$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: oEfgi33zw4v1I51ot6A7wTKOxfuYsZe5kKBAwl1KH2s= Subject key identifier: F3:DD:14:47:7C:96:BB:B2:60:0A:9D:14:2E:15:DB:D3:82:AC:3A:1A Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 12A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 12A3 Signing time: Sat 04 May 2024 17:44:46 +0000 Manifest this update: Sat 04 May 2024 17:44:46 +0000 Manifest next update: Sat 11 May 2024 17:44:46 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: 8J6T4roOiA4Cvr4qLus+IcK3QW7EUqHRL2ZPp8rJKFo=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: b9DIzkKW2WLSIAExdEKuDKS/iyGmueWk0jLgxyfQChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4777 (0x12a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: May 4 17:44:46 2024 GMT Not After : May 11 17:44:46 2024 GMT Subject: CN=6636740e-b407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:01:a4:6a:e8:7e:ba:67:61:87:93:c3:db: 9f:1e:ff:b2:c6:54:09:b3:06:84:02:43:44:e6:f2: 5f:4e:af:e6:67:17:7b:dc:21:83:61:99:07:9f:a4: 72:cc:e7:4a:68:7e:e2:c3:01:0f:ec:57:50:86:b7: e7:95:36:d6:54:cf:3b:fe:75:51:5f:f2:bf:a2:b9: 14:f0:77:c4:f4:99:e1:02:c4:a2:09:8a:1a:79:1a: 95:e7:de:e9:04:63:88:ca:1e:1d:d5:15:44:4c:1c: d3:1e:3a:51:14:15:43:f7:89:4d:30:34:f2:b8:26: a1:03:67:8b:68:84:ae:b2:20:88:30:73:3b:18:51: 9d:9e:bf:df:7b:60:d6:47:38:04:ec:d0:38:c4:a9: df:97:1e:3f:d4:5b:24:cc:0b:eb:8e:6f:29:0c:81: 01:29:f2:15:7f:b9:38:0a:e9:95:03:9b:c5:e3:01: bd:d0:a2:7e:5d:9a:d4:0c:f1:44:66:58:1d:3f:71: a3:53:6a:c7:9c:bb:a6:1f:3a:cb:0e:31:50:90:03: 0f:3c:60:f2:b7:d0:3f:b8:93:ff:ea:90:23:65:4d: 61:70:82:1e:5c:cc:87:76:3f:bb:54:f3:52:db:35: 35:a3:c7:7b:a7:e3:f6:16:ea:f8:84:5d:a1:6b:40: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DD:14:47:7C:96:BB:B2:60:0A:9D:14:2E:15:DB:D3:82:AC:3A:1A X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6e:55:ee:3b:1b:f5:56:c9:55:47:f0:28:66:ba:23:13:95: cb:f2:f5:c3:46:b7:0d:25:a7:e7:2c:9d:51:8a:f0:70:c1:e5: a6:25:0e:fc:19:aa:9a:8d:d5:8d:ee:dd:6d:6d:11:cd:85:b6: 0c:e7:32:73:df:21:f0:04:c2:23:4b:dc:e2:cb:49:2a:3a:c6: b8:6d:e4:f1:14:ed:24:19:a5:66:84:1f:d4:e7:fa:83:22:17: 82:a0:a9:c1:be:9e:ce:6e:6b:a8:a4:6a:e9:42:d3:1b:10:91: d6:ff:f3:7a:6c:16:c3:68:d4:6d:46:da:06:64:78:b5:6c:cf: 16:dd:aa:51:2a:a8:49:ca:6e:b6:d9:c6:0e:f1:e6:84:30:5d: a3:0a:27:9c:65:0f:58:dd:99:ab:ee:e2:e7:56:1a:71:8f:45: c8:3f:3e:6a:2e:43:22:27:da:b3:e1:c0:da:b5:f0:5d:d2:8c: d1:12:7e:e9:ea:07:07:f5:70:b7:aa:48:de:94:42:7f:c4:02: 81:07:8a:d2:35:e8:0e:61:aa:0d:96:68:76:9c:cd:86:74:21: ab:d2:82:c4:e8:61:e8:e3:72:60:9c:77:4e:22:f3:cc:a3:37: 8b:f3:b9:57:81:2a:19:4a:50:26:c7:f9:f1:40:fe:98:56:d4: 36:bc:42:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjQwNTA0MTc0NDQ2WhcNMjQwNTExMTc0NDQ2WjAYMRYwFAYD VQQDEw02NjM2NzQwZS1iNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZsBpGrofrpnYYeTw9ufHv+yxlQJswaEAkNE5vJfTq/mZxd73CGDYZkHn6Ry zOdKaH7iwwEP7FdQhrfnlTbWVM87/nVRX/K/orkU8HfE9JnhAsSiCYoaeRqV597p BGOIyh4d1RVETBzTHjpRFBVD94lNMDTyuCahA2eLaISusiCIMHM7GFGdnr/fe2DW RzgE7NA4xKnflx4/1FskzAvrjm8pDIEBKfIVf7k4CumVA5vF4wG90KJ+XZrUDPFE ZlgdP3GjU2rHnLumHzrLDjFQkAMPPGDyt9A/uJP/6pAjZU1hcIIeXMyHdj+7VPNS 2zU1o8d7p+P2Fur4hF2ha0AtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPdFEd8 lruyYAqdFC4V29OCrDoaMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZblXuOxv1VslVR/AoZrojE5XL8vXDRrcNJafnLJ1RivBwweWmJQ78 GaqajdWN7t1tbRHNhbYM5zJz3yHwBMIjS9ziy0kqOsa4beTxFO0kGaVmhB/U5/qD IheCoKnBvp7ObmuopGrpQtMbEJHW//N6bBbDaNRtRtoGZHi1bM8W3apRKqhJym62 2cYO8eaEMF2jCiecZQ9Y3Zmr7uLnVhpxj0XIPz5qLkMiJ9qz4cDatfBd0ozREn7p 6gcH9XC3qkjelEJ/xAKBB4rSNegOYaoNlmh2nM2GdCGr0oLE6GHo43JgnHdOIvPM ozeL87lXgSoZSlAmx/nxQP6YVtQ2vEL1 -----END CERTIFICATE-----Generated at Sat May 4 19:58:38 2024 by rpki-client on console-ams.rpki-client.org