$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: JYEdaUL1Avi9zdQbKZDIanlviuH6mIkCRJQqw1/4RmM= Subject key identifier: DD:A8:F7:FC:FA:90:BA:33:E1:BE:81:2A:64:9D:74:4D:F2:99:F5:7A Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 01D8 Signing time: Sun 19 May 2024 04:18:55 +0000 Manifest this update: Sun 19 May 2024 04:18:55 +0000 Manifest next update: Sun 26 May 2024 04:18:55 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: KjO71qWiZXt0L1nC4g1Z4zDp6JFLlRXF3u2ML9/FE5A=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: yrcsrbjQfQ5uZo1Mtvcl1tB6W+p9IMWgvyoeS2ztVJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: May 19 04:18:55 2024 GMT Not After : May 26 04:18:55 2024 GMT Subject: CN=66497daf-71ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:86:62:e1:fb:14:af:69:96:2b:2f:8b:d8: 73:21:a4:2e:56:98:a0:99:d4:79:67:68:83:cb:a5: 09:58:d4:66:97:18:ee:40:d6:ea:e0:bf:d9:4b:eb: a1:c3:37:40:32:ba:34:d9:4b:56:64:af:49:81:0c: 3d:46:50:08:45:36:53:06:1f:96:9c:b5:70:0c:53: 8c:91:e4:15:19:b2:04:40:a1:9a:86:5d:b0:0c:12: a2:f3:83:d8:1c:b5:32:8c:39:a8:bf:53:ff:84:bf: 3b:0d:8d:6e:7e:45:d1:a2:36:22:5f:0d:39:cc:7e: 15:aa:a8:c3:d0:ba:26:6c:d2:67:cf:7a:c0:50:10: 0c:8e:01:6d:07:df:1a:92:de:94:7e:79:18:4d:c9: 86:50:b5:21:6d:cd:51:2c:ef:a8:9e:10:cd:da:54: 89:88:dd:00:ea:7f:6e:91:f6:cd:9d:8b:e6:63:7b: ce:0a:dc:37:c5:73:59:8e:77:08:79:60:43:96:fe: 0a:ab:75:bb:23:77:8f:be:0d:19:f3:ba:97:8a:9e: 25:01:df:d0:ac:57:c3:d4:54:d1:98:02:ab:2e:25: b5:d1:a3:b9:58:1f:e1:7f:90:1a:13:13:32:fa:80: 8b:ec:04:7e:68:39:0e:4f:1f:6e:28:a8:b6:d2:c3: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:F7:FC:FA:90:BA:33:E1:BE:81:2A:64:9D:74:4D:F2:99:F5:7A X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:83:1c:9d:64:c9:04:72:c1:e3:1f:f5:20:3f:67:72:f9:73: 4e:60:d6:95:9c:e1:61:0e:52:9b:86:aa:27:62:e3:9f:cf:8c: 5b:34:bf:dc:f4:e3:ab:5d:dd:9a:52:cc:8a:eb:98:4f:41:1d: 92:1e:b3:51:7c:45:f0:63:68:c2:ab:5b:0b:1b:32:07:0d:6e: 86:de:63:66:1c:4c:6e:44:37:1b:7c:c3:79:fe:0e:22:99:f2: 6c:1e:4f:3e:e8:f5:75:04:5a:3b:a1:50:04:35:23:80:7b:26: 97:2f:f9:0b:3d:e0:d0:96:86:10:85:b1:22:cb:52:23:1c:61: 71:da:1c:e7:4f:8e:31:e6:4c:ba:fd:31:de:1d:36:f2:80:16: 80:af:56:be:a9:42:81:93:bb:ba:dd:bb:b8:f2:26:90:a4:c0: 37:1e:74:6e:f3:a1:dd:ff:2b:f6:73:9e:c9:de:5d:91:dd:ff: d8:ac:85:21:78:9e:ae:ac:ee:8f:28:e8:6a:e8:91:62:d5:8e: ef:17:02:47:1c:52:ee:9d:60:d5:b7:a1:02:9a:27:a3:3b:55: 05:9a:37:79:a6:37:9d:0d:95:0d:67:0e:c4:fe:0d:5f:52:1a: 10:32:5d:fa:7c:82:4d:23:80:85:6c:f6:ef:cd:82:56:d0:b8: 28:7d:84:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjQwNTE5MDQxODU1WhcNMjQwNTI2MDQxODU1WjAYMRYwFAYD VQQDEw02NjQ5N2RhZi03MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16+GYuH7FK9plisvi9hzIaQuVpigmdR5Z2iDy6UJWNRmlxjuQNbq4L/ZS+uh wzdAMro02UtWZK9JgQw9RlAIRTZTBh+WnLVwDFOMkeQVGbIEQKGahl2wDBKi84PY HLUyjDmov1P/hL87DY1ufkXRojYiXw05zH4VqqjD0LombNJnz3rAUBAMjgFtB98a kt6UfnkYTcmGULUhbc1RLO+onhDN2lSJiN0A6n9ukfbNnYvmY3vOCtw3xXNZjncI eWBDlv4Kq3W7I3ePvg0Z87qXip4lAd/QrFfD1FTRmAKrLiW10aO5WB/hf5AaExMy +oCL7AR+aDkOTx9uKKi20sOYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2o9/z6 kLoz4b6BKmSddE3ymfV6MB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCugxydZMkEcsHjH/UgP2dy+XNOYNaVnOFhDlKbhqonYuOfz4xbNL/c 9OOrXd2aUsyK65hPQR2SHrNRfEXwY2jCq1sLGzIHDW6G3mNmHExuRDcbfMN5/g4i mfJsHk8+6PV1BFo7oVAENSOAeyaXL/kLPeDQloYQhbEiy1IjHGFx2hznT44x5ky6 /THeHTbygBaAr1a+qUKBk7u63bu48iaQpMA3HnRu86Hd/yv2c57J3l2R3f/YrIUh eJ6urO6PKOhq6JFi1Y7vFwJHHFLunWDVt6ECmiejO1UFmjd5pjedDZUNZw7E/g1f UhoQMl36fIJNI4CFbPbvzYJW0LgofYSL -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org