$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: m6ghHwRDskCQtgV/wzGa89i8VH1uJhMNnfrnfugFolM= Subject key identifier: EA:0B:45:E7:F7:34:E7:AA:40:3F:7C:09:19:14:F6:61:CF:F1:CC:22 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0D04 Signing time: Sat 18 May 2024 18:45:20 +0000 Manifest this update: Sat 18 May 2024 18:45:19 +0000 Manifest next update: Sat 25 May 2024 18:45:19 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: piObdrII7CulBVAYCRpgGiUCKbydp3xvCCEZztuNft0=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: pi9D2P+4Gu3JgfphLSnyWx7XrviBMaFbhZDxyacsCno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: May 18 18:45:19 2024 GMT Not After : May 25 18:45:19 2024 GMT Subject: CN=6648f740-b7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:94:e0:6a:d4:89:29:a1:6a:ea:ac:84:3c: 88:88:2c:79:3c:e5:83:fe:eb:95:5c:ad:a9:0b:c1: cf:29:49:cb:fb:ec:9f:c9:e3:61:80:10:03:ba:04: 3b:7d:48:b7:c5:c4:ca:f3:d9:11:2d:a2:ff:11:cb: d0:62:1b:c0:2d:94:c9:0b:87:fd:79:d0:85:0c:50: e7:e7:1b:e8:e7:1d:2f:33:67:ab:81:2d:34:c6:fc: fc:bf:2c:9d:0c:bd:6b:03:da:99:51:50:b8:ed:12: 7a:6c:09:42:96:32:9e:2f:4a:41:5b:8c:2c:e1:e7: 64:fb:2f:ae:6e:95:71:2d:81:a8:4d:32:8a:5b:f1: bf:17:aa:d1:8c:64:33:11:fc:e1:0c:1b:90:a9:f1: 04:61:b7:93:c8:c9:6b:bb:ab:e9:fa:6c:96:98:2f: 3e:e8:83:d2:d4:3e:15:ef:93:cb:73:df:b9:38:21: df:d1:68:b6:5c:de:d2:72:50:1a:ff:88:40:0c:d2: 8c:ce:69:0c:47:f1:b0:13:a7:8b:89:25:e0:59:6c: ab:5e:f8:d5:4e:9f:78:fe:da:71:d3:7c:e5:97:ec: 53:b7:9a:25:06:da:61:55:b1:73:8a:0a:bb:b7:36: a6:3a:9c:28:9a:b4:91:a2:cd:e5:3a:13:44:57:ea: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:45:E7:F7:34:E7:AA:40:3F:7C:09:19:14:F6:61:CF:F1:CC:22 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:70:49:db:dd:29:9e:b3:86:c2:af:b3:b7:bf:b9:16:05:47: 9c:ef:88:c1:e7:c7:3b:42:99:7d:25:ef:e3:48:f3:86:d6:d3: 5f:78:21:6e:b9:32:81:27:98:42:c2:86:5f:b2:9b:1b:3f:f4: fb:91:9d:0c:24:b2:45:4e:37:a2:d7:bf:dc:93:c7:05:b7:66: 8e:5f:97:56:b4:ca:a0:36:a8:4c:68:bf:0a:f4:85:da:d6:85: 7d:36:70:13:bc:04:1c:fa:1f:09:79:06:b9:69:46:db:ba:c5: 56:f7:7d:a1:75:3e:a3:f2:80:ff:56:6e:cc:c5:69:0b:6c:3a: 85:3f:c6:47:26:e6:5a:78:6f:cb:3b:c8:ea:ea:2e:fe:22:34: 3b:01:f6:c7:66:35:f5:66:dc:fd:57:b7:14:34:2b:14:35:5a: c3:3f:24:ad:44:2b:7a:90:d6:6b:f6:b8:66:24:be:86:98:4d: c0:b3:2b:13:0a:e9:91:40:94:3a:6e:f2:95:fe:b8:3b:36:9e: 84:b7:cd:c8:ed:ea:c6:54:e5:0d:32:53:ab:3a:49:9a:5c:7a: d9:12:b8:3f:3b:5d:26:b6:70:25:8b:63:ec:09:9f:ee:40:f4: 32:4d:8f:00:4b:b8:63:0a:ae:55:53:d9:09:03:5f:52:25:e9: 8d:31:a4:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjQwNTE4MTg0NTE5WhcNMjQwNTI1MTg0NTE5WjAYMRYwFAYD VQQDEw02NjQ4Zjc0MC1iN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQuU4GrUiSmhauqshDyIiCx5POWD/uuVXK2pC8HPKUnL++yfyeNhgBADugQ7 fUi3xcTK89kRLaL/EcvQYhvALZTJC4f9edCFDFDn5xvo5x0vM2ergS00xvz8vyyd DL1rA9qZUVC47RJ6bAlCljKeL0pBW4ws4edk+y+ubpVxLYGoTTKKW/G/F6rRjGQz EfzhDBuQqfEEYbeTyMlru6vp+myWmC8+6IPS1D4V75PLc9+5OCHf0Wi2XN7SclAa /4hADNKMzmkMR/GwE6eLiSXgWWyrXvjVTp94/tpx03zll+xTt5olBtphVbFzigq7 tzamOpwomrSRos3lOhNEV+p5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoLRef3 NOeqQD98CRkU9mHP8cwiMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAcEnb3Smes4bCr7O3v7kWBUec74jB58c7Qpl9Je/jSPOG1tNfeCFu uTKBJ5hCwoZfspsbP/T7kZ0MJLJFTjei17/ck8cFt2aOX5dWtMqgNqhMaL8K9IXa 1oV9NnATvAQc+h8JeQa5aUbbusVW932hdT6j8oD/Vm7MxWkLbDqFP8ZHJuZaeG/L O8jq6i7+IjQ7AfbHZjX1Ztz9V7cUNCsUNVrDPyStRCt6kNZr9rhmJL6GmE3AsysT CumRQJQ6bvKV/rg7Np6Et83I7erGVOUNMlOrOkmaXHrZErg/O10mtnAli2PsCZ/u QPQyTY8AS7hjCq5VU9kJA19SJemNMaQ3 -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org