$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: YCZxajvZBaJmQRdOxtMNAQKk+NTb2PRXrSsxtvnD+wI= Subject key identifier: A7:BF:E9:08:F0:67:B5:0A:5B:C9:9D:D6:15:85:D3:DF:BE:13:91:16 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0112 Signing time: Fri 03 May 2024 05:27:09 +0000 Manifest this update: Fri 03 May 2024 05:27:08 +0000 Manifest next update: Fri 10 May 2024 05:27:08 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: +qweqxh5OdT6U3vt8mTTHlbgyrjUFk0+3RfnoG2qC7I=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: TmtzZb9Ahn1mD8EfJHV6WD2K5Zur9oNLfrRAGYvQ+Pg=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: 2TLfJvxE/gpFV9gQ4u0MTMuVJgoGjSm8WYNCLQeCuTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: May 3 05:27:08 2024 GMT Not After : May 10 05:27:08 2024 GMT Subject: CN=663475ad-6de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:39:ae:27:28:6f:54:36:b9:a0:4b:cb:37: db:26:8f:e8:77:ab:ef:e2:bb:3e:10:87:e2:56:76: 9c:8c:29:92:3c:9f:18:39:b7:ba:2d:3a:17:3f:18: 90:5e:ac:d4:e1:f8:ed:e1:95:d6:2f:47:96:9a:4c: f7:fc:e4:de:7b:18:2a:f4:39:39:12:16:78:13:3b: 08:2b:5c:de:12:12:9c:a7:00:b4:d5:10:5b:18:f5: ca:cf:32:54:3e:97:fa:2d:9e:8f:28:0c:38:b0:a9: 6b:eb:f7:b4:23:8a:4b:46:57:e9:cc:17:81:5a:4a: b8:2e:9f:86:33:00:f3:0d:96:7d:39:35:e9:03:60: c8:33:b6:cf:d1:41:c9:ec:00:c2:69:53:9a:5c:b9: 9c:e3:f7:96:08:32:88:2d:35:47:a8:ab:52:e3:a8: 4c:07:c0:11:1e:e3:2b:c2:18:74:a9:80:37:f3:5e: d9:19:c1:dd:97:ae:3d:9a:87:8d:17:3e:3e:df:1a: bc:4a:00:77:8b:00:4b:1c:d6:3d:da:0c:a5:36:5a: 4d:48:ef:9c:4e:06:d9:2b:3c:d2:3f:67:1a:e7:07: fe:97:fe:b3:a7:4e:f3:b2:a2:8e:88:50:d4:fa:3c: 10:50:b2:75:18:d5:fa:5c:35:52:00:9b:f2:89:ad: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BF:E9:08:F0:67:B5:0A:5B:C9:9D:D6:15:85:D3:DF:BE:13:91:16 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:21:89:a8:4a:ad:93:b4:a0:61:a3:6a:3f:73:33:bc:be:3e: f5:2c:df:40:2f:6b:94:ff:5c:6d:35:82:32:60:ca:df:3e:f4: 82:4c:6d:77:27:d5:a0:99:4b:4f:95:e0:a6:82:96:f7:b4:e8: d6:83:d8:46:0c:03:67:4b:1d:df:50:f6:62:a3:ab:a4:6e:98: d5:91:3c:c9:57:09:e3:e8:de:0f:ff:c3:9e:a6:61:22:f8:a0: 53:62:5f:48:81:ab:e6:d7:c4:23:20:81:24:24:89:c9:e5:85: e5:78:85:50:54:45:a6:b3:c0:16:4e:77:9f:05:80:17:13:18: f1:e5:e7:91:0b:79:d4:e6:7e:bd:57:34:13:fb:17:8b:9f:93: 11:9c:de:f9:cb:4c:6d:bc:ab:16:50:9a:57:06:7b:0f:d1:46: 0e:d4:35:f6:2b:fd:1a:65:c7:88:37:56:fc:e3:78:30:f1:a0: 4f:9e:e2:ab:7f:8c:ad:38:b5:9c:2a:fd:59:69:8d:2c:d3:2c: b3:69:32:9d:4d:c4:86:af:23:59:3e:d3:93:d0:4a:e2:51:aa: 9c:72:15:df:5c:84:dc:e5:ea:6f:be:88:bc:8f:3a:fd:0c:fb: 97:dc:57:04:bc:b1:1d:41:96:86:50:b7:dd:24:c6:be:33:e1: 39:5f:74:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjQwNTAzMDUyNzA4WhcNMjQwNTEwMDUyNzA4WjAYMRYwFAYD VQQDEw02NjM0NzVhZC02ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDY5ricob1Q2uaBLyzfbJo/od6vv4rs+EIfiVnacjCmSPJ8YObe6LToXPxiQ XqzU4fjt4ZXWL0eWmkz3/OTeexgq9Dk5EhZ4EzsIK1zeEhKcpwC01RBbGPXKzzJU Ppf6LZ6PKAw4sKlr6/e0I4pLRlfpzBeBWkq4Lp+GMwDzDZZ9OTXpA2DIM7bP0UHJ 7ADCaVOaXLmc4/eWCDKILTVHqKtS46hMB8ARHuMrwhh0qYA3817ZGcHdl649moeN Fz4+3xq8SgB3iwBLHNY92gylNlpNSO+cTgbZKzzSP2ca5wf+l/6zp07zsqKOiFDU +jwQULJ1GNX6XDVSAJvyia0R6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe/6Qjw Z7UKW8md1hWF09++E5EWMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7IYmoSq2TtKBho2o/czO8vj71LN9AL2uU/1xtNYIyYMrfPvSCTG13 J9WgmUtPleCmgpb3tOjWg9hGDANnSx3fUPZio6ukbpjVkTzJVwnj6N4P/8OepmEi +KBTYl9Igavm18QjIIEkJInJ5YXleIVQVEWms8AWTnefBYAXExjx5eeRC3nU5n69 VzQT+xeLn5MRnN75y0xtvKsWUJpXBnsP0UYO1DX2K/0aZceIN1b843gw8aBPnuKr f4ytOLWcKv1ZaY0s0yyzaTKdTcSGryNZPtOT0EriUaqcchXfXITc5epvvoi8jzr9 DPuX3FcEvLEdQZaGULfdJMa+M+E5X3TY -----END CERTIFICATE-----Generated at Fri May 3 06:18:27 2024 by rpki-client on console-ams.rpki-client.org