$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: 73UeR/AYKJgWfmf8byVXN2PrYgjKf9HwkjQw6qwi0P0= Subject key identifier: 2B:9B:BD:9C:18:B2:A1:D7:F5:99:25:83:E7:72:09:1F:6E:24:21:DD Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0B26 Signing time: Sat 18 May 2024 19:49:04 +0000 Manifest this update: Sat 18 May 2024 19:49:03 +0000 Manifest next update: Sat 25 May 2024 19:49:03 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: qRgM61g/35UhrdnpV422LRV/5wF4w377WMPPe+lfqyk=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 48GF2MfEalOknJ4Un1B+cRQbEEvbnBmSHRBaqdPfw0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: May 18 19:49:03 2024 GMT Not After : May 25 19:49:03 2024 GMT Subject: CN=6649062f-9d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:63:f0:01:98:28:8a:50:a3:b6:a8:52:7e: 1a:29:5d:3e:6f:89:fd:05:b9:88:09:76:d9:64:67: 32:fe:c5:9d:cc:ff:7f:9e:c7:8a:71:0d:3c:15:16: 31:b8:ee:3e:9d:46:43:64:d9:00:15:50:69:fd:81: e0:40:25:10:f8:53:e5:5e:0f:15:d6:9b:d2:98:19: 96:4d:8b:45:c4:90:89:68:10:32:91:47:ad:e8:21: e2:b1:6d:92:e4:fe:53:ac:d5:91:5e:4b:b7:be:b4: 91:d3:27:bd:9e:30:5b:7b:88:e3:47:95:c7:fa:19: 65:60:c8:cb:1d:66:d5:a7:68:8e:ba:56:ec:4d:34: e6:a1:73:9b:bb:99:27:7d:7f:15:eb:ad:ae:25:74: d5:0a:04:4e:b4:4d:d4:b6:db:9d:b9:a8:51:8d:13: 8d:0e:00:da:a4:ee:1a:2c:4a:d3:3b:b8:7d:8d:23: 6a:67:2a:c3:ec:76:f0:73:28:22:9e:95:5c:01:f6: 2b:e6:97:9b:a4:a1:d9:8a:02:80:65:41:ae:ec:ed: a9:0c:a5:f4:a3:15:04:43:ad:21:07:db:08:23:be: 1e:14:10:de:71:68:68:ea:96:04:5c:32:67:a8:87: b2:cd:c9:93:ed:39:ba:08:9f:98:57:19:7c:b5:a6: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9B:BD:9C:18:B2:A1:D7:F5:99:25:83:E7:72:09:1F:6E:24:21:DD X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:86:c6:91:2d:ae:97:27:b9:5f:96:9e:b2:3e:ba:f7:4b:8a: 91:76:4d:09:da:99:3e:d3:3d:a8:55:ab:06:38:86:e1:fc:5f: c2:9b:04:4f:b4:79:44:9f:ed:1b:d2:97:e7:63:8c:b3:70:a6: 4d:07:55:c8:90:da:03:a7:ef:cb:6a:7f:a4:d6:96:a7:87:48: 56:ca:6b:70:e5:be:63:32:58:1b:f0:b2:70:44:8c:c7:b8:bb: f9:39:0b:3e:62:28:f3:7e:67:06:7d:6a:85:ab:19:3f:35:ba: 16:e5:35:97:84:d3:99:10:d8:0b:68:2d:77:48:81:46:7d:91: 89:48:b3:5e:39:58:75:50:cc:41:5c:67:46:e8:78:86:4b:46: 19:13:6f:d8:9a:c1:d3:26:5d:40:25:85:58:63:de:7c:51:d6: a9:a6:ae:1a:3d:d4:40:12:40:5d:9c:18:fc:84:0d:67:d6:f8: 5d:1d:9e:16:af:0c:60:10:0f:cd:ef:f0:00:ca:e6:ef:c9:8f: 3d:0d:3e:6c:e5:9f:46:72:33:04:49:e1:7f:02:42:ac:a0:8f: 3e:37:65:2f:da:7e:63:4a:7c:58:ca:52:33:1f:46:82:ac:f7: f6:f8:10:89:99:73:0f:fa:f9:93:81:1b:ed:ee:f6:f6:42:c3: 53:86:7a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjQwNTE4MTk0OTAzWhcNMjQwNTI1MTk0OTAzWjAYMRYwFAYD VQQDEw02NjQ5MDYyZi05ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty1j8AGYKIpQo7aoUn4aKV0+b4n9BbmICXbZZGcy/sWdzP9/nseKcQ08FRYx uO4+nUZDZNkAFVBp/YHgQCUQ+FPlXg8V1pvSmBmWTYtFxJCJaBAykUet6CHisW2S 5P5TrNWRXku3vrSR0ye9njBbe4jjR5XH+hllYMjLHWbVp2iOulbsTTTmoXObu5kn fX8V662uJXTVCgROtE3UttuduahRjRONDgDapO4aLErTO7h9jSNqZyrD7Hbwcygi npVcAfYr5pebpKHZigKAZUGu7O2pDKX0oxUEQ60hB9sII74eFBDecWho6pYEXDJn qIeyzcmT7Tm6CJ+YVxl8taYTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCubvZwY sqHX9Zklg+dyCR9uJCHdMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKhsaRLa6XJ7lflp6yPrr3S4qRdk0J2pk+0z2oVasGOIbh/F/CmwRP tHlEn+0b0pfnY4yzcKZNB1XIkNoDp+/Lan+k1panh0hWymtw5b5jMlgb8LJwRIzH uLv5OQs+YijzfmcGfWqFqxk/NboW5TWXhNOZENgLaC13SIFGfZGJSLNeOVh1UMxB XGdG6HiGS0YZE2/YmsHTJl1AJYVYY958Udappq4aPdRAEkBdnBj8hA1n1vhdHZ4W rwxgEA/N7/AAyubvyY89DT5s5Z9GcjMESeF/AkKsoI8+N2Uv2n5jSnxYylIzH0aC rPf2+BCJmXMP+vmTgRvt7vb2QsNThnpD -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org