$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: uliG1Fwk8dLXT3lY6vH0TTCjKV4d52dLPrPAyHgZzek= Subject key identifier: 54:FB:ED:8C:A9:55:8C:61:CE:FB:96:61:BA:30:FB:3A:22:ED:C8:E4 Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 51 Signing time: Fri 17 May 2024 08:01:34 +0000 Manifest this update: Fri 17 May 2024 08:01:34 +0000 Manifest next update: Fri 24 May 2024 08:01:34 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: XaqrytT2eZzW8sjaMlxxmtNrJfP2W7waFZqwKEnA/Nw=) 2: FAA67378020211EFB3B6BB0CC4F9AE02.roa (hash: gMHUF5KkG8WzNCDqGykysNKLveU/mzXdaFPhJUxfK3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: May 17 08:01:34 2024 GMT Not After : May 24 08:01:34 2024 GMT Subject: CN=66470ede-82b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:20:7f:be:74:5f:3c:2f:87:83:84:1e:99: 90:fb:ae:2f:02:f2:32:30:5c:0e:2c:a0:13:c7:1c: 12:50:82:f0:e1:bb:77:4d:af:c8:2c:07:c0:1b:80: 98:36:20:8f:98:94:13:66:ef:d6:ea:e5:fd:4d:51: ee:e0:98:40:53:ee:3a:d6:57:d4:1d:be:bf:42:cd: a6:77:55:14:eb:73:a5:2d:a1:d2:27:36:60:88:42: 0a:7c:00:2f:e2:5e:ca:15:d7:15:1a:f5:17:10:80: 94:93:a6:2f:0a:0c:03:47:f4:fa:aa:c7:4a:1a:b0: 14:ce:2f:8c:9f:77:0b:84:8a:5b:25:9d:fd:0d:4a: 9e:0e:76:ba:a8:41:db:23:18:38:69:2f:a9:4a:ae: 89:97:2f:47:9d:63:ec:c5:42:10:5b:af:5f:55:36: f1:15:18:de:11:12:c6:c5:8f:1d:17:16:74:97:88: 14:22:7a:c0:b2:b1:79:5e:dd:ab:07:1c:a4:35:38: a9:1a:52:87:d7:c5:e7:83:9b:f1:51:ba:80:71:9e: 08:76:35:38:f4:83:9a:87:ca:dc:36:a2:17:38:fa: b3:a4:4c:d0:9f:10:d5:bc:c8:28:13:0b:28:95:dc: 0e:ef:00:93:5b:c6:cc:c1:93:3d:ed:7f:8c:90:7f: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:ED:8C:A9:55:8C:61:CE:FB:96:61:BA:30:FB:3A:22:ED:C8:E4 X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:89:43:24:54:f2:33:57:1a:c6:94:ea:7f:b1:11:1d:60:bf: e4:fa:95:79:6e:17:7f:c8:06:b7:53:36:f5:a2:91:14:5e:12: 31:f5:c1:28:86:ae:8c:04:fb:e1:4a:fc:d6:9c:e9:a2:2b:a0: 1c:92:2b:4b:ec:8e:ab:ae:e3:86:8c:fc:1b:3f:70:fb:d1:cc: 1b:60:6d:2b:87:ec:c2:71:14:b0:89:8f:03:35:bb:c8:e3:ce: ed:db:fa:75:36:35:b5:d9:cd:37:93:59:fd:0c:d7:60:b5:73: 60:2b:8b:9f:ac:b9:7d:cc:d2:1f:bb:0e:10:cb:34:75:eb:4e: d0:2b:5d:1e:bf:71:03:47:61:90:26:9c:aa:d4:9e:7a:c7:2b: bf:dc:97:e8:b8:c8:4d:a9:f1:57:fc:f4:11:b0:0b:1f:af:0f: de:53:af:9a:66:f5:d8:9e:06:63:a4:0b:4d:bf:04:f1:6f:3a: 02:4a:88:ea:14:d0:ec:ad:37:7f:eb:4a:cb:76:61:88:21:67: ee:a7:fc:7e:4e:26:37:a6:46:6e:9a:11:c4:6c:f6:3d:45:a9: f9:4a:e9:73:ce:c9:1d:66:67:68:c7:c7:9f:74:6f:fe:2c:4f: bf:b8:ee:75:0c:0e:4c:01:f4:a9:ca:9f:fa:b3:8d:6b:7c:86: a8:40:05:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0VCRDExMC8GA1UEBRMoQkU5MUYyMUM3QTBCQzA2NDM3RjNEQjVCMjE0MjA4Qzg3 NzRFRUJDRDAeFw0yNDA1MTcwODAxMzRaFw0yNDA1MjQwODAxMzRaMBgxFjAUBgNV BAMTDTY2NDcwZWRlLTgyYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgcyB/vnRfPC+Hg4QemZD7ri8C8jIwXA4soBPHHBJQgvDhu3dNr8gsB8AbgJg2 II+YlBNm79bq5f1NUe7gmEBT7jrWV9Qdvr9CzaZ3VRTrc6UtodInNmCIQgp8AC/i XsoV1xUa9RcQgJSTpi8KDANH9Pqqx0oasBTOL4yfdwuEilslnf0NSp4OdrqoQdsj GDhpL6lKromXL0edY+zFQhBbr19VNvEVGN4REsbFjx0XFnSXiBQiesCysXle3asH HKQ1OKkaUofXxeeDm/FRuoBxngh2NTj0g5qHytw2ohc4+rOkTNCfENW8yCgTCyiV 3A7vAJNbxszBkz3tf4yQf92hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVPvtjKlV jGHO+5ZhujD7OiLtyOQwHwYDVR0jBBgwFoAUvpHyHHoLwGQ389tbIUIIyHdO680w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRUJEL0NDRDgxNDI4OTlD MTExRUU5QTFGREUxRkM0RjlBRTAyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnBIeUhIb0x3R1EzODl0YklVSUl5SGRPNjgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RUJEL0NDRDgxNDI4OTlDMTExRUU5QTFGREUxRkM0RjlBRTAyL3ZwSHlISG9Md0dR Mzg5dGJJVUlJeUhkTzY4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyJQyRU8jNXGsaU6n+xER1gv+T6lXluF3/IBrdTNvWikRReEjH1wSiG rowE++FK/Nac6aIroBySK0vsjquu44aM/Bs/cPvRzBtgbSuH7MJxFLCJjwM1u8jj zu3b+nU2NbXZzTeTWf0M12C1c2Ari5+suX3M0h+7DhDLNHXrTtArXR6/cQNHYZAm nKrUnnrHK7/cl+i4yE2p8Vf89BGwCx+vD95Tr5pm9dieBmOkC02/BPFvOgJKiOoU 0OytN3/rSst2YYghZ+6n/H5OJjemRm6aEcRs9j1FqflK6XPOyR1mZ2jHx590b/4s T7+47nUMDkwB9KnKn/qzjWt8hqhABdQ= -----END CERTIFICATE-----Generated at Fri May 17 08:52:46 2024 by rpki-client on console-ams.rpki-client.org