$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft File: VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json) Hash identifier: S4REF/YfdH9FyMXx6xiuQpAFF9nfNQioBvB+/Ea5tVM= Subject key identifier: 70:20:BF:B6:E9:BE:9B:3E:AE:AF:A1:1C:75:8A:79:9A:22:B4:86:09 Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42 Certificate issuer: /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft Manifest number: DB Signing time: Fri 03 May 2024 06:02:48 +0000 Manifest this update: Fri 03 May 2024 06:02:47 +0000 Manifest next update: Fri 10 May 2024 06:02:47 +0000 Files and hashes: 1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: tPVt1sy1Bdlfa8NONZKuvy7eXcYGKYmE+UHfUMVvdHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842 Validity Not Before: May 3 06:02:47 2024 GMT Not After : May 10 06:02:47 2024 GMT Subject: CN=66347e07-fa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:2c:5b:bd:b0:6a:63:5c:d3:b3:1d:1f:51: ad:09:b8:89:40:8d:b7:25:7b:94:42:31:2d:5b:bf: df:a8:f8:8f:f1:ae:76:a0:af:cf:15:96:87:1d:e7: be:66:51:55:5d:d4:1f:ee:db:8f:f5:4a:9e:8d:f0: 9a:e0:0f:f4:da:b7:88:f9:40:96:9f:ca:34:26:83: c4:6c:00:63:d1:c3:43:bc:3e:17:79:7f:1b:40:a8: fb:07:6a:e8:55:4f:a6:b4:e9:42:5b:96:bd:9b:44: 11:d2:fd:5c:54:44:23:e5:20:2a:12:c4:9f:1d:0c: 3a:b0:f5:15:15:31:79:fa:9b:2c:3e:b9:95:28:ac: 06:aa:ec:71:e6:6a:7f:44:a3:56:17:e1:5c:84:b8: 55:28:6f:7c:19:c1:c0:fd:98:04:37:f5:1a:0c:7f: 33:7c:0e:3d:77:0c:c6:66:f4:45:58:8c:05:8f:26: f9:ef:47:be:78:af:6e:f7:f2:f0:61:1d:ce:e0:1e: 8a:21:21:fa:f0:37:a7:bb:6a:ad:f0:62:64:1a:5e: cb:3c:15:7a:a7:bc:87:57:e2:8f:9a:a7:d5:ae:37: 6c:7d:53:06:4b:f8:22:a0:76:70:39:4a:99:a0:56: 3a:28:26:9f:fe:34:b3:c1:a1:59:e8:ad:ef:cd:18: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:BF:B6:E9:BE:9B:3E:AE:AF:A1:1C:75:8A:79:9A:22:B4:86:09 X509v3 Authority Key Identifier: keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2d:fe:e9:65:01:a3:b9:01:73:f8:99:88:83:1b:dc:5a:ce: 76:7c:be:10:58:23:e3:c1:a4:af:f0:a9:bb:16:d8:4b:c0:b8: d5:4e:a6:c0:28:f8:6b:53:71:78:fa:59:8d:64:a2:0e:b8:6c: 7d:b3:d7:c6:73:d0:12:33:d4:66:a6:de:32:9e:8e:f2:81:ca: b4:0d:48:f8:37:0f:2a:f9:b6:22:5c:b3:3a:b5:79:89:e2:f5: 00:75:fd:04:4c:42:4b:0d:d3:0c:51:df:e2:e1:6c:fe:e5:29: b1:19:2a:9d:06:6e:c3:49:92:1b:e3:b4:60:b2:49:95:99:97: 13:85:87:ee:17:31:15:68:8a:15:d5:5c:aa:5e:97:33:4c:75: e8:b3:e6:5a:50:5b:6d:37:2e:68:d9:5c:41:7b:36:1b:c0:1f: 83:6d:ac:a5:12:1e:67:81:14:17:b0:bd:f5:37:f7:9f:f1:da: e3:d0:50:3e:63:9f:1c:af:3b:52:23:c9:28:69:10:39:39:5b: a8:44:4e:aa:97:bc:35:3e:92:ad:38:85:80:b6:7b:a1:f0:85: a9:e9:fd:27:2b:dd:78:31:28:9b:9d:24:3d:9c:45:54:fc:ef: 95:e1:d1:5d:af:2e:a7:84:ea:c6:8c:8a:18:a5:d3:1f:4e:a8: 03:9a:ed:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU5N0MxMTAvBgNVBAUTKDU3MDc0MTYyN0ZFN0NGRDU5NEVBMkY3RjQ0OTYxNkI3 N0MyQUM4NDIwHhcNMjQwNTAzMDYwMjQ3WhcNMjQwNTEwMDYwMjQ3WjAYMRYwFAYD VQQDEw02NjM0N2UwNy1mYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ocsW72wamNc07MdH1GtCbiJQI23JXuUQjEtW7/fqPiP8a52oK/PFZaHHee+ ZlFVXdQf7tuP9UqejfCa4A/02reI+UCWn8o0JoPEbABj0cNDvD4XeX8bQKj7B2ro VU+mtOlCW5a9m0QR0v1cVEQj5SAqEsSfHQw6sPUVFTF5+pssPrmVKKwGquxx5mp/ RKNWF+FchLhVKG98GcHA/ZgEN/UaDH8zfA49dwzGZvRFWIwFjyb570e+eK9u9/Lw YR3O4B6KISH68Denu2qt8GJkGl7LPBV6p7yHV+KPmqfVrjdsfVMGS/gioHZwOUqZ oFY6KCaf/jSzwaFZ6K3vzRhxTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAgv7bp vps+rq+hHHWKeZoitIYJMB8GA1UdIwQYMBaAFFcHQWJ/58/VlOovf0SWFrd8KshC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTk3Qy82M0ZGQjU2MEI5 MkUxMUVEOUNFRUYyMURDNEY5QUUwMi9Wd2RCWW5fbno5V1U2aTlfUkpZV3Qzd3F5 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3ZEJZbl9uejlXVTZpOV9SSllXdDN3cXlFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTk3Qy82M0ZGQjU2MEI5MkUxMUVEOUNFRUYyMURDNEY5QUUwMi9Wd2RCWW5fbno5 V1U2aTlfUkpZV3Qzd3F5RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChLf7pZQGjuQFz+JmIgxvcWs52fL4QWCPjwaSv8Km7FthLwLjVTqbA KPhrU3F4+lmNZKIOuGx9s9fGc9ASM9Rmpt4yno7ygcq0DUj4Nw8q+bYiXLM6tXmJ 4vUAdf0ETEJLDdMMUd/i4Wz+5SmxGSqdBm7DSZIb47RgskmVmZcThYfuFzEVaIoV 1VyqXpczTHXos+ZaUFttNy5o2VxBezYbwB+DbaylEh5ngRQXsL31N/ef8drj0FA+ Y58crztSI8koaRA5OVuoRE6ql7w1PpKtOIWAtnuh8IWp6f0nK914MSibnSQ9nEVU /O+V4dFdry6nhOrGjIoYpdMfTqgDmu1d -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org