$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: J2+tWYXqe+tXJ8DjiZBhT/oWVHnBmJhymAZzKQFI0/c= Subject key identifier: 91:60:F8:8A:23:30:D5:7D:3D:FC:8F:6D:D3:0A:4B:FF:82:9B:C7:09 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 33E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 33D7 Signing time: Sat 18 May 2024 14:42:07 +0000 Manifest this update: Sat 18 May 2024 14:42:07 +0000 Manifest next update: Sat 25 May 2024 14:42:07 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: ANEBRadhvRC8pm06bwcK9GDnEzD+TwACWXTZI3wc43w=) 2: 25AEF904D01011EC9C4BAE3BC4F9AE02.roa (hash: VgPcBhMI29Fjq4PZ3UQE86qyuA/czOnwXi/u0NNP4/s=) 3: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: FVQcUxeZYhitB38VEPst8ibcJtrMvWIsmIn81Rm80yc=) 4: 6E46B2C6E71011EC8842E149C4F9AE02.roa (hash: Ju5O5eXRTt70AOKhqg0udmOiPpW2IX57wxWEIplZ+J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13288 (0x33e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: May 18 14:42:07 2024 GMT Not After : May 25 14:42:07 2024 GMT Subject: CN=6648be3f-d3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:a1:1e:8f:05:11:9c:83:d2:8a:fc:c9:c5: dd:dd:71:ff:b5:ef:90:4a:2f:89:42:f4:59:71:4e: 49:cc:c4:31:d7:68:0c:08:18:a1:30:f4:ea:32:2e: 33:39:6a:69:38:ec:72:11:a7:ae:9a:90:df:e6:bf: 56:bc:f0:27:6c:28:36:46:8a:c2:2f:26:d2:7a:25: fc:b4:ca:87:ba:a9:cc:aa:7b:55:a7:d6:fe:ec:0e: c0:8c:23:f4:56:60:04:93:5c:e7:e6:6e:67:d7:c3: 3e:de:ab:31:74:df:9c:dd:75:cd:9e:b1:b3:1b:bb: b2:fc:87:72:67:1d:64:ca:77:3f:ff:a3:73:b1:ec: d1:ad:45:5d:7d:3e:36:96:55:66:45:0e:4c:54:58: 90:5f:2c:76:14:33:f6:28:c5:0a:f1:15:4f:e1:b7: 2a:cc:f5:c3:16:a0:bc:48:20:30:cb:98:9f:a6:86: 83:4a:0f:20:6f:ef:86:1a:64:b5:6e:e1:05:96:b0: ce:87:93:7f:1d:f4:39:ea:ad:2f:58:2c:e6:60:92: b5:4e:d0:0c:a5:f1:ae:17:d2:ef:c1:8c:9a:05:06: ce:5b:6a:ad:b4:5f:0e:3b:30:7f:c9:db:73:6b:1c: 78:8a:7e:dc:c1:76:fd:c1:e3:75:3a:53:09:8b:86: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:F8:8A:23:30:D5:7D:3D:FC:8F:6D:D3:0A:4B:FF:82:9B:C7:09 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ff:fd:ca:b5:54:c1:cc:7e:20:8c:de:83:87:e3:ae:1c:31: db:a1:5b:2c:fd:88:f3:35:c1:e6:e2:09:37:4f:ab:1d:10:ce: 2a:f5:c0:11:26:8f:54:d9:fc:a0:c4:09:7e:c1:41:bb:05:77: 80:9c:f1:7e:1f:31:99:f8:99:3d:d8:ec:aa:ab:32:a3:31:79: d8:3b:2b:98:81:af:d3:bf:f4:71:43:c8:5d:ba:12:b3:de:43: 77:49:5d:1f:8f:c9:06:f8:d9:99:83:f9:f9:e3:a6:e5:9c:a1: 7c:d3:a7:62:10:ed:9a:a7:93:10:ba:39:1d:fa:df:2e:e9:c3: 6e:36:34:78:1e:eb:d5:21:66:7d:1e:ba:88:54:e1:29:ab:e0: 6c:df:20:36:9e:ba:e9:80:0c:1e:c3:88:92:43:7c:ca:c2:a0: 3d:d9:85:08:f9:6f:f3:33:9f:aa:49:b0:e6:ba:94:69:9f:db: 10:3d:d9:bf:90:7a:8f:c6:36:71:c2:8e:09:c9:68:24:16:e3: 7a:4b:a5:e4:c1:09:6d:e5:81:37:04:c9:dc:af:d7:64:e5:fb: af:5c:82:c9:ac:18:7a:32:15:57:c8:ed:0b:38:28:a7:f7:ce: 9e:d4:86:10:e2:33:ae:59:d3:94:d6:62:76:92:02:16:1b:53: 56:ae:1a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjQwNTE4MTQ0MjA3WhcNMjQwNTI1MTQ0MjA3WjAYMRYwFAYD VQQDEw02NjQ4YmUzZi1kM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXehHo8FEZyD0or8ycXd3XH/te+QSi+JQvRZcU5JzMQx12gMCBihMPTqMi4z OWppOOxyEaeumpDf5r9WvPAnbCg2RorCLybSeiX8tMqHuqnMqntVp9b+7A7AjCP0 VmAEk1zn5m5n18M+3qsxdN+c3XXNnrGzG7uy/IdyZx1kync//6NzsezRrUVdfT42 llVmRQ5MVFiQXyx2FDP2KMUK8RVP4bcqzPXDFqC8SCAwy5ifpoaDSg8gb++GGmS1 buEFlrDOh5N/HfQ56q0vWCzmYJK1TtAMpfGuF9LvwYyaBQbOW2qttF8OOzB/ydtz axx4in7cwXb9weN1OlMJi4b+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFg+Ioj MNV9PfyPbdMKS/+Cm8cJMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC//3KtVTBzH4gjN6Dh+OuHDHboVss/YjzNcHm4gk3T6sdEM4q9cAR Jo9U2fygxAl+wUG7BXeAnPF+HzGZ+Jk92OyqqzKjMXnYOyuYga/Tv/RxQ8hduhKz 3kN3SV0fj8kG+NmZg/n546blnKF806diEO2ap5MQujkd+t8u6cNuNjR4HuvVIWZ9 HrqIVOEpq+Bs3yA2nrrpgAwew4iSQ3zKwqA92YUI+W/zM5+qSbDmupRpn9sQPdm/ kHqPxjZxwo4JyWgkFuN6S6XkwQlt5YE3BMncr9dk5fuvXILJrBh6MhVXyO0LOCin 986e1IYQ4jOuWdOU1mJ2kgIWG1NWrhpo -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org