$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: w9RrrVIJiVGWBnTa/WOvB+c1cZWdiiFaaxGcx68neXk= Subject key identifier: 42:B1:C5:EB:33:C6:4C:B2:8D:84:8A:82:C4:13:F3:FF:A8:F4:0A:0A Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 012E Signing time: Sun 19 May 2024 05:29:46 +0000 Manifest this update: Sun 19 May 2024 05:29:45 +0000 Manifest next update: Sun 26 May 2024 05:29:45 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ANYj8aL8Ga9gF1+mX5S6RJiWtRljLkXtpSSgIc6teUg=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: 3WtNfIpLPBVnGFECfM4b/UME2G3LW5GJWdkPHLRf1l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: May 19 05:29:45 2024 GMT Not After : May 26 05:29:45 2024 GMT Subject: CN=66498e4a-7b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5f:2b:ce:62:04:3e:35:52:6f:f1:71:92:5c: 26:83:ea:0a:be:8f:36:8f:5e:da:67:85:76:2b:11: 92:09:33:71:9c:ef:1d:3f:02:29:05:83:fd:9b:95: 22:26:46:bd:0f:5f:7f:e2:51:5a:6b:10:2f:54:6c: 9f:a4:88:63:33:45:cd:b9:c7:31:22:34:d3:6c:2e: 87:21:00:47:cd:45:9b:3c:4a:ce:9a:ea:c3:c0:35: 8b:e0:c3:89:96:33:c7:4e:90:00:28:06:88:7a:66: 23:3b:ea:a5:99:b6:c7:5a:eb:96:3d:67:f0:7c:64: 78:e8:cf:f2:93:88:9d:ee:79:06:40:8a:47:03:da: 54:37:eb:a2:5e:cc:0c:c1:38:5f:f0:7c:66:9d:f7: d0:b6:21:2e:75:be:37:a9:bf:95:88:90:3f:06:43: f5:f3:91:7c:54:05:00:b0:de:73:e5:0d:24:8f:b1: 36:7d:e8:d8:09:31:d9:6a:71:ef:f0:e0:03:b8:e5: 1a:06:b5:82:d8:d1:ba:e9:c1:2b:5f:c5:0a:91:0e: c0:a5:6d:57:eb:f4:1e:66:46:ed:8c:90:51:1b:3e: b4:f1:6e:ae:3b:21:b6:7c:ae:74:31:71:bb:49:77: 8d:70:62:ab:84:8f:a4:0f:50:0f:c9:00:67:bf:e3: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:C5:EB:33:C6:4C:B2:8D:84:8A:82:C4:13:F3:FF:A8:F4:0A:0A X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:79:fe:6b:22:6e:ca:f1:24:50:8b:37:37:e7:07:b6:3a:12: 2b:9f:e4:ff:1a:e6:b7:dc:68:f4:ee:d5:f0:d5:65:f8:28:55: 65:17:d5:04:f3:f0:86:49:83:e3:01:2a:4c:18:6d:dc:69:6d: 6e:a1:c9:60:ab:7f:91:aa:c3:bf:0e:a7:07:1b:3f:55:c2:ee: 27:3f:8c:45:d8:dd:de:53:2a:af:d7:e1:9d:5e:75:47:a1:7e: 21:44:4d:02:b0:d7:e8:58:ea:43:20:1f:4f:35:3a:a4:fc:0a: d4:1f:f0:f1:00:a6:67:d2:4c:89:a3:b1:f6:78:68:51:68:51: 30:bf:2d:1d:e0:62:10:b8:8c:50:a9:8a:cf:e9:6e:84:f5:39: 2e:64:8d:ad:a8:4c:0d:49:f5:7d:de:7f:e2:b5:22:94:f2:87: 83:d0:87:73:0c:87:13:ad:95:93:24:90:cb:c6:f9:ab:ec:5e: f6:fa:ac:04:62:8d:a1:26:a8:04:fe:fc:a5:fa:0f:f0:3e:55: e5:48:82:a8:d3:db:fe:1e:2d:9e:7f:a7:b3:a3:24:3f:01:e9: 7a:ca:ac:35:7f:37:76:a8:9b:c9:13:2f:5d:29:4a:f9:75:bb: f7:c0:88:8d:26:a5:81:fc:8f:31:96:95:7c:2d:da:d0:f4:f8: 4e:42:a4:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RThBQzExMC8GA1UEBRMoQkVGMzIxQjAzRDgyNDVERTc3RUM4MEREMDMzMUJGQkE4 RDA4NTlEODAeFw0yNDA1MTkwNTI5NDVaFw0yNDA1MjYwNTI5NDVaMBgxFjAUBgNV BAMTDTY2NDk4ZTRhLTdiMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxXyvOYgQ+NVJv8XGSXCaD6gq+jzaPXtpnhXYrEZIJM3Gc7x0/AikFg/2blSIm Rr0PX3/iUVprEC9UbJ+kiGMzRc25xzEiNNNsLochAEfNRZs8Ss6a6sPANYvgw4mW M8dOkAAoBoh6ZiM76qWZtsda65Y9Z/B8ZHjoz/KTiJ3ueQZAikcD2lQ366JezAzB OF/wfGad99C2IS51vjepv5WIkD8GQ/XzkXxUBQCw3nPlDSSPsTZ96NgJMdlqce/w 4AO45RoGtYLY0brpwStfxQqRDsClbVfr9B5mRu2MkFEbPrTxbq47IbZ8rnQxcbtJ d41wYquEj6QPUA/JAGe/43W7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQrHF6zPG TLKNhIqCxBPz/6j0CgowHwYDVR0jBBgwFoAUvvMhsD2CRd537IDdAzG/uo0IWdgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOEFDLzUwMzhFQzhDN0RF QjExRURBN0NBNEE3RUM0RjlBRTAyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnZNaHNEMkNSZDUzN0lEZEF6R191bzBJV2RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OEFDLzUwMzhFQzhDN0RFQjExRURBN0NBNEE3RUM0RjlBRTAyL3Z2TWhzRDJDUmQ1 MzdJRGRBekdfdW8wSVdkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKN5/msibsrxJFCLNzfnB7Y6Eiuf5P8a5rfcaPTu1fDVZfgoVWUX1QTz 8IZJg+MBKkwYbdxpbW6hyWCrf5Gqw78OpwcbP1XC7ic/jEXY3d5TKq/X4Z1edUeh fiFETQKw1+hY6kMgH081OqT8CtQf8PEApmfSTImjsfZ4aFFoUTC/LR3gYhC4jFCp is/pboT1OS5kja2oTA1J9X3ef+K1IpTyh4PQh3MMhxOtlZMkkMvG+avsXvb6rARi jaEmqAT+/KX6D/A+VeVIgqjT2/4eLZ5/p7OjJD8B6XrKrDV/N3aom8kTL10pSvl1 u/fAiI0mpYH8jzGWlXwt2tD0+E5CpGI= -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org