:d4:de:81:50:7d:9b:98: 1a:89:3e:10:33:16:28:93:e9:b1:86:c7:2f:ed:fd:62:4a:c6: 12:49:71:60:4c:cd:b5:d3:db:10:e9:77:52:75:10:ea:15:01: 13:fc:ea:a8:f6:51:88:2e:18:0a:a6:17:f0:64:02:67:44:87: 46:6b:1e:54:9e:c2:4c:8e:5e:96:ab:b4:cf:2e:be:ba:32:f3: 45:99:b3:ba:92:9c:ee:f9:a9:9a:73:c3:cb:4f:00:d1:c4:30: 76:7e:f9:81:ca:e1:66:e0:be:da:5d:05:50:d4:ba:a6:bb:24: 57:f5:f8:3b:67:6c:d0:88:f4:b8:2c:18:64:6d:24:ef:1e:e7: 25:9c:66:cc:b1:ac:af:0e:0a:e5:18:d3:31:ba:8f:d0:12:7c: 22:ce:e7:b8:52:ae:3a:2f:a3:fd:39:49:a9:a6:7a:e5:c4:b6: c8:45:6c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjQwNTE5MDQwNzI3WhcNMjQwNTI2MDQwNzI3WjAYMRYwFAYD VQQDEw02NjQ5N2FmZi1jNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvamwNDDgA7MYP462I2MomdxPcp7nJFfHCoEOpa/VuwkdM40iImOAToH6Rg+ TODcOiQrTI2IlV5FJC5atUp50+pQ5wY0DyqbeWh9abFxa85OAKvaJnFfSEFkDJWn Yq9Y96E+7vHTti5GN35aa9hR8DMYcCO1J5zkqlFTrks4DdzTSKO4NkIRkJB3rLlI T673CbMUMuUySw1pJ4X5XNVXfcX6TDi/VyVd/vape9jTF/470DqdZsJX4D4V+5C9 odfMTrbnMBL4vh/OC67fgzBYQwEfgfWzBpNKVnxgtXzx165DwbE0OYiAVIGGyCf7 FyuAjDn04z6yYifZ9RGNyueECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK8CMIv a6kG30vcH4nbTP0KUvKqMB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6 a1BNcUNxUHpZVWVGcjg1OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB79KAww0VsDAI8U22/F6HGSDZClkQZYqGB0GGZqpOakbzaCNF6VYHO QPvljsnHzFL+HZ0XsLrbPJ5GuqtvxjYgyFkgxhCsfVX0ttEdjx+vQUh0fdTegVB9 m5gaiT4QMxYok+mxhscv7f1iSsYSSXFgTM2109sQ6XdSdRDqFQET/Oqo9lGILhgK phfwZAJnRIdGax5UnsJMjl6Wq7TPLr66MvNFmbO6kpzu+amac8PLTwDRxDB2fvmB yuFm4L7aXQVQ1LqmuyRX9fg7Z2zQiPS4LBhkbSTvHuclnGbMsayvDgrlGNMxuo/Q Enwizue4Uq46L6P9OUmppnrlxLbIRWze -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org