$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: 5UclkbwGGM/2QJ2zc93clMshu0tsjLEkXCin4dtxgvc= Subject key identifier: C3:F1:32:E9:6C:C2:30:7C:6C:48:1A:32:ED:33:E8:74:40:04:B5:E2 Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 04B7 Signing time: Thu 25 Apr 2024 01:31:46 +0000 Manifest this update: Thu 25 Apr 2024 01:31:45 +0000 Manifest next update: Thu 02 May 2024 01:31:45 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: ok8g4DIwyQCVM2uPbMGPBVYY0BqMQSq8EWuTNhzL404=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: Apr 25 01:31:45 2024 GMT Not After : May 2 01:31:45 2024 GMT Subject: CN=6629b281-da30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:41:dc:76:e8:a8:64:e3:50:01:53:e7:53: a8:d1:50:17:e7:63:80:87:ea:e7:67:88:3f:71:f1: 08:8f:2a:6b:cd:d7:8f:56:d9:6e:5c:6e:ac:2a:54: e5:fc:84:73:e7:58:97:97:3f:d4:72:d6:4f:22:1b: ce:6b:80:c3:b9:c1:0f:6f:a5:a6:ba:f5:6a:a6:fb: da:e9:b4:7c:e9:eb:15:1a:b8:cb:15:03:12:70:a1: a2:cb:5d:83:c2:71:50:08:ae:d4:5f:95:35:0a:9c: 86:a9:14:89:c6:6d:e0:6f:8e:03:f8:9c:22:3d:4c: 97:12:ca:be:d7:87:c0:cd:4d:3a:1b:67:41:14:1e: f9:73:83:09:99:94:37:9a:f7:41:f4:a1:70:ed:95: 7e:2d:10:be:cd:ca:db:ec:56:49:3d:11:17:9c:ad: cb:0e:06:40:b9:19:94:85:95:0e:c9:7c:d3:d9:e4: 7c:7d:0f:76:73:7a:77:cc:57:6a:96:01:f9:33:75: 2e:6b:53:8d:44:7d:ac:ef:ce:70:a9:e5:a9:39:0b: 0a:1b:a7:33:1d:18:6e:7d:4c:1d:26:c2:20:d3:bd: ab:94:60:1d:56:d5:e2:60:d5:8e:a7:4e:c1:5f:ca: fa:a8:ac:e8:a6:74:98:19:95:7f:1a:57:5a:eb:f0: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:32:E9:6C:C2:30:7C:6C:48:1A:32:ED:33:E8:74:40:04:B5:E2 X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3c:49:1a:4a:80:ac:b8:10:b3:bf:f9:4a:c9:38:e7:a8:94: 7f:a2:fc:f8:7b:e2:d1:93:66:26:bc:93:55:6c:cd:19:ac:70: 1b:78:c8:f0:8d:7c:98:61:3c:00:bc:f2:85:84:02:a1:a1:4e: ce:15:9b:8f:84:9e:d8:40:4d:4a:16:f5:58:54:25:d8:ad:ef: 47:dc:43:35:0a:ac:a6:fb:7c:90:00:d6:54:d6:ee:4a:27:8f: b6:60:68:32:fe:92:62:45:24:b2:da:c1:97:7d:bd:28:87:22: c5:82:72:2c:4e:a9:aa:2c:7c:7b:15:11:dc:c5:6e:ff:96:1d: 69:ff:98:17:86:cf:61:05:d8:49:37:9c:45:f3:83:9d:05:03: 4d:01:08:05:95:4d:2f:a0:cf:e4:59:17:ee:9b:83:ed:98:5a: 91:a1:13:f3:1a:df:99:c8:29:9f:a2:65:ff:05:98:bb:d2:d5: 89:5a:00:4c:e1:ed:8a:bd:e5:57:99:98:98:e4:6c:db:b8:ff: a6:03:5d:78:cc:ab:44:62:e3:dc:e5:16:17:a6:83:be:49:0b: 60:d0:3a:02:8c:ed:43:50:f1:ca:08:c8:07:c0:31:e2:43:75: 7a:50:de:6c:a7:77:05:6d:e6:87:32:e2:53:f1:0e:35:47:9a: 81:b5:c9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjQwNDI1MDEzMTQ1WhcNMjQwNTAyMDEzMTQ1WjAYMRYwFAYD VQQDEw02NjI5YjI4MS1kYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkRB3HboqGTjUAFT51Oo0VAX52OAh+rnZ4g/cfEIjyprzdePVtluXG6sKlTl /IRz51iXlz/UctZPIhvOa4DDucEPb6WmuvVqpvva6bR86esVGrjLFQMScKGiy12D wnFQCK7UX5U1CpyGqRSJxm3gb44D+JwiPUyXEsq+14fAzU06G2dBFB75c4MJmZQ3 mvdB9KFw7ZV+LRC+zcrb7FZJPREXnK3LDgZAuRmUhZUOyXzT2eR8fQ92c3p3zFdq lgH5M3Uua1ONRH2s785wqeWpOQsKG6czHRhufUwdJsIg072rlGAdVtXiYNWOp07B X8r6qKzopnSYGZV/Glda6/B2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPxMuls wjB8bEgaMu0z6HRABLXiMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACPEkaSoCsuBCzv/lKyTjnqJR/ovz4e+LRk2YmvJNVbM0ZrHAbeMjw jXyYYTwAvPKFhAKhoU7OFZuPhJ7YQE1KFvVYVCXYre9H3EM1Cqym+3yQANZU1u5K J4+2YGgy/pJiRSSy2sGXfb0ohyLFgnIsTqmqLHx7FRHcxW7/lh1p/5gXhs9hBdhJ N5xF84OdBQNNAQgFlU0voM/kWRfum4PtmFqRoRPzGt+ZyCmfomX/BZi70tWJWgBM 4e2KveVXmZiY5GzbuP+mA114zKtEYuPc5RYXpoO+SQtg0DoCjO1DUPHKCMgHwDHi Q3V6UN5sp3cFbeaHMuJT8Q41R5qBtcn2 -----END CERTIFICATE-----Generated at Thu Apr 25 02:05:26 2024 by rpki-client on console-fra.rpki-client.org