$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: 2lH6q7+oXLQcb8fE04yWs+r3xGXfBh3ItOVgWrhaMXs= Subject key identifier: E4:33:2A:4B:CB:45:38:FD:17:57:4F:61:1C:3A:49:C2:0E:6C:19:EE Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 95 Signing time: Sun 19 May 2024 06:59:35 +0000 Manifest this update: Sun 19 May 2024 06:59:35 +0000 Manifest next update: Sun 26 May 2024 06:59:35 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: Qstxfn5FGuG7iV9rBw1fxfjR45CVNd0MYbceM+305y0=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: TB0ahidYQ0xA6hV80HfI0pKz2Rs6lS2yc9sRvFWm5fM=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: rsCbbM2tRTk90LXW35QYw6yMV2rL7FbVaUSFW5YPqYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: May 19 06:59:35 2024 GMT Not After : May 26 06:59:35 2024 GMT Subject: CN=6649a357-ee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:52:3e:6a:e5:a7:55:91:cb:07:2c:5d:64: 3f:46:69:d9:0a:29:1d:d9:e2:88:64:88:31:d4:93: a0:f9:62:00:1a:f1:eb:20:eb:75:8c:18:6f:75:4b: a1:0d:16:4c:c7:4d:f7:29:11:4d:de:f9:d6:5c:d5: 7a:b4:65:d4:fa:30:38:f6:aa:7b:ae:1f:01:dd:c7: 2a:77:0c:e0:1a:07:3f:1a:ed:c0:8b:a7:09:f3:dc: 99:f1:3c:09:e5:cd:68:e5:f1:88:31:e8:bb:d3:53: f5:a9:7f:e2:60:72:f2:28:fb:1b:39:d7:47:e3:eb: d2:50:f3:92:f3:25:cf:0f:41:c6:b3:0c:21:04:aa: 6c:9e:35:b4:2f:0a:f4:93:b7:47:97:bd:4b:6a:c8: 34:ab:39:b0:6e:73:61:e7:10:e7:da:d5:c0:60:61: 46:59:81:c8:cc:d0:53:31:89:5e:c3:a8:78:85:79: 58:e1:6b:e2:69:93:97:c7:66:97:3a:a3:b6:06:13: 5b:75:e7:6d:da:b0:99:45:d0:6d:0e:65:4c:f7:8c: 2f:17:21:47:da:c0:48:a1:ec:13:45:c0:2e:97:d2: d9:45:24:92:0e:2b:86:1c:04:88:08:e6:fb:45:6b: 83:ad:d1:31:22:d4:79:66:7f:73:d5:a8:38:2c:d5: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:2A:4B:CB:45:38:FD:17:57:4F:61:1C:3A:49:C2:0E:6C:19:EE X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6a:2f:78:d6:51:b1:73:1d:95:63:16:95:70:86:22:9a:0b: 7f:95:be:74:b5:d4:bd:c3:42:48:06:2c:98:d2:c0:02:d1:8e: c2:01:08:b1:c6:80:7b:df:81:7f:83:ec:bb:dd:7a:d6:1d:cc: 8e:48:35:36:14:65:d2:31:19:03:3c:f2:e9:b6:46:2a:59:6b: ca:86:be:fc:de:16:d9:72:24:56:d8:b4:ba:1d:51:0c:dc:ac: b2:8d:b6:7e:5c:35:c1:56:39:d1:e5:e4:33:ea:e0:1f:12:7f: 95:e9:d2:86:79:79:c0:58:a1:66:87:f6:9e:8e:50:02:02:07: e4:1d:65:e1:27:48:ec:ca:59:98:e3:f5:06:9f:27:17:19:b6: 4b:5e:03:d9:fd:c3:16:e7:53:b1:1d:8f:ed:7a:d1:e8:f7:05: 7c:ed:71:26:1d:20:65:20:1c:d8:ea:8f:b8:9b:80:41:b1:fc: 2e:9b:56:9b:16:eb:50:4d:ea:19:97:c2:fe:c6:d0:c3:8e:7e: 7b:4e:42:dc:54:97:cf:7d:77:fa:2c:06:23:e7:9d:f0:bf:72: 76:cf:a1:af:2a:61:46:f9:fe:f5:3e:8a:a5:3b:ef:15:29:a4: 39:91:7c:ae:47:e9:6a:6e:7c:be:bd:1b:2e:13:6a:f6:5b:53: 84:2b:69:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjQwNTE5MDY1OTM1WhcNMjQwNTI2MDY1OTM1WjAYMRYwFAYD VQQDEw02NjQ5YTM1Ny1lZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcVSPmrlp1WRywcsXWQ/RmnZCikd2eKIZIgx1JOg+WIAGvHrIOt1jBhvdUuh DRZMx033KRFN3vnWXNV6tGXU+jA49qp7rh8B3ccqdwzgGgc/Gu3Ai6cJ89yZ8TwJ 5c1o5fGIMei701P1qX/iYHLyKPsbOddH4+vSUPOS8yXPD0HGswwhBKpsnjW0Lwr0 k7dHl71Lasg0qzmwbnNh5xDn2tXAYGFGWYHIzNBTMYlew6h4hXlY4WviaZOXx2aX OqO2BhNbdedt2rCZRdBtDmVM94wvFyFH2sBIoewTRcAul9LZRSSSDiuGHASICOb7 RWuDrdExItR5Zn9z1ag4LNV6eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQzKkvL RTj9F1dPYRw6ScIObBnuMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArai941lGxcx2VYxaVcIYimgt/lb50tdS9w0JIBiyY0sAC0Y7CAQix xoB734F/g+y73XrWHcyOSDU2FGXSMRkDPPLptkYqWWvKhr783hbZciRW2LS6HVEM 3KyyjbZ+XDXBVjnR5eQz6uAfEn+V6dKGeXnAWKFmh/aejlACAgfkHWXhJ0jsylmY 4/UGnycXGbZLXgPZ/cMW51OxHY/tetHo9wV87XEmHSBlIBzY6o+4m4BBsfwum1ab FutQTeoZl8L+xtDDjn57TkLcVJfPfXf6LAYj553wv3J2z6GvKmFG+f71PoqlO+8V KaQ5kXyuR+lqbny+vRsuE2r2W1OEK2n6 -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org