$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.mft File: V4iziK3-Dfvq98LX-GFDtQVgblw.mft (raw, json) Hash identifier: VWp5A97S0qfQsUszsDgqWz+jFOs8tRsK0z521InJeT8= Subject key identifier: 17:8D:7D:64:C0:5B:A4:BC:DF:49:E8:A7:54:3C:CF:C2:5C:0A:FB:71 Authority key identifier: 57:88:B3:88:AD:FE:0D:FB:EA:F7:C2:D7:F8:61:43:B5:05:60:6E:5C Certificate issuer: /CN=A918E6F7/serialNumber=5788B388ADFE0DFBEAF7C2D7F86143B505606E5C Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.mft Manifest number: 0532 Signing time: Sun 19 May 2024 00:57:43 +0000 Manifest this update: Sun 19 May 2024 00:57:43 +0000 Manifest next update: Sun 26 May 2024 00:57:43 +0000 Files and hashes: 1: V4iziK3-Dfvq98LX-GFDtQVgblw.crl (hash: 7bCrP+y0CDN3sQXWwKCM9i6Ix94IfPUOckgpuY7g35Q=) 2: D5BD4314AD8911EBA9B50F25C4F9AE02.roa (hash: HZu7Zd4ye/E729rV5je69AR8bQqD4aALEqe2U5BTgE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.crl rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6F7/serialNumber=5788B388ADFE0DFBEAF7C2D7F86143B505606E5C Validity Not Before: May 19 00:57:43 2024 GMT Not After : May 26 00:57:43 2024 GMT Subject: CN=66494e87-b34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:3e:d8:b8:05:37:e6:35:f0:f9:7f:70:f4: e0:5d:d8:57:e1:99:49:bd:b9:37:11:e2:95:15:66: 87:b8:a0:f1:ac:24:60:12:e6:bf:d6:b8:e6:7b:cd: 9e:23:bc:68:5b:ee:b6:e8:1b:c6:f4:7d:51:11:06: b7:a8:be:57:ea:75:db:7d:1f:d0:62:13:be:7b:9b: 41:fc:4d:aa:6f:65:b5:4f:c7:b0:d6:de:9a:32:0b: 3e:35:6e:c5:c3:d9:c2:2a:3e:9f:47:0c:4a:3a:12: ca:f0:4e:f7:9f:53:63:7f:23:23:f0:2a:fc:87:6e: a0:b5:97:d1:ae:69:69:12:7d:60:20:48:bf:0e:61: 06:7f:07:84:a8:cd:8a:79:47:ac:bc:48:9b:98:70: 51:5e:87:68:9d:b1:8b:d1:35:62:6a:b8:9b:ab:62: fe:73:e0:53:82:3b:1a:43:74:bc:b4:fa:34:e1:d6: 75:b4:f5:9c:67:c6:c4:03:b0:69:58:31:db:0e:60: 8a:b7:b1:6c:c8:50:70:e8:f2:6d:13:39:ce:ac:57: 4e:12:85:44:54:a5:3c:27:7a:45:86:d8:88:da:ac: de:de:73:f5:00:dc:8c:ba:6b:31:f8:8c:6c:d1:e1: e2:f7:87:9f:31:43:3e:a8:ae:a8:2b:22:f6:b8:5e: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8D:7D:64:C0:5B:A4:BC:DF:49:E8:A7:54:3C:CF:C2:5C:0A:FB:71 X509v3 Authority Key Identifier: keyid:57:88:B3:88:AD:FE:0D:FB:EA:F7:C2:D7:F8:61:43:B5:05:60:6E:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4iziK3-Dfvq98LX-GFDtQVgblw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6F7/51569ED2AD8811EBB9661324C4F9AE02/V4iziK3-Dfvq98LX-GFDtQVgblw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:83:86:33:65:53:32:e2:4e:74:f9:5b:1b:7b:f9:b1:71: 