$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft File: V4F9K-wf7__kEtnzNN9AQoZTvK4.mft (raw, json) Hash identifier: rZBcS8vG47yGbHgU8h5nTYj2OnDSzZm88dQPt2Zbh18= Subject key identifier: BC:18:61:DB:2A:74:EF:AD:12:DA:D3:A3:A9:0B:69:68:A6:29:A8:8E Authority key identifier: 57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE Certificate issuer: /CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft Manifest number: 0456 Signing time: Sun 19 May 2024 01:51:09 +0000 Manifest this update: Sun 19 May 2024 01:51:09 +0000 Manifest next update: Sun 26 May 2024 01:51:09 +0000 Files and hashes: 1: V4F9K-wf7__kEtnzNN9AQoZTvK4.crl (hash: vTFht9km+P5ZpFk0e9e266Ul39YRdbIhuD5Axthowlg=) 2: 46779D40040411EC867E3B86C4F9AE02.roa (hash: CVr0k9iW0sRR0pj1LGy7NhqVuYJkPxRuFb81lxVWhfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE Validity Not Before: May 19 01:51:09 2024 GMT Not After : May 26 01:51:09 2024 GMT Subject: CN=66495b0d-70d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:24:21:56:f2:61:86:e8:2b:04:68:57:bb: 91:18:63:6e:a9:3c:ad:b5:c0:d1:08:b7:62:85:8d: 25:32:48:2a:a4:aa:cd:a3:d5:f1:41:19:a0:3d:db: 00:e6:7a:88:5a:e6:a9:67:02:ba:de:a0:c4:72:1c: cc:4e:4f:ad:0b:79:44:c3:bf:cc:bc:68:db:e9:0c: 25:43:7d:3f:0a:76:a2:9c:47:5e:36:c8:37:85:d0: c9:75:00:1d:96:a1:f1:95:f3:f3:21:d3:89:c0:46: 59:23:98:9f:8e:e8:8f:e5:ea:a9:eb:e3:11:dc:13: cb:d5:d3:5d:0f:a5:28:08:72:1d:a3:dc:28:c9:09: 28:af:0b:5a:30:34:e8:29:e0:f8:d6:ed:1b:93:dc: af:01:08:1c:88:cd:ab:57:26:cd:53:5c:99:f0:ae: b3:c1:8b:93:c0:9c:a3:51:b2:30:d5:48:42:8b:bf: 41:f0:6a:31:7c:78:bd:67:94:b2:b0:0d:71:6e:38: ef:33:b1:7e:d2:1a:cc:01:e3:ca:03:55:eb:0f:40: c2:90:7c:6c:5d:f4:d0:13:f4:0c:bb:d4:11:99:94: 42:25:d0:0a:ae:9b:e2:92:b7:49:7e:c8:db:eb:f7: af:54:fb:ad:32:71:bd:48:d4:d0:7f:2f:a5:5e:ae: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:18:61:DB:2A:74:EF:AD:12:DA:D3:A3:A9:0B:69:68:A6:29:A8:8E X509v3 Authority Key Identifier: keyid:57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c3:a7:6c:43:65:99:74:9c:fc:0e:40:91:4f:c6:2e:30:92: 83:e0:c9:f0:1f:bf:63:27:de:64:5e:cd:d1:76:bf:59:c5:12: 51:67:de:c0:b9:a3:93:25:00:b4:a0:44:c6:c7:f9:c8:4e:ef: aa:33:90:19:af:91:4d:44:5f:bf:d7:0f:e0:b4:61:68:37:9f: 77:a3:ad:34:de:51:04:76:40:9e:e2:33:fb:1e:c7:44:f4:fa: eb:34:6c:bb:74:7d:37:48:17:03:78:2e:03:12:cc:52:4b:06: fd:a2:63:bf:dc:38:f2:e0:86:a2:c5:cb:56:fb:77:49:67:ae: 64:1b:b3:39:cc:a6:3c:17:6d:ec:68:24:0e:6d:7d:c1:8a:03: e0:4a:ec:67:1f:8d:75:b5:9f:ea:fc:82:27:11:fc:c7:a2:9f: ce:38:9b:72:cf:7e:43:42:3c:3a:ad:28:07:b1:41:3a:c4:d8: 5f:84:07:7d:ed:ed:04:28:60:07:02:9f:0d:36:7e:db:43:2a: db:f3:19:d1:f9:20:5f:79:59:bb:d2:95:23:bb:02:c8:d0:a1: 5e:7e:ea:23:dd:4c:ed:19:45:0e:fe:eb:27:1f:8b:54:79:a6: f3:29:50:90:f2:32:ef:b7:41:95:5b:98:dd:fc:25:b0:a1:8d: ed:bf:cd:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEMjExMTAvBgNVBAUTKDU3ODE3RDJCRUMxRkVGRkZFNDEyRDlGMzM0REY0MDQy ODY1M0JDQUUwHhcNMjQwNTE5MDE1MTA5WhcNMjQwNTI2MDE1MTA5WjAYMRYwFAYD VQQDEw02NjQ5NWIwZC03MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntMkIVbyYYboKwRoV7uRGGNuqTyttcDRCLdihY0lMkgqpKrNo9XxQRmgPdsA 5nqIWuapZwK63qDEchzMTk+tC3lEw7/MvGjb6QwlQ30/CnainEdeNsg3hdDJdQAd lqHxlfPzIdOJwEZZI5ifjuiP5eqp6+MR3BPL1dNdD6UoCHIdo9woyQkorwtaMDTo KeD41u0bk9yvAQgciM2rVybNU1yZ8K6zwYuTwJyjUbIw1UhCi79B8GoxfHi9Z5Sy sA1xbjjvM7F+0hrMAePKA1XrD0DCkHxsXfTQE/QMu9QRmZRCJdAKrpvikrdJfsjb 6/evVPutMnG9SNTQfy+lXq7/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwYYdsq dO+tEtrTo6kLaWimKaiOMB8GA1UdIwQYMBaAFFeBfSvsH+//5BLZ8zTfQEKGU7yu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEQyMS80NTBFQzVCRTAz RkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13ZjdfX2tFdG56Tk45QVFvWlR2 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0RjlLLXdmN19fa0V0bnpOTjlBUW9aVHZLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEQyMS80NTBFQzVCRTAzRkExMUVDOERERTA4ODJDNEY5QUUwMi9WNEY5Sy13Zjdf X2tFdG56Tk45QVFvWlR2SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlw6dsQ2WZdJz8DkCRT8YuMJKD4MnwH79jJ95kXs3Rdr9ZxRJRZ97A uaOTJQC0oETGx/nITu+qM5AZr5FNRF+/1w/gtGFoN593o6003lEEdkCe4jP7HsdE 9PrrNGy7dH03SBcDeC4DEsxSSwb9omO/3Djy4IaixctW+3dJZ65kG7M5zKY8F23s aCQObX3BigPgSuxnH411tZ/q/IInEfzHop/OOJtyz35DQjw6rSgHsUE6xNhfhAd9 7e0EKGAHAp8NNn7bQyrb8xnR+SBfeVm70pUjuwLI0KFefuoj3UztGUUO/usnH4tU eabzKVCQ8jLvt0GVW5jd/CWwoY3tv81d -----END CERTIFICATE-----Generated at Sun May 19 02:59:15 2024 by rpki-client on console-ams.rpki-client.org