$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: w32f4/Djz2E1B6EjjR+NvZcUWsaj59p5HDuINpAqsH0= Subject key identifier: EC:89:6F:A0:9F:ED:79:E2:77:FB:06:44:97:63:CA:7B:5D:04:D9:06 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 86 Signing time: Sun 19 May 2024 07:16:54 +0000 Manifest this update: Sun 19 May 2024 07:16:53 +0000 Manifest next update: Sun 26 May 2024 07:16:53 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: gar/mWPZ74BZiYxu/ishKWtte18bdV4/VXkcfDA2Xlk=) 2: B50B7BCC5E3011EE9286D63FC4F9AE02.roa (hash: uvAs62LPiFCV99tv3ysqHmwlOBSG23p8Uu9ahQxFuu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: May 19 07:16:53 2024 GMT Not After : May 26 07:16:53 2024 GMT Subject: CN=6649a765-62e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:fa:b5:b5:75:47:d3:89:64:ed:fd:81:05: 7c:09:54:13:10:93:2c:9b:16:a9:4f:86:e2:5b:de: 3a:5f:56:29:6a:c3:7a:57:87:75:f2:e9:23:cf:35: 07:17:a2:17:d4:3d:34:76:5f:52:ab:80:a1:7f:6b: f9:a5:e7:3f:ae:47:0a:f7:82:57:fc:fb:5f:54:9a: 40:70:be:93:df:72:ae:cb:f2:59:fb:99:15:b3:2c: 55:4e:09:00:9c:bb:0c:b7:8f:5c:6a:ac:8c:f5:30: cd:bc:4e:ef:7f:52:51:1d:97:8e:71:f5:23:3e:7c: 2c:70:65:28:63:57:77:0c:40:fe:f6:78:f6:57:4b: 10:a0:c7:b0:6f:30:4c:c1:f2:e9:bd:4d:85:90:cf: 89:29:b8:e3:d7:2b:87:8f:57:97:2a:aa:d3:e8:00: 06:aa:60:24:ce:83:4c:46:cf:da:81:6d:b1:a9:47: 17:52:22:52:37:a4:25:51:e6:b7:18:55:02:da:8d: c6:ff:7d:95:32:c8:e5:78:9f:ee:26:23:7d:9d:00: c8:e0:f8:93:7c:99:ae:f9:52:9a:eb:57:21:80:6e: 85:01:bf:7f:f4:06:0a:92:7c:8a:8b:89:2e:65:40: a3:71:8e:c6:f3:36:9a:ab:a9:68:49:bf:43:7a:63: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:89:6F:A0:9F:ED:79:E2:77:FB:06:44:97:63:CA:7B:5D:04:D9:06 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:02:ad:00:40:2c:57:57:37:c3:e6:f2:41:0a:8a:1e:3d:e1: e4:98:0e:52:ae:42:e6:82:cc:7b:53:77:dc:69:37:af:f0:1a: 52:b3:2a:20:d2:de:0d:63:ae:59:10:20:97:9c:93:7a:bd:c9: 9b:91:eb:0c:f3:15:6e:99:c3:2f:cf:c4:e2:e7:44:78:21:bd: 3c:aa:86:4f:52:b5:00:68:88:11:5a:0b:9d:86:4e:5b:fd:ea: e4:e2:70:78:75:7a:98:8d:36:b4:9d:8c:e6:57:df:21:31:43: 8a:0e:d1:10:27:6d:b4:8e:1d:75:ab:d1:e3:09:b0:48:99:9d: 39:ad:4c:3f:e4:8c:96:29:18:ad:b5:f7:8c:55:78:30:b2:b9: a7:1f:5e:57:5f:01:17:1e:42:90:63:b3:80:32:71:80:86:c7: f0:31:f1:96:53:45:8b:a1:ed:18:84:02:3e:23:88:e2:7f:6a: 03:14:d5:91:d9:77:2f:08:b2:1e:90:22:94:a1:10:cc:bc:4d: 73:e5:ad:0e:7a:29:37:be:b6:fe:eb:46:93:ce:01:f9:68:93: 9e:59:ac:af:c8:d1:1e:29:b8:d5:d3:71:80:07:b5:c6:25:cb: 2e:1b:24:81:6e:1b:54:26:44:2c:1c:e2:b2:e7:14:3f:b4:d3: 12:c9:0e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjQwNTE5MDcxNjUzWhcNMjQwNTI2MDcxNjUzWjAYMRYwFAYD VQQDEw02NjQ5YTc2NS02MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdz6tbV1R9OJZO39gQV8CVQTEJMsmxapT4biW946X1YpasN6V4d18ukjzzUH F6IX1D00dl9Sq4Chf2v5pec/rkcK94JX/PtfVJpAcL6T33Kuy/JZ+5kVsyxVTgkA nLsMt49caqyM9TDNvE7vf1JRHZeOcfUjPnwscGUoY1d3DED+9nj2V0sQoMewbzBM wfLpvU2FkM+JKbjj1yuHj1eXKqrT6AAGqmAkzoNMRs/agW2xqUcXUiJSN6QlUea3 GFUC2o3G/32VMsjleJ/uJiN9nQDI4PiTfJmu+VKa61chgG6FAb9/9AYKknyKi4ku ZUCjcY7G8zaaq6loSb9DemPA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyJb6Cf 7Xnid/sGRJdjyntdBNkGMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAAq0AQCxXVzfD5vJBCooePeHkmA5SrkLmgsx7U3fcaTev8BpSsyog 0t4NY65ZECCXnJN6vcmbkesM8xVumcMvz8Ti50R4Ib08qoZPUrUAaIgRWgudhk5b /erk4nB4dXqYjTa0nYzmV98hMUOKDtEQJ220jh11q9HjCbBImZ05rUw/5IyWKRit tfeMVXgwsrmnH15XXwEXHkKQY7OAMnGAhsfwMfGWU0WLoe0YhAI+I4jif2oDFNWR 2XcvCLIekCKUoRDMvE1z5a0Oeik3vrb+60aTzgH5aJOeWayvyNEeKbjV03GAB7XG JcsuGySBbhtUJkQsHOKy5xQ/tNMSyQ4W -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org