2e:80:b4:3e:59:cd:ea:70:ed:84:91:10:f2:84:e8:e9:70:8d: cf:09:7a:64:c1:bc:67:f1:c9:5f:83:76:41:60:69:04:83:04: 19:25:9d:90:07:fb:ed:b5:37:10:18:63:6b:d4:eb:9c:36:64: 43:46:86:29:e4:cd:55:af:27:2e:90:11:1c:53:48:66:0e:3d: 88:9b:f1:be:77:55:2e:28:b3:bc:cf:3b:d7:95:31:aa:ef:38: 6c:83:c9:14:db:db:a6:66:a7:1b:50:33:7e:e3:3d:06:ab:a7: 6b:f5:9b:81:0c:2c:ad:48:50:d1:a7:9d:af:48:9f:19:41:da: 39:63:ca:21:90:48:b9:42:65:41:73:b2:73:34:38:88:6c:44: 9f:45:ee:83:f5:4d:c4:9d:13:7d:55:37:89:53:cf:74:21:0e: ce:a7:d0:d8:c7:86:61:35:54:c9:05:7b:db:4d:d7:16:9b:ab: 88:62:d1:75:4d:40:98:70:40:da:db:08:43:7a:0b:6d:eb:70: 77:db:6d:96:5e:2e:8e:79:39:94:87:4f:7c:0b:03:64:d3:dc: 3d:2f:ab:b6:ac:15:f2:27:cf:56:67:09:40:0b:c5:56:e7:cd: a0:32:7a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2RjcxMTAvBgNVBAUTKDU3ODhCMzg4QURGRTBERkJFQUY3QzJEN0Y4NjE0M0I1 MDU2MDZFNUMwHhcNMjQwNTE5MDA1NzQzWhcNMjQwNTI2MDA1NzQzWjAYMRYwFAYD VQQDEw02NjQ5NGU4Ny1iMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0c+2LgFN+Y18Pl/cPTgXdhX4ZlJvbk3EeKVFWaHuKDxrCRgEua/1rjme82e I7xoW+626BvG9H1REQa3qL5X6nXbfR/QYhO+e5tB/E2qb2W1T8ew1t6aMgs+NW7F w9nCKj6fRwxKOhLK8E73n1NjfyMj8Cr8h26gtZfRrmlpEn1gIEi/DmEGfweEqM2K eUesvEibmHBRXodonbGL0TViaribq2L+c+BTgjsaQ3S8tPo04dZ1tPWcZ8bEA7Bp WDHbDmCKt7FsyFBw6PJtEznOrFdOEoVEVKU8J3pFhtiI2qze3nP1ANyMumsx+Ixs 0eHi94efMUM+qK6oKyL2uF5F1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeNfWTA W6S830nop1Q8z8JcCvtxMB8GA1UdIwQYMBaAFFeIs4it/g376vfC1/hhQ7UFYG5c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZGNy81MTU2OUVEMkFE ODgxMUVCQjk2NjEzMjRDNEY5QUUwMi9WNGl6aUszLURmdnE5OExYLUdGRHRRVmdi bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0aXppSzMtRGZ2cTk4TFgtR0ZEdFFWZ2Jsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZGNy81MTU2OUVEMkFEODgxMUVCQjk2NjEzMjRDNEY5QUUwMi9WNGl6aUszLURm dnE5OExYLUdGRHRRVmdibHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFuYOGM2VTMuJOdPlbG3v5sXEugLQ+Wc3qcO2EkRDyhOjpcI3PCXpk wbxn8clfg3ZBYGkEgwQZJZ2QB/vttTcQGGNr1OucNmRDRoYp5M1VrycukBEcU0hm Dj2Im/G+d1UuKLO8zzvXlTGq7zhsg8kU29umZqcbUDN+4z0Gq6dr9ZuBDCytSFDR p52vSJ8ZQdo5Y8ohkEi5QmVBc7JzNDiIbESfRe6D9U3EnRN9VTeJU890IQ7Op9DY x4ZhNVTJBXvbTdcWm6uIYtF1TUCYcEDa2whDegtt63B3222WXi6OeTmUh098CwNk 09w9L6u2rBXyJ89WZwlAC8VW582gMnqH -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org