$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: vmQN0nr528w0r+H1v7tEsfBCajSVS2GHUVUl8t+k2T4= Subject key identifier: 57:06:78:46:13:12:37:ED:76:4B:2A:22:DA:8C:0B:E1:12:61:CC:C7 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 33FF Signing time: Mon 06 May 2024 15:10:09 +0000 Manifest this update: Mon 06 May 2024 15:10:09 +0000 Manifest next update: Mon 13 May 2024 15:10:09 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: XJ9CxIkfr4212639ZZeYboF7vaHWUbJH6gdOo9/wW+c=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: Rhnw6RJ6YIg0TkgswbAebLFktOS8eu4QvXzHJoAKQ4o=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: MDoU/JuIBzWyeNV1mWU+1cfbqy0SljZrseShx5ONDms=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: D7Yw1fFSNsmhzYYizrIWcgke3vd7oTvuVsShL3GgxW8=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: oHHg7bVGlcuVHigapoywJfWF7AaNUZbxOeF71G2cdao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: May 6 15:10:09 2024 GMT Not After : May 13 15:10:09 2024 GMT Subject: CN=6638f2d1-5c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:cd:68:02:5d:68:f4:72:2a:9b:6e:46:42: 04:77:a3:c3:0e:65:4a:95:0a:ee:a0:5b:c0:86:85: b4:31:01:b7:1e:86:5c:75:88:61:bc:4e:1a:db:78: 8c:3d:1f:2c:cd:eb:31:c0:b6:dd:b1:95:eb:2e:c2: 50:e1:2c:61:a6:6b:85:1b:38:a8:6f:fa:63:b6:a1: 18:6b:e9:09:f1:c2:e0:73:84:2f:8b:d6:18:13:ed: 01:69:aa:d0:74:e8:e7:7c:0b:15:46:a7:6c:f4:c9: 27:3d:4a:e8:2b:f9:d1:48:00:9c:a9:dc:bf:b0:dc: b4:da:7a:1b:cb:71:07:85:3c:b6:83:29:86:81:b3: b7:78:4a:df:e1:5d:a2:de:6e:bc:a9:25:c7:e1:43: 89:2d:ee:f4:93:43:52:48:23:1b:02:c7:ca:4d:5d: 4c:2c:96:2d:d5:c4:56:94:af:13:35:f8:69:e3:5e: 77:b9:93:b5:6d:d9:bb:4a:bd:a3:22:1d:d7:ef:b3: d1:06:eb:c2:0d:80:62:ce:e4:8b:d1:08:35:15:6e: 2d:47:cf:8b:fd:81:a5:3d:56:a6:9a:16:52:fb:1e: 9d:ea:8e:4f:ba:2b:1d:f2:5f:65:ff:de:ed:78:58: 35:83:98:c6:46:6e:11:64:fd:c1:50:77:aa:80:04: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:78:46:13:12:37:ED:76:4B:2A:22:DA:8C:0B:E1:12:61:CC:C7 X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ad:7d:13:63:27:d8:f1:c7:96:01:70:51:58:26:9c:3a:0d: f1:d2:06:39:67:4a:e2:ea:2b:68:4a:33:c7:12:00:55:df:3e: be:a9:3a:d2:45:95:6e:a0:bc:da:e8:f5:3a:d8:46:32:10:24: 1a:72:77:5d:b7:a1:c3:e6:1a:86:88:a1:c9:b2:39:7f:76:9a: 03:71:20:37:4d:43:6d:5b:aa:bc:64:a5:72:a8:3f:8c:42:eb: 3d:7e:e0:df:9e:aa:7a:35:da:fa:07:3c:30:0f:d0:4b:5f:e3: c7:30:91:8b:a2:9c:8d:9f:f3:56:0d:31:67:a2:00:57:8b:27: 1d:1d:46:05:34:e8:91:2a:3e:5d:74:9a:63:fa:cb:fc:e9:be: 58:e9:42:d2:05:7f:7e:ea:1d:b5:37:99:e1:19:fe:3f:8e:15: 5e:51:3a:d6:e2:ea:fb:0e:3e:9b:61:90:06:16:e3:34:ed:9c: d6:12:ba:46:8b:c2:35:06:50:f9:f8:49:81:b6:c5:c8:4e:93: 1d:c6:50:00:f4:85:ec:b9:9d:44:de:3a:85:64:29:f4:bd:92: 63:99:0a:37:7f:c5:d5:ec:b0:3b:42:43:68:be:31:10:c1:2b: 1a:c3:b0:ea:df:96:67:fd:6b:91:fb:a8:97:3d:a4:32:3f:d1: 64:3b:c8:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjQwNTA2MTUxMDA5WhcNMjQwNTEzMTUxMDA5WjAYMRYwFAYD VQQDEw02NjM4ZjJkMS01YzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsULNaAJdaPRyKptuRkIEd6PDDmVKlQruoFvAhoW0MQG3HoZcdYhhvE4a23iM PR8szesxwLbdsZXrLsJQ4SxhpmuFGziob/pjtqEYa+kJ8cLgc4Qvi9YYE+0BaarQ dOjnfAsVRqds9MknPUroK/nRSACcqdy/sNy02noby3EHhTy2gymGgbO3eErf4V2i 3m68qSXH4UOJLe70k0NSSCMbAsfKTV1MLJYt1cRWlK8TNfhp4153uZO1bdm7Sr2j Ih3X77PRBuvCDYBizuSL0Qg1FW4tR8+L/YGlPVammhZS+x6d6o5Puisd8l9l/97t eFg1g5jGRm4RZP3BUHeqgASRyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcGeEYT EjftdksqItqMC+ESYczHMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVrX0TYyfY8ceWAXBRWCacOg3x0gY5Z0ri6itoSjPHEgBV3z6+qTrS RZVuoLza6PU62EYyECQacnddt6HD5hqGiKHJsjl/dpoDcSA3TUNtW6q8ZKVyqD+M Qus9fuDfnqp6Ndr6BzwwD9BLX+PHMJGLopyNn/NWDTFnogBXiycdHUYFNOiRKj5d dJpj+sv86b5Y6ULSBX9+6h21N5nhGf4/jhVeUTrW4ur7Dj6bYZAGFuM07ZzWErpG i8I1BlD5+EmBtsXITpMdxlAA9IXsuZ1E3jqFZCn0vZJjmQo3f8XV7LA7QkNovjEQ wSsaw7Dq35Zn/WuR+6iXPaQyP9FkO8iY -----END CERTIFICATE-----Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org