$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json) Hash identifier: g4oaclaRW9H4XTkj2N8M39/4wEN2hfRPfl8WJt1ybSI= Subject key identifier: E9:D0:A0:46:87:F1:68:87:B9:F1:4C:8F:96:3C:87:6E:F0:7B:FC:9B Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 0F89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft Manifest number: 0F56 Signing time: Sat 18 May 2024 18:10:23 +0000 Manifest this update: Sat 18 May 2024 18:10:22 +0000 Manifest next update: Sat 25 May 2024 18:10:22 +0000 Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: d5uLotfOZN+jKQ5XnhhRzdRDfhGHH77M8ERoY3V1waM=) 2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: g84xEJ5ykZMjzZgZWIb8W4X/zoO3Um4FhYPpDKCVB8E=) 3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: sVPaCSc2bcCAKD2poBldbcrhl65mJlc4QyQnO+jZmMc=) 4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: 3yyD1jgucgucm90eBkzwGN8pA1GaVvywFk7br5+2pIo=) 5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: vZxHW9v+mlkDb36aKmwFEOVDkr5RgcxOUaNZsIkNej4=) 6: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: +BIl0WRLfLsKpfnz3iZ4Rc3b06FaqG+le22fYJBc22s=) 7: 6007188446B111E98B793856C4F9AE02.roa (hash: mPz8p2CrH2JmH3Sb725igNrTRG19saMQGzxs8VfAHPE=) 8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: l97Qx+I5/FSi2nPuMo4C+TzlRFSgb0mZdEVP8fFlEzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3977 (0xf89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 18 18:10:22 2024 GMT Not After : May 25 18:10:22 2024 GMT Subject: CN=6648ef0f-3b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:3b:a0:99:2a:b6:bb:90:4d:6e:9c:ff:bd: 57:ed:49:df:f1:38:39:8d:48:2a:97:c0:f4:60:c1: 11:81:c3:5f:f1:f7:73:aa:e1:19:d7:a5:a3:1c:ce: df:32:07:56:f6:97:72:98:83:4d:43:41:5a:e3:4d: d3:78:27:a4:1c:0f:4b:9b:77:ac:cd:e1:0b:e5:d7: dd:25:05:ee:32:04:92:74:25:82:80:9f:cb:99:44: 1a:f0:cb:42:4b:4c:84:3a:0f:69:ea:65:59:43:87: d0:79:4e:93:24:b1:81:04:08:d9:1c:91:f7:06:17: 7e:26:2c:9b:f2:63:e9:96:b9:0b:dd:49:9e:cd:d6: b1:9a:77:cc:00:07:10:c0:62:ba:60:12:ae:12:54: fa:e6:95:34:0d:33:a2:e5:ef:4d:c8:be:5e:41:e4: 0b:a2:2d:b1:2b:55:a1:1b:e8:38:08:bf:d5:68:c4: aa:95:dc:c3:b7:dd:3f:24:b4:53:b3:c1:e2:96:58: 95:a5:06:ab:8a:28:51:cb:d6:e9:2d:d4:91:55:2f: 7c:3c:58:f4:b6:2b:23:d0:e4:c5:3e:ed:c5:aa:02: c8:16:93:8c:01:ed:2b:69:d7:c7:6a:b4:13:57:ac: d9:f5:0c:dc:32:ba:a4:27:e5:7c:80:37:0b:d4:17: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:A0:46:87:F1:68:87:B9:F1:4C:8F:96:3C:87:6E:F0:7B:FC:9B X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:40:95:0b:09:32:f5:2e:3d:36:24:96:33:56:30:b2:b5:1d: 9c:23:1f:69:e0:c7:94:60:7b:de:60:fa:27:4d:61:53:74:0f: ad:49:26:27:a2:54:b3:e5:22:d1:60:b6:20:b6:cb:f9:d9:69: 08:85:84:5b:e6:3a:81:2c:4a:45:8c:38:68:71:ac:b8:9c:d2: 63:dc:27:b6:8f:35:df:b8:3d:5e:55:5e:38:6e:c8:28:ee:4f: ec:37:f7:dc:6e:32:a2:e5:05:60:6d:c0:9f:7f:85:03:b3:c4: d6:a5:b9:0b:31:de:f2:47:66:42:93:e1:0f:40:51:76:89:bf: 11:d5:e9:0f:aa:96:d3:2d:10:83:90:0d:42:f6:23:cf:6a:ce: 36:4f:70:3a:84:57:36:d9:4d:92:86:59:ae:ea:ed:f0:79:5b: d7:66:2f:00:9c:4c:7f:62:e7:94:7b:8f:ed:90:83:9e:47:a0: 15:2f:9b:b4:6c:3c:06:52:fc:ce:3f:47:d2:f2:3c:81:fc:dc: 24:c7:cb:46:d9:6d:42:dc:6e:4c:54:fe:0a:50:e3:02:dc:0c: fb:c5:d1:64:b7:ed:38:0d:b8:ad:d4:7e:47:9b:8d:d8:e2:41: 8d:db:9f:7b:bb:c5:3d:5a:8c:3f:cb:c3:80:01:e0:00:69:7a: c3:09:40:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjQwNTE4MTgxMDIyWhcNMjQwNTI1MTgxMDIyWjAYMRYwFAYD VQQDEw02NjQ4ZWYwZi0zYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGA7oJkqtruQTW6c/71X7Unf8Tg5jUgql8D0YMERgcNf8fdzquEZ16WjHM7f MgdW9pdymINNQ0Fa403TeCekHA9Lm3eszeEL5dfdJQXuMgSSdCWCgJ/LmUQa8MtC S0yEOg9p6mVZQ4fQeU6TJLGBBAjZHJH3Bhd+Jiyb8mPplrkL3UmezdaxmnfMAAcQ wGK6YBKuElT65pU0DTOi5e9NyL5eQeQLoi2xK1WhG+g4CL/VaMSqldzDt90/JLRT s8HilliVpQariihRy9bpLdSRVS98PFj0tisj0OTFPu3FqgLIFpOMAe0radfHarQT V6zZ9QzcMrqkJ+V8gDcL1BddgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnQoEaH 8WiHufFMj5Y8h27we/ybMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWQJULCTL1Lj02JJYzVjCytR2cIx9p4MeUYHveYPonTWFTdA+tSSYn olSz5SLRYLYgtsv52WkIhYRb5jqBLEpFjDhocay4nNJj3Ce2jzXfuD1eVV44bsgo 7k/sN/fcbjKi5QVgbcCff4UDs8TWpbkLMd7yR2ZCk+EPQFF2ib8R1ekPqpbTLRCD kA1C9iPPas42T3A6hFc22U2Shlmu6u3weVvXZi8AnEx/YueUe4/tkIOeR6AVL5u0 bDwGUvzOP0fS8jyB/Nwkx8tG2W1C3G5MVP4KUOMC3Az7xdFkt+04Dbit1H5Hm43Y 4kGN2597u8U9Wow/y8OAAeAAaXrDCUDu -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org