$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: eBy+Ow6I7ll+E5mvCR8t5Qwxobb5oiN8nXZZzA7Z6cc= Subject key identifier: 6B:CD:82:7F:EF:5B:3A:1A:0B:09:81:2B:D0:91:89:87:03:B8:25:54 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 047C Signing time: Sun 19 May 2024 01:40:47 +0000 Manifest this update: Sun 19 May 2024 01:40:47 +0000 Manifest next update: Sun 26 May 2024 01:40:47 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: 3brVIMJ9uXfrqhVTFdCpl9cpZhnqD4uyKrlTFrTAsPE=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: 1wCgN1Vdz8IxgVGd8lP79RUNCPrNtkM6T+hUatgaF5s=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: EL8qrYYkjLLsLn4vlWB8WNnpF1jgzXlPUP7HIco7dnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: May 19 01:40:47 2024 GMT Not After : May 26 01:40:47 2024 GMT Subject: CN=6649589f-57da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:7c:e4:b6:0e:6d:d2:81:f4:57:25:42:7e: aa:c7:85:c0:05:6b:64:65:7c:9a:7b:9f:ff:51:82: 71:64:2f:23:66:98:b1:ba:08:22:d9:d0:be:c1:4f: 60:63:75:58:9a:54:1e:3f:b5:74:8c:72:7b:29:2b: a3:21:d5:2b:ff:96:49:c9:39:69:de:e1:14:3e:4d: 3d:29:8b:c4:59:7d:d1:14:cb:71:d0:fc:9d:0b:e1: b4:f9:cf:d5:cf:dc:20:d6:e5:5d:00:db:f8:dd:0a: 82:3b:97:f6:2c:f0:7b:fa:78:74:02:bd:42:4e:9e: 4c:6a:fd:81:52:83:40:73:2f:ee:21:56:64:b5:72: 02:16:3a:93:fb:74:da:99:78:e9:95:3f:3c:5c:f9: ba:c8:db:af:2f:1a:8e:8f:fd:96:ce:c1:1b:2d:b3: 56:91:87:11:60:70:a1:d9:a9:eb:23:6a:84:fd:6a: 8b:2e:b0:ba:71:cd:15:86:a0:f7:cd:c8:1a:b3:00: c7:b1:d9:89:82:7e:0f:d1:42:3f:c4:68:58:02:5e: 82:61:81:62:66:28:f1:fe:c8:c9:21:49:f6:c2:fe: ba:a9:30:e9:35:3a:b1:19:8b:5c:c2:c5:a0:19:55: f3:38:45:86:14:b5:e5:a4:db:88:31:dd:81:d8:fd: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:82:7F:EF:5B:3A:1A:0B:09:81:2B:D0:91:89:87:03:B8:25:54 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:07:97:65:a7:de:76:5b:59:04:b5:ca:59:63:53:96:df:f1: 78:14:d2:22:47:5b:8d:8a:86:aa:90:24:da:d6:da:e2:b8:07: 06:f4:c2:0c:c2:cc:61:96:6a:94:6d:70:c6:96:4c:0a:68:a0: 1f:6f:9c:3c:57:1e:2c:c3:58:ab:24:d8:c1:13:14:48:1d:53: 62:2b:d7:3b:c1:a9:3e:52:c7:5d:db:d2:4d:6d:16:75:6c:f7: 51:a1:c3:2d:a6:4f:4d:d3:40:20:7a:0b:9e:52:f6:88:bc:41: 64:27:6b:63:10:c0:02:6b:65:3b:ab:eb:5a:d5:49:a0:c1:93: 65:96:0c:9b:dd:8d:65:20:75:11:75:cd:dd:b5:24:85:fe:e2: aa:77:b1:81:22:17:ef:7d:1c:45:33:d1:b9:f2:7f:86:aa:bb: c7:23:3a:f7:df:e4:f8:05:a4:2e:45:54:41:46:50:bc:67:38: 9e:10:b8:a6:02:09:63:ac:41:e9:fa:c7:1a:07:cc:91:3f:8d: 0f:e5:5d:70:de:e2:b6:5a:1d:bb:59:88:cb:dd:7e:69:30:f2: ce:c8:3c:b8:40:25:9c:8c:ba:e1:eb:61:90:9a:19:c1:0a:fe: 96:18:d2:19:e4:98:4b:24:4f:74:36:19:57:4e:3f:62:2e:d7: 87:a1:de:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjQwNTE5MDE0MDQ3WhcNMjQwNTI2MDE0MDQ3WjAYMRYwFAYD VQQDEw02NjQ5NTg5Zi01N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUJ85LYObdKB9FclQn6qx4XABWtkZXyae5//UYJxZC8jZpixuggi2dC+wU9g Y3VYmlQeP7V0jHJ7KSujIdUr/5ZJyTlp3uEUPk09KYvEWX3RFMtx0PydC+G0+c/V z9wg1uVdANv43QqCO5f2LPB7+nh0Ar1CTp5Mav2BUoNAcy/uIVZktXICFjqT+3Ta mXjplT88XPm6yNuvLxqOj/2WzsEbLbNWkYcRYHCh2anrI2qE/WqLLrC6cc0VhqD3 zcgaswDHsdmJgn4P0UI/xGhYAl6CYYFiZijx/sjJIUn2wv66qTDpNTqxGYtcwsWg GVXzOEWGFLXlpNuIMd2B2P2ZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvNgn/v WzoaCwmBK9CRiYcDuCVUMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcB5dlp952W1kEtcpZY1OW3/F4FNIiR1uNioaqkCTa1triuAcG9MIM wsxhlmqUbXDGlkwKaKAfb5w8Vx4sw1irJNjBExRIHVNiK9c7wak+Usdd29JNbRZ1 bPdRocMtpk9N00AgegueUvaIvEFkJ2tjEMACa2U7q+ta1UmgwZNllgyb3Y1lIHUR dc3dtSSF/uKqd7GBIhfvfRxFM9G58n+GqrvHIzr33+T4BaQuRVRBRlC8ZzieELim AgljrEHp+scaB8yRP40P5V1w3uK2Wh27WYjL3X5pMPLOyDy4QCWcjLrh62GQmhnB Cv6WGNIZ5JhLJE90NhlXTj9iLteHod66 -----END CERTIFICATE-----Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org