$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: 2wgqZEiSIrYLSerXjbkAjjEwpXYpE8ToFhj51CJENHE= Subject key identifier: 4D:5C:48:42:F5:24:56:51:C0:71:77:73:BD:9C:15:6B:9F:22:43:88 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 05CE Signing time: Sun 19 May 2024 00:04:49 +0000 Manifest this update: Sun 19 May 2024 00:04:48 +0000 Manifest next update: Sun 26 May 2024 00:04:48 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: 2PjzSanG1oE9yhICoLXguMq2DLu0u+QN/UEKXyBnWhA=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: fklFDPJioLWiBQO5Ca7OiFTXJaQA8xm4ZECWPmSGBc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: May 19 00:04:48 2024 GMT Not After : May 26 00:04:48 2024 GMT Subject: CN=66494220-7ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:5a:dd:1d:1d:a2:e0:83:d6:d3:a5:4c:da: 3f:b0:e0:d3:67:7a:e0:02:81:ca:27:97:02:f3:13: 68:27:38:69:dd:93:b4:89:f1:ab:36:31:c5:59:63: 90:17:14:1b:ba:dd:ba:2c:1c:4a:fc:b9:59:45:49: ea:7c:63:3d:70:a0:6f:32:36:3c:f4:75:3f:fc:1b: 4c:31:3c:d7:8f:95:2e:31:f6:bc:79:1e:b6:f5:af: b0:92:d2:f8:e4:1d:63:94:c4:2b:9c:92:7b:d6:bd: 5c:1f:cc:64:fe:b1:af:08:67:a3:e8:96:d5:45:fb: 51:13:e5:12:db:30:da:04:1e:81:4f:82:03:78:6a: 12:49:f4:ae:fd:d4:59:6f:92:44:1d:00:ea:9d:dd: a6:61:d7:29:92:d4:ab:c6:18:09:2f:a4:83:09:b1: e9:a0:09:71:64:fc:25:db:94:7e:6a:10:d7:3a:0f: da:4e:8e:17:e0:ac:96:b4:88:a0:61:60:05:47:3e: c2:6f:43:cc:d7:f5:6a:9d:d8:dd:5f:00:11:7e:f0: 68:60:15:64:f0:53:d2:c7:78:83:a8:c4:e3:b1:83: fd:92:8a:b1:07:ba:f1:b2:8b:c6:f3:e2:e6:0c:b5: 6d:5f:1e:7e:71:62:16:d6:4a:34:82:75:91:f9:61: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:48:42:F5:24:56:51:C0:71:77:73:BD:9C:15:6B:9F:22:43:88 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ec:13:bd:59:b8:ac:10:b0:20:f8:61:4b:1a:fc:aa:41:97: f0:2a:79:d5:44:22:68:a9:01:2a:09:4e:79:02:97:d2:d5:4c: a7:e3:75:7f:48:75:5a:07:24:34:35:b3:71:e4:86:f1:af:7b: ff:b2:cd:08:79:7a:c0:4c:f1:2f:94:3d:04:2b:c1:c7:d3:39: 6a:2f:16:41:26:04:d2:c5:db:27:84:ed:36:4a:00:8b:ff:24: 6b:c3:40:88:e9:6d:f2:61:e5:d9:18:1d:ed:dc:6f:4c:d5:94: d1:e7:c3:2d:4a:bf:4f:67:95:03:3f:72:31:c3:d3:6a:68:35: 11:05:ad:5a:81:6c:44:64:30:5e:19:19:aa:c5:df:40:27:c9: 1f:27:de:e9:ba:00:6d:65:bd:dd:49:e0:e9:3b:50:0c:b5:f1: 4f:3e:be:e0:1e:4e:41:57:3d:50:3e:67:61:aa:68:7a:5f:2c: 8f:cd:11:57:7c:17:72:9a:e2:aa:1d:50:ac:16:af:d5:1b:63: c6:37:80:fa:01:d6:ba:32:67:08:c1:e8:bf:f6:5b:d7:80:8d: 80:15:90:3d:e4:26:40:f0:a4:93:f6:30:6f:3b:f8:68:b8:46: b0:bb:a6:c7:32:60:fd:9f:aa:08:69:87:e4:51:83:e0:2d:63: 75:2a:3e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjQwNTE5MDAwNDQ4WhcNMjQwNTI2MDAwNDQ4WjAYMRYwFAYD VQQDEw02NjQ5NDIyMC03ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/Na3R0douCD1tOlTNo/sODTZ3rgAoHKJ5cC8xNoJzhp3ZO0ifGrNjHFWWOQ FxQbut26LBxK/LlZRUnqfGM9cKBvMjY89HU//BtMMTzXj5UuMfa8eR629a+wktL4 5B1jlMQrnJJ71r1cH8xk/rGvCGej6JbVRftRE+US2zDaBB6BT4IDeGoSSfSu/dRZ b5JEHQDqnd2mYdcpktSrxhgJL6SDCbHpoAlxZPwl25R+ahDXOg/aTo4X4KyWtIig YWAFRz7Cb0PM1/VqndjdXwARfvBoYBVk8FPSx3iDqMTjsYP9koqxB7rxsovG8+Lm DLVtXx5+cWIW1ko0gnWR+WEZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1cSEL1 JFZRwHF3c72cFWufIkOIMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC7BO9WbisELAg+GFLGvyqQZfwKnnVRCJoqQEqCU55ApfS1Uyn43V/ SHVaByQ0NbNx5Ibxr3v/ss0IeXrATPEvlD0EK8HH0zlqLxZBJgTSxdsnhO02SgCL /yRrw0CI6W3yYeXZGB3t3G9M1ZTR58MtSr9PZ5UDP3Ixw9NqaDURBa1agWxEZDBe GRmqxd9AJ8kfJ97pugBtZb3dSeDpO1AMtfFPPr7gHk5BVz1QPmdhqmh6XyyPzRFX fBdymuKqHVCsFq/VG2PGN4D6Ada6MmcIwei/9lvXgI2AFZA95CZA8KST9jBvO/ho uEawu6bHMmD9n6oIaYfkUYPgLWN1Kj5P -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org