$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: sp2gFRg52gXmLmky06oUXXsjXQ+3RZwg9G1KZ4X2hSs= Subject key identifier: 90:40:41:77:7D:7D:69:7D:B7:5B:F8:BD:89:8E:B4:8D:2E:EF:98:39 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 44 Signing time: Wed 15 May 2024 08:10:02 +0000 Manifest this update: Wed 15 May 2024 08:10:01 +0000 Manifest next update: Wed 22 May 2024 08:10:01 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: xI9PEA//W/bburXm9kcJnhDOu8t0DeVOV18xe+4SlEI=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: YYeRnwFaSoqXD/Tyyn3gdTiOsY7m0KcWw605LOpvHwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: May 15 08:10:01 2024 GMT Not After : May 22 08:10:01 2024 GMT Subject: CN=66446dda-4ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:b5:87:bd:11:1a:91:a1:1b:bb:d5:7a:a2: 67:80:23:51:9e:59:61:eb:de:88:38:39:fe:b1:8f: 16:d7:ad:07:b6:4d:db:d6:a1:60:b8:61:c6:c1:af: b8:27:47:32:4b:bc:d6:7d:72:40:49:82:0d:75:02: e6:8c:7c:58:55:21:5f:8b:dd:e0:fa:ff:c2:5f:b8: b5:0e:e3:d1:36:70:b1:ae:b8:5b:eb:f4:08:79:4e: 67:fa:c1:1c:5f:db:7f:f1:d0:32:d0:5c:f5:e0:df: a5:28:63:b3:1b:37:7b:18:bb:48:9a:35:de:58:6d: d4:f2:fc:12:6f:db:35:cc:0c:7c:01:98:b6:03:7a: 5e:c1:66:22:95:25:13:8d:d9:88:50:3d:d8:59:83: d2:73:eb:96:dc:38:9c:be:61:6b:fb:3a:81:6a:7e: 8f:b8:cf:56:c4:d5:5f:02:6a:e1:c1:a9:44:12:16: 70:85:51:42:62:8f:1b:7b:b6:cd:57:62:f6:20:7f: c8:49:83:02:0d:31:bf:d0:af:e0:39:71:f8:99:24: 15:f2:16:76:f8:56:b9:2e:96:92:f7:b7:4a:74:22: 00:ff:72:84:93:0c:30:53:1c:66:ac:9b:ad:67:e7: c9:d3:e6:ba:9d:c3:dc:7c:4a:2d:0b:38:81:a9:b2: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:41:77:7D:7D:69:7D:B7:5B:F8:BD:89:8E:B4:8D:2E:EF:98:39 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1e:1a:a9:c6:71:50:73:d4:3e:45:88:53:8d:d1:e0:15:f6: d3:5a:9d:27:28:8b:a0:f3:15:b2:94:e9:5a:fb:62:a4:85:0c: 99:3e:15:c1:61:42:d7:89:73:17:79:77:29:ed:18:b3:0f:81: b8:1a:44:88:5e:f8:02:a8:8b:44:9d:29:94:62:50:22:00:80: 09:12:52:5b:89:bd:51:79:38:68:19:09:a7:b1:91:ba:6d:b5: 09:69:9d:07:ce:5a:64:d7:cd:ab:27:5b:a8:dd:0d:97:64:cc: 72:0f:36:bf:2d:9f:24:5d:4e:2e:65:60:18:a5:26:99:c7:21: 18:d5:a9:c3:96:37:db:cf:ad:12:08:9d:68:e4:14:3c:fc:30: ac:9a:8b:55:71:f6:f8:86:60:31:3c:3b:94:81:12:ef:a5:a0: ab:7d:a2:1f:2f:68:ce:6f:1b:55:3e:97:0d:d7:1e:cc:6c:da: 5e:0b:33:6a:d4:12:bd:c6:7c:21:b2:b7:78:03:27:00:9f:0b: 6b:48:26:09:35:ea:d9:66:ae:f9:56:71:d3:c2:f0:b4:76:a6: 3a:e0:76:c6:92:7f:36:79:ae:bb:6f:1f:12:86:25:d9:82:a3: 0d:d6:6c:bd:de:8d:b1:2f:92:2a:fd:89:ae:22:15:0c:55:b7: 4f:50:c2:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjA4OTExMC8GA1UEBRMoNTQ4QzNDMDBCRTI5MEMxNjczREI2Njk5OTg1MjBENzIz Nzg0NDVDQjAeFw0yNDA1MTUwODEwMDFaFw0yNDA1MjIwODEwMDFaMBgxFjAUBgNV BAMTDTY2NDQ2ZGRhLTRlYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe5bWHvREakaEbu9V6omeAI1GeWWHr3og4Of6xjxbXrQe2TdvWoWC4YcbBr7gn RzJLvNZ9ckBJgg11AuaMfFhVIV+L3eD6/8JfuLUO49E2cLGuuFvr9Ah5Tmf6wRxf 23/x0DLQXPXg36UoY7MbN3sYu0iaNd5YbdTy/BJv2zXMDHwBmLYDel7BZiKVJRON 2YhQPdhZg9Jz65bcOJy+YWv7OoFqfo+4z1bE1V8CauHBqUQSFnCFUUJijxt7ts1X YvYgf8hJgwINMb/Qr+A5cfiZJBXyFnb4VrkulpL3t0p0IgD/coSTDDBTHGasm61n 58nT5rqdw9x8Si0LOIGpso4xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkEBBd319 aX23W/i9iY60jS7vmDkwHwYDVR0jBBgwFoAUVIw8AL4pDBZz22aZmFINcjeERcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMDg5LzBGODk2QUZBQUJE RTExRUU5RUYwREYzOEM0RjlBRTAyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkl3OEFMNHBEQlp6MjJhWm1GSU5jamVFUmNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MDg5LzBGODk2QUZBQUJERTExRUU5RUYwREYzOEM0RjlBRTAyL1ZJdzhBTDRwREJa ejIyYVptRklOY2plRVJjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGseGqnGcVBz1D5FiFON0eAV9tNanScoi6DzFbKU6Vr7YqSFDJk+FcFh QteJcxd5dyntGLMPgbgaRIhe+AKoi0SdKZRiUCIAgAkSUluJvVF5OGgZCaexkbpt tQlpnQfOWmTXzasnW6jdDZdkzHIPNr8tnyRdTi5lYBilJpnHIRjVqcOWN9vPrRII nWjkFDz8MKyai1Vx9viGYDE8O5SBEu+loKt9oh8vaM5vG1U+lw3XHsxs2l4LM2rU Er3GfCGyt3gDJwCfC2tIJgk16tlmrvlWcdPC8LR2pjrgdsaSfzZ5rrtvHxKGJdmC ow3WbL3ejbEvkir9ia4iFQxVt09Qwmc= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org