$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: cF21MqxNJWNgJ/Za5B15jpF4CS9n9this+P4JoXZ6ik= Subject key identifier: F7:91:34:D4:E7:68:60:83:42:AF:55:BF:C0:C6:12:5A:4F:B6:4C:D6 Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 09AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 09A6 Signing time: Fri 31 May 2024 21:30:44 +0000 Manifest this update: Fri 31 May 2024 21:30:43 +0000 Manifest next update: Fri 07 Jun 2024 21:30:43 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: R14Mrvffn0Ot5GJX2CZ3hA1CeFyBB2UACtIatoTC/1Y=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: yH51MrOnrCMRnU8jdZMxQRRlfTnvexHS8d47tx5HLls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2476 (0x9ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Validity Not Before: May 31 21:30:43 2024 GMT Not After : Jun 7 21:30:43 2024 GMT Subject: CN=665a4184-356d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:b5:dc:0f:a5:43:93:21:12:5d:78:aa:34: 78:3d:19:af:d6:e5:3b:b5:02:08:d9:de:df:b9:e3: a4:e6:28:20:9d:d6:7b:f3:02:2d:65:62:7a:21:45: f5:dc:ed:a6:4c:36:61:e4:95:29:15:a5:f9:fc:29: 97:6b:40:bc:1e:83:50:b3:de:44:a8:47:12:b0:65: a8:7f:43:a5:28:1a:c2:d2:db:14:72:18:d8:1a:e7: bf:97:ac:c1:02:8d:62:ed:4b:20:f2:9a:f9:7d:2c: 64:db:3a:c9:a9:56:7f:85:5e:65:1c:11:28:33:8f: 59:f9:2d:26:06:9b:c8:3f:7d:d0:44:59:c6:9c:50: b0:89:61:47:dd:1d:64:78:82:03:70:bc:ab:80:33: 7b:8e:b2:95:f5:7f:ba:43:ac:56:f1:ef:d3:e0:38: a2:dc:8d:d5:be:8c:92:1b:32:ed:b5:25:35:83:50: 95:91:69:06:68:06:de:92:76:b7:14:5f:39:b5:56: f9:6d:db:49:cd:2c:4c:cb:55:1c:34:44:0f:c0:60: e8:f8:53:05:8e:96:66:57:12:fd:92:9f:a7:9b:51: 40:6d:1d:5a:7e:11:87:f5:ea:a4:6b:e6:9b:c2:ca: 63:84:79:0e:54:43:81:4d:81:60:a1:33:a0:04:9f: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:34:D4:E7:68:60:83:42:AF:55:BF:C0:C6:12:5A:4F:B6:4C:D6 X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:db:f4:45:23:90:2c:bc:90:b6:b8:7c:aa:97:90:6d:06:34: 6f:ca:fa:98:30:5e:ad:2a:30:bf:51:7c:90:d1:5d:db:24:06: 89:b0:11:cb:ca:58:a4:1c:e4:73:a7:ca:73:bd:fd:4b:ce:ab: c3:98:f1:7e:e2:57:8b:8d:aa:1d:d3:9c:dc:07:4d:7b:cf:27: ba:a0:2c:db:7a:82:95:8b:3a:69:ab:7c:96:a8:6f:b0:63:2d: 67:44:fe:14:c6:c2:fa:c2:f3:61:a0:25:ae:7f:72:4d:fe:99: f9:ec:9a:a4:b8:5b:0b:67:8b:00:55:32:d4:d4:aa:d7:77:0f: c3:c5:d3:17:80:15:aa:96:f0:74:f7:b2:65:04:bc:dc:0a:5c: 30:fa:2b:7d:c6:a2:59:9c:46:5c:ea:5f:7d:dc:8f:2d:b2:b1: 6e:61:4e:ab:97:f7:ba:44:68:b9:e3:eb:d4:36:3a:e0:d8:85: 7c:63:69:c9:9e:4e:fb:45:7f:a8:0b:0e:c6:31:ac:92:b8:59: 99:fe:42:27:32:b1:19:5f:2c:28:eb:75:d8:24:0f:5d:bc:46: 89:22:fb:e3:d4:9c:26:fd:89:16:a1:12:44:49:f4:7e:b0:42: a7:a3:48:df:46:07:de:a2:03:18:10:d7:1c:f5:4f:0e:77:9d: 0f:ce:fa:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjQwNTMxMjEzMDQzWhcNMjQwNjA3MjEzMDQzWjAYMRYwFAYD VQQDEw02NjVhNDE4NC0zNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV613A+lQ5MhEl14qjR4PRmv1uU7tQII2d7fueOk5iggndZ78wItZWJ6IUX1 3O2mTDZh5JUpFaX5/CmXa0C8HoNQs95EqEcSsGWof0OlKBrC0tsUchjYGue/l6zB Ao1i7Usg8pr5fSxk2zrJqVZ/hV5lHBEoM49Z+S0mBpvIP33QRFnGnFCwiWFH3R1k eIIDcLyrgDN7jrKV9X+6Q6xW8e/T4Dii3I3VvoySGzLttSU1g1CVkWkGaAbekna3 FF85tVb5bdtJzSxMy1UcNEQPwGDo+FMFjpZmVxL9kp+nm1FAbR1afhGH9eqka+ab wspjhHkOVEOBTYFgoTOgBJ+bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeRNNTn aGCDQq9Vv8DGElpPtkzWMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC2/RFI5AsvJC2uHyql5BtBjRvyvqYMF6tKjC/UXyQ0V3bJAaJsBHL ylikHORzp8pzvf1LzqvDmPF+4leLjaod05zcB017zye6oCzbeoKVizppq3yWqG+w Yy1nRP4UxsL6wvNhoCWuf3JN/pn57JqkuFsLZ4sAVTLU1KrXdw/DxdMXgBWqlvB0 97JlBLzcClww+it9xqJZnEZc6l993I8tsrFuYU6rl/e6RGi54+vUNjrg2IV8Y2nJ nk77RX+oCw7GMaySuFmZ/kInMrEZXywo63XYJA9dvEaJIvvj1Jwm/YkWoRJESfR+ sEKno0jfRgfeogMYENcc9U8Od50Pzvpr -----END CERTIFICATE-----Generated at Fri May 31 22:13:07 2024 by rpki-client on console-fra.rpki-client.org