$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: 5ktnrhqktgHdBgxeh+nSFdis5ZW4zn7ntSxtDR4CKfY= Subject key identifier: AB:60:78:72:16:02:BE:B3:C7:7A:0F:6C:B7:65:4F:C2:41:40:C5:AA Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0A76 Signing time: Sat 04 May 2024 20:27:38 +0000 Manifest this update: Sat 04 May 2024 20:27:38 +0000 Manifest next update: Sat 11 May 2024 20:27:38 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: bJPwwM2548Dg3vuqyAAx3c07gvP0PBbXAXuODZuAoyk=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: nhMpD/JXznSkQ+02PS+rxM+C+Qbm8oAFaFIebB2YN8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: May 4 20:27:38 2024 GMT Not After : May 11 20:27:38 2024 GMT Subject: CN=66369a3a-82f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:67:5d:9b:86:c8:91:e4:66:8f:0c:5b:b6: b9:5d:a8:02:94:27:be:a2:26:b7:6b:df:ad:af:ad: 4c:83:7e:66:ac:60:43:5f:c9:68:15:f9:61:fe:f3: 39:8d:37:21:d5:cd:e2:65:17:5f:62:59:1d:fd:01: 46:48:8a:ce:b2:0d:1f:32:db:a7:c4:d6:9e:26:4b: ae:3c:b2:54:04:5c:dc:a2:87:4b:df:30:a1:0f:d9: 1e:12:aa:95:0d:e9:30:eb:95:c5:ef:19:94:00:e4: d2:8b:15:32:bc:cd:c7:2c:b8:f2:1d:92:4f:2a:15: 87:77:a1:9f:4e:01:b5:39:a6:e7:37:af:ed:1c:91: a2:e6:0b:94:5d:65:f5:bf:07:b3:ab:3c:a0:f2:5f: fc:ec:b9:b0:26:fb:82:a3:86:b7:7d:ec:7e:08:5d: d9:21:80:af:ff:23:a2:e6:a2:b1:be:c6:c1:23:1e: c9:44:36:c5:ac:8e:2d:b7:03:2f:0d:d7:e5:f6:3d: 7c:c9:ff:eb:7c:f7:cb:cc:03:1d:47:dd:6a:cf:24: 50:b0:33:76:ce:76:16:04:29:f9:3a:a1:85:48:4c: 61:b6:a9:71:c4:43:0f:32:f0:70:7d:65:78:90:14: 0c:80:87:38:bf:7a:93:fe:27:4e:83:7a:83:71:99: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:60:78:72:16:02:BE:B3:C7:7A:0F:6C:B7:65:4F:C2:41:40:C5:AA X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:80:05:69:f6:e2:d3:9c:8f:c8:7b:28:5a:45:23:fd:fd:17: 57:59:52:34:20:df:61:c5:76:95:31:0e:56:db:8d:58:fa:eb: ed:10:1a:fa:1b:95:07:5a:7f:30:19:a7:0b:05:a3:23:a7:0d: b7:72:1e:06:ac:4a:d6:09:d1:7d:c9:4b:0c:3f:8d:ff:f2:7b: b1:cd:78:4b:29:44:f7:81:ac:d1:dc:4d:75:68:59:15:6e:47: 33:34:be:5d:f3:bc:f8:d4:a6:a0:cb:62:fc:05:38:53:b5:cd: b6:fe:a8:38:8e:f2:a2:07:17:d2:b3:f5:73:6a:91:61:4c:8e: 05:2d:00:00:d7:fd:15:7a:50:d7:bf:75:a9:dc:53:b3:eb:2b: b5:65:4a:98:24:32:f3:28:23:ff:8e:69:6c:d6:c4:32:62:5f: 1a:6f:e6:e2:24:4d:b4:0a:7e:55:06:0e:90:bc:0c:42:22:50: f2:d6:a4:11:1a:59:5e:36:64:38:48:81:c0:b2:c4:d2:e7:86: 2e:73:3c:21:c0:90:83:32:d5:c9:fb:47:78:02:d5:5d:78:bf: 47:69:aa:f9:4c:68:e6:ed:a5:46:72:82:ea:e4:7d:c6:4b:5b: 4d:30:c1:18:e4:a2:18:20:d8:29:e5:43:80:fd:7a:fd:4a:e2: 80:22:cb:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjQwNTA0MjAyNzM4WhcNMjQwNTExMjAyNzM4WjAYMRYwFAYD VQQDEw02NjM2OWEzYS04MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtJnXZuGyJHkZo8MW7a5XagClCe+oia3a9+tr61Mg35mrGBDX8loFflh/vM5 jTch1c3iZRdfYlkd/QFGSIrOsg0fMtunxNaeJkuuPLJUBFzcoodL3zChD9keEqqV Dekw65XF7xmUAOTSixUyvM3HLLjyHZJPKhWHd6GfTgG1OabnN6/tHJGi5guUXWX1 vwezqzyg8l/87LmwJvuCo4a3fex+CF3ZIYCv/yOi5qKxvsbBIx7JRDbFrI4ttwMv Ddfl9j18yf/rfPfLzAMdR91qzyRQsDN2znYWBCn5OqGFSExhtqlxxEMPMvBwfWV4 kBQMgIc4v3qT/idOg3qDcZmVAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtgeHIW Ar6zx3oPbLdlT8JBQMWqMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxgAVp9uLTnI/IeyhaRSP9/RdXWVI0IN9hxXaVMQ5W241Y+uvtEBr6 G5UHWn8wGacLBaMjpw23ch4GrErWCdF9yUsMP43/8nuxzXhLKUT3gazR3E11aFkV bkczNL5d87z41Kagy2L8BThTtc22/qg4jvKiBxfSs/VzapFhTI4FLQAA1/0VelDX v3Wp3FOz6yu1ZUqYJDLzKCP/jmls1sQyYl8ab+biJE20Cn5VBg6QvAxCIlDy1qQR GlleNmQ4SIHAssTS54YuczwhwJCDMtXJ+0d4AtVdeL9Haar5TGjm7aVGcoLq5H3G S1tNMMEY5KIYINgp5UOA/Xr9SuKAIsuP -----END CERTIFICATE-----Generated at Sat May 4 21:19:28 2024 by rpki-client on console-ams.rpki-client.org