$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: JZyFN7Ws32d47BLYci56HXEKVB3N2XB/h60ulpW7HZk= Subject key identifier: 15:B9:34:F4:A7:B5:DF:AA:45:C0:87:9F:3F:84:7A:37:32:82:F1:5A Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0A3C Signing time: Thu 02 May 2024 20:34:02 +0000 Manifest this update: Thu 02 May 2024 20:34:01 +0000 Manifest next update: Thu 09 May 2024 20:34:01 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: ChjfqySLvGD/EGVTWvg6WzvpVEUp4l24WsN1fHxFOMc=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: iutvKuQaedn8zzArd1Jct3I36yVud5lgd8KiFWg+ekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: May 2 20:34:01 2024 GMT Not After : May 9 20:34:01 2024 GMT Subject: CN=6633f8ba-ce2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:59:11:9a:20:d4:ad:15:3b:49:a0:fe:2b: 4d:c8:d4:d8:7d:47:1d:74:cf:92:43:13:92:fc:71: ba:b5:f3:ad:43:79:63:75:0f:65:08:90:97:97:25: f5:2a:8f:fe:50:1f:1d:30:fc:9c:ef:b9:e9:55:64: 22:22:33:b8:18:27:c4:54:b3:ea:0a:ec:b9:91:cb: 5a:5e:16:9e:b0:57:42:f3:5f:c2:f5:6d:cf:ea:64: 87:d1:a2:02:f5:f7:3d:61:26:a3:c1:02:7d:0d:af: 9e:6b:6b:b9:b3:eb:2a:c5:30:e9:6a:3c:74:be:dc: e6:e7:54:65:95:30:8c:22:d2:65:03:27:e9:16:81: c5:5c:9d:c9:e1:85:d3:ec:9f:57:4e:fa:fe:be:bd: 9b:1e:37:d9:8d:b7:09:81:b6:78:1d:b9:8d:e1:f1: 53:a4:de:27:e9:9c:56:d1:1d:eb:ee:1c:bf:b3:c6: 18:64:bd:8a:90:e4:cf:c4:f2:a4:f8:a9:52:3e:ea: b5:56:f1:82:ad:79:1f:e1:64:60:1e:ff:20:b4:ae: f4:f8:21:0b:9f:17:24:3e:b5:32:41:f3:22:29:b3: b8:07:80:f9:73:14:dc:b5:c9:77:ea:21:27:5e:8c: 92:e9:0a:cb:9f:d5:57:3e:e6:73:af:f4:40:c9:f1: d4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B9:34:F4:A7:B5:DF:AA:45:C0:87:9F:3F:84:7A:37:32:82:F1:5A X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:72:cd:32:7f:e8:d4:5e:0d:d7:b5:ef:cc:a6:20:63:03:d7: 47:21:af:66:54:1f:8a:41:76:62:07:6c:09:39:93:fe:80:a2: bb:88:09:a2:8b:6e:ef:fd:a2:a4:c6:b8:e7:69:b6:81:04:15: 28:8c:ef:b5:d6:4e:62:a7:da:32:14:dd:95:bf:45:54:2e:d1: 77:e6:bb:65:db:1a:2d:40:08:45:77:2b:48:2f:19:ea:20:32: b5:02:67:4d:75:c9:93:b1:89:f7:bc:55:99:49:e9:2a:96:28: 1e:e7:0e:cc:02:05:5f:4c:66:1c:41:e1:cb:1a:1b:5e:95:10: f5:aa:97:3e:69:78:c9:4e:87:49:99:f1:d4:f6:e6:66:a9:e8: db:15:74:78:6d:56:73:36:77:a0:49:b4:c3:bb:ca:ad:83:08: 72:d1:3c:29:db:fb:62:18:9c:12:b2:12:45:c1:13:25:68:31: 77:d7:8b:e8:10:1c:a1:46:15:ed:49:8c:ad:08:9c:3e:8b:63: 51:4b:1f:74:52:15:fb:7a:a3:80:21:a7:53:58:04:8a:f3:0e: e0:16:14:3d:dd:ec:ea:36:ae:c4:f0:fc:3d:46:f3:f1:20:e2: 34:dd:f7:46:53:7f:3c:ba:38:bc:1e:7b:4c:6f:17:f3:5b:02: c6:4c:61:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjQwNTAyMjAzNDAxWhcNMjQwNTA5MjAzNDAxWjAYMRYwFAYD VQQDEw02NjMzZjhiYS1jZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvdZEZog1K0VO0mg/itNyNTYfUcddM+SQxOS/HG6tfOtQ3ljdQ9lCJCXlyX1 Ko/+UB8dMPyc77npVWQiIjO4GCfEVLPqCuy5kctaXhaesFdC81/C9W3P6mSH0aIC 9fc9YSajwQJ9Da+ea2u5s+sqxTDpajx0vtzm51RllTCMItJlAyfpFoHFXJ3J4YXT 7J9XTvr+vr2bHjfZjbcJgbZ4HbmN4fFTpN4n6ZxW0R3r7hy/s8YYZL2KkOTPxPKk +KlSPuq1VvGCrXkf4WRgHv8gtK70+CELnxckPrUyQfMiKbO4B4D5cxTctcl36iEn XoyS6QrLn9VXPuZzr/RAyfHUGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBW5NPSn td+qRcCHnz+EejcygvFaMB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwcs0yf+jUXg3Xte/MpiBjA9dHIa9mVB+KQXZiB2wJOZP+gKK7iAmi i27v/aKkxrjnabaBBBUojO+11k5ip9oyFN2Vv0VULtF35rtl2xotQAhFdytILxnq IDK1AmdNdcmTsYn3vFWZSekqlige5w7MAgVfTGYcQeHLGhtelRD1qpc+aXjJTodJ mfHU9uZmqejbFXR4bVZzNnegSbTDu8qtgwhy0Twp2/tiGJwSshJFwRMlaDF314vo EByhRhXtSYytCJw+i2NRSx90UhX7eqOAIadTWASK8w7gFhQ93ezqNq7E8Pw9RvPx IOI03fdGU388uji8HntMbxfzWwLGTGGU -----END CERTIFICATE-----Generated at Thu May 2 22:13:15 2024 by rpki-client on console-fra.rpki-client.org