$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: g0r9eCXFPnf61l+1Hay/qE7PGWcX223pXG1urF/6ZBY= Subject key identifier: F5:D7:A8:1E:54:77:B3:12:04:C4:66:1D:05:1E:BE:DC:B2:05:0E:92 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 342E Signing time: Fri 26 Apr 2024 14:33:25 +0000 Manifest this update: Fri 26 Apr 2024 14:33:24 +0000 Manifest next update: Fri 03 May 2024 14:33:24 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: GmbXbScPd5oYIzBG9tEoBztgb9+Ja/Ddu1D2HpOcZkY=) 2: 2497F8E2B45F11EEBD511E2DC4F9AE02.roa (hash: 3JKgb1haTMm+4yaOEw/jiCfDrl3Y3Hza8BUNGTF6cQ8=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: uP3i0qS5LluMvfR2PfesmPxlO4qRQ5bVxk7dZvX0wPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Apr 26 14:33:24 2024 GMT Not After : May 3 14:33:24 2024 GMT Subject: CN=662bbb34-6fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:1b:5d:cc:79:9f:0e:cc:15:f9:d7:20:f3: bd:c7:81:2b:63:92:b6:46:bb:eb:53:69:6e:ce:bd: a9:58:8e:ff:ec:75:fe:cd:7e:a1:cb:10:cc:93:5c: 6e:7f:28:79:ec:3d:76:a8:93:e5:a9:4b:26:22:85: e3:bf:fb:e5:c3:d1:48:b7:c4:9e:f5:b9:4b:c9:dd: c9:0b:c5:28:17:0e:a0:87:b3:79:f4:54:9a:0a:5c: 6d:74:1d:b1:8a:a1:90:f9:0c:94:1e:eb:c2:93:8e: 8b:d5:ff:83:df:ef:1b:f3:17:34:88:6a:6d:e1:aa: 89:a8:3a:d1:89:ef:df:10:7e:26:e9:9c:f4:3e:99: 5a:49:e5:68:23:e1:39:70:16:9d:e0:47:82:74:99: 3d:d1:27:26:9b:05:6f:5f:59:6d:66:1e:00:9d:9a: 1a:14:72:9a:e8:a9:dc:93:77:88:b1:3b:db:04:28: 77:69:b2:7f:2d:e2:9c:a9:f4:9b:8f:d8:2a:3d:4c: 7f:d8:a6:7d:32:b0:f9:47:71:a1:ef:4d:8e:4e:7e: 6d:8b:8a:78:fa:a2:71:a6:19:cd:7d:57:72:05:a0: ce:19:e9:b9:22:eb:3a:ac:87:1e:62:3e:a5:23:df: d8:2c:90:79:3e:50:d3:13:d4:da:15:29:48:0a:36: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D7:A8:1E:54:77:B3:12:04:C4:66:1D:05:1E:BE:DC:B2:05:0E:92 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fa:c6:4c:ea:0b:8f:4d:71:15:02:45:6f:30:2c:aa:32:e8: 5a:3b:87:f3:da:1a:6d:3a:b8:d5:15:4c:0f:3a:56:ea:0c:a8: c0:d4:cd:4f:2a:9f:af:be:8f:63:4c:83:09:71:c8:5a:84:c2: 90:30:11:2e:b2:d0:5d:3d:46:ab:fe:df:b8:ec:93:fe:c9:a2: f6:a5:db:9e:71:bb:55:f0:4a:df:d6:f5:7d:44:cd:3a:30:0c: 58:33:17:de:60:b1:17:98:ca:32:4f:fe:69:ba:a1:1d:f6:23: 29:40:87:0a:ca:18:6a:41:c8:ed:ea:f9:c1:1f:7d:98:ad:64: 7f:80:14:5e:e3:f6:6a:05:13:f8:aa:55:a1:e4:6f:a2:89:7c: 02:e2:e3:a9:25:bb:70:0e:4a:f7:14:36:da:e5:92:50:77:e9: 6a:80:0f:fb:76:6a:43:56:cd:bc:84:84:da:24:fc:7c:a8:8e: 95:bc:62:55:04:69:06:58:f0:4c:8b:f9:50:f9:6e:51:14:4d: 36:95:91:53:f1:dc:d1:1c:e8:f7:39:02:38:ca:d9:ab:4d:15: 4a:26:b5:e0:29:76:26:0d:33:8d:d7:d6:ea:c4:cc:dd:b7:9a: 72:f5:75:0e:80:28:a0:07:9c:8d:e7:3d:0c:f0:9e:72:50:47: e0:ca:0a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjQwNDI2MTQzMzI0WhcNMjQwNTAzMTQzMzI0WjAYMRYwFAYD VQQDEw02NjJiYmIzNC02ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0n8bXcx5nw7MFfnXIPO9x4ErY5K2RrvrU2luzr2pWI7/7HX+zX6hyxDMk1xu fyh57D12qJPlqUsmIoXjv/vlw9FIt8Se9blLyd3JC8UoFw6gh7N59FSaClxtdB2x iqGQ+QyUHuvCk46L1f+D3+8b8xc0iGpt4aqJqDrRie/fEH4m6Zz0PplaSeVoI+E5 cBad4EeCdJk90ScmmwVvX1ltZh4AnZoaFHKa6Knck3eIsTvbBCh3abJ/LeKcqfSb j9gqPUx/2KZ9MrD5R3Gh702OTn5ti4p4+qJxphnNfVdyBaDOGem5Ius6rIceYj6l I9/YLJB5PlDTE9TaFSlICjZeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXXqB5U d7MSBMRmHQUevtyyBQ6SMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI+sZM6guPTXEVAkVvMCyqMuhaO4fz2hptOrjVFUwPOlbqDKjA1M1P Kp+vvo9jTIMJcchahMKQMBEustBdPUar/t+47JP+yaL2pduecbtV8Erf1vV9RM06 MAxYMxfeYLEXmMoyT/5puqEd9iMpQIcKyhhqQcjt6vnBH32YrWR/gBRe4/ZqBRP4 qlWh5G+iiXwC4uOpJbtwDkr3FDba5ZJQd+lqgA/7dmpDVs28hITaJPx8qI6VvGJV BGkGWPBMi/lQ+W5RFE02lZFT8dzRHOj3OQI4ytmrTRVKJrXgKXYmDTON19bqxMzd t5py9XUOgCigB5yN5z0M8J5yUEfgygrm -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:59 2024 by rpki-client on console-ams.rpki-client.org