$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: Af2hQZNUEdPTnFhxG4RnFqGGPtdL5vtn5qrPnj3w4UI= Subject key identifier: 0F:97:D4:6F:00:A3:54:AB:27:6B:08:DA:0F:BA:F6:E7:F2:F4:74:3A Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 06D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 06AD Signing time: Sat 18 May 2024 23:27:13 +0000 Manifest this update: Sat 18 May 2024 23:27:13 +0000 Manifest next update: Sat 25 May 2024 23:27:13 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: eNCdyByi7TtWjzSRJNw8fvdnvr4JZ4X2X0D43iyR8X8=) 2: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: AQgiwzW9jceFccX6zBisJvL/Ao6lPHGS3Rx++rG7HtY=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: j3Mdp3VdpFJP8qi33NyGvoVivwkHNNacPK2sV9tj6Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: May 18 23:27:13 2024 GMT Not After : May 25 23:27:13 2024 GMT Subject: CN=66493951-199e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:19:1c:8e:be:9f:bc:c7:bf:77:23:e5:e8: 24:83:91:cf:45:26:01:03:2f:5a:08:01:94:ed:63: d1:1b:75:dc:af:a0:ab:40:5f:29:c7:37:15:c1:02: d2:03:08:3d:fe:ec:28:cb:f3:3d:79:bd:d3:81:82: 78:74:db:da:b2:51:57:e4:95:ab:de:95:67:e2:5f: 39:86:c2:53:cd:63:b5:76:e0:76:f4:09:99:08:db: 2c:de:71:26:4d:66:28:15:0e:d6:3b:b5:de:00:98: d3:49:cd:3d:5d:82:c0:46:c4:fe:3c:c6:02:19:b2: 45:52:a5:56:5c:90:a4:ea:91:5e:d7:06:a4:09:75: 86:e0:36:95:c1:14:f4:0d:4b:25:85:50:e7:47:c3: bb:29:1a:54:c3:9a:75:89:a9:0c:dc:1c:6c:5d:0f: 0b:ff:fe:ec:47:47:95:80:fc:84:9c:6f:84:e0:50: 36:6f:43:60:df:84:ef:4d:74:90:1a:2f:cb:c9:82: 92:db:7b:58:d0:6c:26:13:cc:e6:6f:c4:68:b8:da: be:36:08:f5:40:e4:84:fa:11:cb:88:58:51:47:45: cc:c5:8e:82:b2:16:dd:67:47:63:76:43:73:97:f1: 39:c3:e3:a5:13:87:29:9e:bc:bd:29:7c:e5:08:aa: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:D4:6F:00:A3:54:AB:27:6B:08:DA:0F:BA:F6:E7:F2:F4:74:3A X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:49:37:14:84:c6:61:f3:89:d1:8b:1f:d9:c9:91:07:06:07: c6:84:af:45:82:26:e8:7f:c2:bf:f2:61:9e:fd:7f:75:5a:be: 77:8a:dd:6f:a6:24:e6:ef:46:ef:51:a9:91:19:4c:3b:ef:e8: c8:b2:cf:c9:92:26:ca:da:ca:4f:d6:1b:6f:6e:6f:73:29:fe: f7:87:b3:be:84:18:32:a0:ce:a8:7f:1f:bd:1d:42:d7:33:42: 69:38:03:f4:78:db:47:23:d5:8a:c0:e2:9e:00:bc:10:cf:24: bc:4b:86:c1:b6:f5:13:4f:0e:ce:7b:f7:6f:00:2b:f5:f6:48: 02:dc:30:28:86:21:21:86:ae:4b:ae:b6:50:ab:b0:fd:20:78: 13:37:95:64:9a:56:93:26:d0:a5:78:d2:47:c7:9a:67:ae:5b: a5:cf:0c:09:39:62:19:34:21:de:93:f0:1f:50:5d:44:cc:2f: cc:8b:4a:6e:82:18:e5:c6:d6:f9:aa:ac:72:20:23:43:73:20: bb:aa:f1:c8:64:fd:a5:a6:f3:88:f0:f2:ff:65:c0:b6:e5:00: 8e:28:6d:df:5f:21:d1:16:89:43:2d:40:19:87:ac:f1:4a:71: 7a:17:88:f6:0a:ad:67:bb:a0:a6:99:5d:4e:e4:ef:82:b7:78: f7:39:c3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjQwNTE4MjMyNzEzWhcNMjQwNTI1MjMyNzEzWjAYMRYwFAYD VQQDEw02NjQ5Mzk1MS0xOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7osZHI6+n7zHv3cj5egkg5HPRSYBAy9aCAGU7WPRG3Xcr6CrQF8pxzcVwQLS Awg9/uwoy/M9eb3TgYJ4dNvaslFX5JWr3pVn4l85hsJTzWO1duB29AmZCNss3nEm TWYoFQ7WO7XeAJjTSc09XYLARsT+PMYCGbJFUqVWXJCk6pFe1wakCXWG4DaVwRT0 DUslhVDnR8O7KRpUw5p1iakM3BxsXQ8L//7sR0eVgPyEnG+E4FA2b0Ng34TvTXSQ Gi/LyYKS23tY0GwmE8zmb8RouNq+Ngj1QOSE+hHLiFhRR0XMxY6CshbdZ0djdkNz l/E5w+OlE4cpnry9KXzlCKomHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+X1G8A o1SrJ2sI2g+69ufy9HQ6MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaSTcUhMZh84nRix/ZyZEHBgfGhK9Fgibof8K/8mGe/X91Wr53it1v piTm70bvUamRGUw77+jIss/JkibK2spP1htvbm9zKf73h7O+hBgyoM6ofx+9HULX M0JpOAP0eNtHI9WKwOKeALwQzyS8S4bBtvUTTw7Oe/dvACv19kgC3DAohiEhhq5L rrZQq7D9IHgTN5VkmlaTJtCleNJHx5pnrlulzwwJOWIZNCHek/AfUF1EzC/Mi0pu ghjlxtb5qqxyICNDcyC7qvHIZP2lpvOI8PL/ZcC25QCOKG3fXyHRFolDLUAZh6zx SnF6F4j2Cq1nu6CmmV1O5O+Ct3j3OcNw -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org