$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json) Hash identifier: udjPsbrlRgB1S6ysKg5QWZcPMD6QMAEd1tStiZGd8sg= Subject key identifier: B4:6D:D1:B7:5C:47:CA:BB:80:B3:77:9A:67:53:83:5F:28:24:05:CA Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft Manifest number: 54 Signing time: Sun 19 May 2024 07:53:40 +0000 Manifest this update: Sun 19 May 2024 07:53:39 +0000 Manifest next update: Sun 26 May 2024 07:53:39 +0000 Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: 4/hgtQwTQwxk4snDEl+K3qg4VxXzaVI2nCrdeD6QfZc=) 2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: BpTqVyaZfhk7DC0LDlR07+Ko0MWhCjJuGPs7Ot3oTvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Validity Not Before: May 19 07:53:39 2024 GMT Not After : May 26 07:53:39 2024 GMT Subject: CN=6649b004-d013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:1a:7b:df:b9:c4:41:76:5a:ea:a9:00:10: e0:6d:66:4b:ae:95:08:b6:f6:cc:f3:46:33:76:ad: 2d:e2:38:50:a1:15:3f:29:da:ca:80:eb:39:46:f7: b8:ce:06:63:66:19:37:da:ce:d1:28:1a:ea:f9:b9: 9d:f6:0e:ff:b6:ff:fc:ad:d7:27:1b:e9:c5:5c:da: c1:54:60:a6:10:47:12:93:ee:a7:82:5c:61:ab:ef: 77:1c:aa:64:0c:6e:be:48:cb:f9:db:b0:ae:48:c4: 6d:b8:83:78:c3:86:84:a2:ba:4b:80:bf:b0:0a:bb: aa:1e:53:f3:97:0d:a9:9d:1a:61:42:fc:9f:21:b8: 4d:d6:dd:df:eb:c1:71:a6:c7:4c:96:87:ab:5b:6a: ad:3f:be:c2:6c:04:c4:ac:81:7e:00:89:5f:61:59: f3:84:d3:16:e0:d0:d2:03:b3:3f:a5:d7:6d:72:8f: 95:f8:39:67:55:ea:8f:be:72:3a:1d:52:74:9a:1a: bc:11:d7:3a:83:05:12:8c:dc:22:88:a2:81:c6:0f: 3b:14:68:26:04:88:db:7f:43:bd:59:1d:bf:19:94: 36:67:8b:1c:a3:f0:fe:16:24:d6:a3:fe:65:4e:50: f4:2c:2d:74:6f:2e:f5:d4:72:67:dc:e8:99:1d:b6: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:D1:B7:5C:47:CA:BB:80:B3:77:9A:67:53:83:5F:28:24:05:CA X509v3 Authority Key Identifier: keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:3f:8e:bb:44:0f:a9:49:33:11:18:9d:dc:71:23:99:62:80: 9c:12:38:0e:b6:bf:3d:43:99:28:92:92:b0:43:f1:85:90:6e: e0:ba:e7:11:99:03:e8:c2:24:3e:cc:40:07:cd:4e:0c:1b:3a: 9f:3d:fc:25:ff:fd:98:ea:d4:2b:f6:58:91:00:0d:4e:11:3a: 60:9b:0b:60:26:f6:da:c3:f6:0c:df:1f:5d:ed:36:7b:0c:91: 37:a7:de:4a:b8:c3:ad:a6:02:f6:98:c4:09:a8:46:09:3a:ac: 64:c3:ba:78:c9:0f:ca:27:b7:e1:58:be:1e:03:4d:e2:10:99: aa:8b:27:c9:0f:5e:47:90:32:0c:e8:70:c7:f8:33:a6:8d:ad: ae:f8:d7:8a:75:ad:d1:63:65:99:c3:3d:f8:f0:a4:4a:af:b6: bf:5e:5f:3e:fc:fe:1d:30:e4:de:6c:e1:be:65:86:f5:83:eb: f4:63:cb:0c:41:18:61:65:45:78:86:c1:45:06:f9:f6:c9:51: 73:d9:c2:57:d9:33:77:db:a3:51:12:d1:0c:f0:ce:ec:76:6d: a4:4e:41:87:81:76:fb:9c:2f:8b:5e:84:d9:2e:db:a9:3f:d6: 8f:da:cd:89:bb:3c:68:97:3c:ac:32:2e:61:4e:25:ed:41:22: cb:46:30:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qjc4MjExMC8GA1UEBRMoNTZCNjVCODA5RjVEQUIzQTVBQjE1N0NBMDU3OUZEOEUx NkVEQ0ZCMzAeFw0yNDA1MTkwNzUzMzlaFw0yNDA1MjYwNzUzMzlaMBgxFjAUBgNV BAMTDTY2NDliMDA0LWQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyJxp737nEQXZa6qkAEOBtZkuulQi29szzRjN2rS3iOFChFT8p2sqA6zlG97jO BmNmGTfaztEoGur5uZ32Dv+2//yt1ycb6cVc2sFUYKYQRxKT7qeCXGGr73ccqmQM br5Iy/nbsK5IxG24g3jDhoSiukuAv7AKu6oeU/OXDamdGmFC/J8huE3W3d/rwXGm x0yWh6tbaq0/vsJsBMSsgX4AiV9hWfOE0xbg0NIDsz+l121yj5X4OWdV6o++cjod UnSaGrwR1zqDBRKM3CKIooHGDzsUaCYEiNt/Q71ZHb8ZlDZnixyj8P4WJNaj/mVO UPQsLXRvLvXUcmfc6JkdtvKHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtG3Rt1xH yruAs3eaZ1ODXygkBcowHwYDVR0jBBgwFoAUVrZbgJ9dqzpasVfKBXn9jhbtz7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNzgyLzlGRURDRjVDOTc5 QjExRUU5ODlFNjAwQUM0RjlBRTAyL1ZyWmJnSjlkcXpwYXNWZktCWG45amhidHo3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnJaYmdKOWRxenBhc1ZmS0JYbjlqaGJ0ejdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NzgyLzlGRURDRjVDOTc5QjExRUU5ODlFNjAwQUM0RjlBRTAyL1ZyWmJnSjlkcXpw YXNWZktCWG45amhidHo3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMY/jrtED6lJMxEYndxxI5ligJwSOA62vz1DmSiSkrBD8YWQbuC65xGZ A+jCJD7MQAfNTgwbOp89/CX//Zjq1Cv2WJEADU4ROmCbC2Am9trD9gzfH13tNnsM kTen3kq4w62mAvaYxAmoRgk6rGTDunjJD8ont+FYvh4DTeIQmaqLJ8kPXkeQMgzo cMf4M6aNra7414p1rdFjZZnDPfjwpEqvtr9eXz78/h0w5N5s4b5lhvWD6/RjywxB GGFlRXiGwUUG+fbJUXPZwlfZM3fbo1ES0Qzwzux2baROQYeBdvucL4tehNku26k/ 1o/azYm7PGiXPKwyLmFOJe1BIstGMIM= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org