$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json) Hash identifier: yib0CWEQkPQoOGb3KzJvryCzPxf1t0yiZJUlSjBAxdw= Subject key identifier: A1:EA:02:99:BD:43:25:1B:70:88:63:2D:4E:E9:21:1C:49:00:8E:73 Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft Manifest number: 0374 Signing time: Sun 19 May 2024 02:47:51 +0000 Manifest this update: Sun 19 May 2024 02:47:50 +0000 Manifest next update: Sun 26 May 2024 02:47:50 +0000 Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: LwZTAHeAC6wGTj8qJBS3epL91POnMjHZglu9P3lnCDA=) 2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: OW/XCSh5TYjNDBgsA8OLP9m+aqheZPb2wuOkKfbFjeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: May 19 02:47:50 2024 GMT Not After : May 26 02:47:50 2024 GMT Subject: CN=66496856-aeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:61:41:a7:01:53:09:37:96:a1:8a:69:5b: 2f:be:d3:81:d5:4a:9c:6e:2c:19:0e:6e:e9:00:c0: d6:93:7e:e1:9c:eb:d8:3c:28:3f:24:dd:4c:00:da: 06:1d:0d:00:98:e3:0b:65:3c:75:79:c9:fe:bf:24: ab:48:3b:09:54:18:9d:18:ba:bb:65:b0:a0:a4:46: c2:9d:ee:6b:63:12:11:22:36:41:92:53:64:36:0d: b3:a7:fa:9b:a0:7e:3c:e2:a4:7d:82:24:aa:c6:a2: 2b:77:6b:8d:92:da:d2:53:9b:5c:8e:c4:5d:f8:8a: b3:86:18:84:a1:76:e0:1c:a7:b6:1a:15:c1:14:07: 2d:df:26:03:c0:6c:83:18:a5:20:33:07:f6:28:38: ee:ec:3c:4e:17:0c:8b:88:88:4a:cb:0d:5f:81:e3: 92:1c:a0:b4:8b:19:58:c5:3f:9a:7e:c1:29:a6:65: 08:4a:07:af:d5:f7:88:e5:58:96:63:b4:39:36:fb: 4c:b5:88:fb:d2:53:8c:1a:fa:92:3b:48:94:1a:85: f9:1d:17:42:5a:16:04:d4:d9:ba:78:95:b2:6c:57: a5:be:81:66:84:f9:b7:a8:7a:84:87:cf:45:49:60: c7:0b:02:a4:16:95:e8:0a:12:0e:ea:23:69:7c:31: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:02:99:BD:43:25:1B:70:88:63:2D:4E:E9:21:1C:49:00:8E:73 X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:17:23:38:28:bf:cf:62:f0:ec:0f:fe:37:95:d8:33:52:47: 1d:ec:b2:00:78:85:05:b3:81:72:5a:b7:e7:a4:7e:c1:b4:e1: 6f:d4:f2:f8:91:4e:93:ef:c9:d4:48:de:73:ec:af:64:b8:a2: ed:cd:8f:43:3b:5a:2c:db:af:a1:c7:c1:3c:6f:d5:86:0c:dc: e5:20:3d:a2:04:48:61:77:75:8f:ac:d3:ad:c7:0a:04:9b:12: 95:94:46:22:67:95:77:dd:ee:61:d6:6d:f7:a3:ff:fa:2d:a9: 79:fb:01:2f:9c:2b:16:00:11:33:a5:c8:4e:19:79:59:a3:bb: 96:94:89:04:49:7a:31:71:36:c4:54:3c:39:d7:b7:20:d2:8f: 9a:40:a8:82:5f:71:03:ea:a4:70:71:4a:4e:a1:52:e3:f4:28: f3:94:39:a0:ed:9b:46:a6:db:3c:9b:91:a9:ca:78:c3:5d:97: a0:38:3a:b4:ce:c6:a8:87:25:92:a5:a0:5f:fe:c4:0a:76:6c: 1b:37:df:82:88:79:c9:a2:91:cb:31:50:f5:54:23:4d:23:7b: 4a:21:4b:37:f9:88:14:e5:f7:0a:24:d5:a9:d7:34:88:7e:65: 20:85:b3:51:74:80:8c:39:f2:6c:1f:0c:ad:74:73:fe:a6:6a: a2:48:37:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjQwNTE5MDI0NzUwWhcNMjQwNTI2MDI0NzUwWjAYMRYwFAYD VQQDEw02NjQ5Njg1Ni1hZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPFhQacBUwk3lqGKaVsvvtOB1UqcbiwZDm7pAMDWk37hnOvYPCg/JN1MANoG HQ0AmOMLZTx1ecn+vySrSDsJVBidGLq7ZbCgpEbCne5rYxIRIjZBklNkNg2zp/qb oH484qR9giSqxqIrd2uNktrSU5tcjsRd+IqzhhiEoXbgHKe2GhXBFAct3yYDwGyD GKUgMwf2KDju7DxOFwyLiIhKyw1fgeOSHKC0ixlYxT+afsEppmUISgev1feI5ViW Y7Q5NvtMtYj70lOMGvqSO0iUGoX5HRdCWhYE1Nm6eJWybFelvoFmhPm3qHqEh89F SWDHCwKkFpXoChIO6iNpfDELlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHqApm9 QyUbcIhjLU7pIRxJAI5zMB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzMxRC9FNzYxMENDRTVGMEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFs VlRDWXNCZnZ3eTdMSE95dUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFyM4KL/PYvDsD/43ldgzUkcd7LIAeIUFs4FyWrfnpH7BtOFv1PL4 kU6T78nUSN5z7K9kuKLtzY9DO1os26+hx8E8b9WGDNzlID2iBEhhd3WPrNOtxwoE mxKVlEYiZ5V33e5h1m33o//6Lal5+wEvnCsWABEzpchOGXlZo7uWlIkESXoxcTbE VDw517cg0o+aQKiCX3ED6qRwcUpOoVLj9CjzlDmg7ZtGpts8m5GpynjDXZegODq0 zsaohyWSpaBf/sQKdmwbN9+CiHnJopHLMVD1VCNNI3tKIUs3+YgU5fcKJNWp1zSI fmUghbNRdICMOfJsHwytdHP+pmqiSDcJ -----END CERTIFICATE-----Generated at Sun May 19 03:14:50 2024 by rpki-client on console-fra.rpki-client.org