$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: welHQqqy0EXwsNtE91hcf2fymUTHj98AUx4Pm9XK9Nw= Subject key identifier: C6:67:36:7C:42:E6:2F:AF:FF:DC:4E:31:69:B5:1F:5D:E8:B3:09:A7 Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 0F59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 0F41 Signing time: Sat 04 May 2024 18:22:05 +0000 Manifest this update: Sat 04 May 2024 18:22:05 +0000 Manifest next update: Sat 11 May 2024 18:22:05 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: R49daHCrb1Er0rnhrpsqeMXLUzw0XCUTe7jm0DHm0b0=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: +WbgMiOydZaN1Ot/PF68zy9NORaLx5JjU1S1DCl6sIU=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: bbZvUB3rKE3TY3pN9/PZStir6c2eC/1aobFTaCcyREs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3929 (0xf59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: May 4 18:22:05 2024 GMT Not After : May 11 18:22:05 2024 GMT Subject: CN=66367ccd-b364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:e9:25:cb:25:e3:c8:72:e3:77:6c:0b:b9: 16:23:8c:9f:74:d4:29:33:1c:df:bf:d2:e7:35:b7: ce:45:08:ff:da:4a:fe:4a:80:8e:9b:3b:44:b1:ef: b9:ab:a9:43:4a:e0:40:31:3c:e0:11:f0:8f:30:90: d2:8b:f5:82:3a:c6:9c:0f:cb:45:c9:d4:9c:34:9c: a1:3f:bc:8d:21:4e:7b:6c:ef:9b:84:4d:5c:64:01: 92:f2:58:bc:49:78:20:c0:34:3f:f3:12:f9:b4:3a: a8:b7:27:77:27:71:2a:7f:7b:c2:a0:41:89:96:a2: c7:de:2b:be:f5:3e:dc:29:76:ae:04:47:c7:bd:a0: 48:60:91:33:b8:56:47:55:66:3f:dc:95:8a:36:94: 53:da:cd:8c:70:ed:da:2d:29:1c:07:dd:e2:4c:5d: a4:ee:85:80:18:9a:36:2a:b1:a3:e4:59:ee:11:c0: 2b:aa:69:c3:3a:f6:be:f1:62:8d:c0:ec:b2:88:b7: 28:2f:2a:09:2b:2e:66:ec:b3:cd:37:bf:ba:d7:fd: b3:d6:a5:64:3a:dc:d5:0b:2f:b2:31:ce:1d:e2:6b: cb:f4:93:99:56:1b:ab:4b:35:60:96:8d:da:73:21: 11:ea:6c:59:8d:74:e5:7a:a9:6e:65:3a:bc:39:42: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:36:7C:42:E6:2F:AF:FF:DC:4E:31:69:B5:1F:5D:E8:B3:09:A7 X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:e0:21:e5:a4:82:29:8f:1b:a7:08:e1:bf:9b:9a:27:ed:b2: 95:ae:57:bf:c2:ea:12:29:0c:2b:a3:c4:dd:ac:85:f5:e0:4d: de:31:1f:51:2a:70:4a:3a:58:96:2c:51:ed:17:e4:64:87:7c: 77:cb:3c:6a:8a:98:4b:e3:7a:e3:4f:58:ca:c8:a9:f0:a9:c2: c3:6d:59:be:06:3f:aa:0c:e1:0d:d3:b3:89:62:44:06:83:90: 72:e1:59:25:41:bc:96:85:c6:ff:d8:77:c8:49:d8:f6:19:11: 7e:90:ce:a4:ba:09:79:b7:4c:27:6a:09:0d:dc:bf:b7:1f:a8: 97:1c:f1:de:39:d3:f2:63:03:7c:51:e8:7a:da:b7:35:57:9e: dd:05:5b:49:0a:db:63:0f:4e:78:04:05:e5:38:c6:fe:2a:a0: 7f:be:0b:a3:2e:ad:73:d8:7c:ab:12:2e:b8:ad:62:f5:cd:21: 1d:e5:23:d4:b1:bf:63:9f:ca:c1:3e:80:16:47:8c:26:8b:a1: d7:93:38:e1:a7:5d:6e:d5:7c:09:89:22:8e:2c:ec:3d:bb:ec: 20:08:89:4e:a1:62:9d:dc:e6:f4:fd:df:e7:12:fa:59:8e:41: 84:50:78:a1:69:a9:63:f1:14:85:23:81:83:78:ce:85:42:8d: ce:ad:7f:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjQwNTA0MTgyMjA1WhcNMjQwNTExMTgyMjA1WjAYMRYwFAYD VQQDEw02NjM2N2NjZC1iMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CvpJcsl48hy43dsC7kWI4yfdNQpMxzfv9LnNbfORQj/2kr+SoCOmztEse+5 q6lDSuBAMTzgEfCPMJDSi/WCOsacD8tFydScNJyhP7yNIU57bO+bhE1cZAGS8li8 SXggwDQ/8xL5tDqotyd3J3Eqf3vCoEGJlqLH3iu+9T7cKXauBEfHvaBIYJEzuFZH VWY/3JWKNpRT2s2McO3aLSkcB93iTF2k7oWAGJo2KrGj5FnuEcArqmnDOva+8WKN wOyyiLcoLyoJKy5m7LPNN7+61/2z1qVkOtzVCy+yMc4d4mvL9JOZVhurSzVglo3a cyER6mxZjXTleqluZTq8OUKRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZnNnxC 5i+v/9xOMWm1H13oswmnMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT4CHlpIIpjxunCOG/m5on7bKVrle/wuoSKQwro8TdrIX14E3eMR9R KnBKOliWLFHtF+Rkh3x3yzxqiphL43rjT1jKyKnwqcLDbVm+Bj+qDOEN07OJYkQG g5By4VklQbyWhcb/2HfISdj2GRF+kM6kugl5t0wnagkN3L+3H6iXHPHeOdPyYwN8 Ueh62rc1V57dBVtJCttjD054BAXlOMb+KqB/vgujLq1z2HyrEi64rWL1zSEd5SPU sb9jn8rBPoAWR4wmi6HXkzjhp11u1XwJiSKOLOw9u+wgCIlOoWKd3Ob0/d/nEvpZ jkGEUHihaalj8RSFI4GDeM6FQo3OrX9N -----END CERTIFICATE-----Generated at Sat May 4 20:37:09 2024 by rpki-client on console-fra.rpki-client.org