$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: l+TeKChZkV4y9wKBI7jINfJN2imrKKRpzGTPKZcuWuQ= Subject key identifier: 31:47:AB:F1:A6:42:EB:A7:34:0C:3D:55:80:FF:65:C8:70:A2:E1:54 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 266E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 2657 Signing time: Thu 02 May 2024 16:00:39 +0000 Manifest this update: Thu 02 May 2024 16:00:38 +0000 Manifest next update: Thu 09 May 2024 16:00:38 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: bfUBRJu1R2Ww8QBUiXnNolj0gpbv9szU/mooK8ChfHE=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: 8T6+GpYGKPvpCT1aXj07WluTUhSqQG41Ny31YLC+lak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9838 (0x266e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: May 2 16:00:38 2024 GMT Not After : May 9 16:00:38 2024 GMT Subject: CN=6633b8a7-9f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:31:90:6d:05:c5:23:af:e3:95:7a:66:1b: 96:d0:03:4a:d6:0e:5c:ed:e6:e0:73:96:e6:5f:eb: 98:c5:0f:e2:c3:ac:67:34:7e:c9:08:e1:9a:57:e5: 77:43:d5:c2:60:f0:b2:2e:8a:13:05:a3:36:77:92: a4:e2:d8:d9:00:6e:43:73:11:33:21:ee:82:33:37: d3:32:b0:f6:ce:38:d3:bc:23:59:ea:c0:51:10:b9: b0:35:96:b5:5a:48:12:1b:ee:15:c1:de:83:5a:8e: 92:f0:d3:df:14:2d:d4:1f:0a:9e:91:56:c5:6f:9b: 8b:1f:c3:45:c2:de:c3:d2:88:ef:d7:55:0c:3f:2b: 10:60:b5:81:3c:09:56:2a:f0:b5:c6:21:43:03:6b: 29:79:d5:75:73:75:8c:72:17:91:5c:e6:5c:67:f0: 2d:09:9e:27:d0:25:8c:35:70:dc:d4:c0:ec:ce:85: bb:25:b0:75:e2:4a:a1:dd:65:c1:87:9c:16:fd:40: ce:76:56:d4:b3:98:5d:8b:63:c5:f5:8a:37:bf:42: 2b:05:ab:bb:0c:9e:f4:cc:6b:ce:35:bb:c8:0f:44: 90:8d:b0:fc:71:b4:34:a3:30:c5:df:89:c2:71:fd: 0a:30:d9:98:db:8d:64:b7:d9:1e:21:8d:59:e1:ab: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:AB:F1:A6:42:EB:A7:34:0C:3D:55:80:FF:65:C8:70:A2:E1:54 X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:93:09:1d:6b:ee:c2:e6:23:a6:36:8d:10:85:93:3b:4e: b9:04:5a:b9:7d:59:e6:8a:09:2c:8c:98:10:e5:d0:6f:04:cf: d7:b7:0c:f6:5b:d6:50:4c:92:a0:34:59:45:ee:5c:4f:ab:9a: da:c1:64:54:15:1d:89:b7:ea:9d:ce:2b:55:1b:a5:b5:26:e2: 7e:d8:29:02:3d:36:af:46:5b:5a:03:de:98:6f:cf:36:00:80: 7d:f8:ce:cb:77:44:ee:02:1c:99:8b:10:d0:77:40:e5:f2:de: 00:7f:9d:27:4f:19:05:4d:0d:84:75:52:6c:94:ed:82:d2:17: b6:12:45:02:cb:04:92:d2:4f:8b:94:c3:05:31:29:07:5f:6f: 18:13:3a:1f:bf:e3:2f:fe:36:59:5b:00:68:c4:4b:24:e0:a0: 7e:c3:6a:a9:20:fb:1f:07:15:9b:20:71:5c:2d:3e:c8:46:68: 60:fe:10:bf:54:68:39:26:de:fb:48:fb:af:f8:e0:d6:d2:55: 8d:4e:9d:f9:6c:12:2c:78:7a:00:a3:19:c7:88:2f:ff:e7:d3: 37:76:36:d4:5d:e5:40:56:ad:fb:93:b8:1e:95:17:9d:71:4c: 20:ff:26:42:91:e4:88:94:3f:bb:59:f0:12:44:e2:be:d3:b4: 50:42:f4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjQwNTAyMTYwMDM4WhcNMjQwNTA5MTYwMDM4WjAYMRYwFAYD VQQDEw02NjMzYjhhNy05ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BsxkG0FxSOv45V6ZhuW0ANK1g5c7ebgc5bmX+uYxQ/iw6xnNH7JCOGaV+V3 Q9XCYPCyLooTBaM2d5Kk4tjZAG5DcxEzIe6CMzfTMrD2zjjTvCNZ6sBRELmwNZa1 WkgSG+4Vwd6DWo6S8NPfFC3UHwqekVbFb5uLH8NFwt7D0ojv11UMPysQYLWBPAlW KvC1xiFDA2spedV1c3WMcheRXOZcZ/AtCZ4n0CWMNXDc1MDszoW7JbB14kqh3WXB h5wW/UDOdlbUs5hdi2PF9Yo3v0IrBau7DJ70zGvONbvID0SQjbD8cbQ0ozDF34nC cf0KMNmY241kt9keIY1Z4auO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFHq/Gm QuunNAw9VYD/ZchwouFUMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuQZMJHWvuwuYjpjaNEIWTO065BFq5fVnmigksjJgQ5dBvBM/Xtwz2 W9ZQTJKgNFlF7lxPq5rawWRUFR2Jt+qdzitVG6W1JuJ+2CkCPTavRltaA96Yb882 AIB9+M7Ld0TuAhyZixDQd0Dl8t4Af50nTxkFTQ2EdVJslO2C0he2EkUCywSS0k+L lMMFMSkHX28YEzofv+Mv/jZZWwBoxEsk4KB+w2qpIPsfBxWbIHFcLT7IRmhg/hC/ VGg5Jt77SPuv+ODW0lWNTp35bBIseHoAoxnHiC//59M3djbUXeVAVq37k7gelRed cUwg/yZCkeSIlD+7WfASROK+07RQQvTD -----END CERTIFICATE-----Generated at Thu May 2 17:18:26 2024 by rpki-client on console-ams.rpki-client.org