$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: kXYY0P1LYHa7Ouu3abJ6hpX0fHJWWeaSuBma4iV404A= Subject key identifier: 00:0A:48:E2:B5:0D:DC:94:4E:EE:70:23:E5:C6:BF:F4:B0:B9:87:9F Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0B6A Signing time: Sat 18 May 2024 19:34:06 +0000 Manifest this update: Sat 18 May 2024 19:34:05 +0000 Manifest next update: Sat 25 May 2024 19:34:05 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: aYxx/Z/RslhCHXapB6uSJDlFoIrimY+vINad99QJ4G4=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: nPDk8YAfhRRq46+EDI0qFO9e6NnF2ZFMp9GX0bgJrzw=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: prhLP/O9Ky2vnNVwpgSz8d7bddtFDRsPdpE/zatUGlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: May 18 19:34:05 2024 GMT Not After : May 25 19:34:05 2024 GMT Subject: CN=664902ad-e8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:71:16:34:14:b2:bd:c9:b1:7e:06:7d:84: 84:64:02:70:ad:bb:61:30:92:36:89:15:85:6b:ac: 52:1b:e2:74:07:3f:ef:27:ae:1a:9e:27:dd:8d:0a: 0e:60:6e:ff:27:7d:01:7d:c0:6c:53:17:a7:1b:03: f5:59:d9:5a:b9:bb:b5:4c:e4:98:c6:44:56:75:5d: 75:53:60:80:3e:c9:97:d8:25:e9:7d:74:ba:f9:93: ac:20:da:d7:cf:e7:71:d7:8a:b2:fe:2a:6b:b5:b2: 2b:d2:8b:d8:80:6d:02:72:6b:47:47:46:d2:7a:5f: 39:d6:f5:23:68:76:fa:8c:9f:29:3e:fd:88:06:84: fe:7f:cd:97:80:7e:74:20:ce:1c:74:37:d4:62:d8: 5b:67:8b:19:c6:96:68:c3:63:d4:9c:41:ad:fd:df: b0:1a:a7:dd:b3:e9:01:ac:e2:27:b6:fb:3e:69:34: 6d:08:ea:89:20:74:8a:dd:6f:30:99:05:cd:da:d4: d7:5c:1d:b9:0b:56:e3:15:4a:a0:57:3a:15:ba:ad: 54:18:34:86:a4:6d:08:fd:06:17:f1:7f:d9:67:db: 6b:92:57:8e:a9:02:a7:f0:09:14:42:9d:50:37:a5: c1:d0:9c:f9:1d:54:e0:f1:e3:a5:c2:b3:1f:12:89: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:48:E2:B5:0D:DC:94:4E:EE:70:23:E5:C6:BF:F4:B0:B9:87:9F X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:7c:9d:c6:a4:df:9c:88:e0:94:08:6d:80:26:41:11:a6: b2:f2:a1:c1:99:8d:3f:95:0a:77:d0:f0:fd:8a:dc:50:be:b3: 87:6a:f7:aa:07:4b:54:7c:27:78:d2:9a:81:0a:b1:97:16:71: d1:a5:c5:79:12:ad:0e:00:19:6b:fd:1a:fd:0d:ea:a9:60:36: 81:0c:e1:d2:e2:4c:bc:39:b2:3e:33:3a:90:bd:c0:2d:7b:f9: 19:83:26:32:6c:42:b3:6e:46:01:46:b5:5d:ca:46:a4:f9:8e: f0:0f:3c:f9:77:75:bc:f2:f0:4b:96:17:1d:31:60:5c:36:27: f5:14:f3:6b:33:db:34:83:1d:20:bf:83:20:50:b9:14:92:e9: 8b:4e:55:3d:94:cd:a0:cd:4a:e1:6b:40:c5:1a:08:2a:16:ac: 19:26:26:bf:35:74:79:4e:f0:12:4b:bf:6c:cd:8a:72:8c:7c: 8a:72:df:d9:11:3f:9c:52:af:cb:36:78:50:f5:d5:53:7c:76: 09:ba:26:52:1c:f8:83:31:5c:a0:d9:3e:89:7c:33:18:9e:ce: a2:cf:c1:89:a3:31:01:a2:2b:0b:e2:09:e5:4d:85:05:7f:18: 1e:fb:46:2e:f5:8c:21:61:38:37:28:02:c6:ab:db:c6:82:1d: c2:a1:fb:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjQwNTE4MTkzNDA1WhcNMjQwNTI1MTkzNDA1WjAYMRYwFAYD VQQDEw02NjQ5MDJhZC1lOGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNxxFjQUsr3JsX4GfYSEZAJwrbthMJI2iRWFa6xSG+J0Bz/vJ64anifdjQoO YG7/J30BfcBsUxenGwP1Wdlaubu1TOSYxkRWdV11U2CAPsmX2CXpfXS6+ZOsINrX z+dx14qy/iprtbIr0ovYgG0CcmtHR0bSel851vUjaHb6jJ8pPv2IBoT+f82XgH50 IM4cdDfUYthbZ4sZxpZow2PUnEGt/d+wGqfds+kBrOIntvs+aTRtCOqJIHSK3W8w mQXN2tTXXB25C1bjFUqgVzoVuq1UGDSGpG0I/QYX8X/ZZ9trkleOqQKn8AkUQp1Q N6XB0Jz5HVTg8eOlwrMfEomjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAKSOK1 DdyUTu5wI+XGv/SwuYefMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwuHydxqTfnIjglAhtgCZBEaay8qHBmY0/lQp30PD9itxQvrOHaveq B0tUfCd40pqBCrGXFnHRpcV5Eq0OABlr/Rr9DeqpYDaBDOHS4ky8ObI+MzqQvcAt e/kZgyYybEKzbkYBRrVdykak+Y7wDzz5d3W88vBLlhcdMWBcNif1FPNrM9s0gx0g v4MgULkUkumLTlU9lM2gzUrha0DFGggqFqwZJia/NXR5TvASS79szYpyjHyKct/Z ET+cUq/LNnhQ9dVTfHYJuiZSHPiDMVyg2T6JfDMYns6iz8GJozEBoisL4gnlTYUF fxge+0Yu9YwhYTg3KALGq9vGgh3Cofui -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org