$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: fVIHGxjsAjm8VxPR8N4e7D7YCZUjT0HE67zPbzKuWDw= Subject key identifier: 31:76:68:38:36:F9:44:40:D5:22:70:3F:EC:BB:19:F0:A3:2B:12:48 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 20B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 20AE Signing time: Sat 04 May 2024 16:19:26 +0000 Manifest this update: Sat 04 May 2024 16:19:26 +0000 Manifest next update: Sat 11 May 2024 16:19:26 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: DweqyAAIMf9sztdwcHieH78Wk25N9yfogQF/5u2ux/M=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: L9gCg+OrTuiqw6ExvZDK6OLjojljMO3J6dRtRl48yx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8376 (0x20b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: May 4 16:19:26 2024 GMT Not After : May 11 16:19:26 2024 GMT Subject: CN=6636600e-028a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:0e:d9:ed:70:3a:8f:6f:b3:73:7c:40:db: 5d:37:f9:f0:a9:ae:e6:40:7a:d6:2b:86:87:9b:ba: ef:d8:e7:0a:55:f7:5f:8e:26:9d:7b:c0:f8:27:3a: b2:1d:40:a7:7e:1d:69:91:3a:28:52:32:96:53:12: 15:1b:52:f5:14:a6:f4:ae:8a:f4:9f:27:4e:4c:11: 3b:96:44:fb:4a:a0:69:f9:44:f5:7d:e4:64:c3:13: 0e:1e:f5:19:de:0e:d6:7f:70:1c:09:40:e9:1d:fa: ab:ae:8f:be:99:ef:af:b4:ec:e8:f6:8b:bd:2f:63: 10:6b:72:d4:c6:05:4c:21:f8:67:58:ac:ba:f2:44: b9:09:38:75:3c:0f:fa:0b:5b:d5:03:3a:c7:d4:a3: 92:95:11:85:66:35:02:f9:2d:18:18:ea:01:44:13: b0:a3:df:59:ac:f9:89:fb:f7:23:38:f9:1c:66:41: 15:fa:79:b7:4b:6c:aa:e6:0a:a9:99:cb:7c:87:2c: c7:c4:18:98:ea:10:19:78:87:f7:10:ef:c9:c2:44: 33:96:8b:88:cc:f3:72:e4:9a:e2:9f:9d:d4:26:bc: 4d:e0:db:2f:b9:75:66:fc:a3:62:da:b2:d0:82:4a: f9:ae:5d:a6:86:a8:db:dc:cf:1d:86:9d:2e:dd:f4: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:68:38:36:F9:44:40:D5:22:70:3F:EC:BB:19:F0:A3:2B:12:48 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:19:7c:03:bc:07:06:58:0a:da:29:53:70:b2:c6:7f:ef:7f: 8f:cd:92:05:7d:55:17:83:83:de:aa:c6:5d:4f:e7:62:27:68: 48:0f:38:cd:ad:48:bb:d3:09:c0:d6:b7:70:4b:3a:c6:27:73: eb:a7:d2:1e:64:47:fd:ca:3e:6f:90:29:7e:78:e6:5c:37:16: 32:09:19:c8:c9:4e:e7:e2:7f:2e:69:ce:08:54:91:38:c0:ed: f5:12:dc:cb:0e:bd:fc:ff:99:80:ea:76:d6:be:c7:09:31:71: 7a:68:4d:57:24:a4:08:24:bf:4c:e2:94:2c:9e:ae:6a:a8:93: 7b:91:c2:2c:2a:7b:db:41:c6:79:30:02:29:88:ca:d0:04:0e: 85:3c:76:65:03:82:24:78:63:da:54:57:53:68:0b:30:47:13: 9f:45:e2:58:4e:4e:74:12:20:41:30:f4:81:b6:22:40:c2:5f: e9:c6:a5:de:3b:10:eb:5d:32:8c:1e:7b:42:ad:dc:46:e3:af: ac:92:a1:e9:6e:01:26:2f:9b:69:c9:4e:17:3d:8a:b3:67:43: 15:dc:ec:35:d5:15:2b:c2:45:70:0c:cb:76:92:e6:1f:c1:17: 9a:35:40:df:fc:cb:6e:4e:dd:ba:6f:73:5b:86:23:cf:12:ca: 6f:eb:33:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICILgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjQwNTA0MTYxOTI2WhcNMjQwNTExMTYxOTI2WjAYMRYwFAYD VQQDEw02NjM2NjAwZS0wMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32MO2e1wOo9vs3N8QNtdN/nwqa7mQHrWK4aHm7rv2OcKVfdfjiade8D4Jzqy HUCnfh1pkTooUjKWUxIVG1L1FKb0ror0nydOTBE7lkT7SqBp+UT1feRkwxMOHvUZ 3g7Wf3AcCUDpHfqrro++me+vtOzo9ou9L2MQa3LUxgVMIfhnWKy68kS5CTh1PA/6 C1vVAzrH1KOSlRGFZjUC+S0YGOoBRBOwo99ZrPmJ+/cjOPkcZkEV+nm3S2yq5gqp mct8hyzHxBiY6hAZeIf3EO/JwkQzlouIzPNy5Jrin53UJrxN4NsvuXVm/KNi2rLQ gkr5rl2mhqjb3M8dhp0u3fTi7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF2aDg2 +URA1SJwP+y7GfCjKxJIMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5GXwDvAcGWAraKVNwssZ/73+PzZIFfVUXg4PeqsZdT+diJ2hIDzjN rUi70wnA1rdwSzrGJ3Prp9IeZEf9yj5vkCl+eOZcNxYyCRnIyU7n4n8uac4IVJE4 wO31EtzLDr38/5mA6nbWvscJMXF6aE1XJKQIJL9M4pQsnq5qqJN7kcIsKnvbQcZ5 MAIpiMrQBA6FPHZlA4IkeGPaVFdTaAswRxOfReJYTk50EiBBMPSBtiJAwl/pxqXe OxDrXTKMHntCrdxG46+skqHpbgEmL5tpyU4XPYqzZ0MV3Ow11RUrwkVwDMt2kuYf wReaNUDf/MtuTt26b3NbhiPPEspv6zNu -----END CERTIFICATE-----Generated at Sat May 4 17:44:37 2024 by rpki-client on console-ams.rpki-client.org