$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: tI8oTD6IJWGFem7A/p2H4HWo5WEua/Y2BB/XI9PYpw8= Subject key identifier: 4D:E0:8F:19:B5:AC:D6:6E:C7:47:8F:DA:22:B3:5F:D0:15:BE:1A:99 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1169 Signing time: Fri 31 May 2024 18:10:37 +0000 Manifest this update: Fri 31 May 2024 18:10:36 +0000 Manifest next update: Fri 07 Jun 2024 18:10:36 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: oXCn7t6VxrDjz03LVXGgG0ytyIzyLnQ/NYOq7ufzGvo=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: idPv6x/QADhZ/UKyaBsX5e2LFcTraLnSbZhm1viIkJg=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: eI3aP7gs3lNpmRZa2OZTVxuNqlUXUI1pFH4qfvpr40k=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: WUKkOVjUPJeB8A93G+CWAsXxkjWP1idr48nPvgJFAq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4505 (0x1199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: May 31 18:10:36 2024 GMT Not After : Jun 7 18:10:36 2024 GMT Subject: CN=665a129d-bd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:6d:a6:53:1e:46:0e:4b:c8:04:d1:34:3a: bf:e6:e0:c4:40:8d:ae:43:b7:08:dd:72:42:12:1d: fc:fc:37:44:c3:3b:af:48:a2:f3:69:74:43:5e:d7: 5f:a8:8b:bb:4e:e8:dc:99:b7:f8:81:71:25:eb:1b: a9:d9:69:8a:34:1b:98:84:ac:fa:92:fc:58:2c:17: c4:33:41:51:45:d5:ed:80:63:d8:93:ad:dc:a2:31: f1:11:18:8d:59:36:12:eb:91:18:ab:54:aa:8c:47: 7b:1d:f7:bc:5a:ba:10:66:c0:96:1e:56:d9:7a:fa: f4:b0:40:d1:a7:ad:84:b8:b7:56:6a:b8:b3:b8:89: 0e:3e:02:8c:f9:1e:e1:a0:ae:1c:55:90:a6:35:09: 27:d0:52:cf:0c:1a:ac:d0:33:75:2a:27:e5:72:7d: a3:dc:67:fa:74:23:7d:41:54:22:ab:37:10:e2:3a: 55:fc:df:21:7d:a9:bc:1f:8d:ab:a2:cd:ea:e4:5d: 01:2b:09:a6:91:db:06:48:c3:08:59:83:ca:a1:c5: 15:6a:1b:7c:c6:c0:73:cd:bb:2e:83:f5:46:75:80: 2f:1d:38:7d:4d:b7:4d:a4:1c:a8:36:86:eb:84:82: f7:ba:39:bd:36:a7:1e:e9:3b:c6:da:27:ed:b2:d4: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:8F:19:B5:AC:D6:6E:C7:47:8F:DA:22:B3:5F:D0:15:BE:1A:99 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fc:e0:9d:92:c6:13:2a:f5:c7:7d:d4:86:d8:d5:1a:ea:7a: 4a:45:dc:a4:07:aa:7c:a9:9b:98:ac:eb:08:47:97:d3:fa:3e: ec:70:59:d7:96:6a:a9:92:fe:44:89:68:b9:69:5f:5f:ba:f7: 0a:64:9a:b6:fd:1c:bb:71:b3:f2:93:b7:ec:5f:1e:a6:37:44: 15:21:e8:3f:ac:87:d8:67:cb:08:31:4d:f7:b3:37:b3:c8:6d: 8a:7f:7d:b9:03:dd:d1:dd:dd:f5:18:0a:5c:0b:e3:9f:a4:52: bd:0e:b0:73:1f:86:4d:64:7a:15:39:b7:de:3f:ed:99:58:25: f6:73:21:d1:c9:e8:e5:e4:ec:53:63:96:74:28:d3:84:46:12: 6c:be:03:88:f6:80:a1:bc:cd:a1:21:b4:68:d8:7c:d0:79:af: f8:d4:11:e0:b7:50:73:4e:55:09:14:20:e4:19:0e:a6:e9:39: dc:f9:b9:62:b3:5a:c3:58:ca:d9:95:54:92:fd:a8:61:61:7d: 46:04:10:f7:8c:2d:7e:a7:72:60:82:2a:1d:49:d7:64:68:1b: 6f:a8:f8:24:eb:46:3c:7e:84:af:25:38:d7:a1:ab:af:1e:d3: 54:fb:85:33:c3:86:d4:c8:d1:a7:b7:78:f4:39:7e:45:35:20: ee:79:02:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjQwNTMxMTgxMDM2WhcNMjQwNjA3MTgxMDM2WjAYMRYwFAYD VQQDEw02NjVhMTI5ZC1iZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA699tplMeRg5LyATRNDq/5uDEQI2uQ7cI3XJCEh38/DdEwzuvSKLzaXRDXtdf qIu7Tujcmbf4gXEl6xup2WmKNBuYhKz6kvxYLBfEM0FRRdXtgGPYk63cojHxERiN WTYS65EYq1SqjEd7Hfe8WroQZsCWHlbZevr0sEDRp62EuLdWarizuIkOPgKM+R7h oK4cVZCmNQkn0FLPDBqs0DN1Kiflcn2j3Gf6dCN9QVQiqzcQ4jpV/N8hfam8H42r os3q5F0BKwmmkdsGSMMIWYPKocUVaht8xsBzzbsug/VGdYAvHTh9TbdNpByoNobr hIL3ujm9Nqce6TvG2iftstQP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3gjxm1 rNZux0eP2iKzX9AVvhqZMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX/OCdksYTKvXHfdSG2NUa6npKRdykB6p8qZuYrOsIR5fT+j7scFnX lmqpkv5EiWi5aV9fuvcKZJq2/Ry7cbPyk7fsXx6mN0QVIeg/rIfYZ8sIMU33szez yG2Kf325A93R3d31GApcC+OfpFK9DrBzH4ZNZHoVObfeP+2ZWCX2cyHRyejl5OxT Y5Z0KNOERhJsvgOI9oChvM2hIbRo2HzQea/41BHgt1BzTlUJFCDkGQ6m6Tnc+bli s1rDWMrZlVSS/ahhYX1GBBD3jC1+p3JggiodSddkaBtvqPgk60Y8foSvJTjXoauv HtNU+4Uzw4bUyNGnt3j0OX5FNSDueQJS -----END CERTIFICATE-----Generated at Fri May 31 20:34:05 2024 by rpki-client on console-ams.rpki-client.org