$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: LVK870dS+EIk6z4pq7B8achSNfsd9or+2GfaDKxCbI0= Subject key identifier: E4:B6:63:6A:13:6D:FD:18:1A:4C:79:2C:A4:5D:DF:1F:87:33:10:61 Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 0130 Signing time: Sun 19 May 2024 04:58:55 +0000 Manifest this update: Sun 19 May 2024 04:58:54 +0000 Manifest next update: Sun 26 May 2024 04:58:54 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: muntQmEyYZHWzXXQnupHkrj0ezOGSAOhwYWWbFP1L1c=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: q88iDvfHyMdqbD5BXUq67Yr5e/Q1hxt8Ea09IqII9+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: May 19 04:58:54 2024 GMT Not After : May 26 04:58:54 2024 GMT Subject: CN=6649870f-1d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:aa:0e:b6:91:81:64:f5:04:ef:b1:d9:b1: 3a:fb:67:ef:b9:ea:87:86:6c:da:02:0d:99:4c:03: 45:4a:b5:5b:4e:21:0b:c6:9e:ed:dc:2b:ee:4b:28: 25:f2:a4:04:26:33:54:69:19:25:b6:c3:cd:8b:c2: 25:13:f6:a0:46:05:44:e4:db:1b:36:3f:c1:e1:45: a9:91:cd:9b:88:04:1b:5d:b5:19:bb:30:c8:2c:9f: d9:24:c3:14:01:f1:7f:48:0d:a4:e9:07:aa:ba:f4: 1b:db:09:ef:da:ed:90:bf:60:ed:7c:66:a4:f6:02: 63:05:c6:a9:51:a8:14:49:2a:37:32:30:b5:72:d4: ae:5c:a7:b1:bb:fe:51:59:5c:ec:39:64:1f:16:16: 18:35:5a:b3:5b:97:69:31:35:07:4a:04:da:a0:7c: 18:2d:5d:9c:19:09:b7:12:b0:44:13:5b:cb:66:55: 6c:d7:9f:96:a3:99:5a:9b:1c:54:54:a2:69:52:59: da:71:1c:1f:00:ec:67:0f:2c:58:c2:58:0f:90:18: fb:64:00:88:88:07:c1:14:90:cb:db:7b:be:25:24: 08:58:ff:02:c4:92:b8:28:c2:ba:c7:70:6e:a3:59: b1:b2:92:8d:5b:bb:56:d1:45:13:89:f5:e9:44:4a: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B6:63:6A:13:6D:FD:18:1A:4C:79:2C:A4:5D:DF:1F:87:33:10:61 X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fc:ae:7d:67:03:d3:44:49:9a:a8:fb:1a:51:7e:de:29:a3: 34:8c:83:3b:e8:ed:cc:a3:23:a4:53:ad:15:b4:b0:84:25:11: ee:1c:83:c8:25:f4:e0:b9:74:3b:2a:e9:c2:fb:d3:53:b2:b5: f5:01:d6:23:be:57:eb:2a:8a:74:3d:73:94:d3:86:d7:46:3c: 00:4f:86:8d:2f:de:e0:8a:38:8c:6b:32:21:df:f8:9f:96:2f: 51:53:23:7b:0d:75:ba:4c:e9:1f:7b:98:ca:74:35:69:e8:e7: bd:14:4c:00:a8:65:f7:3a:ad:c7:2b:aa:70:c5:4b:53:75:90: be:c6:a6:bb:fa:0c:35:5f:cb:d7:50:e8:db:7f:51:55:62:6d: 60:70:40:e5:07:2f:24:95:f0:15:4a:34:e1:2a:59:ff:ec:5d: 99:7e:c9:81:1f:24:13:98:4e:41:6a:8a:d0:5f:e3:0c:ac:56: af:ea:f6:34:93:90:85:ab:ad:70:01:0d:03:d7:9e:65:86:00: 77:2e:7b:e1:5e:fc:39:2b:a8:9e:02:86:e2:72:2f:0f:12:bb: c8:2f:59:d5:b7:93:b4:af:a6:88:24:89:fb:d7:cb:59:e0:2c: 3f:c7:e1:e2:fc:04:a9:6b:04:39:c5:bc:e2:ae:53:a4:fa:92: 58:ab:37:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjQwNTE5MDQ1ODU0WhcNMjQwNTI2MDQ1ODU0WjAYMRYwFAYD VQQDEw02NjQ5ODcwZi0xZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1CqDraRgWT1BO+x2bE6+2fvueqHhmzaAg2ZTANFSrVbTiELxp7t3CvuSygl 8qQEJjNUaRkltsPNi8IlE/agRgVE5NsbNj/B4UWpkc2biAQbXbUZuzDILJ/ZJMMU AfF/SA2k6QequvQb2wnv2u2Qv2DtfGak9gJjBcapUagUSSo3MjC1ctSuXKexu/5R WVzsOWQfFhYYNVqzW5dpMTUHSgTaoHwYLV2cGQm3ErBEE1vLZlVs15+Wo5lamxxU VKJpUlnacRwfAOxnDyxYwlgPkBj7ZACIiAfBFJDL23u+JSQIWP8CxJK4KMK6x3Bu o1mxspKNW7tW0UUTifXpREp40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS2Y2oT bf0YGkx5LKRd3x+HMxBhMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW/K59ZwPTREmaqPsaUX7eKaM0jIM76O3MoyOkU60VtLCEJRHuHIPI JfTguXQ7KunC+9NTsrX1AdYjvlfrKop0PXOU04bXRjwAT4aNL97gijiMazIh3/if li9RUyN7DXW6TOkfe5jKdDVp6Oe9FEwAqGX3Oq3HK6pwxUtTdZC+xqa7+gw1X8vX UOjbf1FVYm1gcEDlBy8klfAVSjThKln/7F2ZfsmBHyQTmE5BaorQX+MMrFav6vY0 k5CFq61wAQ0D155lhgB3LnvhXvw5K6ieAobici8PErvIL1nVt5O0r6aIJIn718tZ 4Cw/x+Hi/ASpawQ5xbzirlOk+pJYqzc3 -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org