$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: LgVUmEQcy98jl56DdzdEu5HjGYPX63xyPoDkNdvgFYA= Subject key identifier: D2:A6:D9:D8:CC:7E:14:53:27:7F:BA:96:1C:F1:07:61:B4:1F:CF:3D Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 0428 Signing time: Tue 07 May 2024 01:59:32 +0000 Manifest this update: Tue 07 May 2024 01:59:31 +0000 Manifest next update: Tue 14 May 2024 01:59:31 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: cPJkln9it7iOP6m0NY9/hfL9/wE68E3cQMo5FWFbpvI=) 2: 9CC8124414FB11EC89900016C4F9AE02.roa (hash: L9ByBSMnmm41va02qVJXM+dBik+O13VTmuGx9vauK90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: May 7 01:59:31 2024 GMT Not After : May 14 01:59:31 2024 GMT Subject: CN=66398b04-78ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:46:14:9b:0a:2b:61:df:4a:50:e8:06:6f: 06:bb:99:04:3b:38:72:88:f5:ec:50:2e:43:03:a7: cc:5f:04:7e:68:58:28:3b:57:d4:df:c2:19:9b:00: 98:0a:96:76:a2:a4:26:5d:63:52:91:5d:f4:a1:ec: 28:85:8c:c2:34:0b:d1:61:62:80:1f:b2:1a:9c:3b: ed:a7:2b:bb:8f:be:75:8a:bf:c3:35:33:da:5a:cd: de:72:67:39:cc:12:ec:f0:9a:9f:fa:2e:66:83:9d: da:8e:cd:fe:58:18:cd:cf:7e:33:20:a3:1f:3c:bc: 80:a3:f3:b2:eb:f2:18:40:59:7f:57:ec:d0:ab:03: b1:70:5f:7c:0e:02:5a:bc:52:5f:0a:32:d5:73:ea: 9e:8a:21:7c:72:b9:3c:a5:bf:0d:2a:07:47:20:ec: 08:3a:be:fc:45:48:82:4a:52:38:69:54:b4:15:8a: cc:a5:69:af:18:79:b0:86:1f:5a:a7:ee:5d:f5:af: d7:d5:4c:59:d2:19:78:bd:f1:bd:56:cf:fe:75:31: 33:94:45:c5:c2:8c:64:9d:f5:42:44:73:19:c8:b7: f9:91:3f:ce:2b:06:a3:84:29:82:ca:79:98:40:06: 55:1a:c5:93:73:cc:fa:8e:48:72:3f:1f:95:39:7a: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A6:D9:D8:CC:7E:14:53:27:7F:BA:96:1C:F1:07:61:B4:1F:CF:3D X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:fa:71:d5:18:90:65:ce:da:6d:43:f4:2c:8c:1f:5a:52: cc:c7:65:50:a1:47:b7:b5:b1:59:b0:75:e4:ac:70:3d:0c:6e: ee:82:f3:e1:04:5c:69:f8:13:aa:4a:0d:85:cc:3b:f2:89:e6: de:b6:c9:00:66:8d:32:7b:40:0a:81:49:1c:7f:a0:70:29:a3: 0b:6e:4a:b2:6f:9d:a9:f4:b0:19:38:06:b5:3d:7b:39:51:12: 9b:69:fb:0d:7e:c0:7b:ae:56:d9:2b:47:63:23:e3:53:44:f8: 72:0d:bd:71:4b:4e:a8:25:37:36:69:70:bb:6f:5c:34:7d:31: 3b:f8:89:e3:66:01:8e:82:a7:5e:4f:a6:d3:e2:5b:81:d8:d6: fc:e7:70:5f:c4:3f:0f:3e:e6:7d:e3:ce:4b:f2:41:74:bd:cc: 9a:de:77:53:b5:e5:5f:03:79:c4:b0:64:54:be:1a:ad:e8:49: 09:28:74:d7:3b:11:f5:6f:02:ec:b1:db:92:71:c8:9d:fe:9c: aa:c7:15:38:79:19:1b:71:d3:b0:d8:df:e3:1a:46:af:97:93: 62:f6:cb:c2:38:8c:a0:da:9d:95:0a:a4:30:91:0e:4a:8d:9a: ec:e8:3e:93:ef:5d:94:46:95:dd:a2:4e:18:83:d5:63:b7:c2: 4c:fa:e4:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjQwNTA3MDE1OTMxWhcNMjQwNTE0MDE1OTMxWjAYMRYwFAYD VQQDEw02NjM5OGIwNC03OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8hGFJsKK2HfSlDoBm8Gu5kEOzhyiPXsUC5DA6fMXwR+aFgoO1fU38IZmwCY CpZ2oqQmXWNSkV30oewohYzCNAvRYWKAH7IanDvtpyu7j751ir/DNTPaWs3ecmc5 zBLs8Jqf+i5mg53ajs3+WBjNz34zIKMfPLyAo/Oy6/IYQFl/V+zQqwOxcF98DgJa vFJfCjLVc+qeiiF8crk8pb8NKgdHIOwIOr78RUiCSlI4aVS0FYrMpWmvGHmwhh9a p+5d9a/X1UxZ0hl4vfG9Vs/+dTEzlEXFwoxknfVCRHMZyLf5kT/OKwajhCmCynmY QAZVGsWTc8z6jkhyPx+VOXpetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKm2djM fhRTJ3+6lhzxB2G0H889MB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/Ppx1RiQZc7abUP0LIwfWlLMx2VQoUe3tbFZsHXkrHA9DG7ugvPh BFxp+BOqSg2FzDvyiebetskAZo0ye0AKgUkcf6BwKaMLbkqyb52p9LAZOAa1PXs5 URKbafsNfsB7rlbZK0djI+NTRPhyDb1xS06oJTc2aXC7b1w0fTE7+InjZgGOgqde T6bT4luB2Nb853BfxD8PPuZ9485L8kF0vcya3ndTteVfA3nEsGRUvhqt6EkJKHTX OxH1bwLssduSccid/pyqxxU4eRkbcdOw2N/jGkavl5Ni9svCOIyg2p2VCqQwkQ5K jZrs6D6T712URpXdok4Yg9Vjt8JM+uRI -----END CERTIFICATE-----Generated at Tue May 7 03:10:19 2024 by rpki-client on console-ams.rpki-client.org