$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft File: vR2pHc9Y0IwVyUUayvYvirO-JCA.mft (raw, json) Hash identifier: sY7jf0y8mri79Mpj8Qp9wDQcHXIKiaP9Kb0lO0qy30g= Subject key identifier: DD:1B:20:99:47:6C:19:8C:AB:A1:79:6C:27:60:56:F2:CE:66:33:89 Authority key identifier: BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20 Certificate issuer: /CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft Manifest number: 02AC Signing time: Wed 01 May 2024 03:52:36 +0000 Manifest this update: Wed 01 May 2024 03:52:35 +0000 Manifest next update: Wed 08 May 2024 03:52:35 +0000 Files and hashes: 1: vR2pHc9Y0IwVyUUayvYvirO-JCA.crl (hash: wjVPPSrqB9lwbn4oTF+RZ0xaie38fO9x+u3eeSJewJI=) 2: 51C4917C2F1D11EDA3E29B09C4F9AE02.roa (hash: 1qWAIn6F9vGhO4BdvhObdHxn/58yUdbUg8nJsHtmQ6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420 Validity Not Before: May 1 03:52:35 2024 GMT Not After : May 8 03:52:35 2024 GMT Subject: CN=6631bc83-d3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:67:99:8c:83:f7:2a:99:ca:93:a0:d0:fc: 71:da:90:36:8c:08:2d:2a:2f:b9:97:62:8b:97:f1: 59:6a:5a:36:f5:15:99:35:fe:9a:ac:52:6b:50:5d: 34:63:6e:88:47:14:0a:b2:c6:57:ec:71:f1:0f:c4: e2:5d:49:61:e8:35:a9:0e:b6:07:94:a5:b2:d1:57: 55:16:5e:49:ae:2c:07:2e:8e:5f:28:46:20:91:20: 92:63:9f:e1:64:5c:a3:42:3d:ed:d7:96:ae:eb:cb: b3:8b:6a:d5:6b:11:a7:d2:1b:e7:c5:d8:60:4f:2d: 3a:7e:e1:70:1d:80:b8:24:e7:99:b7:9b:58:37:1d: ae:96:65:71:78:29:0c:d0:85:cd:e2:f9:8e:ca:5f: 79:0e:c4:e7:cd:56:db:a1:e9:48:38:bd:60:1b:d6: 21:9e:3e:07:e6:d6:07:5f:44:d5:c0:30:ef:ab:2b: 9a:92:6f:e1:2f:ff:45:d4:1b:b4:ae:a0:38:e4:9f: a4:b6:2b:d9:53:1d:37:f3:91:33:66:dc:8f:d1:8b: b3:4f:e4:26:5d:fb:36:ff:49:af:46:e2:ff:fc:2a: 60:8d:40:ef:0c:c4:93:46:3e:23:54:fa:c0:e1:0f: 7e:9a:18:28:6a:c0:14:e9:f5:f0:42:7b:f4:26:05: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1B:20:99:47:6C:19:8C:AB:A1:79:6C:27:60:56:F2:CE:66:33:89 X509v3 Authority Key Identifier: keyid:BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:f7:ab:a9:09:8a:0a:82:61:d9:09:a9:fa:af:ab:05:98:6d: 2c:5e:a9:aa:f9:8c:bf:58:17:09:20:48:8c:e0:00:3f:24:18: 5d:49:eb:d9:e9:e4:95:02:8d:b3:47:73:94:4f:3d:84:16:df: ae:98:e8:21:d2:d1:63:2b:36:20:73:ef:6d:92:4c:c4:37:b4: 01:9a:82:3b:ca:96:dd:e6:76:dc:8b:b2:dc:f1:b5:66:61:73: 40:eb:f0:d1:16:64:3c:fd:1e:c1:b9:e4:a9:98:47:d2:9b:23: 01:76:9c:02:ba:c5:cf:a2:d2:0d:24:f4:d7:70:8d:87:e1:f2: 70:b5:e7:3f:53:3a:4c:29:9a:e1:c1:31:9d:af:09:54:5d:d3: 69:bb:bb:f6:ad:02:f4:63:f1:f5:a1:16:db:18:2a:2f:7c:93: 7b:d9:2d:0c:37:de:9d:f6:ec:6a:41:9e:a2:f0:81:e2:c9:34: a0:a4:8c:7c:9f:7d:77:71:14:15:a3:5d:0c:17:ad:3e:1e:b8: db:b8:c7:36:fd:18:ca:4e:4a:94:9c:d9:d8:67:14:47:b8:4f: b5:de:c7:10:1c:4b:ce:56:92:72:fd:ce:30:8a:93:dc:d3:9e: 8a:51:c6:52:9f:2a:08:ef:f4:ed:be:b9:1d:d8:70:a9:c9:67: 96:c4:00:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZCNzcxMTAvBgNVBAUTKEJEMURBOTFEQ0Y1OEQwOEMxNUM5NDUxQUNBRjYyRjhB QjNCRTI0MjAwHhcNMjQwNTAxMDM1MjM1WhcNMjQwNTA4MDM1MjM1WjAYMRYwFAYD VQQDEw02NjMxYmM4My1kM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jZnmYyD9yqZypOg0Pxx2pA2jAgtKi+5l2KLl/FZalo29RWZNf6arFJrUF00 Y26IRxQKssZX7HHxD8TiXUlh6DWpDrYHlKWy0VdVFl5JriwHLo5fKEYgkSCSY5/h ZFyjQj3t15au68uzi2rVaxGn0hvnxdhgTy06fuFwHYC4JOeZt5tYNx2ulmVxeCkM 0IXN4vmOyl95DsTnzVbboelIOL1gG9Yhnj4H5tYHX0TVwDDvqyuakm/hL/9F1Bu0 rqA45J+ktivZUx0385EzZtyP0YuzT+QmXfs2/0mvRuL//CpgjUDvDMSTRj4jVPrA 4Q9+mhgoasAU6fXwQnv0JgU2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0bIJlH bBmMq6F5bCdgVvLOZjOJMB8GA1UdIwQYMBaAFL0dqR3PWNCMFclFGsr2L4qzviQg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkI3Ny9BNzVFRTJCOEFB NkIxMUVDOUM1NDYxMjFDNEY5QUUwMi92UjJwSGM5WTBJd1Z5VVVheXZZdmlyTy1K Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSMnBIYzlZMEl3VnlVVWF5dll2aXJPLUpDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkI3Ny9BNzVFRTJCOEFBNkIxMUVDOUM1NDYxMjFDNEY5QUUwMi92UjJwSGM5WTBJ d1Z5VVVheXZZdmlyTy1KQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX96upCYoKgmHZCan6r6sFmG0sXqmq+Yy/WBcJIEiM4AA/JBhdSevZ 6eSVAo2zR3OUTz2EFt+umOgh0tFjKzYgc+9tkkzEN7QBmoI7ypbd5nbci7Lc8bVm YXNA6/DRFmQ8/R7BueSpmEfSmyMBdpwCusXPotINJPTXcI2H4fJwtec/UzpMKZrh wTGdrwlUXdNpu7v2rQL0Y/H1oRbbGCovfJN72S0MN96d9uxqQZ6i8IHiyTSgpIx8 n313cRQVo10MF60+HrjbuMc2/RjKTkqUnNnYZxRHuE+13scQHEvOVpJy/c4wipPc 056KUcZSnyoI7/Ttvrkd2HCpyWeWxAAc -----END CERTIFICATE-----Generated at Wed May 1 04:49:22 2024 by rpki-client on console-ams.rpki-client.org