$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: nd0ca7o5hTHROot4vVFhFQswnUKsI81kFhQNCSjKOdA= Subject key identifier: 32:42:DA:90:E8:BB:AF:48:9F:92:7F:E9:0C:B0:74:8A:1B:1A:20:76 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 48 Signing time: Sun 19 May 2024 08:02:18 +0000 Manifest this update: Sun 19 May 2024 08:02:17 +0000 Manifest next update: Sun 26 May 2024 08:02:17 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: 38OwkDGriCV225CSZ45bP3FpPVrJdO75PohY+2Nb8KE=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: +k0dkwBV5BP94B6BUgpVoB0be897Zoj226MQkW27NOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: May 19 08:02:17 2024 GMT Not After : May 26 08:02:17 2024 GMT Subject: CN=6649b209-5cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:c9:d7:f4:45:f7:73:cf:80:2c:59:57:e5: 9d:ed:cf:70:54:e3:e7:9a:00:17:ab:43:f0:ce:e6: 88:06:63:b4:57:da:19:a7:e1:70:b7:36:ff:24:d7: 5f:6e:be:98:15:4e:a3:fb:2b:23:af:c5:f3:72:cc: 75:c7:d9:38:df:dc:be:94:a5:15:5e:10:83:e8:f4: 81:0a:6a:9a:eb:f3:17:29:9e:0c:d9:1e:b9:cf:eb: 46:ed:60:d0:90:50:a1:48:a1:99:db:40:af:38:f6: ed:a6:c3:27:31:a5:db:6f:30:5d:e3:f6:91:8d:4d: 1b:84:b7:14:5e:28:c9:3d:96:3d:39:dd:2a:21:53: ab:f7:9b:ef:c8:8a:52:ed:dd:6c:a6:44:0e:d9:f3: e0:ea:df:2a:2f:bf:34:f5:59:09:af:18:fc:72:cf: 3c:03:5a:bc:84:c3:cd:9e:df:86:e4:5c:2d:b5:04: 5a:8e:c2:b0:52:fd:1a:4b:e4:4f:29:6a:17:e1:01: 21:34:52:bc:04:9b:5d:f0:a8:e2:fa:05:18:b6:a9: 14:b7:24:02:78:29:25:84:52:99:a6:63:0a:5d:cf: 56:09:1a:7f:5b:a6:e0:76:69:95:dc:f5:f5:ce:63: b1:40:03:0c:3b:94:ae:87:98:aa:ac:29:b6:45:bc: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:DA:90:E8:BB:AF:48:9F:92:7F:E9:0C:B0:74:8A:1B:1A:20:76 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:85:2a:4d:78:79:eb:cc:ea:4b:6e:98:76:b5:8e:8e:56:ff: 1d:5d:b0:1c:2f:29:47:e1:66:9a:8d:d4:94:22:39:fc:10:f8: 75:2e:73:a4:a1:a7:5c:1e:df:95:de:e4:23:bf:ae:cd:e1:af: 3f:4a:14:6b:55:8d:8e:76:1d:fb:3d:41:6a:45:5f:18:05:83: 38:8a:f9:e3:eb:5b:9f:70:34:fe:aa:18:ee:60:2c:46:f0:8d: 40:c5:72:ee:e7:2e:80:f9:05:e7:ac:9d:ab:0d:f0:88:9d:9c: 53:bf:ee:0a:0c:fe:60:11:13:5b:9e:6d:df:c4:32:89:de:6d: e6:c0:f1:5c:49:64:e0:98:e9:b6:8e:2c:db:e7:18:bf:02:32: cb:3b:d1:a6:ef:cc:58:f6:3e:15:5d:99:7d:85:62:95:da:e5: 92:02:1c:fe:0c:df:50:14:74:5c:a0:05:f9:d1:98:7b:8a:74: 2f:08:41:e7:3a:07:74:0b:07:49:27:dc:06:02:04:81:b4:bf: 16:26:ad:96:63:b3:7a:ca:0f:56:7f:ca:ed:42:a5:f3:43:30: 09:cf:49:8e:6d:b1:ea:c1:00:c2:8a:75:0c:6e:2a:51:1b:0b: 0a:dc:af:a1:73:5b:24:5b:07:a9:d9:af:b8:75:38:9b:4a:46: 30:e9:df:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDM1RTExMC8GA1UEBRMoQkU2RDc3MjZGOUQ3MzlFNkVDOUFGOTM0N0VDRUNCNDIx N0FGN0EzRjAeFw0yNDA1MTkwODAyMTdaFw0yNDA1MjYwODAyMTdaMBgxFjAUBgNV BAMTDTY2NDliMjA5LTVjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMQsnX9EX3c8+ALFlX5Z3tz3BU4+eaABerQ/DO5ogGY7RX2hmn4XC3Nv8k119u vpgVTqP7KyOvxfNyzHXH2Tjf3L6UpRVeEIPo9IEKaprr8xcpngzZHrnP60btYNCQ UKFIoZnbQK849u2mwycxpdtvMF3j9pGNTRuEtxReKMk9lj053SohU6v3m+/IilLt 3WymRA7Z8+Dq3yovvzT1WQmvGPxyzzwDWryEw82e34bkXC21BFqOwrBS/RpL5E8p ahfhASE0UrwEm13wqOL6BRi2qRS3JAJ4KSWEUpmmYwpdz1YJGn9bpuB2aZXc9fXO Y7FAAww7lK6HmKqsKbZFvOlpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMkLakOi7 r0ifkn/pDLB0ihsaIHYwHwYDVR0jBBgwFoAUvm13JvnXOebsmvk0fs7LQhevej8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVEMzVFLzIwOERGQzM2QUM0 MTExRUVCRUUyQTEzMkM0RjlBRTAyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm0xM0p2blhPZWJzbXZrMGZzN0xRaGV2ZWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE MzVFLzIwOERGQzM2QUM0MTExRUVCRUUyQTEzMkM0RjlBRTAyL3ZtMTNKdm5YT2Vi c212azBmczdMUWhldmVqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJSFKk14eevM6ktumHa1jo5W/x1dsBwvKUfhZpqN1JQiOfwQ+HUuc6Sh p1we35Xe5CO/rs3hrz9KFGtVjY52Hfs9QWpFXxgFgziK+ePrW59wNP6qGO5gLEbw jUDFcu7nLoD5BeesnasN8IidnFO/7goM/mARE1uebd/EMonebebA8VxJZOCY6baO LNvnGL8CMss70abvzFj2PhVdmX2FYpXa5ZICHP4M31AUdFygBfnRmHuKdC8IQec6 B3QLB0kn3AYCBIG0vxYmrZZjs3rKD1Z/yu1CpfNDMAnPSY5tserBAMKKdQxuKlEb Cwrcr6FzWyRbB6nZr7h1OJtKRjDp368= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org