$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: /WMJnSHdyG4UiB1MAW0aGkFo1s9pYgPzSZA4/EYH+Gc= Subject key identifier: CC:85:70:CD:1E:E5:D8:59:46:A6:FF:96:28:B4:78:C5:23:87:ED:DD Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 0718 Signing time: Thu 02 May 2024 22:41:25 +0000 Manifest this update: Thu 02 May 2024 22:41:25 +0000 Manifest next update: Thu 09 May 2024 22:41:25 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: flJRFfMqIieDU+m8OotnlY9i9fAFOzsTOopZZ6mDa8k=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: jRflQFWPi4kV+bkPUeWKaZQD+rNBEQSCBurPT19qSAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: May 2 22:41:25 2024 GMT Not After : May 9 22:41:25 2024 GMT Subject: CN=66341695-928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:a1:28:dc:cb:cd:0b:46:10:22:a0:90:ef: 3c:ac:56:89:22:d3:17:1b:fd:a7:da:55:94:55:96: c7:64:c6:1f:50:ec:60:28:6b:5c:67:fe:7b:37:e9: 51:c9:93:d2:30:b5:03:81:0b:0d:51:4f:90:11:91: 2c:68:65:e2:29:4e:57:df:57:75:65:36:fd:80:50: 41:22:b1:10:f1:f5:48:d2:58:93:2e:6e:bc:34:93: fa:a3:a6:91:e7:dd:c6:05:e5:f8:0e:da:81:03:02: 22:82:5b:c3:e3:ad:9f:10:db:a5:85:7c:77:bc:28: fa:47:03:31:e0:8c:3e:b4:b1:f2:b9:a4:fe:ed:2e: 09:5f:d2:5a:2a:9b:d3:7a:78:14:33:8a:f0:32:45: 13:e6:fa:e1:91:1e:85:07:c1:59:d0:7a:24:d3:4c: 87:8b:ce:54:50:21:4f:85:09:00:90:8f:bd:37:e5: d3:76:e6:b3:6e:7c:23:09:d6:48:30:e3:f3:60:c0: 90:f7:dc:c4:f9:dd:0a:d1:b2:a9:92:42:3e:f8:90: 15:7e:cc:2d:b6:c9:2e:8c:62:c0:51:b4:7a:37:19: 39:d3:e0:a8:52:49:3d:3b:47:b5:8a:61:61:12:09: d5:85:d8:d7:4c:da:3f:72:ec:8b:7e:e7:c2:aa:46: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:70:CD:1E:E5:D8:59:46:A6:FF:96:28:B4:78:C5:23:87:ED:DD X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ec:c3:f3:a3:8c:48:f3:ff:e9:b5:f2:27:0f:51:51:d2:f1: 3f:04:5f:8e:0e:62:cd:27:3e:d9:2b:70:af:a2:26:b4:49:c9: f8:5c:df:42:66:2f:e5:d1:c0:e9:83:c1:c0:98:76:05:98:c8: 6b:6b:b4:d8:de:eb:8a:9f:e2:5e:01:db:06:35:a4:bd:ca:fc: 06:88:0f:96:c4:60:00:28:15:16:45:df:04:8f:0d:df:1b:ff: ec:4f:ac:b7:9a:47:c1:ad:f6:03:67:ec:cb:78:1b:c3:49:cf: c3:45:96:4d:d9:c6:26:2f:54:cc:2b:95:59:af:89:4d:f4:4d: 0d:00:f2:26:48:10:a9:9f:8a:dc:9b:a9:6c:76:0a:05:65:5c: 98:a8:82:a4:72:4d:a5:48:21:ea:e4:ba:7c:b2:cc:46:80:42: b9:65:a1:65:5f:3c:52:f3:3e:01:57:c2:41:4c:dd:62:5b:a4: 21:a7:ac:86:27:6b:86:c5:d2:88:ec:0a:ae:31:7e:e9:9d:ba: c5:c4:46:ee:f7:4a:ae:94:63:a7:eb:82:7e:a1:b3:cb:a0:c4: ee:cc:bc:04:06:2b:74:ff:e1:a4:4b:42:55:ed:d2:d3:15:c2: 29:5a:1b:b9:30:34:a5:50:7d:e0:d4:4d:bd:0d:3e:b2:63:d6: ed:de:53:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjQwNTAyMjI0MTI1WhcNMjQwNTA5MjI0MTI1WjAYMRYwFAYD VQQDEw02NjM0MTY5NS05MjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VuhKNzLzQtGECKgkO88rFaJItMXG/2n2lWUVZbHZMYfUOxgKGtcZ/57N+lR yZPSMLUDgQsNUU+QEZEsaGXiKU5X31d1ZTb9gFBBIrEQ8fVI0liTLm68NJP6o6aR 593GBeX4DtqBAwIiglvD462fENulhXx3vCj6RwMx4Iw+tLHyuaT+7S4JX9JaKpvT engUM4rwMkUT5vrhkR6FB8FZ0Hok00yHi85UUCFPhQkAkI+9N+XTduazbnwjCdZI MOPzYMCQ99zE+d0K0bKpkkI++JAVfswttskujGLAUbR6Nxk50+CoUkk9O0e1imFh EgnVhdjXTNo/cuyLfufCqkY9bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyFcM0e 5dhZRqb/lii0eMUjh+3dMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA27MPzo4xI8//ptfInD1FR0vE/BF+ODmLNJz7ZK3Cvoia0Scn4XN9C Zi/l0cDpg8HAmHYFmMhra7TY3uuKn+JeAdsGNaS9yvwGiA+WxGAAKBUWRd8Ejw3f G//sT6y3mkfBrfYDZ+zLeBvDSc/DRZZN2cYmL1TMK5VZr4lN9E0NAPImSBCpn4rc m6lsdgoFZVyYqIKkck2lSCHq5Lp8ssxGgEK5ZaFlXzxS8z4BV8JBTN1iW6Qhp6yG J2uGxdKI7AquMX7pnbrFxEbu90qulGOn64J+obPLoMTuzLwEBit0/+GkS0JV7dLT FcIpWhu5MDSlUH3g1E29DT6yY9bt3lPG -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org