$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: qga4D0frbp7wa+F60oBdiVfZB3rxYdVe9DcY2CTsItY= Subject key identifier: 46:F5:F2:94:17:69:2A:1A:B7:0F:A3:F3:0B:F8:73:7C:85:37:E3:18 Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 0133 Signing time: Sun 19 May 2024 05:01:24 +0000 Manifest this update: Sun 19 May 2024 05:01:24 +0000 Manifest next update: Sun 26 May 2024 05:01:24 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: 5O9G87oNo1PAx6CDGQ/o0BewXtWRfQiDB7l8i9vQvCc=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: Bi5QFm2YtUuow5KJ6CjYei2K8ysqaRdF4/D5vCCW+ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: May 19 05:01:24 2024 GMT Not After : May 26 05:01:24 2024 GMT Subject: CN=664987a4-51a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:76:27:7f:92:c1:fe:33:2d:43:ad:20:fd: ac:45:e6:75:20:8c:9a:0e:78:3d:f5:8c:34:dc:2c: c7:3e:33:ff:0f:55:34:b2:bd:1a:75:d9:ce:5e:78: 7a:64:0d:b8:b2:a5:aa:b5:50:ff:a0:73:b8:63:0b: b1:ea:d7:d5:2c:f3:10:c2:0e:9c:d2:f4:53:6b:44: 97:1c:53:57:c2:cd:58:b4:62:df:5c:2e:40:35:8a: 45:9e:1f:1a:c6:82:a3:d6:ac:a5:32:30:ee:84:89: 70:e1:51:53:a2:2a:56:84:3c:a4:ca:7b:fe:9b:35: eb:c1:a8:f0:9d:bf:8e:51:77:a4:00:f9:6f:17:8c: d4:50:ea:26:72:68:d0:c0:0a:66:bc:62:d0:02:08: 33:5d:9e:36:a3:70:2d:b1:8d:13:25:84:65:4a:6b: eb:c8:84:1e:2f:a0:1e:c8:be:8b:fb:7b:db:48:b6: 14:5a:4a:24:35:8c:30:d5:c2:3d:e5:77:aa:42:91: fa:6e:78:86:bb:b0:75:07:68:b4:ba:26:47:42:d4: a1:1b:7d:70:68:07:dc:f8:a7:27:a9:d2:9e:10:7b: f7:44:49:36:85:55:5c:7a:34:eb:a2:55:4f:18:db: a3:c5:a2:ae:99:56:51:1d:7f:a4:87:de:2b:ea:d1: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F5:F2:94:17:69:2A:1A:B7:0F:A3:F3:0B:F8:73:7C:85:37:E3:18 X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a7:16:7e:0e:9d:94:c2:81:ca:f2:fc:64:d9:14:1b:41:92: 32:b9:26:33:b0:d3:23:25:d0:4c:46:e2:93:ae:b9:3b:71:31: 60:42:50:33:b1:7a:2f:f6:5b:ac:7c:90:1f:5d:92:fd:11:06: 1b:19:f5:7a:db:c9:77:dd:dd:76:6f:9b:0e:d0:a4:21:47:c8: d7:3f:55:24:67:8f:83:93:c3:dd:9b:5c:30:d2:35:a0:ea:6f: 91:55:61:5f:30:dc:be:7a:11:32:69:82:ea:e6:38:df:32:48: a1:65:37:8b:cc:a3:85:80:07:17:02:f8:b8:d5:0e:bb:4f:29: 4b:31:20:d6:1e:05:87:be:a2:b8:b9:47:a3:e0:eb:41:12:17: 5c:ed:42:28:9a:ae:c1:6c:33:e4:5d:97:10:76:81:bb:8c:81: 4d:89:94:86:46:5b:2b:d2:8a:b7:5a:15:7a:e8:38:78:52:a4: 0c:ba:0f:50:2e:05:8e:2e:18:d0:a3:5d:f2:be:9c:ea:e1:69: f5:c9:97:5e:31:90:6a:da:5c:93:b0:fe:2a:85:f1:da:bf:cd: 74:86:a7:4e:af:ce:d8:4d:26:78:21:3f:f6:fc:12:8f:17:2b: 87:24:70:c4:18:90:b0:7f:31:3e:0c:fc:45:af:72:b6:88:de: 7f:2c:fd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjQwNTE5MDUwMTI0WhcNMjQwNTI2MDUwMTI0WjAYMRYwFAYD VQQDEw02NjQ5ODdhNC01MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmm52J3+Swf4zLUOtIP2sReZ1IIyaDng99Yw03CzHPjP/D1U0sr0addnOXnh6 ZA24sqWqtVD/oHO4Ywux6tfVLPMQwg6c0vRTa0SXHFNXws1YtGLfXC5ANYpFnh8a xoKj1qylMjDuhIlw4VFToipWhDykynv+mzXrwajwnb+OUXekAPlvF4zUUOomcmjQ wApmvGLQAggzXZ42o3AtsY0TJYRlSmvryIQeL6AeyL6L+3vbSLYUWkokNYww1cI9 5XeqQpH6bniGu7B1B2i0uiZHQtShG31waAfc+KcnqdKeEHv3REk2hVVcejTrolVP GNujxaKumVZRHX+kh94r6tELpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb18pQX aSoatw+j8wv4c3yFN+MYMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPpxZ+Dp2UwoHK8vxk2RQbQZIyuSYzsNMjJdBMRuKTrrk7cTFgQlAz sXov9lusfJAfXZL9EQYbGfV628l33d12b5sO0KQhR8jXP1UkZ4+Dk8Pdm1ww0jWg 6m+RVWFfMNy+ehEyaYLq5jjfMkihZTeLzKOFgAcXAvi41Q67TylLMSDWHgWHvqK4 uUej4OtBEhdc7UIomq7BbDPkXZcQdoG7jIFNiZSGRlsr0oq3WhV66Dh4UqQMug9Q LgWOLhjQo13yvpzq4Wn1yZdeMZBq2lyTsP4qhfHav810hqdOr87YTSZ4IT/2/BKP FyuHJHDEGJCwfzE+DPxFr3K2iN5/LP0l -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org